$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json) Hash identifier: Gus7ezgiDEW430wKGK52S21kaNQoTHEfV6ovoOE7tUs= Subject key identifier: DA:C7:49:1B:8B:1D:9C:D6:83:F0:47:05:66:8E:B1:92:D8:AA:98:CD Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 019E751C3C86D91778126E30E3D28E0CD4E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft Manifest number: 193B Signing time: Fri 29 May 2026 19:00:45 +0000 Manifest this update: Fri 29 May 2026 19:00:45 +0000 Manifest next update: Sat 30 May 2026 19:00:45 +0000 Files and hashes: 1: 2uP2P6fTf1qo4PWRRqgeE7TTacE.roa (hash: 9eSLYCb2FWzNsHTSZC1SEnCMNPegGVcyv6j21qK1mw8=) 2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=) 3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=) 4: AogunF2vY6jwFQqloSaO1hbzpk8.roa (hash: it2LBzN2gPXG+ZsVF9U3YkMRcRGbDQsz+oO4JZZUzeg=) 5: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=) 6: Qi3PbQnrdw7q8NtmLcDOyzuEuok.roa (hash: Ene2M6hdbbKNY0YIKXvUxR9PygRHkyqGW28j+nRBH9E=) 7: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: bAzjroJ75IjwegjYCpJ+iToycmVY6KrULNS4uNeT+j8=) 8: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=) 9: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=) 10: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 30 May 2026 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:75:1c:3c:86:d9:17:78:12:6e:30:e3:d2:8e:0c:d4:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: May 29 19:00:45 2026 GMT Not After : May 30 19:00:45 2026 GMT Subject: CN=dac7491b8b1d9cd683f04705668eb192d8aa98cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:0a:0a:a1:d2:b8:54:88:41:eb:41:a2:fe:3b: 1d:b9:91:49:26:77:2d:45:a7:a6:b7:1b:9e:d1:03: 9b:c2:76:a2:e1:34:82:04:08:6b:82:f1:3d:52:0b: 22:d9:06:1b:f9:23:1f:7a:04:83:e3:a2:a3:18:38: 5e:8b:c9:68:aa:69:f5:40:b7:b3:34:41:63:31:18: 1c:7c:69:ff:b9:e3:35:1f:60:5d:41:92:79:d7:38: 76:5a:c4:6e:eb:13:55:b3:79:29:05:76:92:97:6d: c1:50:87:26:83:f7:c9:73:4b:58:a9:00:14:e8:39: 33:b2:d7:54:c5:6b:9e:7e:14:c4:db:a6:59:5b:14: 28:d6:58:bd:2d:ad:a2:76:9c:27:25:f8:89:94:9a: f4:b4:5f:f3:19:cf:47:69:14:0b:cd:bf:2f:fb:aa: 7d:dc:19:91:2b:a9:49:80:01:e7:34:d8:39:85:ac: 71:0f:a8:8b:b1:c4:4c:ec:d4:45:40:6d:b4:84:36: a5:68:48:5a:ad:6b:c4:61:a3:f8:73:6e:0f:ff:c2: 79:88:36:e5:99:2e:7d:a8:fd:58:d1:7f:a7:c2:be: 34:6f:03:22:08:2f:8a:ba:9e:c8:04:87:55:01:72: 23:7c:70:09:b6:4b:2a:b1:72:20:15:83:9c:6b:cd: 1d:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:C7:49:1B:8B:1D:9C:D6:83:F0:47:05:66:8E:B1:92:D8:AA:98:CD X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:66:76:b8:f3:59:7c:e9:a2:6d:89:84:bb:cc:80:bb:34:52: 5c:ef:1e:8b:60:46:11:3d:90:b8:61:7f:5a:85:50:97:f3:cc: 98:9b:74:8b:ea:64:d7:3e:ed:a1:59:60:9d:60:58:3a:d9:81: 63:97:46:c7:c4:5c:f7:c7:35:62:9c:07:38:83:8d:84:6c:0b: e0:46:6f:d6:43:4e:f8:92:e9:e2:53:03:8b:7d:9f:df:fe:e1: 3d:9b:bb:b9:38:7d:80:b4:0c:1e:20:44:fe:6e:1d:04:b1:da: e5:43:28:6b:f8:95:ed:2b:35:ba:5c:30:55:08:6e:36:7a:c0: f9:e4:54:a2:64:8a:6c:24:0f:81:7a:55:9f:36:b3:28:d6:1e: cb:79:a3:37:32:5a:2f:0e:95:21:d0:ac:fd:4a:e2:f8:9c:53: fb:38:6d:6b:c7:98:ed:31:f2:b1:91:e2:10:ea:50:87:eb:57: 4e:59:44:50:a4:fb:4b:6f:28:20:c1:f4:32:dd:d1:a3:d8:5d: 6c:d1:89:33:e9:9f:cf:00:7f:fe:37:e1:c0:af:e2:34:0c:a0: da:df:11:b6:26:e3:c5:31:e7:5a:8e:b6:f2:d2:30:0d:67:57: 35:09:03:05:6a:7f:8c:97:57:27:dd:0b:44:46:0b:54:38:3f: 77:f4:75:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ51HDyG2Rd4Em4w49KODNTlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjYwNTI5MTkwMDQ1WhcNMjYwNTMwMTkwMDQ1WjAzMTEwLwYDVQQD EyhkYWM3NDkxYjhiMWQ5Y2Q2ODNmMDQ3MDU2NjhlYjE5MmQ4YWE5OGNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgoKodK4VIhB60Gi/jsduZFJJnct Raemtxue0QObwnai4TSCBAhrgvE9Ugsi2QYb+SMfegSD46KjGDhei8loqmn1QLez NEFjMRgcfGn/ueM1H2BdQZJ51zh2WsRu6xNVs3kpBXaSl23BUIcmg/fJc0tYqQAU 6DkzstdUxWuefhTE26ZZWxQo1li9La2idpwnJfiJlJr0tF/zGc9HaRQLzb8v+6p9 3BmRK6lJgAHnNNg5haxxD6iLscRM7NRFQG20hDalaEharWvEYaP4c24P/8J5iDbl mS59qP1Y0X+nwr40bwMiCC+Kup7IBIdVAXIjfHAJtksqsXIgFYOca80dlQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrHSRuLHZzWg/BHBWaOsZLYqpjNMB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA2Z2uPNZ fOmibYmEu8yAuzRSXO8ei2BGET2QuGF/WoVQl/PMmJt0i+pk1z7toVlgnWBYOtmB Y5dGx8Rc98c1YpwHOIONhGwL4EZv1kNO+JLp4lMDi32f3/7hPZu7uTh9gLQMHiBE /m4dBLHa5UMoa/iV7Ss1ulwwVQhuNnrA+eRUomSKbCQPgXpVnzazKNYey3mjNzJa Lw6VIdCs/Uri+JxT+zhta8eY7THysZHiEOpQh+tXTllEUKT7S28oIMH0Mt3Ro9hd bNGJM+mfzwB//jfhwK/iNAyg2t8RtibjxTHnWo628tIwDWdXNQkDBWp/jJdXJ90L REYLVDg/d/R1eA== -----END CERTIFICATE-----Generated at Sat May 30 00:03:38 2026 by rpki-client