$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json) Hash identifier: KXwH5Gi7hwRsDzjEwAkpkfjiS326JnHBzyt4ebyJhu4= Subject key identifier: BE:8C:E3:72:D7:78:8D:BE:EB:6F:43:A3:03:04:DE:85:D5:65:CF:61 Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019EE2552D45EE05FCF1B4C7A57D8FD38219 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft Manifest number: 1981 Signing time: Sat 20 Jun 2026 00:01:33 +0000 Manifest this update: Sat 20 Jun 2026 00:01:33 +0000 Manifest next update: Sun 21 Jun 2026 00:01:33 +0000 Files and hashes: 1: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=) 2: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=) 3: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=) 4: FQSV18p_T_droUZh08zoIA9Ax8A.roa (hash: znhD3qntwxP0GJzV41Y9fLTZXvTyllhrzmb59F4/qY4=) 5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=) 6: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=) 7: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=) 8: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=) 9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: 1M7QvCk22rQfv5Ud+7PVsMmZ4eE0WW7tBh+VcUlyZbA=) 10: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=) 11: xGGCf6Hil4Mo0C8TJDJWoZKOtQY.roa (hash: OSJabINQbvYIP/JxqMQjPh9E61hQf/o/MtFixqbU+Rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Jun 2026 19:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:e2:55:2d:45:ee:05:fc:f1:b4:c7:a5:7d:8f:d3:82:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Jun 20 00:01:33 2026 GMT Not After : Jun 21 00:01:33 2026 GMT Subject: CN=be8ce372d7788dbeeb6f43a30304de85d565cf61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e2:58:30:94:44:ce:e1:2c:c9:bd:8a:9d:c5: ea:63:aa:8b:53:52:6d:ac:1e:16:fc:ac:a0:37:1f: 7f:3a:52:e4:d4:31:13:f6:bc:3f:d8:97:f1:bd:02: 06:2b:16:75:56:50:62:8f:da:68:e5:bd:94:47:97: 0f:49:52:26:85:49:6b:53:9c:0a:9a:cd:59:4f:93: 1a:cc:8b:5c:9f:fd:17:a6:fe:1e:fe:c1:7d:3f:99: 34:3a:04:82:7d:5f:87:e1:02:30:ee:ea:0a:39:39: 85:9a:a3:47:77:63:78:ce:bf:1e:af:93:5c:a4:45: 3c:86:0f:f4:98:23:a2:4d:1c:44:f3:05:71:5a:a6: e1:c3:cb:c4:f7:2f:57:50:01:1a:93:18:e7:aa:ad: e6:c5:83:c5:22:fa:a7:48:cd:20:f3:a7:65:34:6a: 25:69:aa:61:70:0f:a9:74:f3:06:93:30:b5:b2:7e: b2:b6:bc:7e:fb:2e:02:a7:98:05:da:14:10:fa:a0: cb:61:0c:3d:64:5e:65:df:76:bb:64:1a:8d:c1:e2: 37:0e:a0:e9:11:3c:8a:22:16:15:60:10:45:bf:5b: ff:e2:01:42:7a:ed:70:e9:80:eb:63:a7:07:f8:28: ce:99:a1:5c:e4:3a:81:1e:38:6a:3f:4b:a9:9e:44: 19:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8C:E3:72:D7:78:8D:BE:EB:6F:43:A3:03:04:DE:85:D5:65:CF:61 X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:f0:a7:74:24:dc:a6:f9:74:f7:dd:fd:7a:e2:85:6c:ef:c1: 0c:f1:e1:c4:08:3b:05:41:87:18:f9:84:e9:af:fe:ae:ed:89: c5:1e:85:01:54:84:79:ea:8b:ca:15:36:c9:e5:61:b7:c9:3f: e9:11:00:ff:1f:ba:67:d2:2f:dc:35:e3:dc:97:eb:6a:e5:f6: b2:46:df:e6:37:26:e4:95:1c:56:fe:be:41:6b:1b:08:05:f3: 26:4c:19:6e:d6:97:c0:51:60:30:13:11:07:76:a1:b8:d2:0c: 1a:02:78:55:83:f8:25:d9:b5:af:52:d7:46:7d:0f:90:bd:df: d1:4f:46:54:1a:72:0b:b9:63:c6:e4:a8:31:32:86:50:94:fe: 4c:58:76:e1:2f:83:09:94:6f:b8:9e:36:dd:5d:bc:d0:e6:7e: 13:c0:f9:99:8a:19:a8:fe:6e:75:6c:65:9d:ab:ec:89:fe:05: 4b:84:ca:ce:72:79:9d:30:eb:1d:0f:85:31:67:5a:0d:29:82: 8d:71:63:74:d4:17:9d:83:68:f4:2c:53:7f:2b:6f:26:04:af: ce:ba:e4:76:3e:36:9f:9a:3a:1a:91:e7:ab:c3:5a:51:be:a2: 8b:60:1c:9a:c8:ba:c0:5b:96:9f:3e:be:a3:d6:fa:ea:56:9f: a3:54:dc:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7iVS1F7gX88bTHpX2P04IZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwNjIwMDAwMTMzWhcNMjYwNjIxMDAwMTMzWjAzMTEwLwYDVQQD EyhiZThjZTM3MmQ3Nzg4ZGJlZWI2ZjQzYTMwMzA0ZGU4NWQ1NjVjZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweJYMJREzuEsyb2KncXqY6qLU1Jt rB4W/KygNx9/OlLk1DET9rw/2JfxvQIGKxZ1VlBij9po5b2UR5cPSVImhUlrU5wK ms1ZT5MazItcn/0Xpv4e/sF9P5k0OgSCfV+H4QIw7uoKOTmFmqNHd2N4zr8er5Nc pEU8hg/0mCOiTRxE8wVxWqbhw8vE9y9XUAEakxjnqq3mxYPFIvqnSM0g86dlNGol aaphcA+pdPMGkzC1sn6ytrx++y4Cp5gF2hQQ+qDLYQw9ZF5l33a7ZBqNweI3DqDp ETyKIhYVYBBFv1v/4gFCeu1w6YDrY6cH+CjOmaFc5DqBHjhqP0upnkQZRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL6M43LXeI2+629DowME3oXVZc9hMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATPCndCTc pvl09939euKFbO/BDPHhxAg7BUGHGPmE6a/+ru2JxR6FAVSEeeqLyhU2yeVht8k/ 6REA/x+6Z9Iv3DXj3JfrauX2skbf5jcm5JUcVv6+QWsbCAXzJkwZbtaXwFFgMBMR B3ahuNIMGgJ4VYP4Jdm1r1LXRn0PkL3f0U9GVBpyC7ljxuSoMTKGUJT+TFh24S+D CZRvuJ423V280OZ+E8D5mYoZqP5udWxlnavsif4FS4TKznJ5nTDrHQ+FMWdaDSmC jXFjdNQXnYNo9CxTfytvJgSvzrrkdj42n5o6GpHnq8NaUb6ii2Acmsi6wFuWnz6+ o9b66lafo1Tc5A== -----END CERTIFICATE-----Generated at Sat Jun 20 03:13:20 2026 by rpki-client