$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json) Hash identifier: Kv6e2glRNT2DeuRutaeL0q+sWM/ggC6/XhzJZJTSJjY= Subject key identifier: CB:F2:00:05:2E:BE:19:7D:15:95:5E:3F:D1:2A:52:F9:FD:14:61:38 Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019DF8A7E361769AA06A99FA11E280BE9DC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft Manifest number: 1908 Signing time: Tue 05 May 2026 15:00:45 +0000 Manifest this update: Tue 05 May 2026 15:00:45 +0000 Manifest next update: Wed 06 May 2026 15:00:45 +0000 Files and hashes: 1: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=) 2: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=) 3: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=) 4: FQSV18p_T_droUZh08zoIA9Ax8A.roa (hash: znhD3qntwxP0GJzV41Y9fLTZXvTyllhrzmb59F4/qY4=) 5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=) 6: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=) 7: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=) 8: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=) 9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: 6rl8OrclxuEax47DQGx4zHeORHrQtU3CSXc4rKq+ZnM=) 10: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=) 11: xGGCf6Hil4Mo0C8TJDJWoZKOtQY.roa (hash: OSJabINQbvYIP/JxqMQjPh9E61hQf/o/MtFixqbU+Rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 06 May 2026 15:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9d:f8:a7:e3:61:76:9a:a0:6a:99:fa:11:e2:80:be:9d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: May 5 15:00:45 2026 GMT Not After : May 6 15:00:45 2026 GMT Subject: CN=cbf200052ebe197d15955e3fd12a52f9fd146138 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:de:35:47:a3:06:41:e4:09:89:73:b4:74:33: c1:51:2f:5c:58:71:c9:0b:1c:44:d9:5c:87:dc:d5: 82:2e:66:8c:38:0f:e4:a5:31:6a:9b:b3:43:c7:12: c4:76:a1:53:e9:b6:35:49:92:88:c1:8b:48:50:5d: 3b:b5:8c:53:d6:c6:a3:45:02:f8:cd:70:1e:32:5a: cd:22:c7:71:92:e8:20:0a:ce:bc:8d:24:08:ef:14: 8f:b3:a8:4f:53:01:d9:3d:7d:b3:88:6a:06:00:d3: 90:5e:2e:8f:43:83:45:b2:c9:39:af:79:f5:77:3f: 68:d0:67:c9:94:bd:0d:89:fe:3c:03:47:8d:40:aa: f7:02:a7:d9:ca:a0:fb:88:39:d4:1c:96:53:c8:3f: 23:70:f7:c5:ca:30:e7:39:d8:70:6c:ed:b7:73:2b: f3:3f:b6:de:34:a7:45:09:ff:22:98:84:c3:11:e5: 84:27:75:84:f6:cb:b6:b1:32:8e:4d:ef:b2:84:13: 11:f7:5c:4c:c7:9a:e6:1f:fe:34:6f:5b:9a:bb:84: ce:65:0c:91:4c:c0:90:70:65:8e:fe:f8:f8:1f:0f: ab:95:63:ef:50:77:14:82:cc:0e:67:7f:9b:2c:dd: ac:65:a6:65:de:3c:00:e9:74:dc:07:c9:f0:8a:ff: d3:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:F2:00:05:2E:BE:19:7D:15:95:5E:3F:D1:2A:52:F9:FD:14:61:38 X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:6d:cf:57:eb:b9:54:47:de:65:a1:d2:53:42:f8:69:f7:6e: e9:d2:f9:80:0e:0e:01:27:1d:d6:60:a1:08:b6:d5:92:26:eb: 7c:5a:8f:84:23:87:ad:d3:31:d9:a3:b0:0a:4f:e2:ee:7b:a1: c3:ad:de:ae:6d:7d:00:e3:a6:5d:ec:d7:14:3d:ef:0a:91:c1: f9:0d:fc:b6:42:4c:26:d7:c5:00:0b:54:eb:17:90:6a:80:1b: f1:0f:68:40:57:2c:dc:8e:9d:63:09:77:3d:8c:5e:2f:74:5e: b6:0f:06:9b:15:a6:05:29:68:4a:cb:d8:6b:be:04:10:f3:49: ab:de:bb:f1:44:f7:40:02:c8:e3:5d:c9:c8:c8:85:c5:cd:fe: 2f:5d:b2:ff:de:dd:a8:10:43:c7:29:f3:da:2b:bf:a4:4c:09: 86:99:ff:cc:e8:41:76:dd:e7:9f:ca:35:67:8d:26:a1:e0:43: 6c:bd:83:f6:59:f9:dd:4f:e8:29:0f:03:3a:9b:b4:3f:5b:df: a3:a4:73:84:23:b1:f9:b2:43:36:6c:60:ab:94:0f:80:35:16: b2:f5:f3:39:b9:7f:76:d9:08:d2:a6:53:b0:d0:f2:58:80:fd: 52:5f:2a:52:86:5a:48:eb:45:37:ab:aa:ea:bc:0d:f1:a2:e7: 48:23:48:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ34p+Nhdpqgapn6EeKAvp3HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwNTA1MTUwMDQ1WhcNMjYwNTA2MTUwMDQ1WjAzMTEwLwYDVQQD EyhjYmYyMDAwNTJlYmUxOTdkMTU5NTVlM2ZkMTJhNTJmOWZkMTQ2MTM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtt41R6MGQeQJiXO0dDPBUS9cWHHJ CxxE2VyH3NWCLmaMOA/kpTFqm7NDxxLEdqFT6bY1SZKIwYtIUF07tYxT1sajRQL4 zXAeMlrNIsdxkuggCs68jSQI7xSPs6hPUwHZPX2ziGoGANOQXi6PQ4NFssk5r3n1 dz9o0GfJlL0Nif48A0eNQKr3AqfZyqD7iDnUHJZTyD8jcPfFyjDnOdhwbO23cyvz P7beNKdFCf8imITDEeWEJ3WE9su2sTKOTe+yhBMR91xMx5rmH/40b1uau4TOZQyR TMCQcGWO/vj4Hw+rlWPvUHcUgswOZ3+bLN2sZaZl3jwA6XTcB8nwiv/TLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMvyAAUuvhl9FZVeP9EqUvn9FGE4MB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjW3PV+u5 VEfeZaHSU0L4afdu6dL5gA4OAScd1mChCLbVkibrfFqPhCOHrdMx2aOwCk/i7nuh w63erm19AOOmXezXFD3vCpHB+Q38tkJMJtfFAAtU6xeQaoAb8Q9oQFcs3I6dYwl3 PYxeL3Retg8GmxWmBSloSsvYa74EEPNJq9678UT3QALI413JyMiFxc3+L12y/97d qBBDxynz2iu/pEwJhpn/zOhBdt3nn8o1Z40moeBDbL2D9ln53U/oKQ8DOpu0P1vf o6RzhCOx+bJDNmxgq5QPgDUWsvXzObl/dtkI0qZTsNDyWID9Ul8qUoZaSOtFN6uq 6rwN8aLnSCNIxQ== -----END CERTIFICATE-----Generated at Wed May 6 00:20:25 2026 by rpki-client