$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: flcpP+OttUh6nJwMT2TSftUnMQGovNlbQ3Nywa7z+LY= Subject key identifier: 25:03:18:E8:FC:81:78:C5:F1:4D:8D:DD:E5:F4:F1:DB:0A:F6:0E:8F Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019EE58D37C14D6A7FFB3DE77D7FFCEB00AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 066C Signing time: Sat 20 Jun 2026 15:01:37 +0000 Manifest this update: Sat 20 Jun 2026 15:01:37 +0000 Manifest next update: Sun 21 Jun 2026 15:01:37 +0000 Files and hashes: 1: 1-hH0OdTs66ZHAoF3LxN6GzGRGLA.roa (hash: lwxtwCNle18YFsAjD50qJJ41jy6oJAGh+Vhp9fwJVGo=) 2: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: gpoY/z/kqr93s3LIrErSDf/9DZJSbQHbQljtl3CDe8E=) 3: 4FvrTlxGhcdz6JszhweukK-HXp4.roa (hash: vyQEyyYQodDDsgXdHyrJ4jLSuzaa1xOpp48GTtDNY8I=) 4: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=) 5: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=) 6: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=) 7: PT8f8KrDCyi-fOHRybRu5os8t7I.roa (hash: aps2zxt1lkijYJV6i+9YBPtT0emoODtU3jQBxhvYqO0=) 8: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=) 9: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=) 10: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (hash: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=) 11: fro6TGls5A_k6d-cTWMJbP0QioE.roa (hash: 9eBljoV7C7Gpp7fNoutyzWwHkUabzavd+/jPQySZ6NQ=) 12: o5v2otthTxI9MaotpF4RXsxny8c.roa (hash: 8Fkmii+rqIIBVQH5OTZvGOuhbJRNm26073tjiOdkjrw=) 13: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=) 14: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Jun 2026 15:01:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:e5:8d:37:c1:4d:6a:7f:fb:3d:e7:7d:7f:fc:eb:00:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Jun 20 15:01:37 2026 GMT Not After : Jun 21 15:01:37 2026 GMT Subject: CN=250318e8fc8178c5f14d8ddde5f4f1db0af60e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:1f:6f:7a:c0:e8:49:54:98:83:d2:85:aa:6b: 8e:a4:ec:69:d9:ee:65:52:02:dc:1f:6f:b9:d1:ba: 18:ee:05:f1:92:81:93:86:29:59:1e:f7:0b:8d:06: db:27:49:9c:8b:8f:a8:48:c9:9d:39:59:62:91:aa: a6:b6:fb:d5:c2:7d:be:a3:17:59:b2:81:9c:76:4d: ae:0a:64:ff:c3:8f:a1:d5:54:85:dd:6d:05:ad:fd: 4c:4d:b2:bd:08:2e:37:f9:cb:f4:c9:5d:a2:a7:92: d2:2c:bc:28:9e:8e:4c:e9:e2:a0:58:49:90:55:34: 40:f5:85:6f:3e:6e:ac:12:6f:56:99:ed:a6:1c:1a: 91:fa:46:1d:3b:9c:30:1c:17:70:1c:30:e2:7a:9e: 12:d1:49:32:1e:58:76:d8:c5:af:e6:00:48:a0:35: 2c:da:32:28:75:ec:7a:be:37:91:de:e5:9b:73:64: e0:ac:d5:40:80:b4:86:b6:b0:d7:10:e5:a6:04:df: 80:0e:c3:9f:61:50:b1:39:9a:27:dc:48:31:52:e9: 75:5c:ba:80:88:32:f5:2c:a1:bb:8e:4e:24:1a:76: a1:46:5c:80:e9:81:35:9c:c5:6a:9d:fc:34:0a:fe: 25:35:67:ed:c1:b1:ab:c8:7b:80:65:c4:07:68:23: 33:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:03:18:E8:FC:81:78:C5:F1:4D:8D:DD:E5:F4:F1:DB:0A:F6:0E:8F X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:21:e9:57:1f:16:7d:42:b1:a5:e0:89:2b:80:c4:e3:8a:c1: 35:ab:b5:12:19:5c:03:48:e0:f7:9d:13:2e:87:94:77:2d:7d: 2d:26:0c:c4:79:ac:cf:b7:dd:4e:90:ae:1f:0a:06:eb:99:44: 97:a0:d2:aa:41:1c:e9:45:11:09:c4:12:ea:45:d4:dc:6e:8f: 33:b4:03:d5:e1:04:21:ca:ed:af:3e:1e:39:42:27:c3:68:f2: 7a:ff:b3:f1:cd:56:57:57:1e:ec:36:e0:41:64:53:04:4c:5b: f9:8a:64:25:95:85:b8:ad:a7:1a:87:56:03:bd:3f:6c:c0:63: 4d:18:99:eb:8b:64:c6:e1:76:19:8a:f6:18:24:c3:44:ab:16: 9c:e6:89:b9:76:92:06:d8:73:3a:75:f7:0f:ab:cf:1d:3f:43: f1:f0:7e:99:0e:2f:69:56:a1:0d:9c:d4:5e:89:6a:80:e8:32: d7:85:5a:1d:f4:47:04:a6:4c:b0:48:d7:48:c7:63:65:fe:b4: de:36:fb:3d:8c:61:8d:39:2c:b9:59:6a:49:1a:f9:1a:52:cb: f3:f9:f7:4c:56:29:42:6f:5f:ed:ec:80:f1:b9:88:d4:2c:b1: 5a:8f:21:53:bf:b6:78:02:88:96:8e:31:0b:ca:6b:7c:db:d6: 3b:4a:af:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7ljTfBTWp/+z3nfX/86wCuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwNjIwMTUwMTM3WhcNMjYwNjIxMTUwMTM3WjAzMTEwLwYDVQQD EygyNTAzMThlOGZjODE3OGM1ZjE0ZDhkZGRlNWY0ZjFkYjBhZjYwZThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux9vesDoSVSYg9KFqmuOpOxp2e5l UgLcH2+50boY7gXxkoGThilZHvcLjQbbJ0mci4+oSMmdOVlikaqmtvvVwn2+oxdZ soGcdk2uCmT/w4+h1VSF3W0Frf1MTbK9CC43+cv0yV2ip5LSLLwono5M6eKgWEmQ VTRA9YVvPm6sEm9Wme2mHBqR+kYdO5wwHBdwHDDiep4S0UkyHlh22MWv5gBIoDUs 2jIodex6vjeR3uWbc2TgrNVAgLSGtrDXEOWmBN+ADsOfYVCxOZon3EgxUul1XLqA iDL1LKG7jk4kGnahRlyA6YE1nMVqnfw0Cv4lNWftwbGryHuAZcQHaCMzgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUDGOj8gXjF8U2N3eX08dsK9g6PMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARSHpVx8W fUKxpeCJK4DE44rBNau1EhlcA0jg950TLoeUdy19LSYMxHmsz7fdTpCuHwoG65lE l6DSqkEc6UURCcQS6kXU3G6PM7QD1eEEIcrtrz4eOUInw2jyev+z8c1WV1ce7Dbg QWRTBExb+YpkJZWFuK2nGodWA70/bMBjTRiZ64tkxuF2GYr2GCTDRKsWnOaJuXaS BthzOnX3D6vPHT9D8fB+mQ4vaVahDZzUXolqgOgy14VaHfRHBKZMsEjXSMdjZf60 3jb7PYxhjTksuVlqSRr5GlLL8/n3TFYpQm9f7eyA8bmI1CyxWo8hU7+2eAKIlo4x C8prfNvWO0qvOw== -----END CERTIFICATE-----Generated at Sun Jun 21 00:04:18 2026 by rpki-client