$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: Ops7PwrIGbUFSBzAY5gZdIZ0PCOEHarTKljGL0iin6E= Subject key identifier: B9:FB:D6:BB:2D:CF:B0:54:62:21:4F:E0:E7:7C:7E:85:25:C3:A7:5C Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019EB7D793A9E83457B9169E1414F9B8FBD0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0E98 Signing time: Thu 11 Jun 2026 18:00:19 +0000 Manifest this update: Thu 11 Jun 2026 18:00:19 +0000 Manifest next update: Fri 12 Jun 2026 18:00:19 +0000 Files and hashes: 1: 1raBdrG8cJ9Bp5UTf1-3ySXpvNU.roa (hash: nidyHf42+8qviczWax8TG8WbQgA/HNtQCPEG+F+WBIY=) 2: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (hash: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs=) 3: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (hash: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM=) 4: 7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (hash: 8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=) 5: PMb5QpHERgutl-yC5RQn75DTGLw.asa (hash: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ=) 6: RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (hash: f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=) 7: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 8: bqKa0YRsYxH7tFUT4rHgcN42asw.roa (hash: 8oWhUO/dKOps3lszSUNTka8Z4cLC6TKDR/CwR798z8A=) 9: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 10: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (hash: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA=) 11: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: xNhRrcPQOeUIxuNPl7LFS6TEd/y5eBCnA2f5jBalIus=) 12: w8W811TbOURa8f5-mcUpSAfk2n0.asa (hash: b96roN8WeCshD8FoZxjRFm4baoilKTWmZSNLBHUvnfc=) 13: x6T6GqRVAh0o9EoIdLMe4raaS10.asa (hash: MNgMjRK2BIwfms49ydVNFTqMQqZeRrZembCusJ+wf3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b7:d7:93:a9:e8:34:57:b9:16:9e:14:14:f9:b8:fb:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Jun 11 18:00:19 2026 GMT Not After : Jun 12 18:00:19 2026 GMT Subject: CN=b9fbd6bb2dcfb05462214fe0e77c7e8525c3a75c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:e4:bc:ee:83:a4:6a:91:0b:61:54:f3:24:32: 87:18:07:f9:47:14:b8:03:12:0e:96:40:ba:af:f3: 4f:0f:73:2f:01:98:8b:00:2f:88:93:7d:03:33:7c: 2f:dd:aa:58:82:e9:3a:9e:af:db:cc:15:aa:da:f7: 23:0f:ec:86:df:30:58:75:3a:6d:a1:1f:2f:21:92: 31:3e:5f:4a:f6:c4:22:8d:04:bb:a3:75:41:22:5c: b8:21:01:7b:27:fc:f4:e2:44:de:fa:79:01:5f:90: 78:9c:58:dc:cd:4f:39:da:50:86:f1:ea:ac:42:47: 48:96:7f:89:4b:30:e8:28:57:ac:2f:09:82:ab:d5: 13:80:b9:8f:16:95:73:76:6a:08:32:d8:27:ff:bd: 9e:1d:5f:20:57:0a:f4:53:5e:18:65:9e:6f:2c:5f: 72:26:82:16:ca:51:ca:5f:b0:44:63:ff:4e:c5:eb: bd:57:8f:8b:8c:17:f8:0a:18:0c:55:89:45:15:bb: 6c:a2:63:5d:7e:69:e0:be:3a:7f:3a:60:89:5c:c1: 51:fd:f1:58:65:6e:ca:14:b5:d6:ff:91:47:7b:26: 47:9b:0a:b8:52:2c:c2:93:69:41:55:67:93:23:c8: c9:85:27:22:4f:a2:65:be:e2:b9:af:60:97:09:d7: 90:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:FB:D6:BB:2D:CF:B0:54:62:21:4F:E0:E7:7C:7E:85:25:C3:A7:5C X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:66:70:ea:29:b5:31:e4:e4:8b:d2:57:f7:19:1a:14:b7:31: f6:1f:8c:f2:e3:32:ed:17:b5:69:9c:20:9c:58:ef:60:5e:65: 1b:eb:4b:e6:48:d0:e4:16:80:f3:85:12:95:53:95:17:32:9e: 61:85:c0:bd:88:fa:96:de:1f:b8:22:68:9f:33:f9:2c:9f:63: 5d:62:b2:e8:e1:98:d3:c4:9b:bc:02:56:15:da:6e:56:92:f3: 26:a5:c5:3a:77:9e:ed:44:66:8d:4c:cd:b1:0c:1a:aa:91:cc: a6:65:08:f2:52:68:16:eb:be:63:76:62:08:25:88:51:a8:52: 5f:a1:c9:57:a0:0b:6e:b4:41:bc:47:55:d2:82:d8:1d:05:32: 60:ce:e7:2b:4b:1c:4c:dc:61:b3:77:bf:b1:0c:26:25:fb:f9: 46:47:89:8c:3e:17:de:3f:94:ae:1e:3f:5f:76:c0:da:d2:5d: 0b:7f:37:2a:bc:6e:e9:fb:72:27:14:1c:f1:9d:05:f7:4d:21: 37:40:f1:e8:4b:da:71:ed:8f:78:80:00:01:73:19:60:44:75: 85:01:6d:64:27:78:94:1a:d4:3f:4a:7b:92:e6:fe:dc:6b:73: e0:14:ce:8f:bd:a1:b1:d0:44:45:a4:85:8f:80:0e:6a:6d:80: a1:93:22:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6315Op6DRXuRaeFBT5uPvQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwNjExMTgwMDE5WhcNMjYwNjEyMTgwMDE5WjAzMTEwLwYDVQQD EyhiOWZiZDZiYjJkY2ZiMDU0NjIyMTRmZTBlNzdjN2U4NTI1YzNhNzVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOS87oOkapELYVTzJDKHGAf5RxS4 AxIOlkC6r/NPD3MvAZiLAC+Ik30DM3wv3apYguk6nq/bzBWq2vcjD+yG3zBYdTpt oR8vIZIxPl9K9sQijQS7o3VBIly4IQF7J/z04kTe+nkBX5B4nFjczU852lCG8eqs QkdIln+JSzDoKFesLwmCq9UTgLmPFpVzdmoIMtgn/72eHV8gVwr0U14YZZ5vLF9y JoIWylHKX7BEY/9Oxeu9V4+LjBf4ChgMVYlFFbtsomNdfmngvjp/OmCJXMFR/fFY ZW7KFLXW/5FHeyZHmwq4UizCk2lBVWeTI8jJhSciT6JlvuK5r2CXCdeQNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLn71rstz7BUYiFP4Od8foUlw6dcMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQmZw6im1 MeTki9JX9xkaFLcx9h+M8uMy7Re1aZwgnFjvYF5lG+tL5kjQ5BaA84USlVOVFzKe YYXAvYj6lt4fuCJonzP5LJ9jXWKy6OGY08SbvAJWFdpuVpLzJqXFOnee7URmjUzN sQwaqpHMpmUI8lJoFuu+Y3ZiCCWIUahSX6HJV6ALbrRBvEdV0oLYHQUyYM7nK0sc TNxhs3e/sQwmJfv5RkeJjD4X3j+Urh4/X3bA2tJdC383Krxu6ftyJxQc8Z0F900h N0Dx6Evace2PeIAAAXMZYER1hQFtZCd4lBrUP0p7kub+3Gtz4BTOj72hsdBERaSF j4AOam2AoZMiEw== -----END CERTIFICATE-----Generated at Thu Jun 11 22:58:42 2026 by rpki-client