$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: a5nabZXQ/5VTzZVuJXwWE5KLu7YbSLa5vBvFVY5Tr2Q= Subject key identifier: 56:A8:25:FC:AB:0C:83:4C:40:0E:74:9C:05:7C:83:85:F1:98:FC:D6 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019E913849B9445D7A2942865F4C71AB0C6C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 1312 Signing time: Thu 04 Jun 2026 06:00:45 +0000 Manifest this update: Thu 04 Jun 2026 06:00:45 +0000 Manifest next update: Fri 05 Jun 2026 06:00:45 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 3: IT-G9anfftKLn-JNHdB3nhqaHRg.roa (hash: 8S5tnd+3z64Mysha0HCn0KENKA3IjsNdvVfiIIaQQlM=) 4: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 5: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 6: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 7: UtuUMQUSfAe-27w8Nb05fTayiGU.roa (hash: AmMNeRGPrTgI2qZuMl1mv9LKIiaqIWQ8VyjSfG7bkaE=) 8: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 9: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 10: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 11: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: mmO9Ay92nT+iqu7+gD0sqn0RvFy+uwNwzIVaq/BjYSY=) 12: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) 13: uCc138TA6I8oKDd9GfZ4DDo3vbk.roa (hash: 9QywaX+xNWWX8/eIoZHqrPbZhEsxSCi5Zlf0wOs/po0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Jun 2026 06:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:91:38:49:b9:44:5d:7a:29:42:86:5f:4c:71:ab:0c:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jun 4 06:00:45 2026 GMT Not After : Jun 5 06:00:45 2026 GMT Subject: CN=56a825fcab0c834c400e749c057c8385f198fcd6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fe:6b:f1:ff:26:0a:e3:b6:79:42:48:ed:60: 45:88:6b:69:90:4b:9c:15:ec:77:1d:40:72:4c:5d: e9:c3:16:e9:db:8f:4e:85:22:0a:29:41:e2:dc:9c: 89:d0:02:d4:1c:d3:ef:6e:96:0d:7c:32:1f:ae:d8: a3:ca:0a:04:3d:fe:16:66:d8:5b:e2:36:54:34:19: 8a:3a:f3:a8:b4:6c:31:e9:8d:5e:d2:09:d8:04:f8: 62:13:a2:a3:1c:03:2e:ee:e4:96:c2:71:fc:5a:a0: d0:c6:dd:77:5b:ae:1a:f7:0f:da:54:b0:b4:f7:bc: 8c:51:fd:6c:92:c4:88:bf:49:e9:48:f8:3b:ec:5d: 6e:c6:89:96:21:28:a9:79:fe:9f:23:c2:0b:6b:88: c7:b5:8a:be:e2:b5:73:02:89:68:4f:c4:42:44:66: f3:5c:35:98:66:e1:5b:9b:42:a3:da:2d:bb:6b:d8: 95:2b:64:7d:d7:95:16:29:cb:42:f6:90:a0:24:6c: 3b:37:ba:73:be:87:15:46:2e:a2:a0:a3:54:a1:cb: 70:aa:4e:e8:22:47:43:0a:cb:4c:dd:3e:92:06:dc: e4:5d:3a:6d:2b:f2:f4:a6:23:a9:b4:be:29:99:e5: 8e:d5:b0:a2:37:56:d5:7f:1a:b5:fe:96:6d:f0:67: c5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:A8:25:FC:AB:0C:83:4C:40:0E:74:9C:05:7C:83:85:F1:98:FC:D6 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:03:78:20:57:8b:fa:4c:9e:2e:05:b5:1d:a7:ed:d3:db:2e: 86:af:f3:ed:59:87:93:88:de:11:88:94:cb:eb:08:26:97:b0: 0b:a6:47:e0:3d:37:6d:dc:64:a5:b6:0a:5f:71:08:ed:39:ca: 45:2d:bc:68:4a:28:c7:52:b6:aa:33:78:f9:e9:b3:33:a0:8d: ca:86:fb:80:b8:95:f8:69:fb:45:54:e9:a9:df:0e:90:05:2e: 14:ba:4e:c5:1f:63:b1:d5:6a:ac:e2:20:f2:4b:d3:83:6c:63: a6:69:f0:58:bf:fa:dd:c6:13:57:19:9f:9c:cb:6b:ae:16:2f: dc:db:fd:2f:c8:c2:49:df:c5:de:26:d7:4c:69:1e:c0:a4:63: d9:cd:89:ac:1e:77:f3:dd:d4:44:99:0e:e4:77:56:13:b7:3c: 81:1a:2e:5c:9e:00:a7:5a:64:cb:6f:ff:c2:cf:d7:be:72:99: 13:e2:a5:18:7a:be:eb:9e:e1:7f:7d:5d:27:14:87:7d:42:cc: 3e:15:1e:e9:33:3a:bb:ae:03:4b:a2:b0:a0:8b:f6:f8:f6:8f: aa:c5:c3:40:db:ad:28:c9:a2:71:6f:8a:4d:7d:a5:1c:35:22: 7d:ef:a1:78:93:db:49:19:33:00:6c:99:99:b9:08:c7:83:71: 28:45:bb:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6ROEm5RF16KUKGX0xxqwxsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwNjA0MDYwMDQ1WhcNMjYwNjA1MDYwMDQ1WjAzMTEwLwYDVQQD Eyg1NmE4MjVmY2FiMGM4MzRjNDAwZTc0OWMwNTdjODM4NWYxOThmY2Q2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/5r8f8mCuO2eUJI7WBFiGtpkEuc Fex3HUByTF3pwxbp249OhSIKKUHi3JyJ0ALUHNPvbpYNfDIfrtijygoEPf4WZthb 4jZUNBmKOvOotGwx6Y1e0gnYBPhiE6KjHAMu7uSWwnH8WqDQxt13W64a9w/aVLC0 97yMUf1sksSIv0npSPg77F1uxomWISipef6fI8ILa4jHtYq+4rVzAoloT8RCRGbz XDWYZuFbm0Kj2i27a9iVK2R915UWKctC9pCgJGw7N7pzvocVRi6ioKNUoctwqk7o IkdDCstM3T6SBtzkXTptK/L0piOptL4pmeWO1bCiN1bVfxq1/pZt8GfFpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFaoJfyrDINMQA50nAV8g4XxmPzWMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVAN4IFeL +kyeLgW1Haft09suhq/z7VmHk4jeEYiUy+sIJpewC6ZH4D03bdxkpbYKX3EI7TnK RS28aEoox1K2qjN4+emzM6CNyob7gLiV+Gn7RVTpqd8OkAUuFLpOxR9jsdVqrOIg 8kvTg2xjpmnwWL/63cYTVxmfnMtrrhYv3Nv9L8jCSd/F3ibXTGkewKRj2c2JrB53 893URJkO5HdWE7c8gRouXJ4Ap1pky2//ws/XvnKZE+KlGHq+657hf31dJxSHfULM PhUe6TM6u64DS6KwoIv2+PaPqsXDQNutKMmicW+KTX2lHDUife+heJPbSRkzAGyZ mbkIx4NxKEW77A== -----END CERTIFICATE-----Generated at Thu Jun 4 12:03:56 2026 by rpki-client