$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft File: 76W2I0ehtkzqSaKrOrSYPDSGH7I.mft (raw, json) Hash identifier: b95AEMo1oTW0gxTK8gEzavOCweBcfO95RpCpmoa/pZQ= Subject key identifier: A0:0C:00:9E:93:89:BB:15:CC:3F:83:A0:42:31:86:36:AC:6B:A7:B5 Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Certificate serial: 019EEEC75032AE1DC7FF02E783DCFE83BF95 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft Manifest number: 03B5 Signing time: Mon 22 Jun 2026 10:01:39 +0000 Manifest this update: Mon 22 Jun 2026 10:01:39 +0000 Manifest next update: Tue 23 Jun 2026 10:01:39 +0000 Files and hashes: 1: 30rSP67H4gX5RMgOxT5dBfg20_g.roa (hash: pLbD0z+swzOFRKhR78b058ocPOqvyBgBR9Tg94u9QPE=) 2: 76W2I0ehtkzqSaKrOrSYPDSGH7I.crl (hash: 12z3QOvjWt5RfBT8eTYVa7EG82nMQfxlygR85s/9yT0=) 3: C3ruCzQFpObijbg6nKyWeHWjy4U.roa (hash: Y2PICPggtqJuBNrLg9GLriE7TFiGRSa8ctzypTp0k5Q=) 4: FoL3qyEY48cw05gLQhNBtfACHmc.roa (hash: yngu0V2+UyneI185UKcvs0YYxoSzgQOcyO77l7Bzxy4=) 5: V9bz-LIlrLlNcy_JnZK_x-nhl2s.roa (hash: EweRvUyQqzzdZsQlbOmurMzzeItcgxBnOe1Rf0PMP7c=) 6: WOK1iT_PCPPQV6sHVEx5Px_Y9fE.roa (hash: 94hNqjQI8cFTU6a6Kw0AEcP1Xdns+Wtf+3N07hYhGa0=) 7: fzWlLGEPBxz1DR-_ybKSosveito.roa (hash: PMju7hqmYk5olTtNec80dTLKx9r70k1T9axrJxxCFmQ=) 8: iuSpcrmsV4f1Ysb1cVg-3onOaZA.roa (hash: c9q3XFMjCEy0sE0Ce3zydIbkqouf4LIzsM2RvAlYwio=) 9: mGbAQxmjiNdAu-Zs5G32dsHWBXE.roa (hash: JMUztoBnvYlG5WEaZWtEODvt69OyGAw7D5VrIEI87vM=) 10: sDq5U53kui-SouGQwvgx88wuoqc.roa (hash: cLZsm7xp+yinJ4qALYPDYjVVs4ZwSgrcr5htqd8PthY=) 11: xkBXp7rwmSNtGrPWn7O7LK3eIPc.roa (hash: ruZb0fyLFNIK8oCJZQCr0uOvP96aIH6PYR41YcREAHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Jun 2026 10:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:ee:c7:50:32:ae:1d:c7:ff:02:e7:83:dc:fe:83:bf:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2 Validity Not Before: Jun 22 10:01:39 2026 GMT Not After : Jun 23 10:01:39 2026 GMT Subject: CN=a00c009e9389bb15cc3f83a042318636ac6ba7b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:c4:66:cb:57:f3:75:ac:48:27:74:6d:08: 03:51:86:45:9a:d0:7a:e7:3c:74:07:28:20:60:ce: 69:d7:c5:25:2c:66:8e:53:58:f5:5d:62:8b:2f:0e: 7e:fc:5f:1c:ca:0b:27:fb:e6:e5:79:d3:4f:4f:8e: 2b:eb:b1:19:ed:22:cb:11:b4:43:f8:f4:84:d9:ec: 6a:85:dc:41:1c:85:26:ed:bc:d4:6b:c8:ec:88:6a: e7:20:3f:b9:6d:0c:f0:fa:e9:e5:ea:b0:9c:67:07: a2:ae:2d:d8:a5:52:b1:1b:5a:de:3b:fc:76:4c:3f: 54:0e:df:52:18:ec:42:78:d0:61:be:12:3a:a1:d9: 99:85:8b:1e:cb:14:6b:5c:e4:8a:d4:e0:13:47:ce: 8c:f0:92:13:25:0d:24:dd:26:43:6f:71:cd:73:38: 64:f2:b7:f9:15:11:75:33:91:66:be:83:e9:2e:94: 82:49:c3:8e:b6:af:02:10:85:b5:13:f6:f5:e2:d7: 84:76:e5:71:8f:cf:05:04:8d:2b:29:38:7a:f6:f7: f0:23:0d:51:49:93:16:c8:b5:29:62:a5:94:40:39: c8:c2:bc:2c:77:49:b4:1f:07:4a:b5:eb:ba:e7:b9: 15:13:4e:85:eb:0c:7e:af:c1:a1:fc:a2:6d:72:97: 56:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0C:00:9E:93:89:BB:15:CC:3F:83:A0:42:31:86:36:AC:6B:A7:B5 X509v3 Authority Key Identifier: keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:cd:43:06:c6:b6:b6:5e:52:84:b5:a7:fb:46:94:72:e4:43: 33:18:ae:1c:90:60:2c:64:10:08:ff:d5:a1:b5:fb:37:d4:2e: 47:a0:fe:ea:bc:31:b8:4c:27:d0:71:f3:90:f3:6c:ed:da:78: 00:0f:73:61:8d:68:ce:68:e2:e7:bf:01:71:16:77:e1:31:47: 13:ee:31:ca:81:a8:6b:c9:5a:41:5b:71:e2:d4:03:81:e0:15: 57:02:05:d1:58:dc:2a:32:3f:32:aa:89:5c:72:f8:42:23:d0: d1:ae:d4:4b:84:61:01:69:1b:82:5f:ac:ef:49:23:87:31:22: 5d:20:55:28:9a:c6:4e:c8:23:e9:7b:64:d4:7d:91:f7:1f:ec: 81:41:3a:5b:4a:e6:64:d7:3a:72:42:03:b7:fd:5b:a0:19:e7: 15:e9:bd:86:66:73:ef:87:09:db:a0:df:70:c4:fe:88:c2:66: bb:4f:f7:2d:71:4d:ee:71:7a:af:a9:73:b0:49:7d:c5:d9:42: 88:8c:70:7d:66:e7:27:5b:a3:a1:e1:b0:d6:72:97:32:78:22: e9:dc:54:36:9c:e7:76:53:1c:6b:29:15:5b:3e:c8:5b:20:24: 9f:f1:b8:e2:f1:a6:a5:bf:00:be:cb:1c:57:20:40:e2:7d:b7: fb:8e:5f:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7ux1Ayrh3H/wLng9z+g7+VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4 NjFmYjIwHhcNMjYwNjIyMTAwMTM5WhcNMjYwNjIzMTAwMTM5WjAzMTEwLwYDVQQD EyhhMDBjMDA5ZTkzODliYjE1Y2MzZjgzYTA0MjMxODYzNmFjNmJhN2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7/EZstX83WsSCd0bQgDUYZFmtB6 5zx0ByggYM5p18UlLGaOU1j1XWKLLw5+/F8cygsn++bledNPT44r67EZ7SLLEbRD +PSE2exqhdxBHIUm7bzUa8jsiGrnID+5bQzw+unl6rCcZweiri3YpVKxG1reO/x2 TD9UDt9SGOxCeNBhvhI6odmZhYseyxRrXOSK1OATR86M8JITJQ0k3SZDb3HNczhk 8rf5FRF1M5FmvoPpLpSCScOOtq8CEIW1E/b14teEduVxj88FBI0rKTh69vfwIw1R SZMWyLUpYqWUQDnIwrwsd0m0HwdKteu657kVE06F6wx+r8Gh/KJtcpdWxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKAMAJ6TibsVzD+DoEIxhjasa6e1MB8GA1UdIwQY MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt MDEzZDJhMTFjMGE1LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1 LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYc1DBsa2 tl5ShLWn+0aUcuRDMxiuHJBgLGQQCP/VobX7N9QuR6D+6rwxuEwn0HHzkPNs7dp4 AA9zYY1ozmji578BcRZ34TFHE+4xyoGoa8laQVtx4tQDgeAVVwIF0VjcKjI/MqqJ XHL4QiPQ0a7US4RhAWkbgl+s70kjhzEiXSBVKJrGTsgj6Xtk1H2R9x/sgUE6W0rm ZNc6ckIDt/1boBnnFem9hmZz74cJ26DfcMT+iMJmu0/3LXFN7nF6r6lzsEl9xdlC iIxwfWbnJ1ujoeGw1nKXMngi6dxUNpzndlMcaykVWz7IWyAkn/G44vGmpb8Avssc VyBA4n23+45fPA== -----END CERTIFICATE-----Generated at Mon Jun 22 19:33:58 2026 by rpki-client