$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft File: 6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json) Hash identifier: 3TaMbMV5c5GsTJ1CnFDZP3WFfSZ6fRafR/VouIngy5Y= Subject key identifier: 60:6D:DC:7F:B3:68:C3:42:9A:CC:4F:80:32:4E:74:99:79:E4:2C:8D Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 01A001DCD656E58F283600CAC38192CC34FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft Manifest number: 1A21 Signing time: Fri 14 Aug 2026 20:00:45 +0000 Manifest this update: Fri 14 Aug 2026 20:00:45 +0000 Manifest next update: Sat 15 Aug 2026 20:00:45 +0000 Files and hashes: 1: 3_x1fMTPoRvLX1TcN9jNkDdkszI.roa (hash: qChZ12jGPt+igqR3YYtp2bz0dKJAKMPd592ma9NcCNg=) 2: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: 0Wdc+zcko4aJKRJC6LmRYgBhBUrXRT00c+2gYI9eMNY=) 3: 6amDSMQ_855VNIbRII_DXHjnq_k.roa (hash: HCMqnracA8A73jBfs9v8hnmmkLDx0vR0XfYQrjLn7vw=) 4: BV0kbYMEcmAv6rpHU2pEh-w65Xo.roa (hash: ouC+rh/o+/bFmEFqwkxPbJmSVE32vMaY+/Xhjpux2a0=) 5: F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa (hash: FrHQz6VBgsdDzG1EgR21e8l/oyJBYEHWEEgLbKK49Oc=) 6: Ifo6NwD56xJA6y61SpEQqvLf_R8.roa (hash: ArTm2IJOiT2dFcspxzA0JNm1iU6P54xELTMvSTOHQ8U=) 7: N2hJlPxzOaiP-0JOcE7E0Kk14z8.roa (hash: lBlro6ZfcBUQahYTWw9cYvjI96CLCeStJjQ3Cmlkpxs=) 8: O0zR1L9MgT5YwBbq6ISw_Bf7MB0.roa (hash: cICGD+vgHpne8r3yKqEMRJZStOofj1K0i19NpAHXpU4=) 9: S8CzuNBRlFxh0RCxcEYtrsSnrsU.roa (hash: etDBZKFL1Nfc+kBaajeV+YtDevN2RBSTQ7egtdVU0rg=) 10: _dXE-UR4YRoA9ses5dqlWyYCiIk.roa (hash: mq7uXlOBNSd5zRdIjUiiLaVvztFPBgtSE6JrvNPES20=) 11: bvcvNYojmTtMnBysPzJxWFLdF80.roa (hash: rEF2pNowtb5e9TFBM+KqVgoLZ9CLxZ76uZKkrlZ2GsU=) 12: cBwp2ouu-kTQUV0AP3SgjoKtpKE.roa (hash: 2mn/5LNm9rX3SfstPhosdI3pLFHA9jE4gvH4r7JdHQg=) 13: rYWyVFJzLrFOCnVo-LA8TMd7XMk.roa (hash: /09X2rjXIYAHVxxz61B+a44mcYZqQFBBx89GEQ/r21o=) 14: vT9q_7Kbw1nzjTiiL-Qyb_xxthw.roa (hash: wIzS+V276HA2+RbtI3bi97WOTD3ODV7DOF0uzSV/Wnc=) 15: yYJYN7yB_Q-nMabNeBbuq0usaU8.roa (hash: JotV8yhZRYv27OMcLIgmr6zSV2UH9Ktauyk4zm0D0HY=) 16: zbuFuKdn8FFVoWiKIOgewd-9diY.roa (hash: 36jMzQUc3TxS+/RDyNv/sTqqO15sLlzoMkMaWAxXiIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 15:11:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:01:dc:d6:56:e5:8f:28:36:00:ca:c3:81:92:cc:34:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: Aug 14 20:00:45 2026 GMT Not After : Aug 15 20:00:45 2026 GMT Subject: CN=606ddc7fb368c3429acc4f80324e749979e42c8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:aa:52:15:36:b9:4c:f9:74:a4:a1:61:fd:de: 40:e0:fd:69:0f:5f:cc:d8:0e:00:aa:54:94:4e:cf: 4f:49:36:ba:08:5b:96:6b:5a:84:b9:62:de:2e:b5: ec:34:66:f1:5d:4d:89:d2:ba:98:89:48:52:8a:d3: 41:cb:93:4b:d4:e1:41:bc:12:11:d4:8b:a1:31:d5: 5c:c6:eb:da:eb:5d:1e:74:09:f3:6d:77:77:c6:66: 9c:f8:9b:b2:66:6b:3b:74:7f:35:be:e8:93:e1:23: 2f:b7:72:39:fb:64:1f:6e:49:61:ba:af:d3:ac:c6: 53:1e:b0:2c:70:d1:74:94:fc:96:fb:92:d0:47:2c: c6:2f:f3:f8:93:b9:05:b2:df:48:93:f3:98:49:98: f4:15:db:02:6e:a6:7a:5e:ab:00:b5:66:06:25:41: 9a:78:95:f6:29:6e:a8:e9:a8:bf:bc:03:35:c0:c7: 86:f4:64:49:5f:eb:ab:b8:26:29:ac:fc:88:24:3e: 86:ba:3a:e6:c7:81:e1:9c:19:c9:21:85:42:fb:6b: 14:5d:a9:f9:10:3a:4b:04:5f:d9:0d:79:5a:5b:48: b8:6d:5c:47:55:85:35:53:c2:bf:3b:6a:e7:99:67: 67:1e:e4:ac:31:d9:22:b2:26:11:0b:18:a2:90:af: 06:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6D:DC:7F:B3:68:C3:42:9A:CC:4F:80:32:4E:74:99:79:E4:2C:8D X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f9:ee:39:c1:ba:54:a5:27:54:40:90:ba:d1:14:74:fb:33: dd:ca:ca:97:ec:4d:7a:a9:a0:bb:27:56:fb:d8:8d:ad:7c:ec: b1:67:1d:59:73:ec:30:08:9d:8c:52:2f:b0:49:81:ce:73:c6: 7f:81:1d:13:4f:bd:63:1c:c4:58:ca:e5:bb:aa:c6:15:0c:dc: 14:4c:0c:f1:c5:5b:8f:4b:81:89:58:9c:f1:fa:9b:ad:3f:0f: e1:20:03:12:4e:64:41:3d:38:93:37:7e:b4:e0:fc:ef:77:d4: e9:0d:8d:1d:ad:c9:4b:c7:06:69:0e:b1:7b:9c:eb:2f:a3:07: bb:1b:1f:e9:3a:d7:9c:8d:d8:18:5e:ee:a9:8c:35:44:e7:85: ab:e0:ad:39:23:31:5c:97:ca:3e:b3:c4:c8:56:58:76:c8:94: 8e:f3:c1:08:0e:e6:e5:e1:7b:00:be:6a:ce:0e:bf:c3:3c:47: fe:ce:12:47:e8:77:4c:d9:45:14:3a:7e:18:4b:db:06:d6:86: 2b:a1:9e:98:b0:8d:50:8f:79:0e:6b:78:6f:fd:a7:08:1e:86: 72:de:f6:b1:2c:f6:ff:6b:ae:31:13:d2:2d:29:92:e5:c2:af: 5d:00:16:4f:1d:e2:37:94:84:4b:ed:15:66:73:3a:5c:bf:da: f2:6b:84:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAB3NZW5Y8oNgDKw4GSzDT7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwODE0MjAwMDQ1WhcNMjYwODE1MjAwMDQ1WjAzMTEwLwYDVQQD Eyg2MDZkZGM3ZmIzNjhjMzQyOWFjYzRmODAzMjRlNzQ5OTc5ZTQyYzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlapSFTa5TPl0pKFh/d5A4P1pD1/M 2A4AqlSUTs9PSTa6CFuWa1qEuWLeLrXsNGbxXU2J0rqYiUhSitNBy5NL1OFBvBIR 1IuhMdVcxuva610edAnzbXd3xmac+JuyZms7dH81vuiT4SMvt3I5+2Qfbklhuq/T rMZTHrAscNF0lPyW+5LQRyzGL/P4k7kFst9Ik/OYSZj0FdsCbqZ6XqsAtWYGJUGa eJX2KW6o6ai/vAM1wMeG9GRJX+uruCYprPyIJD6Gujrmx4HhnBnJIYVC+2sUXan5 EDpLBF/ZDXlaW0i4bVxHVYU1U8K/O2rnmWdnHuSsMdkisiYRCxiikK8GtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGBt3H+zaMNCmsxPgDJOdJl55CyNMB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQfnuOcG6 VKUnVECQutEUdPsz3crKl+xNeqmguydW+9iNrXzssWcdWXPsMAidjFIvsEmBznPG f4EdE0+9YxzEWMrlu6rGFQzcFEwM8cVbj0uBiVic8fqbrT8P4SADEk5kQT04kzd+ tOD873fU6Q2NHa3JS8cGaQ6xe5zrL6MHuxsf6TrXnI3YGF7uqYw1ROeFq+CtOSMx XJfKPrPEyFZYdsiUjvPBCA7m5eF7AL5qzg6/wzxH/s4SR+h3TNlFFDp+GEvbBtaG K6GemLCNUI95Dmt4b/2nCB6Gct72sSz2/2uuMRPSLSmS5cKvXQAWTx3iN5SES+0V ZnM6XL/a8muEMQ== -----END CERTIFICATE-----Generated at Fri Aug 14 22:24:26 2026 by rpki-client