$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft File: 6QnuPWGJdNoMvYBaLagEEKSYmIE.mft (raw, json) Hash identifier: sZVF6pRKIFSIZY6sQcKxSJwFxgbwh/tF9Cgm0PLk7zg= Subject key identifier: 58:6C:68:1A:A7:B3:90:9B:26:F3:97:BF:A5:EA:10:40:33:D2:27:78 Authority key identifier: E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 Certificate issuer: /CN=e909ee3d618974da0cbd805a2da80410a4989881 Certificate serial: 019E2ADE4351D1236F5EDD2B92B2DF627C62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft Manifest number: 192D Signing time: Fri 15 May 2026 09:01:09 +0000 Manifest this update: Fri 15 May 2026 09:01:09 +0000 Manifest next update: Sat 16 May 2026 09:01:09 +0000 Files and hashes: 1: 3_x1fMTPoRvLX1TcN9jNkDdkszI.roa (hash: qChZ12jGPt+igqR3YYtp2bz0dKJAKMPd592ma9NcCNg=) 2: 6QnuPWGJdNoMvYBaLagEEKSYmIE.crl (hash: q/3mO9SC+EI/r2lNmQOipo2I3HMTVWxXVK0ci+JCas8=) 3: 6amDSMQ_855VNIbRII_DXHjnq_k.roa (hash: HCMqnracA8A73jBfs9v8hnmmkLDx0vR0XfYQrjLn7vw=) 4: BV0kbYMEcmAv6rpHU2pEh-w65Xo.roa (hash: ouC+rh/o+/bFmEFqwkxPbJmSVE32vMaY+/Xhjpux2a0=) 5: F1nULM_5OAp5snlJ0wUzTVe_8Pk.roa (hash: FrHQz6VBgsdDzG1EgR21e8l/oyJBYEHWEEgLbKK49Oc=) 6: Ifo6NwD56xJA6y61SpEQqvLf_R8.roa (hash: ArTm2IJOiT2dFcspxzA0JNm1iU6P54xELTMvSTOHQ8U=) 7: N2hJlPxzOaiP-0JOcE7E0Kk14z8.roa (hash: lBlro6ZfcBUQahYTWw9cYvjI96CLCeStJjQ3Cmlkpxs=) 8: O0zR1L9MgT5YwBbq6ISw_Bf7MB0.roa (hash: cICGD+vgHpne8r3yKqEMRJZStOofj1K0i19NpAHXpU4=) 9: S8CzuNBRlFxh0RCxcEYtrsSnrsU.roa (hash: etDBZKFL1Nfc+kBaajeV+YtDevN2RBSTQ7egtdVU0rg=) 10: _dXE-UR4YRoA9ses5dqlWyYCiIk.roa (hash: mq7uXlOBNSd5zRdIjUiiLaVvztFPBgtSE6JrvNPES20=) 11: bvcvNYojmTtMnBysPzJxWFLdF80.roa (hash: rEF2pNowtb5e9TFBM+KqVgoLZ9CLxZ76uZKkrlZ2GsU=) 12: cBwp2ouu-kTQUV0AP3SgjoKtpKE.roa (hash: 2mn/5LNm9rX3SfstPhosdI3pLFHA9jE4gvH4r7JdHQg=) 13: rYWyVFJzLrFOCnVo-LA8TMd7XMk.roa (hash: /09X2rjXIYAHVxxz61B+a44mcYZqQFBBx89GEQ/r21o=) 14: yYJYN7yB_Q-nMabNeBbuq0usaU8.roa (hash: JotV8yhZRYv27OMcLIgmr6zSV2UH9Ktauyk4zm0D0HY=) 15: zbuFuKdn8FFVoWiKIOgewd-9diY.roa (hash: 36jMzQUc3TxS+/RDyNv/sTqqO15sLlzoMkMaWAxXiIs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 09:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:2a:de:43:51:d1:23:6f:5e:dd:2b:92:b2:df:62:7c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e909ee3d618974da0cbd805a2da80410a4989881 Validity Not Before: May 15 09:01:09 2026 GMT Not After : May 16 09:01:09 2026 GMT Subject: CN=586c681aa7b3909b26f397bfa5ea104033d22778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c0:c3:3a:9f:8e:ca:fd:69:1c:78:a7:79:e5: f3:55:ba:5a:07:ed:a9:8d:72:e6:b9:7f:22:d1:cf: 78:ad:d6:60:60:f8:03:61:d4:e7:86:7b:be:17:19: da:14:c2:d6:e0:a8:3f:6a:94:94:3c:f6:46:52:8b: 70:22:bb:53:c5:f6:fd:45:90:6f:d9:75:32:aa:54: 84:af:68:5a:4b:63:b2:62:2e:e0:3a:be:5a:d8:94: 51:c2:21:d6:22:29:c7:9d:ac:36:0c:1c:3b:29:4a: be:06:94:56:6f:1b:97:06:84:ad:a8:b5:1e:b1:af: bd:95:15:32:de:66:d8:60:bb:c8:10:46:82:01:3a: 05:61:95:25:56:07:82:89:99:9e:8c:b0:04:bd:28: c9:4c:db:77:51:d8:fb:1e:b4:37:f2:b7:fe:2a:df: 20:0a:e2:09:44:69:b5:96:09:91:61:f5:19:f6:ac: 31:ad:3b:de:5a:bd:08:c5:cc:db:1c:06:ea:f5:15: b8:83:70:ff:b1:61:e0:12:f6:35:b5:0f:10:0a:28: bd:b5:8f:bb:b3:c0:ed:dd:c4:f6:97:1b:fe:21:8c: 8b:59:84:45:c8:50:31:37:f7:6c:0a:ff:d3:29:14: dd:26:39:fe:7b:9a:2f:82:9e:8e:dd:2b:90:be:29: ce:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:6C:68:1A:A7:B3:90:9B:26:F3:97:BF:A5:EA:10:40:33:D2:27:78 X509v3 Authority Key Identifier: keyid:E9:09:EE:3D:61:89:74:DA:0C:BD:80:5A:2D:A8:04:10:A4:98:98:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6QnuPWGJdNoMvYBaLagEEKSYmIE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/2b5f5f-bb96-4b31-8a6a-dd115f9e3301/1/6QnuPWGJdNoMvYBaLagEEKSYmIE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:71:50:fe:5c:f9:87:03:68:e0:30:8e:38:95:c0:a3:1c:05: 11:85:1c:86:cb:9e:a5:85:10:70:3e:1e:9e:bb:84:f7:1b:42: a3:dc:73:1e:5a:5f:1a:63:3d:3b:52:ec:02:4c:ae:cb:47:d3: 7e:bd:94:bc:f6:5c:68:26:86:62:25:ae:0f:47:a6:ce:b1:da: 08:5c:6a:8c:cd:82:b0:74:d1:1b:f9:42:f9:92:5c:c3:0b:20: e4:0d:8a:e8:2a:de:ca:3e:9a:f0:00:6f:01:81:87:f0:32:78: 24:ee:56:0c:a5:c3:bd:46:c5:c3:20:1d:e3:26:44:a5:78:46: 99:b3:f8:e0:da:ce:4a:77:d9:5d:03:0e:8b:2e:81:92:bb:d7: fe:57:9c:93:7f:73:8e:f4:de:c7:a1:3c:42:9c:98:36:85:a2: 5a:52:b2:06:d7:59:16:bb:aa:21:22:ca:43:1f:10:01:3b:e3: 75:21:e9:5d:79:2a:ce:25:ee:c6:56:a4:a2:5f:72:03:81:e9: 1e:20:75:e1:8d:d2:e9:0a:48:92:1e:b0:66:f6:ff:8c:dd:a4: 94:a2:78:63:60:64:4a:4f:ed:f2:5c:cd:53:8b:48:e2:0b:81: d8:ed:f7:f6:4b:59:cc:5e:66:f8:4c:73:9c:f2:3b:64:53:a9: 4d:d5:a8:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4q3kNR0SNvXt0rkrLfYnxiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU5MDllZTNkNjE4OTc0ZGEwY2JkODA1YTJkYTgwNDEwYTQ5 ODk4ODEwHhcNMjYwNTE1MDkwMTA5WhcNMjYwNTE2MDkwMTA5WjAzMTEwLwYDVQQD Eyg1ODZjNjgxYWE3YjM5MDliMjZmMzk3YmZhNWVhMTA0MDMzZDIyNzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA38DDOp+Oyv1pHHineeXzVbpaB+2p jXLmuX8i0c94rdZgYPgDYdTnhnu+FxnaFMLW4Kg/apSUPPZGUotwIrtTxfb9RZBv 2XUyqlSEr2haS2OyYi7gOr5a2JRRwiHWIinHnaw2DBw7KUq+BpRWbxuXBoStqLUe sa+9lRUy3mbYYLvIEEaCAToFYZUlVgeCiZmejLAEvSjJTNt3Udj7HrQ38rf+Kt8g CuIJRGm1lgmRYfUZ9qwxrTveWr0IxczbHAbq9RW4g3D/sWHgEvY1tQ8QCii9tY+7 s8Dt3cT2lxv+IYyLWYRFyFAxN/dsCv/TKRTdJjn+e5ovgp6O3SuQvinOewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFhsaBqns5CbJvOXv6XqEEAz0id4MB8GA1UdIwQY MBaAFOkJ7j1hiXTaDL2AWi2oBBCkmJiBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEt ZGQxMTVmOWUzMzAxLzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZS8yYjVmNWYtYmI5Ni00YjMxLThhNmEtZGQxMTVmOWUzMzAx LzEvNlFudVBXR0pkTm9NdllCYUxhZ0VFS1NZbUlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFHFQ/lz5 hwNo4DCOOJXAoxwFEYUchsuepYUQcD4enruE9xtCo9xzHlpfGmM9O1LsAkyuy0fT fr2UvPZcaCaGYiWuD0emzrHaCFxqjM2CsHTRG/lC+ZJcwwsg5A2K6Creyj6a8ABv AYGH8DJ4JO5WDKXDvUbFwyAd4yZEpXhGmbP44NrOSnfZXQMOiy6BkrvX/leck39z jvTex6E8QpyYNoWiWlKyBtdZFruqISLKQx8QATvjdSHpXXkqziXuxlakol9yA4Hp HiB14Y3S6QpIkh6wZvb/jN2klKJ4Y2BkSk/t8lzNU4tI4guB2O339ktZzF5m+Exz nPI7ZFOpTdWoUw== -----END CERTIFICATE-----Generated at Fri May 15 17:53:16 2026 by rpki-client