$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: 46BN/gFcZ9ma/jC5WHPRsifGmIdmEvb8y27CmnPemnM= Subject key identifier: B2:EA:7E:EA:26:88:20:9F:D8:EA:13:3E:54:92:C7:C4:5D:A0:19:72 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019EB80F00F7B03EEFE9B65C91A16C954253 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 1364 Signing time: Thu 11 Jun 2026 19:00:51 +0000 Manifest this update: Thu 11 Jun 2026 19:00:51 +0000 Manifest next update: Fri 12 Jun 2026 19:00:51 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: 6vtQiO8IGWB0wPXAMAhyeiWrVgPySa68KvTVA43kaas=) 2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=) 3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=) 4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=) 5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=) 6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=) 7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=) 8: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=) 9: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=) 10: iglmx-ya_CBijqxO6oqYah-MgJk.roa (hash: nW9fmQ0ZJGvfNsh2tiuvFsmSbRN+a3nAUodyjJH9UYE=) 11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=) 12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=) 13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=) 14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=) 15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b8:0f:00:f7:b0:3e:ef:e9:b6:5c:91:a1:6c:95:42:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Jun 11 19:00:51 2026 GMT Not After : Jun 12 19:00:51 2026 GMT Subject: CN=b2ea7eea2688209fd8ea133e5492c7c45da01972 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:94:e0:1a:6f:2f:3d:d8:44:3a:5f:56:1f:a7: 59:e7:9b:1b:ca:3c:c6:47:3e:7f:0e:40:17:26:6b: 2e:b3:26:a1:a7:80:77:0a:79:bc:ee:d0:45:10:75: 65:a3:31:14:fc:26:da:f4:e4:b5:75:70:ba:c2:e4: 79:08:5a:90:a1:e8:77:73:ef:13:d7:72:b6:aa:40: 3e:b9:48:6a:05:c3:36:e5:5b:c5:c6:84:a3:e2:4a: ef:ef:66:ff:cd:3d:f6:3a:08:6c:6d:d2:1c:f1:00: 01:6c:ac:3c:36:fe:a6:97:73:12:f0:fa:70:5f:a2: c5:b6:7a:3a:20:4b:cd:d6:87:4a:99:f8:ce:37:34: 1b:2d:93:57:89:19:66:51:3d:22:61:ca:08:c9:59: b2:07:d0:53:87:37:05:92:8e:89:97:0f:44:31:af: ad:e6:19:e1:43:71:56:a2:b8:49:0c:b7:75:42:2f: f8:a2:14:b5:67:8b:bb:21:cd:eb:90:f9:bd:6d:c6: 29:af:44:49:b6:8f:c4:9b:67:27:cb:76:2b:ae:71: 89:91:c4:54:5e:43:46:1e:14:9b:b8:76:57:7c:8d: 74:8f:49:59:99:4f:36:96:1a:59:6a:67:ea:ed:c6: ee:bd:35:10:b7:57:3a:ef:1f:ef:d3:fe:a8:cc:1b: 26:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:EA:7E:EA:26:88:20:9F:D8:EA:13:3E:54:92:C7:C4:5D:A0:19:72 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:61:e6:c7:46:70:ac:b2:28:73:ab:73:8d:10:86:5f:8f:66: 8b:e4:25:37:6b:e6:cf:eb:66:99:6c:8e:b5:5d:55:53:15:88: 9a:5e:65:7e:5a:af:f0:b5:d7:8c:4a:5d:bd:c5:91:e2:5a:ef: 21:56:2b:7b:e2:f4:a3:57:cc:7a:79:86:63:2b:89:e8:92:71: 1b:02:a6:43:04:6a:13:ed:e4:68:dd:8c:c7:d1:7f:88:a6:24: 67:35:d2:44:7a:3b:35:54:9b:fd:24:9d:75:1e:2c:3b:e1:fb: 37:6a:58:38:12:16:0c:f8:89:c1:44:3f:05:4f:f0:6c:7e:00: 1a:2f:4b:e1:35:29:49:57:40:bd:64:39:45:d4:34:e3:82:53: 71:03:44:40:b0:97:b0:3f:1a:4a:04:85:75:33:06:14:a2:a7: 7b:bf:a9:81:cd:f6:6b:c7:c2:29:89:ba:df:73:98:1c:f6:c0: 5f:4d:4f:a0:6c:71:68:ae:b7:ea:f0:e3:bb:31:06:21:f0:66: ce:6a:98:df:b1:e9:48:f8:38:a3:e5:41:d3:eb:3b:0b:15:d2: 53:5b:74:0b:d9:f1:f2:45:1d:66:52:cf:26:6b:4e:3a:2f:77: e8:df:ab:ab:ec:06:df:11:06:2e:26:b0:73:42:97:f2:d1:d9: 4f:fe:a3:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ64DwD3sD7v6bZckaFslUJTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwNjExMTkwMDUxWhcNMjYwNjEyMTkwMDUxWjAzMTEwLwYDVQQD EyhiMmVhN2VlYTI2ODgyMDlmZDhlYTEzM2U1NDkyYzdjNDVkYTAxOTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJTgGm8vPdhEOl9WH6dZ55sbyjzG Rz5/DkAXJmsusyahp4B3Cnm87tBFEHVlozEU/Cba9OS1dXC6wuR5CFqQoeh3c+8T 13K2qkA+uUhqBcM25VvFxoSj4krv72b/zT32OghsbdIc8QABbKw8Nv6ml3MS8Ppw X6LFtno6IEvN1odKmfjONzQbLZNXiRlmUT0iYcoIyVmyB9BThzcFko6Jlw9EMa+t 5hnhQ3FWorhJDLd1Qi/4ohS1Z4u7Ic3rkPm9bcYpr0RJto/Em2cny3YrrnGJkcRU XkNGHhSbuHZXfI10j0lZmU82lhpZamfq7cbuvTUQt1c67x/v0/6ozBsmiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLLqfuomiCCf2OoTPlSSx8RdoBlyMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV2Hmx0Zw rLIoc6tzjRCGX49mi+QlN2vmz+tmmWyOtV1VUxWIml5lflqv8LXXjEpdvcWR4lrv IVYre+L0o1fMenmGYyuJ6JJxGwKmQwRqE+3kaN2Mx9F/iKYkZzXSRHo7NVSb/SSd dR4sO+H7N2pYOBIWDPiJwUQ/BU/wbH4AGi9L4TUpSVdAvWQ5RdQ044JTcQNEQLCX sD8aSgSFdTMGFKKne7+pgc32a8fCKYm633OYHPbAX01PoGxxaK636vDjuzEGIfBm zmqY37HpSPg4o+VB0+s7CxXSU1t0C9nx8kUdZlLPJmtOOi936N+rq+wG3xEGLiaw c0KX8tHZT/6jLg== -----END CERTIFICATE-----Generated at Thu Jun 11 22:41:24 2026 by rpki-client