$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: zenhBCX2Ud6NE2dT4avZWAICRSm+NRRptIcS+Mh09Q4= Subject key identifier: 11:D1:73:F3:32:37:7E:AA:A0:66:FA:20:5F:D6:AB:D0:C6:A2:9C:29 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019E9D730A678A5356D6DD1D2B4F566B6B2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 1A4D Signing time: Sat 06 Jun 2026 15:00:22 +0000 Manifest this update: Sat 06 Jun 2026 15:00:22 +0000 Manifest next update: Sun 07 Jun 2026 15:00:22 +0000 Files and hashes: 1: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (hash: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84=) 2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: hQCUTqrxkeF/w5fHnPU+MDpDOmTgorrS+DHJJUF33j0=) 3: 2WrIc3-SP4DwQkwPJgua1bGNJ8U.roa (hash: 1n+jxmJd5F9eDLk5zWmpaiLv++ZbzD7Fd2FD1jx9EQI=) 4: 2tySjVTQSHiULWpIIHxe3UTXyKc.roa (hash: 11efIhc4jliYz5b7ccbbcBy+lueobimG/f4ImBFKSr4=) 5: 5pRQZzbHbiHkZmXjFL2E4UNZuHs.roa (hash: P9CNCo8EST5TtceaZZg3nqTZTM5Raj/p9KTR1TGLwio=) 6: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (hash: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE=) 7: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (hash: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE=) 8: CW-qcI1ohMNZFrtxwKP6h3IuUsY.roa (hash: Q0m3SYkmGKp057as4cDbrXW6Plo1d3nxk1JPEsbDaPY=) 9: EQGugxJGZZhy7ULlXu2xf-8SXLU.roa (hash: UznnK9y+/YnAzmFCMUsWlBbf7xpLU6GolAvI0bvVwdE=) 10: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (hash: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE=) 11: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (hash: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk=) 12: hjwqR_BvVV3igv-VRSRakB0C0gY.roa (hash: dGn15gWRk4S5nvTCswCYk4PnSEMzXrTWJmJ53SFUgxE=) 13: iyfIsG_zCzXslesxdnK347yeiF4.roa (hash: tDXmuusqCyRHX/DQh8nnAapHWqFHXmFSmh6Yr5JKuq0=) 14: lITdQxhmX_QJLHCdZAw823-rxIE.roa (hash: LD1BnadL45zxeXJQFcYTUwoYEdwQD3yyFtEI21xm/MU=) 15: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (hash: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s=) 16: wQvwuyTtVhloyL12ClFe1Tmx_YM.asa (hash: 7C5CFFl7eP926O+5F2qKTmqq4J0LTe8XElvBDea1xIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 13:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:9d:73:0a:67:8a:53:56:d6:dd:1d:2b:4f:56:6b:6b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Jun 6 15:00:22 2026 GMT Not After : Jun 7 15:00:22 2026 GMT Subject: CN=11d173f332377eaaa066fa205fd6abd0c6a29c29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ac:23:0b:88:6a:14:d1:0c:a9:5c:1d:b8:40: 60:05:01:57:47:63:27:53:51:ed:e0:b0:90:71:10: ee:fa:90:2a:a3:2d:02:1a:a0:85:f8:6f:b7:75:c5: 39:fd:00:db:58:82:6f:8d:f4:5e:df:5a:af:1a:c3: 7f:74:cd:f5:78:3b:05:a8:2a:e5:3f:f3:f4:17:17: 37:aa:99:1e:7d:10:0b:ef:4f:74:30:e4:83:89:dc: ad:14:c7:84:bf:a2:69:1b:78:cb:97:4a:00:96:81: 55:b6:ce:2e:bd:6e:9a:ce:57:73:f4:14:32:19:b8: 63:0c:ae:3b:59:b1:03:d6:65:ba:65:7b:4f:45:f0: 09:c9:d9:49:59:99:aa:0f:4d:c7:d5:78:28:8d:44: 88:bb:ba:ea:f3:28:9d:8d:1b:c2:29:48:d4:bd:dc: 0b:72:4e:95:77:bb:00:5a:3e:b3:f3:1b:b3:42:5b: f5:b4:2d:c1:25:59:c6:0b:8c:7b:d1:df:8c:bd:a7: d3:d4:f4:3c:99:5c:4a:36:99:25:e9:30:a1:8a:51: 5d:84:2f:54:ae:3c:93:be:e8:07:07:59:f3:5d:41: ed:a9:97:d1:30:a1:13:3d:5a:81:ab:84:24:34:a7: 47:e1:63:70:1e:75:88:65:61:00:cb:2b:68:ab:fc: 42:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D1:73:F3:32:37:7E:AA:A0:66:FA:20:5F:D6:AB:D0:C6:A2:9C:29 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:bb:fb:1b:b5:12:1f:83:ec:21:0d:e0:10:e0:37:11:24:c5: ca:2a:48:5e:c9:4e:4d:a2:19:cd:00:91:00:67:69:c2:20:a3: 2c:4b:d3:41:83:b8:65:3e:35:77:ee:fd:80:10:4b:45:de:56: 5d:85:83:73:dd:11:a7:75:6a:d1:b9:ea:5c:3b:68:88:75:0d: 54:45:7a:0b:24:49:9d:c8:d0:2d:6a:ed:f0:a9:c2:2b:47:d7: c1:92:f1:f9:25:39:6f:24:af:a7:82:09:be:74:60:e4:cd:a9: 16:6d:ab:91:2c:0c:a1:32:27:c5:05:7c:7e:8b:79:d4:82:fb: 09:c5:27:d7:72:16:dd:bd:52:56:6f:de:1a:16:af:61:8d:41: 94:a4:ab:a4:6b:fd:d1:04:f8:7b:c9:ba:f3:5b:09:7c:c5:22: 29:8c:4b:a5:f9:a0:d7:19:bc:7b:8b:72:23:30:00:24:4d:0e: 15:78:1a:88:c3:fd:a1:9c:2b:04:c6:fb:98:36:b0:63:b7:d0: 79:f3:e2:f8:a3:35:9f:52:01:a4:2f:bd:93:74:00:0e:d3:2d: ff:6f:19:73:ad:9e:a7:85:b8:32:a7:37:67:ab:e7:da:e3:d2: 07:cf:d1:05:87:f9:9e:dc:07:1c:18:85:2b:dc:d4:eb:c7:32: 60:ec:19:02 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6dcwpnilNW1t0dK09Wa2stMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwNjA2MTUwMDIyWhcNMjYwNjA3MTUwMDIyWjAzMTEwLwYDVQQD EygxMWQxNzNmMzMyMzc3ZWFhYTA2NmZhMjA1ZmQ2YWJkMGM2YTI5YzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKwjC4hqFNEMqVwduEBgBQFXR2Mn U1Ht4LCQcRDu+pAqoy0CGqCF+G+3dcU5/QDbWIJvjfRe31qvGsN/dM31eDsFqCrl P/P0Fxc3qpkefRAL7090MOSDidytFMeEv6JpG3jLl0oAloFVts4uvW6azldz9BQy GbhjDK47WbED1mW6ZXtPRfAJydlJWZmqD03H1XgojUSIu7rq8yidjRvCKUjUvdwL ck6Vd7sAWj6z8xuzQlv1tC3BJVnGC4x70d+MvafT1PQ8mVxKNpkl6TChilFdhC9U rjyTvugHB1nzXUHtqZfRMKETPVqBq4QkNKdH4WNwHnWIZWEAyytoq/xC6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHRc/MyN36qoGb6IF/Wq9DGopwpMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ7v7G7US H4PsIQ3gEOA3ESTFyipIXslOTaIZzQCRAGdpwiCjLEvTQYO4ZT41d+79gBBLRd5W XYWDc90Rp3Vq0bnqXDtoiHUNVEV6CyRJncjQLWrt8KnCK0fXwZLx+SU5bySvp4IJ vnRg5M2pFm2rkSwMoTInxQV8fot51IL7CcUn13IW3b1SVm/eGhavYY1BlKSrpGv9 0QT4e8m681sJfMUiKYxLpfmg1xm8e4tyIzAAJE0OFXgaiMP9oZwrBMb7mDawY7fQ efPi+KM1n1IBpC+9k3QADtMt/28Zc62ep4W4Mqc3Z6vn2uPSB8/RBYf5ntwHHBiF K9zU68cyYOwZAg== -----END CERTIFICATE-----Generated at Sat Jun 6 20:40:13 2026 by rpki-client