$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: ZPNAd1fa0J7cgGv8tVK5DIuD/q+lgjWZ8Y9cERGipCI= Subject key identifier: D3:41:A7:63:FA:8C:21:D2:F7:00:C1:4F:F6:40:FC:8E:C8:06:5D:1A Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019E74777C22A04C38354E2647E0BD1ABAE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0FAB Signing time: Fri 29 May 2026 16:00:47 +0000 Manifest this update: Fri 29 May 2026 16:00:47 +0000 Manifest next update: Sat 30 May 2026 16:00:47 +0000 Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=) 2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=) 3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=) 4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=) 5: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (hash: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws=) 6: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=) 7: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=) 8: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: D/VOGwfDwzcixaIq7lYQS1QHpuqZSj7oQsvDCl5C6cw=) 9: FgNKNW5B9puTce7TwiHPk7LKkM8.roa (hash: vwSEzoXOmoqMUtBgzMgDVlO/tkSbCfgKY6cTiF3Xr7o=) 10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=) 11: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=) 12: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=) 13: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=) 14: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=) 15: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=) 16: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=) 17: hrUBYyUNmk1RlzCVJrZZninUqYE.roa (hash: tZuiVSXDojagTNTrWs4BJGVlhszVNx0FmVqH9mQLrnc=) 18: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=) 19: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=) 20: nzgHuhsMefo-kktThn8Cntmw2DI.roa (hash: n7J6eW4XubFzE6V970pzXjS60Z76qDIdwRzD28rUcMI=) 21: q6AprXpiRcVl5ELQQP4HzyoPU1s.roa (hash: y1TzMFIAWDqXBEbPleIWHolHXjF7gfy6B7SVOuVhNiA=) 22: rJ1qNlWDYbi69BE2ZEKvQVltAts.roa (hash: 9qgzkGC4YfmPbthdBZ7B/utLfGFA/3aVgJMfSvBGTpc=) 23: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 30 May 2026 16:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:74:77:7c:22:a0:4c:38:35:4e:26:47:e0:bd:1a:ba:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: May 29 16:00:47 2026 GMT Not After : May 30 16:00:47 2026 GMT Subject: CN=d341a763fa8c21d2f700c14ff640fc8ec8065d1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:a9:6a:75:6c:bb:37:b2:7a:39:6c:89:48:62: 8a:c1:b9:27:6a:a5:15:4b:28:69:dd:05:c5:40:04: 6e:b2:8b:59:90:a4:1d:43:88:eb:e2:b0:c9:ea:b1: 1a:15:03:75:1b:6d:92:85:13:27:cd:05:8f:42:fe: 43:d0:ab:d7:ff:cd:0d:ba:c3:99:56:d9:3f:de:19: 5e:d4:fb:97:0f:b1:0e:bf:8a:ac:b2:1e:a3:6e:15: 51:07:30:e2:0e:82:58:cb:55:d1:f0:fd:77:fb:c4: b8:74:47:90:6c:a7:41:d6:3d:54:05:e7:29:f3:c3: 21:2b:aa:36:3b:4e:7d:a5:57:89:ac:7a:6d:84:80: 2e:ab:4b:62:0e:8f:04:0c:d9:50:87:6e:7c:dd:6e: 3d:38:79:03:1f:49:1e:49:37:9e:3e:dc:a5:58:9f: a6:2b:5c:8e:81:7b:92:da:f2:d3:55:8b:12:d7:de: 4e:d9:ee:34:6a:8f:63:44:a4:b0:ce:5b:52:c1:5b: bb:71:7a:65:9a:ac:d8:f9:57:be:6c:14:b7:ac:38: 7e:29:70:4c:80:2a:d1:51:df:5a:e9:0d:cd:05:c6: 03:36:bf:72:fa:70:52:46:37:44:6f:7a:98:ab:97: 25:40:a0:00:2d:9b:ed:e9:20:a8:c7:59:55:33:5b: ed:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:41:A7:63:FA:8C:21:D2:F7:00:C1:4F:F6:40:FC:8E:C8:06:5D:1A X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:02:72:95:43:4e:5a:fd:95:84:8a:88:a4:51:0b:37:98:c8: 95:a9:fa:d9:9c:d1:ea:43:d2:7b:0d:7b:b8:03:cf:74:65:03: e2:4f:ec:7a:08:ab:fe:42:cf:27:2d:8e:08:3d:8e:24:ed:97: 10:ed:5c:53:16:01:2e:ba:ec:1c:28:46:35:ab:3b:46:83:cf: 14:77:df:c7:6a:ec:7c:46:a1:97:fd:67:b8:89:89:5d:18:3b: 46:32:47:24:b1:1c:e5:fe:37:87:34:df:04:2e:88:6d:e7:c0: 1f:0f:dd:a5:ce:d9:df:79:da:9c:5b:03:e7:43:2c:34:04:e7: dc:2f:3b:e3:e9:1b:5b:28:fe:f6:17:4f:bc:7a:33:54:d8:af: 91:a8:a8:b9:25:a2:69:f4:09:f7:34:b7:7c:63:3c:c8:3c:1a: fb:b9:e3:23:a2:c2:f6:c6:a1:3c:e6:d7:4e:12:b8:c0:72:0a: ad:44:25:34:bd:a7:dc:6d:68:ea:d2:b0:57:74:40:e3:5b:dd: 49:3f:ca:24:34:00:5d:8d:4d:5f:b1:84:26:2a:69:cb:e1:f9: cd:3c:cc:ac:62:32:54:57:e1:86:10:cf:0d:15:8d:de:46:93: 7e:e9:75:05:83:a4:4a:b9:45:15:f2:d1:8d:55:cd:fa:d5:72: df:05:1a:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ50d3wioEw4NU4mR+C9GrrgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwNTI5MTYwMDQ3WhcNMjYwNTMwMTYwMDQ3WjAzMTEwLwYDVQQD EyhkMzQxYTc2M2ZhOGMyMWQyZjcwMGMxNGZmNjQwZmM4ZWM4MDY1ZDFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsqlqdWy7N7J6OWyJSGKKwbknaqUV Syhp3QXFQARusotZkKQdQ4jr4rDJ6rEaFQN1G22ShRMnzQWPQv5D0KvX/80NusOZ Vtk/3hle1PuXD7EOv4qssh6jbhVRBzDiDoJYy1XR8P13+8S4dEeQbKdB1j1UBecp 88MhK6o2O059pVeJrHpthIAuq0tiDo8EDNlQh2583W49OHkDH0keSTeePtylWJ+m K1yOgXuS2vLTVYsS195O2e40ao9jRKSwzltSwVu7cXplmqzY+Ve+bBS3rDh+KXBM gCrRUd9a6Q3NBcYDNr9y+nBSRjdEb3qYq5clQKAALZvt6SCox1lVM1vtawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNBp2P6jCHS9wDBT/ZA/I7IBl0aMB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlwJylUNO Wv2VhIqIpFELN5jIlan62ZzR6kPSew17uAPPdGUD4k/segir/kLPJy2OCD2OJO2X EO1cUxYBLrrsHChGNas7RoPPFHffx2rsfEahl/1nuImJXRg7RjJHJLEc5f43hzTf BC6IbefAHw/dpc7Z33nanFsD50MsNATn3C874+kbWyj+9hdPvHozVNivkaiouSWi afQJ9zS3fGM8yDwa+7njI6LC9sahPObXThK4wHIKrUQlNL2n3G1o6tKwV3RA41vd ST/KJDQAXY1NX7GEJippy+H5zTzMrGIyVFfhhhDPDRWN3kaTful1BYOkSrlFFfLR jVXN+tVy3wUaVw== -----END CERTIFICATE-----Generated at Fri May 29 21:21:32 2026 by rpki-client