$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft File: DXIuRROjlnjYqyOy1kl3U0BRjLk.mft (raw, json) Hash identifier: 8mFm9SFX1OatPNLBPJ2rzxuaqzfHpWJyuyXFNXvHmx0= Subject key identifier: BB:5F:D6:F8:6F:A6:4B:DE:A2:7F:38:3B:FD:84:91:C2:42:9A:F6:FB Authority key identifier: 0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 Certificate issuer: /CN=0d722e4513a39678d8ab23b2d649775340518cb9 Certificate serial: 019E4FC621351A38E71EBFEFAC185326B59E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft Manifest number: 0F98 Signing time: Fri 22 May 2026 13:00:45 +0000 Manifest this update: Fri 22 May 2026 13:00:45 +0000 Manifest next update: Sat 23 May 2026 13:00:45 +0000 Files and hashes: 1: 0LLCIOYO2u2ncsAa9ch0Fxek_0g.roa (hash: TfGSU8XCSgVMZOD41y1990e2kIyriSC3XmqU7n3kfvE=) 2: 1M4CR97G2KsXmA_zCbIkIXY9AHc.roa (hash: GDf20c7QMRCTOktQNho+ECo62hgqNJJUdQUlkUBsHZE=) 3: 53UVpgTQ6GPGb3F7iaw4F7ggFJ4.roa (hash: Rge2VTZzY9AJwofj3q/Q6jFmREW3CoHsGJkonCRjf/E=) 4: 54lg5Z3PwYcVlmy8U--OorXyIRU.roa (hash: p4H+ojtQvC4UXZDuYUx4ZnC8qPB6jzl83dV6d963YfA=) 5: 6hrkGNyyTTSVf_rqftzyJaZfZm8.roa (hash: uZjY0XxhNwiqPz9+ZpU0AGGQSAkcGO0viC0E3iatgws=) 6: A20W_5_G6C-OdgoqlsDfQ4OCw2M.roa (hash: FALYlcnA+YtKlalF7N3tNk7RIjxbvPOkk+v0cemQh20=) 7: BB8Gm9v_dDfhya8UTHGMwoFyZsU.roa (hash: MVsrvMO39kJoc0mZmN7diOxB9EcjZr9Z1pn5l5VbIw0=) 8: DXIuRROjlnjYqyOy1kl3U0BRjLk.crl (hash: FVyGHrc/qiYNp5z0lji+q3tHz2y9cCV1l7qzxXn2+eA=) 9: FgNKNW5B9puTce7TwiHPk7LKkM8.roa (hash: vwSEzoXOmoqMUtBgzMgDVlO/tkSbCfgKY6cTiF3Xr7o=) 10: I0pwg9CZMHqLfBbOSZRcrUCAXac.roa (hash: ez3uTbsX5XWKgBxDLIribBBe6QXM1/Sf5/DyeWPZIME=) 11: P8CPGWFsawUMl03GCUpKnxbjjlE.roa (hash: GAHel1W64Z9n1z13wYSseROdcgB58qy+711XhLs0e+w=) 12: QJ1xM-I48uzO02IgPeNQyuOaUqA.roa (hash: 6rMIGe2ob2Y14JHRw4XfL4QGb3VCibvSBGXwMtcGqqg=) 13: a1bxge9RaAQ4hUbIUGzCCu-i2F4.roa (hash: a1kP5I90YhkZZI2m2BFKJdlp4Oz3OlMvq6wsOXlcI4c=) 14: aASnsFjaGSv1507L70pG1D3Mylw.roa (hash: oa7lWKQuw6P6CITW8+9RNGq86p0mYNRQt2gm7DcEnkk=) 15: aE7dmxNnMqlbMvLqgzOsP-ooEsM.roa (hash: yRZuNFGwI8VBm9671WQ3wPUuTbQ9RDPs60a0RaW0q3g=) 16: cFgdjeeP9MpYfV_2AUL1U_5M24c.roa (hash: 7BBXQ8Fn1Y9T8QvfmXuLGCX/jZRN0auG1tMDaE9RoLs=) 17: hrUBYyUNmk1RlzCVJrZZninUqYE.roa (hash: tZuiVSXDojagTNTrWs4BJGVlhszVNx0FmVqH9mQLrnc=) 18: huTbYgpqurqxYkSbrMBeRshoxjw.roa (hash: XOmUVP6KC3R9djF2wr37Vopd4+qc2j38WB+awNW8Kn4=) 19: njGiyS1riv8o5Tx4DTboEJsmuyA.roa (hash: Jvb2eyKp3aYHDbslRvWJdCfA9jI/WLkz3iYOmnC0IPo=) 20: nzgHuhsMefo-kktThn8Cntmw2DI.roa (hash: n7J6eW4XubFzE6V970pzXjS60Z76qDIdwRzD28rUcMI=) 21: q6AprXpiRcVl5ELQQP4HzyoPU1s.roa (hash: y1TzMFIAWDqXBEbPleIWHolHXjF7gfy6B7SVOuVhNiA=) 22: rJ1qNlWDYbi69BE2ZEKvQVltAts.roa (hash: 9qgzkGC4YfmPbthdBZ7B/utLfGFA/3aVgJMfSvBGTpc=) 23: t5l7KHAEWqvhTIwVkhIeMMidR-M.roa (hash: A1nvslLXHKOUrzLO45L1cBt57BRFdo4XXdQju80rlCk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 May 2026 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:4f:c6:21:35:1a:38:e7:1e:bf:ef:ac:18:53:26:b5:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0d722e4513a39678d8ab23b2d649775340518cb9 Validity Not Before: May 22 13:00:45 2026 GMT Not After : May 23 13:00:45 2026 GMT Subject: CN=bb5fd6f86fa64bdea27f383bfd8491c2429af6fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:99:ab:f1:ce:4f:b0:57:58:1f:67:bf:32:2f: ac:31:e6:b3:8a:e7:d0:b2:70:e9:0f:e9:e2:9a:39: 12:21:9c:cd:b1:bb:96:a9:b2:f6:20:02:a8:f1:60: da:f8:e9:ce:2a:78:1e:3d:0a:9a:fc:ef:7b:05:b2: a9:6d:56:88:03:4d:ec:a5:f6:65:fb:a2:9e:3d:aa: e0:6c:cd:67:c5:24:e9:f3:49:2f:05:56:d2:d0:e1: 70:f2:f3:df:5e:b4:07:8c:35:e9:7c:21:08:b9:80: cd:f8:9b:c3:ce:56:08:35:71:9c:55:d6:57:27:44: 6d:8c:4f:be:89:57:65:5f:ce:28:3c:c4:18:85:b5: ef:17:77:e0:bf:84:82:11:5c:87:4f:ae:58:44:d7: be:5e:8b:49:7e:89:14:e8:b2:bb:d0:df:e4:e1:a8: fc:9d:ed:82:44:b6:cb:c4:2c:1e:68:49:58:65:12: a3:a9:51:cd:27:e6:60:04:4a:38:7e:7b:4f:fb:df: 1f:61:fe:f0:00:79:2b:bb:d4:b1:85:25:66:90:7f: df:c2:3b:3d:e1:9c:c0:c3:9c:0f:ee:86:6f:12:65: 10:bf:98:50:05:ab:b5:7c:e0:6d:ba:02:d1:d9:4f: e5:0a:29:41:07:14:6c:13:a7:4d:b2:b5:dc:bf:39: 2c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:5F:D6:F8:6F:A6:4B:DE:A2:7F:38:3B:FD:84:91:C2:42:9A:F6:FB X509v3 Authority Key Identifier: keyid:0D:72:2E:45:13:A3:96:78:D8:AB:23:B2:D6:49:77:53:40:51:8C:B9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXIuRROjlnjYqyOy1kl3U0BRjLk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/1c084c-982d-4098-af42-3425b125eaa7/1/DXIuRROjlnjYqyOy1kl3U0BRjLk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:0f:b2:ed:c9:d6:3b:ce:a1:a8:88:c0:48:91:2a:04:f4:0b: 11:97:c7:f1:fa:27:bf:26:5a:f7:37:fe:88:46:56:cf:a2:1e: 7c:e0:d3:30:09:0e:85:7d:67:92:66:f7:fc:c9:70:11:9d:0e: bc:e2:f5:85:f2:ea:a1:05:a0:0d:9c:a0:4a:27:3b:88:31:48: 27:f4:7b:38:30:6f:6f:ab:6b:b1:c7:ab:21:8d:bd:b9:fb:d4: 30:91:80:75:4f:ec:f0:70:0b:54:8f:85:33:a9:11:e3:83:6e: 70:7e:a5:ff:3e:27:36:b2:11:9a:e1:3f:41:da:17:92:02:e8: 62:7e:b8:68:d7:02:e1:ac:1c:d7:16:bb:30:85:de:14:42:53: 45:89:08:75:c9:14:56:75:7d:77:b4:1f:69:38:98:72:cd:a4: 31:ce:3a:96:b6:85:32:11:7b:3e:2f:db:7b:32:4c:77:f4:c1: 88:2c:9c:46:25:95:46:60:75:75:76:e0:6c:87:5f:63:c3:ca: f3:6b:a7:d9:08:58:22:e7:eb:54:bd:fa:0e:7f:7c:45:00:4f: 1a:21:50:25:1b:c2:14:c8:35:7a:2f:f6:bf:0f:ab:fa:d5:6a: 06:e1:fd:0a:c4:95:56:cd:3d:d3:6a:18:4c:b4:94:e3:84:42: 19:a3:e4:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ5PxiE1GjjnHr/vrBhTJrWeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkNzIyZTQ1MTNhMzk2NzhkOGFiMjNiMmQ2NDk3NzUzNDA1 MThjYjkwHhcNMjYwNTIyMTMwMDQ1WhcNMjYwNTIzMTMwMDQ1WjAzMTEwLwYDVQQD EyhiYjVmZDZmODZmYTY0YmRlYTI3ZjM4M2JmZDg0OTFjMjQyOWFmNmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJmr8c5PsFdYH2e/Mi+sMeaziufQ snDpD+nimjkSIZzNsbuWqbL2IAKo8WDa+OnOKngePQqa/O97BbKpbVaIA03spfZl +6KePargbM1nxSTp80kvBVbS0OFw8vPfXrQHjDXpfCEIuYDN+JvDzlYINXGcVdZX J0RtjE++iVdlX84oPMQYhbXvF3fgv4SCEVyHT65YRNe+XotJfokU6LK70N/k4aj8 ne2CRLbLxCweaElYZRKjqVHNJ+ZgBEo4fntP+98fYf7wAHkru9SxhSVmkH/fwjs9 4ZzAw5wP7oZvEmUQv5hQBau1fOBtugLR2U/lCilBBxRsE6dNsrXcvzksyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLtf1vhvpkveon84O/2EkcJCmvb7MB8GA1UdIwQY MBaAFA1yLkUTo5Z42KsjstZJd1NAUYy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDIt MzQyNWIxMjVlYWE3LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8xYzA4NGMtOTgyZC00MDk4LWFmNDItMzQyNWIxMjVlYWE3 LzEvRFhJdVJST2psbmpZcXlPeTFrbDNVMEJSakxrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQ+y7cnW O86hqIjASJEqBPQLEZfH8fonvyZa9zf+iEZWz6IefODTMAkOhX1nkmb3/MlwEZ0O vOL1hfLqoQWgDZygSic7iDFIJ/R7ODBvb6trscerIY29ufvUMJGAdU/s8HALVI+F M6kR44NucH6l/z4nNrIRmuE/QdoXkgLoYn64aNcC4awc1xa7MIXeFEJTRYkIdckU VnV9d7QfaTiYcs2kMc46lraFMhF7Pi/bezJMd/TBiCycRiWVRmB1dXbgbIdfY8PK 82un2QhYIufrVL36Dn98RQBPGiFQJRvCFMg1ei/2vw+r+tVqBuH9CsSVVs0902oY TLSU44RCGaPkaw== -----END CERTIFICATE-----Generated at Fri May 22 18:32:40 2026 by rpki-client