$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: /rcgn3Q4NS9YW20ZRNJ9EAMSb/Z3Jz0uyrPAanw0R4c= Subject key identifier: C9:34:25:61:97:5C:2E:59:7C:A5:2C:45:69:55:28:99:71:A5:C8:EB Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019EB6FBD2ABA5E42C6BF9F1706A93ABA25F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 196B Signing time: Thu 11 Jun 2026 14:00:17 +0000 Manifest this update: Thu 11 Jun 2026 14:00:17 +0000 Manifest next update: Fri 12 Jun 2026 14:00:17 +0000 Files and hashes: 1: 5bw3FxzpBWgCUPFGor6BeS_x13E.roa (hash: vbv6Fyo711z5Y6WllYiF1+hQCuBRfjBj2SnqOdmQ/Ko=) 2: KClfXxgk0wRzsCWY2cBjE-9OUBw.roa (hash: mZTkzVHUlv75y3/sF2jX1yQ3NF8yk3kbKCgMEXnClVc=) 3: OPUmPq2MCSSLajil_N8xjasEED0.roa (hash: 3ErCgLhuftk7qbnRHyFbXfh2aIHoI6pTjwOjuX9ybbI=) 4: PVZJLc9tODZFqXK-cJmdd7K-baM.roa (hash: nv2FNyj3NvI+l9/bwumlpSj6KXBZJHOiEr8IoIDWWBs=) 5: RD2bQy42cJtcLUpPd6bwEgSdC5g.roa (hash: EXR+FPHGsONaMy04ozJgDUBq2GB63B3p6cERU165gBY=) 6: RTtrcIMD_1Pooh2hybtppswd0Cs.roa (hash: gHzBppcBQRTrZFKZdzTeaIz8G3KIuJKhpm0DEQdKM5o=) 7: ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa (hash: 3HGI+6qeROUPLoU4ORnifqLKfR+6cyux8LhHwuDQCzI=) 8: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: qDq85L0jl1vWw/tNik+WY9gDmxy5N4zTa31sBBa/3m4=) 9: iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa (hash: Xmy3joGzE7DOFCUoxtKq+8sQb3nS9R29UjEKhSZ9+oA=) 10: jwL6ZedQy9jrx6zRLmC34t2VuNI.roa (hash: JjbOSGoIoxnMnWQdAupasyiznFb2Rz/tCe7dz0MfJkM=) 11: taRmnaIWL0Lvnk8-ztV91eCLqRU.roa (hash: Duq2TEYTpeDcixHF5tGgiY61uowG5KKhAb2ieJRR8c4=) 12: vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa (hash: HHDiRi1+BOUzXevtTy1X6aaBtWS9/5nRjSa9y3Tpifg=) 13: wUgkHiQ86rCh1plfV-1fhX-AaMg.roa (hash: 86ia7TUjUS+IoQf3wQbTT6jWw8UWMBIHEfrKwtfOipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:27:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b6:fb:d2:ab:a5:e4:2c:6b:f9:f1:70:6a:93:ab:a2:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jun 11 14:00:17 2026 GMT Not After : Jun 12 14:00:17 2026 GMT Subject: CN=c9342561975c2e597ca52c456955289971a5c8eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5a:9d:8d:76:3a:16:1f:17:9b:77:b1:e8:40: b5:8e:7c:38:d6:a8:40:87:7e:60:bf:a9:5d:8a:e9: 42:7b:a2:c2:43:79:d1:ed:c9:74:50:36:cb:25:05: de:b3:40:5d:eb:70:b0:15:26:d7:c2:bb:68:b0:9f: 5d:f4:1e:68:43:7d:d5:f3:68:48:67:f1:cd:df:51: 1f:c7:3e:22:64:96:f7:60:db:85:f5:50:c4:36:08: 4e:ff:d7:32:40:88:99:62:e9:ee:7f:47:13:97:c6: 2c:39:00:e0:41:75:4d:ce:8e:a6:b1:b9:05:5f:1e: de:bc:10:ff:a9:88:d3:d0:d8:a9:98:a3:95:31:eb: ab:c3:55:4b:c4:0d:74:41:82:25:a2:35:3b:f5:34: 55:1d:12:bd:d6:8b:a0:71:21:06:81:09:4b:bc:f3: b7:9e:73:21:b1:ac:a6:44:b7:93:cd:3b:b4:37:3d: 10:db:18:9f:23:ca:e8:76:da:29:06:47:a2:ba:fe: 78:b9:e6:ec:02:a2:e4:cb:cd:54:84:25:80:f5:c1: 0a:ab:b6:08:63:48:98:76:95:ce:2c:8d:72:61:f1: 1f:4b:0d:35:31:85:ff:a9:ca:e8:da:65:c0:88:05: 17:2e:14:0d:a6:38:af:52:c9:3e:b9:68:4e:8e:03: fa:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:34:25:61:97:5C:2E:59:7C:A5:2C:45:69:55:28:99:71:A5:C8:EB X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:90:fe:54:19:ca:98:da:91:91:67:e8:47:06:85:89:6d:80: 50:cf:a0:a8:55:6f:f5:ad:f6:d1:08:55:60:9f:2f:f6:1b:b2: 6d:87:f5:38:a8:70:e7:c3:e4:e3:01:d8:2b:9c:74:d7:23:7a: 75:3b:37:75:59:b9:85:a6:24:c3:cd:b8:0f:90:80:87:92:4b: 40:13:b6:f1:82:bd:71:e7:f6:92:31:ce:5f:6c:21:a0:db:7f: 69:ec:1d:bc:95:3f:64:94:74:41:9c:d3:62:b8:94:04:7d:6b: 2a:31:3b:cb:0c:ca:88:98:47:12:d3:0a:a6:94:82:f0:d2:26: 27:fa:63:eb:4e:bb:e6:c2:61:c1:6b:c1:ea:36:23:61:a6:4d: b9:18:cc:94:c4:81:2d:ab:20:72:9f:5a:b9:5c:92:14:d2:97: e2:8e:1a:bb:26:1e:a3:d9:1a:8c:7f:48:6a:b7:73:7f:1a:10: 3d:82:2a:2e:35:9e:c5:21:4d:43:e1:1e:d5:20:0a:a5:4d:d7: b0:62:4e:fa:ab:4a:7d:f1:40:84:c8:2a:6b:ac:89:0f:16:2d: ba:47:ea:4c:32:f2:3d:80:0c:34:00:50:07:a9:dd:40:90:a5: b8:45:da:ce:be:32:47:64:50:ec:40:6e:40:3a:ec:0e:20:94: b3:5c:1b:b6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ62+9KrpeQsa/nxcGqTq6JfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwNjExMTQwMDE3WhcNMjYwNjEyMTQwMDE3WjAzMTEwLwYDVQQD EyhjOTM0MjU2MTk3NWMyZTU5N2NhNTJjNDU2OTU1Mjg5OTcxYTVjOGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1qdjXY6Fh8Xm3ex6EC1jnw41qhA h35gv6ldiulCe6LCQ3nR7cl0UDbLJQXes0Bd63CwFSbXwrtosJ9d9B5oQ33V82hI Z/HN31Efxz4iZJb3YNuF9VDENghO/9cyQIiZYunuf0cTl8YsOQDgQXVNzo6msbkF Xx7evBD/qYjT0NipmKOVMeurw1VLxA10QYIlojU79TRVHRK91ougcSEGgQlLvPO3 nnMhsaymRLeTzTu0Nz0Q2xifI8rodtopBkeiuv54uebsAqLky81UhCWA9cEKq7YI Y0iYdpXOLI1yYfEfSw01MYX/qcro2mXAiAUXLhQNpjivUsk+uWhOjgP6XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMk0JWGXXC5ZfKUsRWlVKJlxpcjrMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQJD+VBnK mNqRkWfoRwaFiW2AUM+gqFVv9a320QhVYJ8v9huybYf1OKhw58Pk4wHYK5x01yN6 dTs3dVm5haYkw824D5CAh5JLQBO28YK9cef2kjHOX2whoNt/aewdvJU/ZJR0QZzT YriUBH1rKjE7ywzKiJhHEtMKppSC8NImJ/pj60675sJhwWvB6jYjYaZNuRjMlMSB Lasgcp9auVySFNKX4o4auyYeo9kajH9IardzfxoQPYIqLjWexSFNQ+Ee1SAKpU3X sGJO+qtKffFAhMgqa6yJDxYtukfqTDLyPYAMNABQB6ndQJCluEXazr4yR2RQ7EBu QDrsDiCUs1wbtg== -----END CERTIFICATE-----Generated at Thu Jun 11 22:58:39 2026 by rpki-client