$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft File: jRHLAV35uqthIo27zhfdTgDmPBM.mft (raw, json) Hash identifier: zxWYxwuLY76alTlK0f3TFxvqPu2juAAicjdZUoAHmEg= Subject key identifier: 2A:C0:55:BC:74:91:09:EB:EE:EE:63:D3:0F:CA:6B:D0:DA:03:06:0B Authority key identifier: 8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 Certificate issuer: /CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Certificate serial: 019E91A5EB8B521C45DC2716EB735E8EA124 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft Manifest number: 18E4 Signing time: Thu 04 Jun 2026 08:00:30 +0000 Manifest this update: Thu 04 Jun 2026 08:00:30 +0000 Manifest next update: Fri 05 Jun 2026 08:00:30 +0000 Files and hashes: 1: 2rVgJyxoTboo6DUxsVd0VYXicAU.roa (hash: X52WnSx4UXGK7QvOms2/DV0R18ZO7IPkzPCPa9/Vpo8=) 2: ABhJOuq81aAMPa4_YYIO3v-t4oU.roa (hash: 0eeFSSqt4KgbYUOgEizxWBOCbjrR9YB3YtAIVlPFnN4=) 3: IPWNhyQxn8-D80dsDEI3Muy7j4w.roa (hash: JR2kZnfGEReYvLarJyG91LQRoVZfPpAoA2dBMj0ig2w=) 4: MJk2hRWFPXbWPid66y-yooVzeJI.roa (hash: hXdMru/lhTHGd2pc4sxdOlRtEDGUTqlGbfj85klFeUI=) 5: Mcn8ffph0vFbf5y77sp8qX9cvuQ.roa (hash: oh6B2oDiINNmRv7LyEyRUP7+GJCatnxM+IyU6VV9yRs=) 6: Oi-RJ2dhND8R3bCPKlX2wVza8B4.roa (hash: AY1jUsJQoUBtPYQaCHvczNv8Mdfj3rI4udwi0diUU84=) 7: TXWio7T0yQ8fPQNndu5iMXKIPyk.roa (hash: Ptazack76ll8xJWikp2M96Ej4NUgmKdtpGkA8A7sIE0=) 8: __KT70ir2b12tsfvWsQwOzZ4SWs.roa (hash: U40qvVXwLqE+3d+p8VD5hkkPBVtM5TzS/GB+oxmksS0=) 9: ceKjGHCvCXf_MEK8NMfyXBnLoVU.roa (hash: hhPEmrABIH3Expe/KF3PZ8pAmJCxcVnuEeGLXskO2EU=) 10: dNyetmWu_99kmHhkiZvcLr-cuzU.roa (hash: forzVhrHGmXFVsQJmgLEUSqJW9c/HnLATZaoS4TWk3M=) 11: gnoYrT4knURKrt5KKBfShHVozwM.roa (hash: OjJdSpf+iXwyfGjxwCj90eq75k08MDbax/f+tQriWTM=) 12: gxcl9XCHDE4fGimi4jiKM9IDg8o.roa (hash: DzMBaQYtlFhqXC65m2URCwbC9IBE5rQY6qBFudLZErg=) 13: jRHLAV35uqthIo27zhfdTgDmPBM.crl (hash: 33YYlUcSJU/HQZ0m/4D/SV14Lm7O7ax4doW1EOAIEjQ=) 14: mTPrakVdoyCDJYcSXH3DzkvE9Gs.roa (hash: 3ZvEE02yM0Yj5XqmRnhIug23pmfqiLpaNpSz+FFkWwI=) 15: r8_-tV7Ps-g2u70jfHclQnvoEf4.roa (hash: aq49nLbAL3NpREIkaDZ5YZko/p5YLSFu8OdWv3BLfCU=) 16: vDEzYqBkCfgUY7uwB1YZdOKY4lA.roa (hash: FWKvLV4V8Zp4mvo/6tBcMGGo3HEXFD5ePSPM/5NPrKo=) 17: yo2ggwAD85SNNQPIQb6yRaxOrWc.roa (hash: WrPp+dfsMZ+WFpULoYs3ZQMI2AEc3f6rXkU0dwgG658=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Jun 2026 07:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:91:a5:eb:8b:52:1c:45:dc:27:16:eb:73:5e:8e:a1:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8d11cb015df9baab61228dbbce17dd4e00e63c13 Validity Not Before: Jun 4 08:00:30 2026 GMT Not After : Jun 5 08:00:30 2026 GMT Subject: CN=2ac055bc749109ebeeee63d30fca6bd0da03060b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8f:24:70:e5:fa:f5:a9:9c:c3:c1:29:6e:79: 59:99:ee:60:0a:2c:10:a5:54:40:1a:b7:79:59:0b: 65:3d:c6:56:58:a6:2b:c9:9e:fd:87:c4:69:d5:1a: a3:da:33:eb:f8:ec:96:17:a1:4c:95:b3:bc:7f:2a: 8a:89:62:24:0c:17:8e:6f:73:73:f4:ac:db:41:b1: 19:63:62:83:ac:4f:be:03:13:1f:d7:bf:bd:a6:89: 40:b5:50:f5:bd:81:e2:44:07:00:75:ec:20:cf:04: 75:08:60:dc:c2:81:26:16:70:7a:f5:8e:ed:ee:b9: 62:af:e7:65:5a:8d:53:d3:47:1f:2f:6b:72:d0:54: 96:02:d7:dd:c7:54:0d:a6:a1:a6:9e:61:bf:dd:08: b1:b1:f5:4c:67:54:14:f0:fd:ef:98:9e:8a:cb:36: fc:1c:0d:01:ee:61:db:5b:0c:a8:01:0d:7b:ae:c1: 0f:5d:ef:a5:5a:93:9b:0a:5c:6e:3d:46:a2:9f:56: 82:03:45:a3:ec:78:58:87:82:79:f8:6b:4e:46:4b: 2c:43:3b:00:5e:28:f3:10:79:06:f0:03:42:58:80: be:c1:1c:38:60:65:cc:a3:ca:91:6c:78:a8:49:8c: b9:d0:ff:14:ae:58:6f:59:be:9d:1a:1d:2c:90:bb: e7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C0:55:BC:74:91:09:EB:EE:EE:63:D3:0F:CA:6B:D0:DA:03:06:0B X509v3 Authority Key Identifier: keyid:8D:11:CB:01:5D:F9:BA:AB:61:22:8D:BB:CE:17:DD:4E:00:E6:3C:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRHLAV35uqthIo27zhfdTgDmPBM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/5d8915-c448-40e7-8caa-ba771ffd269c/1/jRHLAV35uqthIo27zhfdTgDmPBM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:13:93:69:56:7a:5c:20:fc:7d:13:d3:ee:37:a6:a4:70:a4: ef:9d:79:1c:29:c3:c4:f0:b2:de:0c:89:42:79:f0:fa:81:0b: 23:cb:24:91:94:93:a9:78:30:68:21:0c:d1:c4:98:d5:86:f1: 42:df:8f:f9:a0:da:36:76:00:5a:cd:ab:ff:1d:c6:e8:8a:d4: e4:d7:ff:3e:98:b1:8b:2a:e6:b5:d9:d6:90:ab:da:ac:b9:54: 39:f9:2e:47:cd:62:bf:9f:63:e1:c2:da:e7:33:51:a5:5d:a2: d6:c6:c1:67:7d:c5:04:27:eb:cb:bf:52:8d:3f:8b:0c:d7:d1: 1a:c4:ea:d6:55:eb:c5:6f:bf:b6:13:5b:49:29:5c:d8:d9:1d: 12:36:84:27:4f:d6:52:02:ab:78:6d:5f:33:aa:e5:ed:fc:6d: ee:c9:17:a5:ba:b3:4d:ca:b5:bf:43:24:0e:b9:a3:51:64:dd: 6c:a8:56:9f:79:35:1d:df:86:fa:af:32:19:b0:66:86:45:f2: bb:94:7c:59:22:45:ac:9c:f2:ad:3f:18:30:a2:4d:fa:e9:eb: 0b:32:86:30:46:db:28:53:c9:33:1d:71:a4:b6:39:db:68:6e: 05:af:a8:26:b5:1f:ca:9d:d5:38:82:78:ee:0b:90:2b:02:a1: f0:5a:30:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6RpeuLUhxF3CcW63NejqEkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkMTFjYjAxNWRmOWJhYWI2MTIyOGRiYmNlMTdkZDRlMDBl NjNjMTMwHhcNMjYwNjA0MDgwMDMwWhcNMjYwNjA1MDgwMDMwWjAzMTEwLwYDVQQD EygyYWMwNTViYzc0OTEwOWViZWVlZTYzZDMwZmNhNmJkMGRhMDMwNjBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzo8kcOX69amcw8EpbnlZme5gCiwQ pVRAGrd5WQtlPcZWWKYryZ79h8Rp1Rqj2jPr+OyWF6FMlbO8fyqKiWIkDBeOb3Nz 9KzbQbEZY2KDrE++AxMf17+9polAtVD1vYHiRAcAdewgzwR1CGDcwoEmFnB69Y7t 7rlir+dlWo1T00cfL2ty0FSWAtfdx1QNpqGmnmG/3QixsfVMZ1QU8P3vmJ6Kyzb8 HA0B7mHbWwyoAQ17rsEPXe+lWpObClxuPUain1aCA0Wj7HhYh4J5+GtORkssQzsA XijzEHkG8ANCWIC+wRw4YGXMo8qRbHioSYy50P8UrlhvWb6dGh0skLvnNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrAVbx0kQnr7u5j0w/Ka9DaAwYLMB8GA1UdIwQY MBaAFI0RywFd+bqrYSKNu84X3U4A5jwTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEt YmE3NzFmZmQyNjljLzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni81ZDg5MTUtYzQ0OC00MGU3LThjYWEtYmE3NzFmZmQyNjlj LzEvalJITEFWMzV1cXRoSW8yN3poZmRUZ0RtUEJNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnxOTaVZ6 XCD8fRPT7jempHCk7515HCnDxPCy3gyJQnnw+oELI8skkZSTqXgwaCEM0cSY1Ybx Qt+P+aDaNnYAWs2r/x3G6IrU5Nf/PpixiyrmtdnWkKvarLlUOfkuR81iv59j4cLa 5zNRpV2i1sbBZ33FBCfry79SjT+LDNfRGsTq1lXrxW+/thNbSSlc2NkdEjaEJ0/W UgKreG1fM6rl7fxt7skXpbqzTcq1v0MkDrmjUWTdbKhWn3k1Hd+G+q8yGbBmhkXy u5R8WSJFrJzyrT8YMKJN+unrCzKGMEbbKFPJMx1xpLY522huBa+oJrUfyp3VOIJ4 7guQKwKh8Fowsw== -----END CERTIFICATE-----Generated at Thu Jun 4 12:04:57 2026 by rpki-client