$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: Q5rPtE4ap5+3T6GYwDlRKjFuDJGPdNbGnjQTa/3kBU0= Subject key identifier: 1E:6C:7C:B5:28:1C:62:1B:02:D7:AE:21:9A:E9:C9:BB:01:52:25:31 Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019EEEC7279E327E90FF75265C0B75859A23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 0818 Signing time: Mon 22 Jun 2026 10:01:29 +0000 Manifest this update: Mon 22 Jun 2026 10:01:29 +0000 Manifest next update: Tue 23 Jun 2026 10:01:29 +0000 Files and hashes: 1: 3O71K1jq21K-s1uKNpoLxwxfjs4.roa (hash: 9K3ZJvCfhWt1RrhHN5T33vgZGrICVU040sK1K6zYTsw=) 2: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (hash: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI=) 3: PIJcLY46PYSHoDgSOZxEPuH417I.roa (hash: srTkWvbqzoKRLCgdMr4N/amg9swAtdMCENwqQ8aPPow=) 4: Q7kbnNNnbSsZFlsov6ILXxHCTdM.roa (hash: VhgI6TuEjkaCFM/zUTKmnIt5ZWs9IQY5K9aBKoHxwD8=) 5: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (hash: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI=) 6: WyQhrcQcI54FWZmH__lrHoE3FWU.roa (hash: 1vjfP6Nqw8yzFBCOkKdm5HoQUw0v3VTrGmhqLtnS2VE=) 7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: KmMtiBY+jLkuHygotOcf7O0HepgOkZLXrUP755EKdr4=) 8: gU8hFrAdmGCPNYOjTnvshD8WKTw.roa (hash: aIL6rAim8v0vCsXPaXDt9dqDXZOi08bdb924MpXBpn8=) 9: l1MJKpxpJrooh4yYg2GeABzuRlk.roa (hash: auDKOkr78/mYWOPaTVOBS3ng5JPSWspfHkibCydvr1k=) 10: rDDIhE0qYfgop087nvS_8O3QtQQ.roa (hash: GNcKt07HGLjSb7pRK/gwNbmbWxAvVfknp/F4+LGsKVg=) 11: uQMfLgCocO-cV1Dq7f8ShCaJ1pI.roa (hash: f2D0zf6gxtDdlo1Fb2b+kXB8Dad/xNYHEZ1SOFzPCFU=) 12: xQbVNLrkghSR1KoodNn_gRkFImc.roa (hash: pt58nZViNxpnnxA6XeQ7GFV7JLxJTNDbZQ9f75iTc5I=) 13: xe57pNkOwTWSUGNF8UIEoEduU54.roa (hash: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 23 Jun 2026 10:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:ee:c7:27:9e:32:7e:90:ff:75:26:5c:0b:75:85:9a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Jun 22 10:01:29 2026 GMT Not After : Jun 23 10:01:29 2026 GMT Subject: CN=1e6c7cb5281c621b02d7ae219ae9c9bb01522531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:39:ae:7c:cf:b4:2e:c8:09:d8:73:3e:22:25: 25:b9:49:cc:70:a6:1f:5f:56:d2:8d:73:52:b3:c2: 14:8d:a4:c6:69:30:a7:55:53:05:41:58:ab:71:a8: 96:87:f0:d7:62:9b:58:fe:4d:c1:7a:0d:17:a6:f5: 8a:ff:0a:5a:0e:20:db:b8:4d:31:50:6e:3e:07:65: eb:cc:d3:b8:13:f0:f2:b5:c4:55:da:cd:3a:fe:9f: 42:a3:79:67:f9:cc:fe:4c:35:02:f5:f0:67:5c:76: 33:15:c7:64:56:95:2c:04:d6:a4:d0:eb:d2:1d:2c: 5d:ba:3f:c2:d5:0b:d0:81:74:2a:a4:a2:d1:51:20: 9d:cc:6b:43:b6:bd:a3:fd:41:a8:fa:82:c9:54:20: 97:04:01:d3:15:3a:e4:b5:3d:71:2a:83:79:01:b6: d5:6e:c7:68:2a:da:79:3d:61:3d:a8:4e:69:63:d1: 94:08:d6:ce:f8:74:14:a6:be:ad:91:b5:6b:d7:3d: a0:a2:f2:97:4b:ce:8c:47:75:7a:a8:04:96:d3:f2: 59:d2:bd:60:6c:80:b9:94:4d:62:b3:32:c3:6b:03: 74:a2:20:d5:7c:69:7a:f2:b7:e5:a9:33:27:51:7f: a9:af:9f:a6:2e:d3:6e:86:90:56:47:96:62:19:26: be:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:6C:7C:B5:28:1C:62:1B:02:D7:AE:21:9A:E9:C9:BB:01:52:25:31 X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:77:00:a2:3b:2c:05:ef:ff:a4:dc:f8:e5:a4:12:1d:5f:cf: 5d:5b:f3:4e:d8:c5:8c:76:42:98:52:1e:39:e0:2a:1b:2e:cd: a8:2b:d5:c6:76:2b:34:a4:cb:1d:da:49:f9:0a:ff:e8:f0:f8: 02:ce:94:53:ec:90:07:fd:b3:cc:bf:b8:2f:a0:cc:e4:29:9e: b1:02:6b:ab:39:e9:ab:80:0b:2b:95:b9:ce:d0:bb:1a:b3:0f: 7d:52:09:c7:f4:94:79:39:64:b3:98:6e:9d:49:b9:cd:90:95: a4:15:8c:5e:5f:c0:c0:5d:d8:85:d3:e3:62:9a:08:6e:b1:55: ea:39:ec:91:d3:42:43:27:2e:c0:a3:93:d1:70:06:10:bb:6f: 4f:a1:b1:94:dd:7b:ba:be:1d:03:3c:e1:2c:5f:2b:47:fe:cf: 30:ee:3f:71:11:4f:20:bd:4e:b4:a7:36:b8:1d:c2:b1:1b:e2: 79:45:d0:e4:0d:50:50:d0:3b:01:e1:32:c3:a8:4c:de:b9:14: 9a:e1:2f:88:a2:62:2a:a7:dc:44:ce:39:ff:ef:50:e5:52:bc: 2d:df:28:b0:18:dc:dc:2b:cc:63:b8:0a:6e:96:0a:1d:d9:b9: a8:93:12:93:b7:37:5f:03:d3:2a:c0:82:55:fd:5d:84:d0:55: a3:a1:3c:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7uxyeeMn6Q/3UmXAt1hZojMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwNjIyMTAwMTI5WhcNMjYwNjIzMTAwMTI5WjAzMTEwLwYDVQQD EygxZTZjN2NiNTI4MWM2MjFiMDJkN2FlMjE5YWU5YzliYjAxNTIyNTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDmufM+0LsgJ2HM+IiUluUnMcKYf X1bSjXNSs8IUjaTGaTCnVVMFQVircaiWh/DXYptY/k3Beg0XpvWK/wpaDiDbuE0x UG4+B2XrzNO4E/DytcRV2s06/p9Co3ln+cz+TDUC9fBnXHYzFcdkVpUsBNak0OvS HSxduj/C1QvQgXQqpKLRUSCdzGtDtr2j/UGo+oLJVCCXBAHTFTrktT1xKoN5AbbV bsdoKtp5PWE9qE5pY9GUCNbO+HQUpr6tkbVr1z2govKXS86MR3V6qASW0/JZ0r1g bIC5lE1iszLDawN0oiDVfGl68rflqTMnUX+pr5+mLtNuhpBWR5ZiGSa+YwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB5sfLUoHGIbAteuIZrpybsBUiUxMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3cAojss Be//pNz45aQSHV/PXVvzTtjFjHZCmFIeOeAqGy7NqCvVxnYrNKTLHdpJ+Qr/6PD4 As6UU+yQB/2zzL+4L6DM5CmesQJrqznpq4ALK5W5ztC7GrMPfVIJx/SUeTlks5hu nUm5zZCVpBWMXl/AwF3YhdPjYpoIbrFV6jnskdNCQycuwKOT0XAGELtvT6GxlN17 ur4dAzzhLF8rR/7PMO4/cRFPIL1OtKc2uB3CsRvieUXQ5A1QUNA7AeEyw6hM3rkU muEviKJiKqfcRM45/+9Q5VK8Ld8osBjc3CvMY7gKbpYKHdm5qJMSk7c3XwPTKsCC Vf1dhNBVo6E83w== -----END CERTIFICATE-----Generated at Mon Jun 22 19:39:45 2026 by rpki-client