$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: T7vBTCmpM5Hu47uZnOnPBbE6Z0BAghouI9yZkS3aYWg= Subject key identifier: 5D:E3:B1:98:EE:02:AC:73:74:3B:66:84:C2:7B:2E:4F:A4:E4:EC:6D Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019EB8B3D8E15214C2998D8FE4D082885A2A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 1635 Signing time: Thu 11 Jun 2026 22:00:54 +0000 Manifest this update: Thu 11 Jun 2026 22:00:54 +0000 Manifest next update: Fri 12 Jun 2026 22:00:54 +0000 Files and hashes: 1: 0inTqtkV7aRdA0poVknUSc5weqM.roa (hash: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8=) 2: 6TbA_Za4Eowieja7n7niJ7Rt1gs.roa (hash: scQ2AMr4c5KWoojUsMClo/2J+rhonxe/8Y7reFR2/oA=) 3: F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa (hash: jxUQ0KKcc1cvSdaRZ9vh81k1iQSpuyreVGWce3iIfz4=) 4: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (hash: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw=) 5: KOWxSmH0_bapiUsF2I5NvMk2mAE.roa (hash: qlla291EA5iael/7BwH1F/97Ya9GRn26shYvkPQjZ4Q=) 6: OYUqnwa8yQK0vig2w6Um7A1Wcg4.roa (hash: vSXWDq1SS7TbMrb96ytcbFUS3oNQ6vxE3t+U54lGeWc=) 7: _qefhBTX4GrLHAKY0SuGouHYv88.roa (hash: ZZ2WFS7hoXoz7ExsxVHk1ghS6uAk+/8jwy793fgoALQ=) 8: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (hash: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc=) 9: cYegkqTDRQkQYBG0QAGLC43ERoE.roa (hash: Jj0rGclcjFrkbXAtvfPBQZbVxQ41VQry0fjFc8pn/lw=) 10: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (hash: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM=) 11: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: 3pTGecARXsJAfcb93AORQN3Nhfe2zLNFio5SRYVi9Io=) 12: roVhJvLE3W-3AVNXrvbfZb_XPPo.roa (hash: 6LQ91r1uUm0MXEXzntSjw9cSGp9nmQGmFVNHFHmb1Zw=) 13: thPKVIAn4Mtb5x7VAf0Ti0_MWKQ.roa (hash: U0wPlIAv75ZKpiMwZqpBCEwATCl9LCbwg1gs4MzHORI=) 14: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (hash: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 20:26:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b8:b3:d8:e1:52:14:c2:99:8d:8f:e4:d0:82:88:5a:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jun 11 22:00:54 2026 GMT Not After : Jun 12 22:00:54 2026 GMT Subject: CN=5de3b198ee02ac73743b6684c27b2e4fa4e4ec6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:3b:a8:04:6e:88:ad:50:45:07:cc:a6:58:27: 9b:46:3f:b2:c2:5a:92:db:b2:45:75:50:1b:ce:b2: db:06:43:97:e9:5a:5d:df:9b:ea:a3:6d:e9:aa:81: 55:c4:e0:4a:f8:b8:14:b4:7b:a9:4f:dc:f0:67:55: 88:32:62:9a:fe:ff:15:01:eb:8a:0a:f5:c8:34:04: 8f:94:0c:bf:2c:b3:f7:55:ee:d7:e4:6b:c5:dc:38: d3:29:7b:8a:54:a6:9b:e2:ae:ca:31:37:74:58:8a: 6d:54:2d:0a:d1:11:83:8d:df:9c:30:f9:41:ef:f2: 37:86:34:9c:98:a7:d1:d9:26:9e:65:0a:8f:df:32: b0:1c:a4:d0:a9:00:92:61:06:8e:75:84:47:ee:27: c7:db:b8:46:87:5d:de:d0:45:20:e0:67:d2:a1:4c: f0:48:d3:3f:e1:be:e2:01:c1:0e:d0:db:29:53:7c: 60:2f:c9:1e:3d:4d:d8:61:0c:9c:74:7f:3e:d2:29: d9:50:9b:27:bb:53:31:33:44:51:39:f9:ae:b0:07: 7d:d5:1a:8b:1d:55:f6:bb:4e:58:23:54:69:cc:38: af:55:f7:d8:a0:d9:76:95:ad:2a:70:dd:79:1f:35: 3b:d3:6f:72:59:3e:15:3d:fe:61:7f:27:a5:85:9c: 75:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E3:B1:98:EE:02:AC:73:74:3B:66:84:C2:7B:2E:4F:A4:E4:EC:6D X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:00:05:e3:bb:65:62:ca:41:64:b8:09:af:a3:87:69:da:7a: fe:8d:f2:d0:26:8f:47:99:9e:33:b7:37:d2:d7:df:ef:68:cf: 13:9d:59:5b:e2:38:c0:89:da:f7:a4:3a:7e:38:bf:c7:05:db: 7d:d6:02:be:26:87:00:dd:d4:ae:f9:93:13:f0:61:46:36:80: 7d:9f:75:d6:74:bf:a4:33:5a:e4:4f:e8:40:d2:2d:ff:58:94: 68:45:cc:1c:c7:0b:0e:48:88:42:2d:02:ed:db:21:dc:ce:10: 27:d5:e8:04:8e:93:09:72:4e:db:0a:bd:b8:79:57:de:d1:0c: fb:92:fd:b2:2d:f0:ce:24:a0:43:f6:58:d3:22:9e:e2:11:83: 46:0c:24:49:46:32:b1:d4:0a:1b:95:45:a0:d7:34:d2:3d:f7: be:5f:db:33:83:2b:2c:d9:b5:88:c6:67:2b:6f:73:d4:0a:c1: 8f:7d:af:d4:eb:52:46:12:9d:ed:5c:e7:5f:d2:d6:ac:b5:ae: 47:7d:1a:98:8b:0b:f7:42:15:79:17:ac:ff:e6:ba:a1:86:16: b6:b3:31:77:bd:9c:83:95:b4:2d:e2:d9:13:6a:fb:ef:b5:5b: 98:50:3c:51:ba:26:a9:6b:c9:14:33:38:c6:c5:63:a3:52:f1: 87:03:e9:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ64s9jhUhTCmY2P5NCCiFoqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwNjExMjIwMDU0WhcNMjYwNjEyMjIwMDU0WjAzMTEwLwYDVQQD Eyg1ZGUzYjE5OGVlMDJhYzczNzQzYjY2ODRjMjdiMmU0ZmE0ZTRlYzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1juoBG6IrVBFB8ymWCebRj+ywlqS 27JFdVAbzrLbBkOX6Vpd35vqo23pqoFVxOBK+LgUtHupT9zwZ1WIMmKa/v8VAeuK CvXINASPlAy/LLP3Ve7X5GvF3DjTKXuKVKab4q7KMTd0WIptVC0K0RGDjd+cMPlB 7/I3hjScmKfR2SaeZQqP3zKwHKTQqQCSYQaOdYRH7ifH27hGh13e0EUg4GfSoUzw SNM/4b7iAcEO0NspU3xgL8kePU3YYQycdH8+0inZUJsnu1MxM0RROfmusAd91RqL HVX2u05YI1RpzDivVffYoNl2la0qcN15HzU7029yWT4VPf5hfyelhZx1tQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF3jsZjuAqxzdDtmhMJ7Lk+k5OxtMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALQAF47tl YspBZLgJr6OHadp6/o3y0CaPR5meM7c30tff72jPE51ZW+I4wIna96Q6fji/xwXb fdYCviaHAN3UrvmTE/BhRjaAfZ911nS/pDNa5E/oQNIt/1iUaEXMHMcLDkiIQi0C 7dsh3M4QJ9XoBI6TCXJO2wq9uHlX3tEM+5L9si3wziSgQ/ZY0yKe4hGDRgwkSUYy sdQKG5VFoNc00j33vl/bM4MrLNm1iMZnK29z1ArBj32v1OtSRhKd7VznX9LWrLWu R30amIsL90IVeRes/+a6oYYWtrMxd72cg5W0LeLZE2r777VbmFA8UbomqWvJFDM4 xsVjo1LxhwPp9g== -----END CERTIFICATE-----Generated at Fri Jun 12 05:03:47 2026 by rpki-client