$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: 4p1lLth9M7DIUB5/tX0C4+vvSt6Uo+I7MGndB5z9Nyg= Subject key identifier: 92:63:21:9C:A9:2D:91:FF:3D:99:5E:DA:D3:BE:B3:B4:72:6C:45:32 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019EE1796599FE8F0EF9A8B4DA07D5E07217 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 1187 Signing time: Fri 19 Jun 2026 20:01:29 +0000 Manifest this update: Fri 19 Jun 2026 20:01:29 +0000 Manifest next update: Sat 20 Jun 2026 20:01:29 +0000 Files and hashes: 1: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=) 2: C4GFPQJi7p8x697vDEqdYSForok.roa (hash: x37lAGnggrFkEEQihLvJsXhXtDeedMO3diP0XULMgKY=) 3: FXRjYZvbpR4kI47t-xbWMZKIpXs.roa (hash: f82R7m8nlKkGC17z2MB1wjV2cD02/YvewqP02lzhH/g=) 4: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=) 5: ZPQxZyBJh2Vw2t_b2vNEAiLh99k.roa (hash: NDs1Vf1mQ8nJ5oBooS0cBClzynoCDC8zG6mfNnpUvhE=) 6: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: go6lRvdVsctFR5rZJ5GfvoTgKxNf8iePIT4R75KdT58=) 7: eoCcRd3DQ06osUmaj6wTPXbyx3M.roa (hash: Bag32wKiY/ZwSFfm1YHrZ2XH/ziquJ1Nmz4VoaY0zzY=) 8: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=) 9: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=) 10: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Jun 2026 19:57:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:e1:79:65:99:fe:8f:0e:f9:a8:b4:da:07:d5:e0:72:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Jun 19 20:01:29 2026 GMT Not After : Jun 20 20:01:29 2026 GMT Subject: CN=9263219ca92d91ff3d995edad3beb3b4726c4532 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bf:df:ea:df:27:b4:b5:19:93:f3:79:15:54: a2:5a:02:b7:d7:d1:35:3d:4e:ea:43:e6:c9:b3:d0: ae:bb:a2:ba:2f:a0:2a:2a:37:07:32:f6:3a:8c:ee: f9:36:ec:57:ca:8f:54:68:ac:35:c4:3f:75:ba:71: 6f:e1:73:9f:8b:e3:9a:93:05:2b:b9:21:bf:58:06: f7:fd:40:c2:86:b9:d1:c5:17:f1:d3:20:19:27:b6: 5f:10:9a:6e:cf:8f:ad:90:6b:1b:d3:62:c5:1b:38: fd:2f:f8:85:58:7d:c1:cd:0f:8d:6d:78:63:69:1c: d7:54:8a:7c:42:8a:d9:08:62:7d:22:9c:1f:6e:07: a4:cd:bb:d8:71:b7:69:e7:54:e9:68:d3:8c:ba:2a: 1c:bc:91:86:58:76:69:23:9f:fa:b4:0a:35:55:07: 0d:ea:71:e2:18:dc:62:ae:ea:05:a3:53:8a:08:b6: 55:ec:54:10:e7:7b:78:72:d1:f1:9b:30:97:bc:64: fc:42:9b:2c:45:fd:66:46:32:d0:8d:46:bf:35:72: 0a:9e:93:ff:27:89:42:50:71:a5:a6:73:bf:8c:25: 64:b1:b2:4f:2b:ce:66:c3:90:76:76:1b:be:b5:60: 2e:ba:24:b1:f8:b2:5b:3b:96:9d:9c:12:b1:82:eb: d6:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:63:21:9C:A9:2D:91:FF:3D:99:5E:DA:D3:BE:B3:B4:72:6C:45:32 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c3:4c:18:eb:f9:a6:c2:5e:c9:ee:c6:cf:6d:a7:41:01:ea: f9:4d:ce:45:33:62:af:e2:3a:e4:c6:af:4d:43:19:83:e2:cc: 2b:bd:52:6a:83:d3:c9:16:a6:29:8d:d4:13:19:69:95:6a:50: bb:62:95:d6:65:df:ab:6a:70:09:9f:c5:38:0c:de:61:97:ff: bf:a4:a5:99:52:6c:6b:1f:24:48:c8:84:07:8c:d4:19:33:17: 4e:1d:27:80:5c:eb:11:a8:64:c6:14:b8:1c:e1:b3:d8:fc:3b: 78:f6:23:bb:6e:be:a3:8b:47:74:bb:85:6f:15:34:81:16:cc: fd:50:c0:b2:0b:49:5b:d0:84:69:a7:57:91:45:87:cb:20:5f: ea:22:83:4c:45:85:fc:73:b3:a5:26:f1:57:3e:19:62:d9:81: 0b:97:d8:28:eb:c3:a9:44:aa:cf:af:3c:bb:fc:42:1e:4d:25: e4:c3:e7:40:cd:65:ab:f1:eb:13:62:91:c1:eb:28:a6:c3:8d: 8a:5f:e7:ed:62:e0:3f:96:5f:72:50:c0:04:2b:20:02:bc:e7: 4a:8e:e5:2d:98:01:fd:a1:7c:c4:7b:76:81:2d:72:d7:2d:17: e2:65:ba:3b:68:f0:96:cc:41:d1:65:92:38:58:3c:48:b9:49: 25:44:f1:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7heWWZ/o8O+ai02gfV4HIXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwNjE5MjAwMTI5WhcNMjYwNjIwMjAwMTI5WjAzMTEwLwYDVQQD Eyg5MjYzMjE5Y2E5MmQ5MWZmM2Q5OTVlZGFkM2JlYjNiNDcyNmM0NTMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL/f6t8ntLUZk/N5FVSiWgK319E1 PU7qQ+bJs9Cuu6K6L6AqKjcHMvY6jO75NuxXyo9UaKw1xD91unFv4XOfi+OakwUr uSG/WAb3/UDChrnRxRfx0yAZJ7ZfEJpuz4+tkGsb02LFGzj9L/iFWH3BzQ+NbXhj aRzXVIp8QorZCGJ9IpwfbgekzbvYcbdp51TpaNOMuiocvJGGWHZpI5/6tAo1VQcN 6nHiGNxiruoFo1OKCLZV7FQQ53t4ctHxmzCXvGT8QpssRf1mRjLQjUa/NXIKnpP/ J4lCUHGlpnO/jCVksbJPK85mw5B2dhu+tWAuuiSx+LJbO5adnBKxguvWcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJJjIZypLZH/PZle2tO+s7RybEUyMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKcNMGOv5 psJeye7Gz22nQQHq+U3ORTNir+I65MavTUMZg+LMK71SaoPTyRamKY3UExlplWpQ u2KV1mXfq2pwCZ/FOAzeYZf/v6SlmVJsax8kSMiEB4zUGTMXTh0ngFzrEahkxhS4 HOGz2Pw7ePYju26+o4tHdLuFbxU0gRbM/VDAsgtJW9CEaadXkUWHyyBf6iKDTEWF /HOzpSbxVz4ZYtmBC5fYKOvDqUSqz688u/xCHk0l5MPnQM1lq/HrE2KRwesopsON il/n7WLgP5ZfclDABCsgArznSo7lLZgB/aF8xHt2gS1y1y0X4mW6O2jwlsxB0WWS OFg8SLlJJUTxfw== -----END CERTIFICATE-----Generated at Sat Jun 20 04:15:19 2026 by rpki-client