$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json) Hash identifier: K5AFKdc5mJ4diZyuzAgb50os2qv+Dqhkf498dtB8u0c= Subject key identifier: DE:3C:13:DB:58:14:3E:B5:3E:F6:EE:3C:32:D7:06:B9:8E:63:13:45 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019F11C09D808DC481E7152386D4F9BB580A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft Manifest number: 1999 Signing time: Mon 29 Jun 2026 05:01:03 +0000 Manifest this update: Mon 29 Jun 2026 05:01:03 +0000 Manifest next update: Tue 30 Jun 2026 05:01:03 +0000 Files and hashes: 1: 1-QuFrP2FCGdb0e2Ii_z6LaU8br8.roa (hash: rbKcnlSwgT9Djc5Fqvy3u9yC2cYZiJQ7dfTu75ri+mI=) 2: Kn1XIiFvEGGy9jGV0znKGyVVN88.roa (hash: S6dp6R29PAVMF1jsj22PyQ1rploMZXbrpKsVzrPCS0A=) 3: LVf00OwBfRzfAd6G6KBKwIxU48Q.roa (hash: Xvect/bo+Wr+aXHUQYsyRoqwRvv8UXPXPU1oErWXh0o=) 4: c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa (hash: N/tir1ikaaQzeua5SN0NNzW44/svT02GC4QfKmsuXFg=) 5: i_sg361hESOO6WvkWK2Qx1qnr_o.roa (hash: grkv5sxl6QC67Xl6GRfRbX76QTIOE0y5InqEToBe4KU=) 6: jDLgcLSuJX7PNQqFfW9rGKaqs0I.roa (hash: gYuzALxJxQy3dIl1B+tjxYOVPb7F/ttrTik4SzmNvpo=) 7: nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa (hash: QxXL80gZjutBzTVwYv0W0HB8GqSHL6xx5f7Es0Ckqj8=) 8: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: jlqsvCHwznkmv6uwit7XcZWSD8E+b4vW86kyDa4NKHs=) 9: uX2HFPa-1T3UMzqcLHxJG1wYem0.roa (hash: mt3IsY/c70SVPfG6w+VGWzHhy8025Nd/iJv2s56ORTs=) 10: xkw2dJ1kdWsWVrDQa7ecIv1ZfEE.roa (hash: TlO1SGSzKaGyjfYONLThtWXquMMxH3GzgJNd8bMLo1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 05:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:11:c0:9d:80:8d:c4:81:e7:15:23:86:d4:f9:bb:58:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Jun 29 05:01:03 2026 GMT Not After : Jun 30 05:01:03 2026 GMT Subject: CN=de3c13db58143eb53ef6ee3c32d706b98e631345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e6:99:50:67:d5:fd:34:07:c4:90:5d:20:fc: 94:3b:7a:5c:69:d9:f8:14:26:04:b3:88:b4:f2:39: f8:6f:8b:14:89:fe:9e:5e:70:e4:f4:f5:0b:be:c5: 6f:dd:d2:be:22:ba:1f:49:6e:e7:29:75:bd:8b:68: e2:65:76:2c:06:5e:26:0b:39:ce:0d:75:07:33:e5: 0a:57:52:50:76:39:80:4d:c3:3c:fb:fe:e5:04:48: f7:d8:a3:9d:e5:54:9f:f5:4a:96:87:df:c4:ea:cf: 2b:c6:19:ba:05:58:b8:93:f8:df:6e:5a:9b:0b:40: 91:47:ac:ea:73:02:e5:f1:40:cb:b6:ca:b7:d1:41: 36:55:e3:7a:74:41:1b:d4:83:51:9d:bf:bb:a5:f6: 22:f8:c5:0a:0d:d6:0c:29:f0:fe:9f:63:dc:63:2e: e1:bb:5a:f3:91:dd:56:5f:c8:60:94:c8:7a:b0:62: a6:75:f8:e1:a3:57:1d:21:47:e6:24:e0:a6:5e:26: 36:12:d3:3a:0f:95:bb:02:bf:d4:8c:83:99:31:0c: b2:e9:14:17:b0:9c:1a:f1:e0:e7:2f:43:c4:0e:3c: 4c:73:be:f0:61:f6:17:59:1d:41:35:05:e7:b9:0b: e4:0b:4f:af:c7:1c:44:37:4e:f9:8d:b5:20:51:1d: 05:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:3C:13:DB:58:14:3E:B5:3E:F6:EE:3C:32:D7:06:B9:8E:63:13:45 X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:10:f9:0d:d5:50:59:36:21:5a:19:bb:8c:93:04:05:07:df: 57:06:00:af:1e:19:d7:ab:97:80:9c:6f:e5:2d:1c:b5:11:c5: 10:69:f7:4c:10:9f:3f:ae:b7:a6:24:18:ae:a1:b5:41:1f:68: 6e:0d:4f:77:ad:6e:a4:d0:1d:cb:6b:36:a2:e2:66:3f:c6:e7: d8:ca:4d:8e:f9:b4:e4:ab:df:a1:a1:7a:32:95:28:b3:6f:18: 01:49:e3:0f:1a:79:68:87:dd:dc:16:01:2f:34:c6:30:7e:3e: 2e:dd:76:84:64:09:a2:36:eb:8d:80:72:0a:e2:cf:a6:9f:a0: 11:ac:17:b0:7c:f9:0f:4e:36:f0:22:ce:20:de:75:c0:bd:87: 3f:05:47:17:91:6f:d1:63:24:89:9a:34:2d:e8:9f:5c:03:2d: ca:12:d6:54:f6:af:ca:33:9f:5c:0d:79:a1:7f:46:bb:f0:09: 9c:1d:5c:ed:6e:26:48:99:6a:80:f7:f2:1a:b5:bf:65:63:52: 0d:03:12:24:8b:14:d0:28:92:a4:ab:70:f4:14:10:3b:aa:78: 25:91:78:ac:72:6f:ea:dd:30:77:04:04:50:78:9e:72:9f:88: 97:dc:a6:05:2e:7c:ab:16:0a:7e:5b:5f:c0:25:3f:50:cc:e4: 78:7c:e9:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8RwJ2AjcSB5xUjhtT5u1gKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjYwNjI5MDUwMTAzWhcNMjYwNjMwMDUwMTAzWjAzMTEwLwYDVQQD EyhkZTNjMTNkYjU4MTQzZWI1M2VmNmVlM2MzMmQ3MDZiOThlNjMxMzQ1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvuaZUGfV/TQHxJBdIPyUO3pcadn4 FCYEs4i08jn4b4sUif6eXnDk9PULvsVv3dK+IrofSW7nKXW9i2jiZXYsBl4mCznO DXUHM+UKV1JQdjmATcM8+/7lBEj32KOd5VSf9UqWh9/E6s8rxhm6BVi4k/jfblqb C0CRR6zqcwLl8UDLtsq30UE2VeN6dEEb1INRnb+7pfYi+MUKDdYMKfD+n2PcYy7h u1rzkd1WX8hglMh6sGKmdfjho1cdIUfmJOCmXiY2EtM6D5W7Ar/UjIOZMQyy6RQX sJwa8eDnL0PEDjxMc77wYfYXWR1BNQXnuQvkC0+vxxxEN075jbUgUR0FSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN48E9tYFD61PvbuPDLXBrmOYxNFMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOxD5DdVQ WTYhWhm7jJMEBQffVwYArx4Z16uXgJxv5S0ctRHFEGn3TBCfP663piQYrqG1QR9o bg1Pd61upNAdy2s2ouJmP8bn2MpNjvm05KvfoaF6MpUos28YAUnjDxp5aIfd3BYB LzTGMH4+Lt12hGQJojbrjYByCuLPpp+gEawXsHz5D0428CLOIN51wL2HPwVHF5Fv 0WMkiZo0LeifXAMtyhLWVPavyjOfXA15oX9Gu/AJnB1c7W4mSJlqgPfyGrW/ZWNS DQMSJIsU0CiSpKtw9BQQO6p4JZF4rHJv6t0wdwQEUHiecp+Il9ymBS58qxYKfltf wCU/UMzkeHzp1Q== -----END CERTIFICATE-----Generated at Mon Jun 29 14:53:08 2026 by rpki-client