$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json) Hash identifier: br88zDenJiwfnCwjmTmL94EcHVJ32mR6ODeFmdfpCIY= Subject key identifier: 1E:B2:A6:31:2D:FE:F2:8C:9B:D8:26:05:B7:BB:C2:B7:D0:D8:C9:E5 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019E2A025C6C41DE1FB405B32B67F2206327 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft Manifest number: 1921 Signing time: Fri 15 May 2026 05:00:58 +0000 Manifest this update: Fri 15 May 2026 05:00:58 +0000 Manifest next update: Sat 16 May 2026 05:00:58 +0000 Files and hashes: 1: 1-QuFrP2FCGdb0e2Ii_z6LaU8br8.roa (hash: rbKcnlSwgT9Djc5Fqvy3u9yC2cYZiJQ7dfTu75ri+mI=) 2: Kn1XIiFvEGGy9jGV0znKGyVVN88.roa (hash: S6dp6R29PAVMF1jsj22PyQ1rploMZXbrpKsVzrPCS0A=) 3: LVf00OwBfRzfAd6G6KBKwIxU48Q.roa (hash: Xvect/bo+Wr+aXHUQYsyRoqwRvv8UXPXPU1oErWXh0o=) 4: c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa (hash: N/tir1ikaaQzeua5SN0NNzW44/svT02GC4QfKmsuXFg=) 5: i_sg361hESOO6WvkWK2Qx1qnr_o.roa (hash: grkv5sxl6QC67Xl6GRfRbX76QTIOE0y5InqEToBe4KU=) 6: jDLgcLSuJX7PNQqFfW9rGKaqs0I.roa (hash: gYuzALxJxQy3dIl1B+tjxYOVPb7F/ttrTik4SzmNvpo=) 7: nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa (hash: QxXL80gZjutBzTVwYv0W0HB8GqSHL6xx5f7Es0Ckqj8=) 8: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: c0LJG/asXpFLWRaDpiVM5N76xVHju4g37XgLG/1WHqM=) 9: uX2HFPa-1T3UMzqcLHxJG1wYem0.roa (hash: mt3IsY/c70SVPfG6w+VGWzHhy8025Nd/iJv2s56ORTs=) 10: xkw2dJ1kdWsWVrDQa7ecIv1ZfEE.roa (hash: TlO1SGSzKaGyjfYONLThtWXquMMxH3GzgJNd8bMLo1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:2a:02:5c:6c:41:de:1f:b4:05:b3:2b:67:f2:20:63:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: May 15 05:00:58 2026 GMT Not After : May 16 05:00:58 2026 GMT Subject: CN=1eb2a6312dfef28c9bd82605b7bbc2b7d0d8c9e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:1c:ad:a2:03:c0:0b:ce:c4:40:39:63:9a: 0b:7b:ae:b8:e4:7c:24:3e:6b:c2:d8:b6:f3:91:17: 01:60:cd:27:c6:5e:92:99:a8:98:d4:be:27:9d:6e: 8f:83:01:55:ed:86:36:65:f1:89:ab:b8:c8:01:24: 4a:5f:06:26:c5:76:56:6a:0d:6b:d4:14:2f:61:ad: d3:e7:53:5c:3d:35:1e:2f:0e:7d:e2:62:f0:82:96: 92:e1:83:02:3c:03:b1:17:23:64:8e:6d:b2:93:78: b4:a5:53:2c:19:ee:91:01:93:70:75:4f:e7:5e:53: 4b:00:d0:fd:c5:7f:60:aa:b4:bf:c7:f7:72:ec:05: ab:cd:87:d9:bc:a7:9c:41:6a:fe:06:5a:e7:6d:6d: 8d:5d:3f:87:89:23:51:26:ee:df:b1:9a:31:bf:9f: 7e:ad:4c:0d:b9:38:70:f1:f7:c9:4c:0f:1e:46:61: 59:8a:37:11:cd:3c:e8:8c:47:a5:22:2c:38:ff:c0: 58:72:48:8d:83:91:79:2b:6b:b2:f1:5d:bd:a9:0c: 3a:19:71:60:25:13:09:b2:84:35:95:da:5b:42:9a: f4:b8:b9:08:90:a7:a1:58:87:3b:13:36:ac:9f:46: 78:77:fd:d6:0a:ce:7a:13:bc:30:d0:05:9d:a6:59: 1d:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B2:A6:31:2D:FE:F2:8C:9B:D8:26:05:B7:BB:C2:B7:D0:D8:C9:E5 X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a1:30:33:23:fc:9b:67:ee:72:ae:1d:30:9c:54:52:e4:79: f8:e6:43:05:0c:26:b1:5c:ec:3b:3b:4d:4a:07:96:d6:72:22: 1b:5c:1c:7e:6d:00:6a:ad:98:aa:5b:ed:41:78:2a:b7:26:65: a7:07:73:c2:a9:64:06:88:9e:98:d2:00:ce:37:f0:fa:70:a7: 8f:52:b0:11:f7:7d:a2:3e:f1:2f:95:5a:ba:8e:99:98:df:f8: 2a:b9:2d:99:1c:8d:ea:89:d1:de:52:2d:05:78:49:df:f8:b1: ce:68:94:37:72:25:92:c3:ce:e1:d3:47:b7:67:41:d7:94:50: c1:88:9f:2e:75:73:ee:e8:15:f0:69:10:19:b1:80:98:d8:4a: 2e:4b:e8:a5:4e:56:a3:a5:73:44:87:17:9c:62:92:91:fb:f6: e3:eb:69:76:a8:5e:be:b5:e4:32:2e:01:b6:bc:9f:38:42:b4: 4b:34:39:c2:1f:82:b2:fa:1f:4c:75:cd:17:5b:60:ca:de:87: 6e:a7:c4:ca:74:b9:ee:21:3a:af:3f:61:88:80:fe:12:42:9e: 87:d6:81:97:eb:e5:d7:49:70:42:f1:95:21:87:81:72:a2:2d: 6f:13:f0:ba:8e:f0:22:aa:ac:13:55:f9:3f:7c:65:86:e5:40: ca:4b:2e:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4qAlxsQd4ftAWzK2fyIGMnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjYwNTE1MDUwMDU4WhcNMjYwNTE2MDUwMDU4WjAzMTEwLwYDVQQD EygxZWIyYTYzMTJkZmVmMjhjOWJkODI2MDViN2JiYzJiN2QwZDhjOWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlW4craIDwAvOxEA5Y5oLe6645Hwk PmvC2LbzkRcBYM0nxl6SmaiY1L4nnW6PgwFV7YY2ZfGJq7jIASRKXwYmxXZWag1r 1BQvYa3T51NcPTUeLw594mLwgpaS4YMCPAOxFyNkjm2yk3i0pVMsGe6RAZNwdU/n XlNLAND9xX9gqrS/x/dy7AWrzYfZvKecQWr+BlrnbW2NXT+HiSNRJu7fsZoxv59+ rUwNuThw8ffJTA8eRmFZijcRzTzojEelIiw4/8BYckiNg5F5K2uy8V29qQw6GXFg JRMJsoQ1ldpbQpr0uLkIkKehWIc7Ezasn0Z4d/3WCs56E7ww0AWdplkdQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6ypjEt/vKMm9gmBbe7wrfQ2MnlMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKEwMyP8 m2fucq4dMJxUUuR5+OZDBQwmsVzsOztNSgeW1nIiG1wcfm0Aaq2YqlvtQXgqtyZl pwdzwqlkBoiemNIAzjfw+nCnj1KwEfd9oj7xL5Vauo6ZmN/4KrktmRyN6onR3lIt BXhJ3/ixzmiUN3IlksPO4dNHt2dB15RQwYifLnVz7ugV8GkQGbGAmNhKLkvopU5W o6VzRIcXnGKSkfv24+tpdqhevrXkMi4BtryfOEK0SzQ5wh+CsvofTHXNF1tgyt6H bqfEynS57iE6rz9hiID+EkKeh9aBl+vl10lwQvGVIYeBcqItbxPwuo7wIqqsE1X5 P3xlhuVAyksuNg== -----END CERTIFICATE-----Generated at Fri May 15 10:35:54 2026 by rpki-client