$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: EEbhF9LgSL4dVty6mAddxDrLxCoZaobjY/CgXHA1gXY= Subject key identifier: 0A:B6:8C:66:FB:30:B3:92:86:AA:16:19:CE:D6:47:CF:6A:4F:FF:4A Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019E9213CD6679C03E05950F1F4180507ACB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 16ED Signing time: Thu 04 Jun 2026 10:00:31 +0000 Manifest this update: Thu 04 Jun 2026 10:00:31 +0000 Manifest next update: Fri 05 Jun 2026 10:00:31 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 4LTSiiIXCY2aVQheO-OK2Ks1zVc.roa (hash: /HUlN5mU4nQlfn3Lbzxe64CdVsxaFWp5WmzIr3dsQ+U=) 3: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 4: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 5: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 6: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 7: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 8: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 9: Lmglx6k3OhVfB6qXrSYWY-3n7wU.roa (hash: jOlTc86u7s0cDJRLkmCFCCAUXlp7wxNhr83b5DVvky8=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 12: bV3Qg5HtML1zUsJYAwV_qsAoITg.roa (hash: ZhHWbujHVFO1260mH7gJeRdvHPIcZ7THBcA3XZdsUfs=) 13: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 14: cOMhRxduLw18TIe2EJANKourNbc.roa (hash: vRamlKR5R5SmfC3d0sMnuMWhFKCo/1NfKoqnzL94OGM=) 15: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: UoTXxlS8bZogqDQwvMnm6ypYUTkVAAeNi7dGUdAuLC4=) 16: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 17: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 18: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) 19: yhFaGf2_vHhBZgwwXE8xm1OTXQE.roa (hash: 3+krivSCZ6wgsfWjmVU3sW4pnSZcLq6UgbbbbMppVNI=) 20: zKma2lZxd28aMOIa5GKySj7K3F4.roa (hash: z2dVlW8SWBq0rqcswBgsfVdqo5mJ3Cgdk6gd4jQUscA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Jun 2026 07:00:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:92:13:cd:66:79:c0:3e:05:95:0f:1f:41:80:50:7a:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Jun 4 10:00:31 2026 GMT Not After : Jun 5 10:00:31 2026 GMT Subject: CN=0ab68c66fb30b39286aa1619ced647cf6a4fff4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ed:4b:8f:cb:78:ec:8e:17:28:f5:b8:c7:0c: 6c:6b:ec:5f:c6:5d:6f:c2:c9:1e:e6:68:39:e1:1a: d2:5b:be:f7:4b:7c:33:b9:0f:2a:45:9a:f5:92:3d: af:0d:51:c8:31:70:49:23:d3:b0:d2:62:73:0e:4f: 44:fd:8b:9f:98:bb:ea:6f:d4:1a:ca:eb:e6:81:c1: 90:83:74:a8:aa:8a:00:4f:6a:a5:09:19:82:28:ba: 07:ed:6a:b0:1c:39:c2:03:1a:c4:2a:1d:c5:88:4f: 4f:dd:de:80:d8:26:51:8f:91:02:f7:87:0b:77:19: cf:bb:dd:c7:a0:c2:66:74:f4:a8:72:92:51:75:17: 52:f5:0f:78:39:80:38:5f:a8:22:bb:b0:0b:f0:7b: a3:47:80:29:19:7d:d8:0f:c9:81:4d:de:04:2b:40: 10:3b:dc:bb:a1:2e:cb:e5:10:b3:00:b9:88:5e:cf: 79:a3:0a:2b:e2:cb:73:4d:79:86:d0:62:d2:65:47: 35:30:64:34:21:ed:e3:a8:d1:7e:be:98:ff:82:49: fb:76:c5:ac:63:d7:e5:0a:0b:fd:ec:f7:3c:3d:a4: 21:63:ad:2f:d9:d4:4c:f4:91:e0:14:a0:ad:60:83: a1:1b:09:be:5a:32:14:d5:7f:70:60:63:ba:d4:e6: f9:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B6:8C:66:FB:30:B3:92:86:AA:16:19:CE:D6:47:CF:6A:4F:FF:4A X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:b9:e6:71:0d:9b:ad:77:1e:01:fd:92:50:40:f6:04:40:c7: 56:ea:01:90:98:d4:b6:55:e3:24:29:46:6b:94:f1:e4:6b:35: d7:a5:35:7a:39:e3:b3:24:03:8f:3d:96:d3:42:19:7e:a2:4b: 61:24:a7:a7:47:e3:75:71:a5:65:c7:61:81:e7:36:b3:35:2a: f2:fb:a9:94:bc:69:a3:91:cb:4a:cc:d2:c2:19:27:d7:29:bd: c2:2e:86:33:51:5c:cc:ab:8f:07:76:fc:f7:dc:55:d8:7b:1d: d1:78:35:e8:6f:61:b4:dd:f1:ae:56:95:68:48:72:e5:4a:7c: ea:c9:37:ae:a9:ab:a0:41:47:70:20:f2:57:3b:48:2a:8e:dd: 8b:d6:d6:70:4f:eb:e6:28:dd:f2:4b:1d:42:b1:fb:a6:69:96: f4:c5:d3:e1:81:6a:d0:9a:f8:12:10:3a:23:d1:ca:fd:11:c3: aa:ba:d6:00:56:a4:da:49:e5:fe:fe:68:69:46:9c:f3:ed:45: 21:aa:d2:44:32:32:29:57:05:ab:fd:ef:dc:8d:4d:b0:63:b4: d2:80:5d:c7:83:11:05:13:1d:c7:83:41:0e:ec:bd:e2:0d:68: d0:85:b3:8c:c8:fb:82:4d:0f:da:38:12:97:f8:07:5f:9b:62: e8:d0:3c:ee -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6SE81mecA+BZUPH0GAUHrLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwNjA0MTAwMDMxWhcNMjYwNjA1MTAwMDMxWjAzMTEwLwYDVQQD EygwYWI2OGM2NmZiMzBiMzkyODZhYTE2MTljZWQ2NDdjZjZhNGZmZjRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnO1Lj8t47I4XKPW4xwxsa+xfxl1v wske5mg54RrSW773S3wzuQ8qRZr1kj2vDVHIMXBJI9Ow0mJzDk9E/YufmLvqb9Qa yuvmgcGQg3SoqooAT2qlCRmCKLoH7WqwHDnCAxrEKh3FiE9P3d6A2CZRj5EC94cL dxnPu93HoMJmdPSocpJRdRdS9Q94OYA4X6giu7AL8HujR4ApGX3YD8mBTd4EK0AQ O9y7oS7L5RCzALmIXs95owor4stzTXmG0GLSZUc1MGQ0Ie3jqNF+vpj/gkn7dsWs Y9flCgv97Pc8PaQhY60v2dRM9JHgFKCtYIOhGwm+WjIU1X9wYGO61Ob5aQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAq2jGb7MLOShqoWGc7WR89qT/9KMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAobnmcQ2b rXceAf2SUED2BEDHVuoBkJjUtlXjJClGa5Tx5Gs116U1ejnjsyQDjz2W00IZfqJL YSSnp0fjdXGlZcdhgec2szUq8vuplLxpo5HLSszSwhkn1ym9wi6GM1FczKuPB3b8 99xV2Hsd0Xg16G9htN3xrlaVaEhy5Up86sk3rqmroEFHcCDyVztIKo7di9bWcE/r 5ijd8ksdQrH7pmmW9MXT4YFq0Jr4EhA6I9HK/RHDqrrWAFak2knl/v5oaUac8+1F IarSRDIyKVcFq/3v3I1NsGO00oBdx4MRBRMdx4NBDuy94g1o0IWzjMj7gk0P2jgS l/gHX5ti6NA87g== -----END CERTIFICATE-----Generated at Thu Jun 4 12:03:34 2026 by rpki-client