$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: fUwGTarWDj1ghyoQd05g0SsRTkOYV+r6GggTsIWPmdg= Subject key identifier: 2C:2B:F3:85:F7:0F:3D:96:46:93:0F:46:5A:58:11:E4:4E:42:98:97 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019EB6572AC00BBD20546458FFB81BBCBE34 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 1517 Signing time: Thu 11 Jun 2026 11:00:26 +0000 Manifest this update: Thu 11 Jun 2026 11:00:26 +0000 Manifest next update: Fri 12 Jun 2026 11:00:26 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 3: 7tK-Y_2zDn6v9bsNxgC2WC7pK58.roa (hash: cLZskeRMwGxHkUDQXpA7UBDzbVsdE10cl/owbtiDKLo=) 4: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 5: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 6: _XQtBPNeW_iuy40orAGtRGhMTSk.roa (hash: LAWDSlOuHdvhK5NcbfNOkabxOshrkg3NCFkUAyd9zsY=) 7: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 8: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=) 9: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 10: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: v1O3ZUb6A+dFVvwuS+4/1OoEEHPdJgi71ksCE3+pkgY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b6:57:2a:c0:0b:bd:20:54:64:58:ff:b8:1b:bc:be:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Jun 11 11:00:26 2026 GMT Not After : Jun 12 11:00:26 2026 GMT Subject: CN=2c2bf385f70f3d9646930f465a5811e44e429897 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:35:20:63:5d:05:40:66:02:43:1d:52:db:ae: d5:f8:bc:05:cc:8c:7e:b3:8b:55:ce:3b:ba:53:ea: c2:ca:01:92:16:c7:b1:6d:ae:23:3a:57:0a:2c:73: 2a:47:6c:46:16:22:e2:28:66:34:98:77:92:99:1e: b6:fd:36:d0:ec:f4:99:d1:ff:52:2b:cf:d8:6f:2e: 54:da:8d:84:5a:b2:72:fd:80:c8:62:53:d5:3e:07: d6:07:96:5f:36:85:5c:73:42:01:b5:8d:2b:2f:95: d8:9a:d7:d0:69:35:c0:46:13:02:11:94:35:ad:2b: 56:34:08:27:77:3c:35:33:6f:b0:89:38:6e:73:20: a8:9b:42:72:5f:40:d9:5c:1f:75:cb:4d:a7:60:63: c0:fc:9b:0b:d6:40:07:f8:91:ed:cd:87:6a:da:a3: 19:bb:b1:6b:06:bd:bc:2c:e6:c4:7a:68:6c:e8:cd: 5f:58:7a:4e:62:f1:d4:6e:76:ea:53:89:a5:57:d8: 75:9c:97:6c:19:36:2b:b4:1c:ea:a2:91:48:6c:ce: 43:50:69:1d:d0:f2:1c:b1:8b:40:63:9d:2f:91:98: cc:19:96:29:5c:e8:59:6e:4f:0a:b3:62:6c:e8:6d: e3:13:ff:c4:0b:59:e5:81:a9:0c:2d:ba:0e:49:74: 17:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:2B:F3:85:F7:0F:3D:96:46:93:0F:46:5A:58:11:E4:4E:42:98:97 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:c0:b1:71:b8:78:3b:0c:ce:70:59:75:c9:59:6e:c6:55:4f: 98:f1:e3:cf:53:19:b1:7e:79:df:88:7c:2c:6f:65:de:67:e3: d3:f6:1d:f8:3d:2b:97:19:92:23:ca:29:40:5c:18:87:56:f9: a4:d3:0c:b4:74:e6:9b:a2:3f:fb:af:f0:ff:75:44:7a:b3:e5: d5:c4:d5:8c:dd:93:de:ab:e2:ec:ab:02:40:55:d8:82:dd:28: c7:c2:b7:bf:a6:b3:7a:01:5b:33:51:c0:ed:6c:ca:51:53:2f: 8a:0e:dc:38:22:ec:52:c2:2d:15:32:17:ba:08:84:88:db:4c: 2d:c6:ea:46:d6:23:1b:22:3f:5e:3b:7d:4b:16:3a:d7:85:0c: 82:4e:87:2a:9c:9c:ba:a3:98:34:aa:d5:6b:59:05:80:de:07: 6e:5a:90:fb:7c:ed:c9:fd:03:11:d5:7e:9e:87:81:c2:d3:ee: 06:41:21:52:8b:f8:02:ce:c0:62:de:06:92:6c:bc:bb:0f:a7: 66:5c:a6:52:fd:11:38:3b:45:45:62:e2:f8:ce:a6:82:22:75: 9c:cc:3d:fc:84:4f:a1:16:09:4f:28:f7:43:04:73:86:06:fc: 56:2c:3b:38:fe:cc:a8:ab:bb:a5:92:0e:08:59:b0:e1:94:41: c0:7e:a2:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ62VyrAC70gVGRY/7gbvL40MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwNjExMTEwMDI2WhcNMjYwNjEyMTEwMDI2WjAzMTEwLwYDVQQD EygyYzJiZjM4NWY3MGYzZDk2NDY5MzBmNDY1YTU4MTFlNDRlNDI5ODk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DUgY10FQGYCQx1S267V+LwFzIx+ s4tVzju6U+rCygGSFsexba4jOlcKLHMqR2xGFiLiKGY0mHeSmR62/TbQ7PSZ0f9S K8/Yby5U2o2EWrJy/YDIYlPVPgfWB5ZfNoVcc0IBtY0rL5XYmtfQaTXARhMCEZQ1 rStWNAgndzw1M2+wiThucyCom0JyX0DZXB91y02nYGPA/JsL1kAH+JHtzYdq2qMZ u7FrBr28LObEemhs6M1fWHpOYvHUbnbqU4mlV9h1nJdsGTYrtBzqopFIbM5DUGkd 0PIcsYtAY50vkZjMGZYpXOhZbk8Ks2Js6G3jE//EC1nlgakMLboOSXQXpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCwr84X3Dz2WRpMPRlpYEeROQpiXMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr8Cxcbh4 OwzOcFl1yVluxlVPmPHjz1MZsX5534h8LG9l3mfj0/Yd+D0rlxmSI8opQFwYh1b5 pNMMtHTmm6I/+6/w/3VEerPl1cTVjN2T3qvi7KsCQFXYgt0ox8K3v6azegFbM1HA 7WzKUVMvig7cOCLsUsItFTIXugiEiNtMLcbqRtYjGyI/Xjt9SxY614UMgk6HKpyc uqOYNKrVa1kFgN4HblqQ+3ztyf0DEdV+noeBwtPuBkEhUov4As7AYt4Gkmy8uw+n ZlymUv0RODtFRWLi+M6mgiJ1nMw9/IRPoRYJTyj3QwRzhgb8Viw7OP7MqKu7pZIO CFmw4ZRBwH6i+w== -----END CERTIFICATE-----Generated at Thu Jun 11 15:53:55 2026 by rpki-client