$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json) Hash identifier: Pg25esAar+hefcc3YEzAvhR5OmUPqmXf+fN9x233/Q8= Subject key identifier: DE:2D:4C:AE:85:35:86:E2:55:92:8C:15:A3:03:36:34:91:BB:C8:B9 Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019EECD94003F1DEEE22D638C8751F24AAB8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft Manifest number: 197F Signing time: Mon 22 Jun 2026 01:02:01 +0000 Manifest this update: Mon 22 Jun 2026 01:02:01 +0000 Manifest next update: Tue 23 Jun 2026 01:02:01 +0000 Files and hashes: 1: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: LF7hO87K6AsCZYguwfvM+h/UObmOFwXB+8GECXoXJ9s=) 2: B2_FH3MtZlTaOE61buYvXBJKW2E.roa (hash: 55aVAj571Q8/h0HvcQ8YQch6oVhSxMht9hvb0pWG9xs=) 3: EEeXG249QHXtZie6S6hEWpfPs0c.roa (hash: j08Df977nprNp/2GNZ8F6Ri2LTHGQNefm3+Va3aCg1U=) 4: MGuxpogPtwMAFTldHDnEUIBskKY.roa (hash: aRVSa83OdI8eRXcO3WQLPs6YeURGIYliffVNH5moLlY=) 5: OKgmTupzmnhPk0hOIeK3giJ9QaM.roa (hash: vJ5CbfHEFcPbyEC4jXFH5FpTTJogOrELHCnjQEMwhv0=) 6: UuScKKPZU-rxDshW6inBZKRJIH0.roa (hash: oIb88lrmIIDaodPcRGV8PcCWp69cVR7+uTDhUXF8D0A=) 7: ZW_uWUofk0PVk5ZvUH4CXwMQf9k.roa (hash: nMPGS72S0ymOk8yKU1XMgfQYFC4FprUwCeSnvYRogMM=) 8: g_sMt-IMPWFoRArZv0JnssQdxVE.roa (hash: i/F8rrQv+RNHw3Z6W9+3AF4oOHslAP0uqvWz8gg4Un0=) 9: tNc2jSWdykqlG-PkB4v9MVhio4k.roa (hash: k9a+KYr8wPbQKXd8Zqw2THkgTe3lauXtnm8eqnhZ3Nk=) 10: yn0AIXSmQUy2ZdVLfREbNPEMx98.roa (hash: 0/gDR8MJ30pXw1A6bmuJms9g1333tYlKxF2lIJS3jtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 22 Jun 2026 20:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:ec:d9:40:03:f1:de:ee:22:d6:38:c8:75:1f:24:aa:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Jun 22 01:02:01 2026 GMT Not After : Jun 23 01:02:01 2026 GMT Subject: CN=de2d4cae853586e255928c15a303363491bbc8b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3b:ed:2c:27:5b:4b:a8:53:09:59:73:73:48: ed:0d:0b:f4:11:f2:25:de:bb:fa:65:db:89:ac:f7: ac:35:24:50:c6:91:83:4f:d8:1f:e6:2e:e2:b3:b5: 56:97:74:94:1e:f3:4f:48:8d:49:53:51:7e:2f:8a: f9:3e:b1:4d:3b:d5:e3:0b:13:40:89:74:44:f5:54: 5b:19:49:b5:59:65:2f:f1:e4:23:c0:75:e5:f6:db: 82:3a:5b:c0:d0:1b:88:85:05:5e:bd:d0:c4:60:7f: ea:e2:54:e2:f3:2f:75:05:53:dc:c8:7d:e6:bc:a1: 9d:16:e4:04:f6:d1:13:02:64:0d:27:5c:d9:ae:b0: 81:c9:b5:42:c0:96:b0:8a:36:25:77:9f:81:a0:26: 3f:3c:7d:17:ce:ff:8a:b0:1e:04:c9:17:f8:0b:60: 79:d0:94:d0:fb:f8:ec:11:5e:34:d3:c2:e5:8d:d8: ca:1a:05:1e:04:55:8e:1b:2f:c6:26:c2:2b:62:84: c3:61:c1:2e:53:b4:6c:56:b8:71:99:e8:dc:d4:85: dc:00:aa:61:5e:dd:06:41:f7:e7:3e:51:ef:d1:dc: 92:bc:79:df:f4:ff:5e:e4:11:59:9f:09:d8:c1:a0: a6:f3:5e:80:63:85:36:ef:3e:0a:73:cf:75:45:30: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:2D:4C:AE:85:35:86:E2:55:92:8C:15:A3:03:36:34:91:BB:C8:B9 X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:5a:f0:b4:f5:5c:e4:48:26:e7:f8:d6:e0:27:f4:18:ca:d9: ec:b2:18:ee:e7:c8:3a:11:b6:62:87:a1:b0:13:c2:c7:6c:42: 98:ce:b9:0b:5a:70:a8:dc:0a:fb:7e:15:80:43:9c:b9:ce:74: 23:a8:fb:93:e0:ee:25:d5:65:65:e1:c4:49:77:7d:51:a5:70: 14:9e:9d:46:d3:58:6e:ff:98:de:55:f0:4b:4c:7c:7a:d1:92: f9:45:a6:b3:c2:8e:d3:6f:10:ee:47:e0:67:62:6b:ec:0b:66: 0a:fd:18:79:4b:90:31:4b:24:da:33:ed:d8:98:73:c1:17:57: 79:2f:f4:c7:d6:c1:24:fe:50:4d:20:a3:ff:15:0c:06:5e:2a: 13:ee:d2:a9:e1:f6:e7:74:05:fc:94:73:10:e6:63:a6:9d:e9: 49:d5:24:15:cc:be:16:d0:f2:0b:b0:b7:fe:60:4f:fd:ba:a3: b0:89:d6:d9:40:14:1c:6e:93:1e:ec:65:e4:31:76:fa:15:75: 60:25:0c:75:9b:26:43:dc:b7:14:cd:72:50:b7:26:d3:a6:ca: 45:70:d9:8b:58:87:b0:49:fe:cd:0b:68:63:60:7c:1b:ae:36: a8:10:fc:1f:f1:8d:34:80:99:65:75:46:db:17:7d:53:88:cb: 50:a1:b6:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7s2UAD8d7uItY4yHUfJKq4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjYwNjIyMDEwMjAxWhcNMjYwNjIzMDEwMjAxWjAzMTEwLwYDVQQD EyhkZTJkNGNhZTg1MzU4NmUyNTU5MjhjMTVhMzAzMzYzNDkxYmJjOGI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DvtLCdbS6hTCVlzc0jtDQv0EfIl 3rv6ZduJrPesNSRQxpGDT9gf5i7is7VWl3SUHvNPSI1JU1F+L4r5PrFNO9XjCxNA iXRE9VRbGUm1WWUv8eQjwHXl9tuCOlvA0BuIhQVevdDEYH/q4lTi8y91BVPcyH3m vKGdFuQE9tETAmQNJ1zZrrCBybVCwJawijYld5+BoCY/PH0Xzv+KsB4EyRf4C2B5 0JTQ+/jsEV4008LljdjKGgUeBFWOGy/GJsIrYoTDYcEuU7RsVrhxmejc1IXcAKph Xt0GQffnPlHv0dySvHnf9P9e5BFZnwnYwaCm816AY4U27z4Kc891RTAVNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4tTK6FNYbiVZKMFaMDNjSRu8i5MB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc1rwtPVc 5Egm5/jW4Cf0GMrZ7LIY7ufIOhG2YoehsBPCx2xCmM65C1pwqNwK+34VgEOcuc50 I6j7k+DuJdVlZeHESXd9UaVwFJ6dRtNYbv+Y3lXwS0x8etGS+UWms8KO028Q7kfg Z2Jr7AtmCv0YeUuQMUsk2jPt2JhzwRdXeS/0x9bBJP5QTSCj/xUMBl4qE+7SqeH2 53QF/JRzEOZjpp3pSdUkFcy+FtDyC7C3/mBP/bqjsInW2UAUHG6THuxl5DF2+hV1 YCUMdZsmQ9y3FM1yULcm06bKRXDZi1iHsEn+zQtoY2B8G642qBD8H/GNNICZZXVG 2xd9U4jLUKG2Hw== -----END CERTIFICATE-----Generated at Mon Jun 22 06:47:22 2026 by rpki-client