$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft File: RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft (raw, json) Hash identifier: 5XxMFLZxIpgTahGrWrE+gQ3PfIf5nMTsxzJ1zwVpDVg= Subject key identifier: 65:D7:15:D6:1A:32:5E:2D:B1:B5:7C:02:5B:C3:EF:BB:6A:88:F7:D0 Authority key identifier: 44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 Certificate issuer: /CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Certificate serial: 019E9BF28AB46285EC523CE25FD8B8A2A93B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft Manifest number: 1A34 Signing time: Sat 06 Jun 2026 08:00:24 +0000 Manifest this update: Sat 06 Jun 2026 08:00:24 +0000 Manifest next update: Sun 07 Jun 2026 08:00:24 +0000 Files and hashes: 1: 1UmwHWV4a8GVyeMX9iVtrEY6_vY.roa (hash: lngU3VlvgjsfQNDvuc4WHw0G299WqfoiIYc9R+KVPPc=) 2: 2K2LRFKVS5G4UBpi02aIHEwaYbo.roa (hash: vp6Q5byh4sOxsLn6+xnbICkzt50Gu7I9DJlz9grAs68=) 3: 4EHQchkmRvw4hrIZwKVmoTVrXcE.roa (hash: KpqMiHj1SwCn1wHf9cbF+sIlJ2SNrDY7ghIe8T7leBk=) 4: 5Z3398bPjFZnkQuZgIZdGWDznRY.roa (hash: xmJ4QribTdZo3tMhYvYOnwRRxONh8dhYrIwoBT29TpE=) 5: 60n7OcQD1rVkRE8LPW3kEfdX9gw.roa (hash: N0mQsLvGMMdhDPTL/se4j6fwbJ89Tgbu/0d6LhVYRLs=) 6: 7wjZdZfOK--9J0iW5gkpY4jz3Vs.roa (hash: wQ+RvHew1IVetOV7JWzo86gEVS8H0+zXRGq3DJBrmWc=) 7: 9iM7YuqWIbTP1jDWJnvJ3Bq7Q0Q.roa (hash: fsZlnOQR9nRVkMGwqtj0xSg8Xg6dl3hOvSIpUTk2D6w=) 8: Ca0jUIwklC0eyPP5hzRAn17FR80.roa (hash: fAEP7LfFj7fDAZrrdBBsvg+Mn25B+1e7F/BBuqO131w=) 9: FN70esTZXn5X2vP3ZcEnYIks9AM.roa (hash: 1ow9uwWZ1DORgXwnTVw8JvTT23AJVzQa+9quYRVEN6M=) 10: Kq7QJSlg_4QY0R7RaYj4Ti58qcw.roa (hash: bBRpWE7OiUMYeqNpou2p2Wpdx4ns4UHX64/R4Kr6c+U=) 11: Ku0mjmxusSrMXfgvlmL_Kh5j0kI.roa (hash: zSTvo+JocKBb5Nbg9XIvSqJL+1z6V1E34a4hrkcK8t0=) 12: PNU5dT-FRZhCGuEDnFsX7GuO8MU.roa (hash: 5nuXPVsdc9izSwCCuB+1KPJnkougYuwEFE0ABa/v1lw=) 13: RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl (hash: R1HjEDDM8KibkJtiPpN0I005uTYH8a+V5g66cebXWs8=) 14: S7h5Fby9bbpxdXYmDtza_SDSYtg.roa (hash: IOxFJnKliiuzpHTvfCVgOBtXgnXsZ5cTLcWr06Mhmmg=) 15: ShGZf2KqimtbKzToWYg54Tsrrwo.roa (hash: I51c/DNMfjZlsvQm5k/7jwF4EguCQj/kTUTXhZ80zs8=) 16: UGZ3vMnUVhnMHprA-js3vspKmwo.roa (hash: n4uZoakF4GvbWWZaqJL1srzglcS0eKby+fyHBjJ5GXk=) 17: WIe_yXnGz2qxmkA-Jl4unhtVXd8.roa (hash: JDWlYllOoFXRzwvexL0+Z+xQJXmvy5W2gSffNKHemAA=) 18: WL6q68-uoJAeV1AkxAgPdtwWoyc.roa (hash: f7/E+EUbjnh6BcH/3q+PZzjcsDtZuhmuT+6PSPvWfAM=) 19: Wy81KMy0DL_6tpJOi6ANUYyTUv4.roa (hash: d27KgsDg+KuUKh7rpBYfZ/yBm4hBx4SDfoftiDo2y/8=) 20: XMvIwzGddWBUba0mwiNnnHTZWm4.roa (hash: UWvDZc48OJ09VWHD0leBJU7x8wfw++aUQp2Q26I26MM=) 21: af2hi8V_6XBfDLcR66UImjT0iRs.roa (hash: kN5giEt8lpaRlzktqhTZf2jIXA6thsWMrbPgPzbcxSc=) 22: ah0jiQnxjyeZK5he6RdTUE-ipnY.roa (hash: JJj18HJFbOb1f81VJKQKUC1al7turx0OrE/9nAccLK8=) 23: ewMk8U-CtYsjt6E6j_tG33Bkeds.roa (hash: ilAg19RjRWMFfvWl4ecpGWCs1APQudEqMJ6oIH0eDTA=) 24: fmuRuMynV3t-W1T59fbCP9gm_2M.roa (hash: 6pRpct2vh79WehrYAlgUzvTdvNK24YaVVaa9iZsg5+Y=) 25: h1AkFWiuF4C5x1jcp2idszcxtwU.roa (hash: RmjmZFo+6GsCEI0vzQijS30wCaveF6IUR5KU8O6+YJY=) 26: jXJPIagQB7xJy4c-VYsshQQ5ZU8.roa (hash: LZ2zXEnHEosFY9V/e5cqBzDV0kKFDDyZWuhh0GN0XAw=) 27: lcM9VBsMX8XlCXtWIYOwxsgyfcs.roa (hash: 5oIPhkO6h+85iz0pQDQy9IOXsl5pzQuFQs9T8Q+5gKM=) 28: m3rFClN8OrN1kUgzbffmVeYXm_g.roa (hash: gTzP3qQCo24jaH53JEi/3E2xk77hA7ta7BJO9SMqoTE=) 29: pONUvpjabUCKJsXcINAHufLKVEw.roa (hash: t34ArKZmzwo0YO9H49nwqVXDC8o05IVxLnIwKhqXnj4=) 30: ruijiG2c7OWNAbZg1DzBzUw2h9A.roa (hash: gl727KrmeoI8zfQ+pdZJ+FzEFZTT7EufSZa415R+/6E=) 31: ti7bPeHvjZr74P5AX8xhgt4EPEQ.roa (hash: eVY7BIMaC5K37OTehz4aGSdkgJfotwmNYaS0DnArTLM=) 32: wRvPE_LWNx2kIT2wAO2XbZUAglY.roa (hash: MxpajBbFFulzyH8dwfNbDFeDhL15/nETBO2IKZQO1kU=) 33: xFV6naJ395ubjh_EqiAHvE__j48.roa (hash: dsSN+lLUWUY5SoV96p6VvWfy7nH7ZF5X9LmWDzJivP0=) 34: yuafb_GLP5geRNFsOXeHzGpXUtw.roa (hash: rNqK+URhLKI6w5EH1rntR8Xc3oY7jxanp2xGnYspLAY=) 35: z5afGA7OaWu712VRFeG9Gp0k7GU.roa (hash: V5K2iL/FYfaNf2E5t5hua1uBnZXWpXH1Eus7Qaw8bpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 02:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:9b:f2:8a:b4:62:85:ec:52:3c:e2:5f:d8:b8:a2:a9:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459ec2a5fd53909c5239f4cc8d6d329a2779bb1 Validity Not Before: Jun 6 08:00:24 2026 GMT Not After : Jun 7 08:00:24 2026 GMT Subject: CN=65d715d61a325e2db1b57c025bc3efbb6a88f7d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:bb:5b:b3:1f:8b:2b:df:45:2f:16:dd:bb:d2: 94:81:ba:58:91:77:02:0e:84:45:9c:dd:60:c4:d8: 31:c0:26:99:dc:83:e7:24:7e:47:14:0b:8b:9b:76: 23:92:3a:4e:a1:1d:06:6b:5f:40:a9:30:31:a3:49: 23:e8:ff:fe:c1:b5:ac:c6:cb:99:45:8c:0e:a0:b0: 93:fe:b6:3b:b0:66:45:35:b7:38:ea:c0:98:1a:c2: 49:6f:ac:b9:8b:c5:ed:ce:86:4c:fd:d1:22:ba:97: 85:8b:44:49:5a:5c:d9:3e:fc:34:ba:79:8b:ba:00: 08:16:a6:b2:5f:ef:58:fb:04:4b:67:9d:40:70:0d: 4e:6b:3d:5a:86:b7:3b:ae:55:f3:a3:a9:da:ce:59: 13:e9:f2:70:37:b9:3d:f1:57:5a:e3:91:90:34:86: 4c:f2:06:38:c3:7a:22:ec:aa:b3:1c:8f:e9:97:a7: ab:94:d6:0f:3f:1a:7d:5e:59:c9:c4:a7:38:15:8c: c3:62:3e:44:e8:11:9e:20:ff:cb:e4:f0:b9:78:91: 57:19:44:d6:dd:ea:05:c8:71:5a:2f:05:ba:f1:f5: 7f:8a:c6:d1:4c:39:0e:b9:7c:3e:44:53:02:63:99: ef:4b:41:9f:8a:ab:23:6f:f3:db:72:df:df:5d:d6: 3a:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:D7:15:D6:1A:32:5E:2D:B1:B5:7C:02:5B:C3:EF:BB:6A:88:F7:D0 X509v3 Authority Key Identifier: keyid:44:59:EC:2A:5F:D5:39:09:C5:23:9F:4C:C8:D6:D3:29:A2:77:9B:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFnsKl_VOQnFI59MyNbTKaJ3m7E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f0ae62-c107-43ce-a8a9-6b4372602096/1/RFnsKl_VOQnFI59MyNbTKaJ3m7E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5e:6c:56:64:42:c0:0c:24:03:95:9e:7e:fe:9a:13:25:cb: 51:6b:e2:d1:15:d0:79:66:05:40:75:ca:60:64:e6:f3:60:dc: 3f:2c:97:85:1a:06:44:54:15:37:90:a8:36:5e:0e:26:3f:db: e7:09:13:94:8c:08:30:7a:5e:96:27:66:da:d4:a6:95:09:4d: 4e:0a:15:3c:20:82:b1:ab:e0:eb:d2:79:da:63:3e:37:30:55: 70:41:e3:c4:c1:6a:51:fe:31:c7:2b:f8:ca:58:b0:0d:0c:d2: b7:c7:ea:bf:db:17:51:f5:fc:0d:88:30:7a:ef:f6:fe:73:44: c8:f4:0a:4c:d6:a2:e5:9d:fd:dd:6c:63:88:f4:0d:a9:32:cd: 25:2d:22:d8:1f:44:2e:76:9c:8d:66:95:9c:14:9e:8c:ca:04: f4:86:3c:f2:74:2a:a9:3f:68:25:8a:d5:fa:dd:1f:93:10:c3: e1:0d:e2:23:3b:d9:b8:79:07:e6:41:3a:ad:a5:d1:97:2d:f8: d3:03:47:d2:44:5f:dc:1b:cd:42:e6:6c:87:04:d0:de:49:20: 3f:f3:4a:f8:8d:d3:a7:24:c4:70:33:3c:5e:da:b8:f1:49:dc: 7a:6f:9d:3c:e0:ab:61:44:93:8a:70:25:98:4d:2d:4c:f1:17: 3e:44:5e:24 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6b8oq0YoXsUjziX9i4oqk7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTllYzJhNWZkNTM5MDljNTIzOWY0Y2M4ZDZkMzI5YTI3 NzliYjEwHhcNMjYwNjA2MDgwMDI0WhcNMjYwNjA3MDgwMDI0WjAzMTEwLwYDVQQD Eyg2NWQ3MTVkNjFhMzI1ZTJkYjFiNTdjMDI1YmMzZWZiYjZhODhmN2QwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLtbsx+LK99FLxbdu9KUgbpYkXcC DoRFnN1gxNgxwCaZ3IPnJH5HFAuLm3YjkjpOoR0Ga19AqTAxo0kj6P/+wbWsxsuZ RYwOoLCT/rY7sGZFNbc46sCYGsJJb6y5i8XtzoZM/dEiupeFi0RJWlzZPvw0unmL ugAIFqayX+9Y+wRLZ51AcA1Oaz1ahrc7rlXzo6nazlkT6fJwN7k98Vda45GQNIZM 8gY4w3oi7KqzHI/pl6erlNYPPxp9XlnJxKc4FYzDYj5E6BGeIP/L5PC5eJFXGUTW 3eoFyHFaLwW68fV/isbRTDkOuXw+RFMCY5nvS0Gfiqsjb/Pbct/fXdY65QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXXFdYaMl4tsbV8AlvD77tqiPfQMB8GA1UdIwQY MBaAFERZ7Cpf1TkJxSOfTMjW0ymid5uxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTkt NmI0MzcyNjAyMDk2LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Ny9mMGFlNjItYzEwNy00M2NlLWE4YTktNmI0MzcyNjAyMDk2 LzEvUkZuc0tsX1ZPUW5GSTU5TXlOYlRLYUozbTdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPl5sVmRC wAwkA5Wefv6aEyXLUWvi0RXQeWYFQHXKYGTm82DcPyyXhRoGRFQVN5CoNl4OJj/b 5wkTlIwIMHpelidm2tSmlQlNTgoVPCCCsavg69J52mM+NzBVcEHjxMFqUf4xxyv4 yliwDQzSt8fqv9sXUfX8DYgweu/2/nNEyPQKTNai5Z393WxjiPQNqTLNJS0i2B9E LnacjWaVnBSejMoE9IY88nQqqT9oJYrV+t0fkxDD4Q3iIzvZuHkH5kE6raXRly34 0wNH0kRf3BvNQuZshwTQ3kkgP/NK+I3TpyTEcDM8Xtq48Uncem+dPOCrYUSTinAl mE0tTPEXPkReJA== -----END CERTIFICATE-----Generated at Sat Jun 6 12:14:39 2026 by rpki-client