$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft File: ldEI8OhYaMK759ttc3cDTBMesiQ.mft (raw, json) Hash identifier: vTB5+vrgxtGl2IdGuBIh62xrIR97NNGP1obyzAQddSQ= Subject key identifier: DE:63:23:15:12:DB:9C:F6:AA:A6:6C:32:A0:DE:7A:BA:87:B7:29:09 Authority key identifier: 95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24 Certificate issuer: /CN=95d108f0e85868c2bbe7db6d7377034c131eb224 Certificate serial: 019E91019744523865262E275E130E315F92 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft Manifest number: 3B Signing time: Thu 04 Jun 2026 05:01:00 +0000 Manifest this update: Thu 04 Jun 2026 05:01:00 +0000 Manifest next update: Fri 05 Jun 2026 05:01:00 +0000 Files and hashes: 1: 0PDWE0nMAiZTt99GCoWTLfpUdds.roa (hash: 10Qjb6N84Go0JfMlcwy2hguZG6CNNMPMXT+0qVZv6NQ=) 2: 23lKamEeJHiGz7Kfn-vVx9ONIS4.roa (hash: 6qSsbUjIvNUXcAg3dXx4AV4tSipluzB4BcgS9769SHs=) 3: 3FWP7V-FXpjXJ8qT_nK1ApWUTe8.roa (hash: 4qunKMd7lr5mGLKWGnGHlTizo4GbcKUIIoZzDR/Kfi8=) 4: 4NIgVNVxtvl1Le7xM9tk07FEDr0.roa (hash: D8yrqmJYc77fPtZi/3U1V+IUlhSOYsgr+HPqobUY/Dk=) 5: 8LF087BDuq0YCtqABhvZDhJuKgE.roa (hash: vUokScueY05xBAfXIPwFjPkCcf+xEy6sQiCMIDxpohs=) 6: G85sD1kwmB21ByXHaKc0GV6KI9o.roa (hash: 7OuA71y4NDBK43Q3q72+2Xt8GEEBR4zBYlY0WhQZpHg=) 7: I_lv8f4Zd87SDL3QiO0bVVg2MT0.roa (hash: LnGuklmE++SRFqSxhtkYU2out4UNjwQParJVowwKeL0=) 8: K5ZK_0yHF7TKo5P6sKE9HQsx4as.roa (hash: NUbkiqk2ewgCgfuJMa/I176Kz4nu4H8nt4fQxUeycrw=) 9: OSAPeBxLXL8WEMcfNPbvB1u1I9U.roa (hash: gjD3OrTjJ9JSR5cEEkMdNVWzLp3Vm7jH9g2fpLz34KI=) 10: OztDmiepQwRYhrix-PRGHdAz6M8.roa (hash: sLCeAtP5z3iG+JsX1fowyEeFT/lZ+JODD3Wy5bQ7SzQ=) 11: SfhXmPqo2TkF6qz1ZFtHiaQPNso.roa (hash: R4Cg09rYG8YgQq3VlbbRT6XTdxzKjoe3T18chTy2C1Y=) 12: XPOEWfnMVhe80O0PhqrGqhClcfw.roa (hash: SlGsDafqes4vsxe9B3q0eS5Wdrhz1vStfHdoa8gVTIw=) 13: gdHHIht-p_J7WYLpqWp6qtdyvi4.roa (hash: nxF0HQ/YaR5bdB5T1haeYt6jDUjZIF4u9B0Mkug8U2U=) 14: j5XXmlGGY1dqOLF0DNHKK3ZRzkA.roa (hash: AiHtZhjIv2Oz/tKHfl8zkrHe8iUj0cOjhIMgLwQ0U6Y=) 15: ldEI8OhYaMK759ttc3cDTBMesiQ.crl (hash: YiRe8uKnjfHJKIYVlwIltlH69mQDHJ14RQIu9u/Ts0w=) 16: o8ligzOvQoUkECiT-w6w1996f1Q.roa (hash: qnsWdMt0ZdxKFxsTFLinPKUDT7ezBqYoDae3GnHUbxo=) 17: tleY9DQ64PaPto3LrGnd_Er2U3o.roa (hash: WHULtdCxB0KTLDfvnbk0GZrP6t4NDTlF81JH8Xpd1rY=) 18: uZbkTMDgiuHZdZDDd4qspq7Rqmk.roa (hash: qDORJv5XEXaYN8VvbkYvbmDenwpX1dMKSW1ci6gD9CA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 04 Jun 2026 22:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:91:01:97:44:52:38:65:26:2e:27:5e:13:0e:31:5f:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=95d108f0e85868c2bbe7db6d7377034c131eb224 Validity Not Before: Jun 4 05:01:00 2026 GMT Not After : Jun 5 05:01:00 2026 GMT Subject: CN=de63231512db9cf6aaa66c32a0de7aba87b72909 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:9b:df:0b:0c:e8:05:7d:ee:bc:e9:25:e6:92: 1e:5f:b2:31:e7:05:74:67:b2:fe:9e:75:c6:ff:8d: 44:67:3b:c0:49:1b:f7:1b:0d:93:a1:3a:8d:ab:2c: 4c:fc:ac:10:74:3f:da:2e:ae:48:5d:a2:e5:de:11: 9f:22:08:98:e4:67:fc:d6:7d:4c:b6:fe:b4:c8:37: c3:26:de:c0:07:f3:6f:9f:95:4f:1c:de:30:3f:c7: c1:e5:54:f6:76:9d:38:2e:bd:3f:31:de:25:c9:00: 21:f9:7e:6a:19:8a:8e:9e:77:49:10:52:63:c4:35: 30:a9:0f:54:e3:bf:4a:9a:b9:f8:07:80:da:b5:fd: b9:c4:db:13:b0:81:4b:33:59:64:ab:26:69:dc:04: c6:ed:12:5e:f6:ed:d9:c3:f8:ef:72:eb:3a:00:33: f3:91:14:eb:05:65:58:b7:43:d1:96:0e:f9:ed:08: b3:80:00:08:ea:ad:93:6b:36:09:95:8e:b3:db:60: ba:48:05:3f:ea:a5:ff:82:63:cc:05:f6:9c:50:69: 6d:16:1c:9d:c9:45:b4:fd:b9:16:e7:2e:c5:88:d1: 76:21:ab:8e:22:4a:d2:88:9f:fe:e9:b2:d6:e7:f7: ff:2e:2a:f6:f3:bd:35:65:52:b6:26:b4:a2:1a:41: 80:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:63:23:15:12:DB:9C:F6:AA:A6:6C:32:A0:DE:7A:BA:87:B7:29:09 X509v3 Authority Key Identifier: keyid:95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:9d:1c:ba:4d:0e:ef:44:b2:58:8f:8c:ef:04:19:86:25:f1: 46:42:9c:cc:0d:6b:67:52:b2:fc:39:46:9d:68:04:11:79:61: 84:a8:f9:65:04:56:40:74:1f:d8:b3:24:55:61:de:31:d3:39: be:32:29:2a:17:12:62:99:1e:78:a0:62:1f:d1:e8:91:4e:a6: 38:96:75:35:2c:c2:ba:63:dc:70:2c:e2:54:76:6f:aa:89:12: 77:a3:65:6e:f6:47:57:3e:15:72:74:bd:b6:5a:d3:9a:76:b9: d9:63:51:da:40:ec:1c:ad:65:fc:63:ed:ec:93:af:14:4b:c2: f5:dc:c1:09:87:4d:5f:26:13:5e:d6:00:a7:ac:b4:a7:e2:7e: de:b9:eb:dc:43:ed:dd:89:9a:9a:94:ab:c3:c4:8c:fb:70:26: e5:e1:2d:03:5e:49:5a:ed:d4:c0:ef:99:02:6b:77:c5:5c:e7: 87:ae:6b:25:79:2a:9b:a8:18:09:ad:aa:fd:ae:47:a8:d7:41: 31:01:5b:68:5f:96:79:59:69:28:24:e0:ab:52:95:70:da:4d: cf:cd:7e:6e:5a:0b:10:76:76:eb:c4:ef:e1:f1:ca:7c:a9:e1: b8:51:fe:5d:97:fd:0c:dc:14:91:52:00:44:3f:59:79:20:24: 04:76:15:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6RAZdEUjhlJi4nXhMOMV+SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk1ZDEwOGYwZTg1ODY4YzJiYmU3ZGI2ZDczNzcwMzRjMTMx ZWIyMjQwHhcNMjYwNjA0MDUwMTAwWhcNMjYwNjA1MDUwMTAwWjAzMTEwLwYDVQQD EyhkZTYzMjMxNTEyZGI5Y2Y2YWFhNjZjMzJhMGRlN2FiYTg3YjcyOTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpvfCwzoBX3uvOkl5pIeX7Ix5wV0 Z7L+nnXG/41EZzvASRv3Gw2ToTqNqyxM/KwQdD/aLq5IXaLl3hGfIgiY5Gf81n1M tv60yDfDJt7AB/Nvn5VPHN4wP8fB5VT2dp04Lr0/Md4lyQAh+X5qGYqOnndJEFJj xDUwqQ9U479Kmrn4B4Datf25xNsTsIFLM1lkqyZp3ATG7RJe9u3Zw/jvcus6ADPz kRTrBWVYt0PRlg757QizgAAI6q2TazYJlY6z22C6SAU/6qX/gmPMBfacUGltFhyd yUW0/bkW5y7FiNF2IauOIkrSiJ/+6bLW5/f/Lir28701ZVK2JrSiGkGAdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5jIxUS25z2qqZsMqDeerqHtykJMB8GA1UdIwQY MBaAFJXRCPDoWGjCu+fbbXN3A0wTHrIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbGRFSThPaFlhTUs3NTl0dGMzY0RUQk1lc2lRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt NzJmYjk3ZDU5Y2U0LzEvbGRFSThPaFlhTUs3NTl0dGMzY0RUQk1lc2lRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0 LzEvbGRFSThPaFlhTUs3NTl0dGMzY0RUQk1lc2lRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdJ0cuk0O 70SyWI+M7wQZhiXxRkKczA1rZ1Ky/DlGnWgEEXlhhKj5ZQRWQHQf2LMkVWHeMdM5 vjIpKhcSYpkeeKBiH9HokU6mOJZ1NSzCumPccCziVHZvqokSd6NlbvZHVz4VcnS9 tlrTmna52WNR2kDsHK1l/GPt7JOvFEvC9dzBCYdNXyYTXtYAp6y0p+J+3rnr3EPt 3YmampSrw8SM+3Am5eEtA15JWu3UwO+ZAmt3xVznh65rJXkqm6gYCa2q/a5HqNdB MQFbaF+WeVlpKCTgq1KVcNpNz81+bloLEHZ268Tv4fHKfKnhuFH+XZf9DNwUkVIA RD9ZeSAkBHYVJg== -----END CERTIFICATE-----Generated at Thu Jun 4 07:55:27 2026 by rpki-client