$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: 3G4ZAvLQ+/gzaeQ/G8ONeAr1dl/IdU9SYxYnhaggUGE= Subject key identifier: 00:A2:61:95:16:94:13:CB:C5:2F:C8:8F:DD:B7:19:70:88:1A:22:E1 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 019EB6206FE0F89E89B2A39B8FC0D6A7E8B5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 197F Signing time: Thu 11 Jun 2026 10:00:39 +0000 Manifest this update: Thu 11 Jun 2026 10:00:39 +0000 Manifest next update: Fri 12 Jun 2026 10:00:39 +0000 Files and hashes: 1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=) 2: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=) 3: EpKlZvm1sQunk4TyUL8-X4yYT-s.roa (hash: tOu5I+gySB5LV5V4nchtnSTJlY0KTUc/ZBP+vEiIXg8=) 4: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: Pd5hKZXQXFmokG6YmUPkCxbRa0LhElawVEWljujUzj0=) 5: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=) 6: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=) 7: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=) 8: ajchcB005SwdhHOonkg_FPYCObk.roa (hash: iRaNo1hXeWmGHavpqJaMPyQrwMjNl6Bwb7CatuzhcAo=) 9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=) 10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=) 11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=) 12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 10:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b6:20:6f:e0:f8:9e:89:b2:a3:9b:8f:c0:d6:a7:e8:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Jun 11 10:00:39 2026 GMT Not After : Jun 12 10:00:39 2026 GMT Subject: CN=00a26195169413cbc52fc88fddb71970881a22e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:9e:49:55:b1:50:c6:a2:d1:b9:a2:36:bc:a1: 34:60:f3:d8:07:bf:46:31:1b:da:f2:af:12:58:93: aa:7b:82:b1:ff:6d:37:14:f3:3c:c4:23:c5:22:b1: d4:61:e5:58:d0:88:bc:75:e1:04:a9:79:45:ba:b3: 93:7d:c3:6c:7d:b9:84:b7:20:6b:e4:80:fe:e7:67: df:94:2e:68:2d:cb:da:29:13:e3:f4:96:1d:ec:35: c3:f8:9c:23:92:56:5d:30:58:11:d8:d6:06:e4:3a: fe:d4:ee:bc:48:fc:c3:89:4b:9e:c5:11:ae:b7:37: 4c:31:8d:75:5d:8d:ac:89:71:b0:90:37:07:9c:b8: f7:ff:d3:e9:fc:b1:77:ac:10:06:c2:34:1b:45:33: 68:fc:95:cd:91:67:a4:a9:77:41:45:d1:8d:63:dd: 5c:09:83:8a:21:80:da:7b:51:24:9f:af:a9:b2:4e: 07:3a:5a:9f:a3:66:d2:18:fd:a3:09:e7:24:8a:c2: 68:05:b8:96:13:9e:63:cd:aa:2a:64:6f:f0:04:6f: 36:a1:e0:3f:da:14:db:d5:27:bb:66:4f:52:06:f5: d8:51:03:99:73:67:50:58:15:fd:38:21:64:8c:a0: 9f:68:d7:b6:01:70:a4:b6:7d:1d:77:80:c3:8a:fd: 02:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A2:61:95:16:94:13:CB:C5:2F:C8:8F:DD:B7:19:70:88:1A:22:E1 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1c:21:68:b8:08:42:1b:49:8e:7e:f5:50:a0:ac:87:72:67: e9:8d:ab:7d:c8:53:76:2f:4a:59:d9:76:36:b7:99:95:d6:ac: f3:11:00:a8:10:35:fe:77:ba:31:eb:da:d4:05:82:bb:35:4c: 58:21:ce:af:7d:85:bd:22:e9:35:18:bf:37:0d:e5:c5:ed:4e: 8f:12:63:ad:4b:f7:c6:47:e1:86:4d:2f:6c:34:83:4f:50:b8: 26:37:d5:46:21:1e:6f:04:36:60:a6:86:30:00:f1:15:28:fd: b9:d9:03:54:1d:5a:5d:31:e3:41:d4:4d:cb:21:7a:22:60:f3: 77:cd:48:cc:5b:a1:58:79:3a:ad:c9:6a:e4:a2:cb:dd:44:3f: 75:b5:61:dc:99:c4:69:20:51:e8:df:0a:ef:6c:bf:61:f0:dc: eb:7d:ba:b5:bb:e2:bd:66:9a:2c:c6:c8:7e:f0:c7:d3:bf:67: 27:c2:37:72:59:69:95:bb:e9:f2:9e:29:2d:33:31:f4:dd:38: f4:eb:3a:bc:8b:82:bf:3d:72:00:6c:57:54:fe:a2:10:87:e9: ba:69:a7:a6:5f:68:37:28:20:35:94:91:57:05:1f:7d:56:94: a8:98:28:d2:59:e0:2b:53:b2:9e:b0:b0:f5:ec:1e:de:32:cf: 15:cb:35:2e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ62IG/g+J6JsqObj8DWp+i1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwNjExMTAwMDM5WhcNMjYwNjEyMTAwMDM5WjAzMTEwLwYDVQQD EygwMGEyNjE5NTE2OTQxM2NiYzUyZmM4OGZkZGI3MTk3MDg4MWEyMmUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA755JVbFQxqLRuaI2vKE0YPPYB79G MRva8q8SWJOqe4Kx/203FPM8xCPFIrHUYeVY0Ii8deEEqXlFurOTfcNsfbmEtyBr 5ID+52fflC5oLcvaKRPj9JYd7DXD+JwjklZdMFgR2NYG5Dr+1O68SPzDiUuexRGu tzdMMY11XY2siXGwkDcHnLj3/9Pp/LF3rBAGwjQbRTNo/JXNkWekqXdBRdGNY91c CYOKIYDae1Ekn6+psk4HOlqfo2bSGP2jCeckisJoBbiWE55jzaoqZG/wBG82oeA/ 2hTb1Se7Zk9SBvXYUQOZc2dQWBX9OCFkjKCfaNe2AXCktn0dd4DDiv0CxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFACiYZUWlBPLxS/Ij923GXCIGiLhMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThwhaLgI QhtJjn71UKCsh3Jn6Y2rfchTdi9KWdl2NreZldas8xEAqBA1/ne6Meva1AWCuzVM WCHOr32FvSLpNRi/Nw3lxe1OjxJjrUv3xkfhhk0vbDSDT1C4JjfVRiEebwQ2YKaG MADxFSj9udkDVB1aXTHjQdRNyyF6ImDzd81IzFuhWHk6rclq5KLL3UQ/dbVh3JnE aSBR6N8K72y/YfDc6326tbvivWaaLMbIfvDH079nJ8I3cllplbvp8p4pLTMx9N04 9Os6vIuCvz1yAGxXVP6iEIfpummnpl9oNyggNZSRVwUffVaUqJgo0lngK1OynrCw 9ewe3jLPFcs1Lg== -----END CERTIFICATE-----Generated at Thu Jun 11 17:33:38 2026 by rpki-client