$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json) Hash identifier: Gfuy5sPCDskFndxN753P+dCP6peMnz1FpObk7z1BEV0= Subject key identifier: 7E:39:00:9C:2F:E7:2C:A5:D3:E9:34:44:C6:67:81:13:83:5F:64:B7 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019EF8DCAC0762EB94E41ACD1F54F5BB7826 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft Manifest number: 198B Signing time: Wed 24 Jun 2026 09:01:11 +0000 Manifest this update: Wed 24 Jun 2026 09:01:11 +0000 Manifest next update: Thu 25 Jun 2026 09:01:11 +0000 Files and hashes: 1: 0grhf2XqQS0PbS4vuPKgFUJ4CtY.roa (hash: CABCkAtRB5z7qM37KIh3THIotph2AI+4ndFJUzJYceA=) 2: 1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa (hash: EnRdzd4XuA4kPVdeCj63BslUTaDS51Ig0OU7ONlJnmA=) 3: 7TDWyr5P0SFkG_1wE_zPclx-LJY.roa (hash: mwM+t2AjMGEMAQqYQt7qupjhUbDte5jBQzS3pFunV5E=) 4: 8qGSgqlkHDr914hHEHKKhmYVXnE.roa (hash: frQT+RP9L9JKaXT7O/jbBEr9AzGG4KNbuIOuQ79wIgI=) 5: DY4whTo7KFMsapAbjbck9KXaN2Q.roa (hash: Z3/CUxyVCWOqALKEDmYApn9KMCw1qs9OcKyU5Z8f4RU=) 6: I7MkmQek9TX_IQqyz6tzXHWahHc.roa (hash: guTyQfwBcIAtfrQpROz3rqT3lhXR49lhfULYZRlg2k4=) 7: KSert21IyVLdzTzI3FZycKPooac.roa (hash: enNDLKMhC0/+6E/ssv2WFmJ1HNQhuj49stCcOOz9a3U=) 8: MmwxwXtvbBi5TfpYulx_NsdGK8I.roa (hash: CpEEnuPEEQ/Lt5U7MuRSDkJQEaOqlXnkUBi298BTux0=) 9: bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa (hash: irzJrYBfyhTaJEK1r/bwWtkoGmHHDM2zuMWB3WPr1vw=) 10: fCGYEGlgfKRgTz2ikieXaOSbdRE.roa (hash: FYEv1aBWOrr2YMP+bkGoFPlLBNqhRh64fwSr9xKf+yc=) 11: i_8Ltd9wbcfD0mAu6VNm7MTQ_Ac.roa (hash: LXGue0t/sMA2Z7REoNuZF9MeZQKOuFmufuOtJTo72DU=) 12: l46NNfdll0CkF-GyTagj6nVywQA.roa (hash: Bz8PpZZscQ882ZYbIbT/ZfP7vpdnPTaRcDmY5jTgHws=) 13: nhzxopyxtZ3ZNpXqMYr4_bVPXYw.roa (hash: XWNHr6I19HMZl/NwLAbZ/QL51wNU0N0GDXtB6ekbpGI=) 14: qXx90FSqDeV2TFA5z5gkzjt5MT4.roa (hash: GIcu6RV+4oLEen2ihNm9iiU1rL+T3G8HifCPdddrGao=) 15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: IoVNwENatu/ZdZXsdMlIjsAjkEJjDuFqelLYDOzM0ic=) 16: vy_B141YrrWxhcrnlEIljoTLECk.roa (hash: xj/TtKRTGyOPxeeyCWIfxLPuFe3BEl/1ac8Kc9RexP0=) 17: w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa (hash: jnFfoOHT3qsowloY5NEfrKxUN2Spb88yoOnFZYPFjK4=) 18: wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa (hash: dmGJEO5REXkLJeMFm08GEDBzv38Ylu5Doyq2n0KUXjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Jun 2026 07:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:f8:dc:ac:07:62:eb:94:e4:1a:cd:1f:54:f5:bb:78:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Jun 24 09:01:11 2026 GMT Not After : Jun 25 09:01:11 2026 GMT Subject: CN=7e39009c2fe72ca5d3e93444c6678113835f64b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:ab:20:8d:1c:ac:5b:aa:c1:93:63:64:21:db: aa:2d:89:5c:8b:69:2e:cc:47:92:8c:58:3d:26:3e: 4f:f0:9e:b7:08:02:64:ea:6d:21:79:4b:05:00:12: cd:61:8f:67:84:11:f1:5a:84:85:1b:cc:bb:ab:e2: 20:b7:e6:75:50:5b:8a:51:91:a6:99:83:23:9c:a9: 51:b4:28:ba:69:cc:1b:5a:ea:91:78:f4:cc:1d:dd: 1a:26:bd:67:11:cb:83:d3:ba:50:f5:96:fa:b9:e8: fd:ba:e8:c2:4e:76:5a:f6:33:e6:ef:35:74:0a:49: 6f:85:1b:cf:e5:28:8a:6f:92:0e:8f:ee:da:3a:4f: c4:99:d8:a5:e8:9e:ac:b9:12:b6:72:11:5f:f7:14: 54:5d:45:3f:cd:0a:de:22:d0:87:7d:c9:14:33:82: b7:1f:30:54:b1:32:df:17:09:28:e8:61:eb:9b:4c: ec:b3:47:bf:ca:99:99:7c:3f:f4:47:db:76:38:31: b2:46:6a:70:00:0a:cc:65:86:f5:77:0e:ea:03:44: 30:a7:ee:87:95:e6:9a:ad:81:61:0d:1c:fa:7c:62: 0f:a7:9d:ce:7d:08:ee:46:be:40:f6:15:18:7e:a6: 05:e9:66:78:2b:d9:21:6c:ce:94:ac:09:43:9e:89: 5b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:39:00:9C:2F:E7:2C:A5:D3:E9:34:44:C6:67:81:13:83:5F:64:B7 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:57:68:98:14:db:1a:9c:40:79:a3:81:d4:55:36:ec:53:ec: 0d:03:f1:80:9a:59:1f:dc:64:51:06:0c:14:22:e2:c8:4e:9d: d5:fd:69:19:69:f3:b6:8c:30:af:b2:c5:3c:bb:21:38:18:90: fa:90:1a:05:7d:4e:3e:21:46:e4:6c:f2:4f:3a:d2:4f:3f:67: 46:de:c8:34:d6:3a:8b:36:53:ab:94:84:bc:a7:c3:c2:5a:92: a9:83:10:f6:15:68:2a:30:ef:b3:d6:ee:9a:b3:03:cc:67:30: b5:f4:d6:8f:94:72:ed:89:79:a2:1d:45:8d:ea:04:bd:64:93: bd:e2:d2:57:b8:04:0b:41:32:98:2e:56:17:ee:39:80:dc:d5: fd:33:ab:1f:52:f2:2b:0b:91:2b:b4:be:fa:ab:f5:95:4a:9d: 0d:d4:35:d8:ad:b1:fa:57:32:71:81:d3:57:0e:dc:fd:32:0b: 44:5f:23:1b:85:55:cd:4e:8b:d3:8e:fc:64:b8:2d:1a:22:c7: ea:07:e3:1c:d2:3f:5d:b9:a8:e5:34:74:c2:60:09:c4:75:ce: 87:11:72:4d:c4:71:a3:22:01:a8:90:0a:a1:05:73:d1:69:0c: e7:06:62:a2:1f:7e:30:81:f0:ea:f5:43:c4:a1:14:b4:f6:d4: 19:01:e6:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ743KwHYuuU5BrNH1T1u3gmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwNjI0MDkwMTExWhcNMjYwNjI1MDkwMTExWjAzMTEwLwYDVQQD Eyg3ZTM5MDA5YzJmZTcyY2E1ZDNlOTM0NDRjNjY3ODExMzgzNWY2NGI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qsgjRysW6rBk2NkIduqLYlci2ku zEeSjFg9Jj5P8J63CAJk6m0heUsFABLNYY9nhBHxWoSFG8y7q+Igt+Z1UFuKUZGm mYMjnKlRtCi6acwbWuqRePTMHd0aJr1nEcuD07pQ9Zb6uej9uujCTnZa9jPm7zV0 CklvhRvP5SiKb5IOj+7aOk/Emdil6J6suRK2chFf9xRUXUU/zQreItCHfckUM4K3 HzBUsTLfFwko6GHrm0zss0e/ypmZfD/0R9t2ODGyRmpwAArMZYb1dw7qA0Qwp+6H leaarYFhDRz6fGIPp53OfQjuRr5A9hUYfqYF6WZ4K9khbM6UrAlDnolbkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH45AJwv5yyl0+k0RMZngRODX2S3MB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxldomBTb GpxAeaOB1FU27FPsDQPxgJpZH9xkUQYMFCLiyE6d1f1pGWnztowwr7LFPLshOBiQ +pAaBX1OPiFG5GzyTzrSTz9nRt7INNY6izZTq5SEvKfDwlqSqYMQ9hVoKjDvs9bu mrMDzGcwtfTWj5Ry7Yl5oh1FjeoEvWSTveLSV7gEC0EymC5WF+45gNzV/TOrH1Ly KwuRK7S++qv1lUqdDdQ12K2x+lcycYHTVw7c/TILRF8jG4VVzU6L0478ZLgtGiLH 6gfjHNI/Xbmo5TR0wmAJxHXOhxFyTcRxoyIBqJAKoQVz0WkM5wZioh9+MIHw6vVD xKEUtPbUGQHmdg== -----END CERTIFICATE-----Generated at Wed Jun 24 13:33:45 2026 by rpki-client