$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json) Hash identifier: PIT1VxnlpHvJxbJ8k/JnTnynhczJGGm6FwuJBGQCLm8= Subject key identifier: 63:B1:54:F6:37:10:61:54:58:E5:5C:6A:DC:7F:03:A0:C7:FB:16:3A Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 019F1265B135DF29A072FE37A876DA8A678B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft Manifest number: 13AB Signing time: Mon 29 Jun 2026 08:01:22 +0000 Manifest this update: Mon 29 Jun 2026 08:01:22 +0000 Manifest next update: Tue 30 Jun 2026 08:01:22 +0000 Files and hashes: 1: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: WoRZgRN93bkRuL57aswWpvp4w7Rat4BISmgo9CdK5jI=) 2: 8Go9HdfslzEYYhsG162QyXxlPrg.roa (hash: Z3SgqSpV46u7mlUHzliku+RypQp4wBZXxjHASyqRXL8=) 3: 8Nrd_fmZeNL0BSH4rv9CXgqM66c.asa (hash: K5I1pf6HiAifVMzN9jkKOGVybg6UiRdsC7/R2MM8fPE=) 4: H39SCmBhfIAL4P80AMbv9vc00_8.roa (hash: cOtYtuq75jARRK/4tVOM91mG7sEB0LZ3Ph2khyzi9O8=) 5: HVUz-pGSDFLTZZg2T2E4peiELEU.roa (hash: wezVJrmcFZ7JTwvDKwpa7PsKgNm5GHs3DhA4vBq4DQY=) 6: HYEI0JEwrvGeEpfpFZTeCg5EH8g.asa (hash: ARMsZy0uoDJPAUtmO4+hjp62F/uBIE4HsM0N2UwPbqY=) 7: K_c7eVlzPkp6rhiHCxnA36F4-xc.roa (hash: 6S2BWd2mNzmFbAB+J2b2FN4NJksfT7p6QVbD3sv/VL8=) 8: T13_FpAETOo3zpDz-m5p4Yo43tU.roa (hash: qg17lmbhvQRAnJl5UzZbEihU9vs9JAWpSUDuAPfFKjI=) 9: WtD6mKlfmpS7KMd25I2nHKzWkGQ.roa (hash: 8kdIDFqVwJHFysKGYVAc28Ycb8D240Eugchj4O4w7C4=) 10: Xf3bZPWk0_bi28_oQ2232QrSJQQ.roa (hash: ffz/L4K0R9hVyQDyQ+n17EfkZ224IbQsJdVzmjU75wU=) 11: _rHhp3dSYrAKOlnkapqRB1yefkc.roa (hash: oed1XeIiLPoYidtZJ6x5WeunpoTBMJO8BbUCjhaG6qE=) 12: ek9-6det_a8IxIqHsWia7-WY-A4.roa (hash: w03N+IHDbJSsXXRy6rZBj/rl7phalEGurLQVXj4bedQ=) 13: hmPo_o1Wwb_fc_jDeTYw0RTyias.roa (hash: buOdy6wcshKPWdUb86nMrSnh3bWvA83WVFp55tOqeX4=) 14: kE6tecKZ0fG9qC_JtCBXfpG4g1A.roa (hash: CDpFmGMaqgiUJFuGVEP8AvEce972KDkWrlC2GvXzIOA=) 15: sD9_KvYGNd0gSG9dqlTzmRlJx9g.roa (hash: cpPGHuiYhlqjVa2ZLptrQ2LGEEYQM6YwJPoAsBdLFRc=) 16: xjJ15D14LS-olVuJZ7jEwkrPC0k.roa (hash: x/bc5dXq+6Lyq8Lw/fVl1pcZIUuQ/Nrr00RhE1xkTLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 30 Jun 2026 02:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:12:65:b1:35:df:29:a0:72:fe:37:a8:76:da:8a:67:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: Jun 29 08:01:22 2026 GMT Not After : Jun 30 08:01:22 2026 GMT Subject: CN=63b154f63710615458e55c6adc7f03a0c7fb163a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:bc:b5:3f:cd:e3:80:96:b9:6c:6b:e2:fd:ef: 6a:c4:44:1f:2c:89:e8:06:34:77:02:b9:9d:61:ed: 06:a6:12:5f:b9:eb:f0:2d:ea:32:99:27:34:26:ad: ad:e9:4e:33:31:58:50:d2:42:09:91:17:83:16:2d: 58:5f:0e:7c:c5:33:50:87:a6:52:66:c9:a5:b4:70: f4:eb:dc:e3:e7:fa:30:7b:ff:56:9e:44:7e:73:ea: 65:73:3c:c0:0f:69:8f:b5:10:f3:9f:9f:66:de:3b: 5d:d5:27:32:f0:37:be:86:eb:4c:ac:73:cd:2c:93: 80:b0:a6:a6:0e:46:97:90:af:15:ef:76:bd:61:cf: 1e:3d:8c:b6:24:f8:12:ac:23:12:2f:d6:87:9c:9f: fd:1e:6e:c3:49:bb:40:05:1b:41:f2:5b:fc:df:54: 69:20:0c:a3:7c:08:cb:a6:88:22:a0:17:af:be:e1: d5:85:6f:a1:fd:26:5d:56:63:e3:04:2c:d4:0c:f6: 5d:b6:d0:b3:f0:73:bd:19:3b:61:af:b0:fd:2f:d1: 64:a4:bb:c1:70:92:09:f1:30:7c:9a:a8:dd:e8:53: e9:3b:a1:a1:c3:7e:f8:c1:27:25:ea:ae:db:ce:75: 35:f8:2e:9c:87:cd:a1:d6:cc:4d:e1:d6:49:f9:bc: 2c:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B1:54:F6:37:10:61:54:58:E5:5C:6A:DC:7F:03:A0:C7:FB:16:3A X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:50:1f:ec:fe:a0:3c:cd:3c:73:a1:53:68:6d:0c:14:87:c4: 57:d2:5a:b0:0e:1b:e7:3a:4e:f7:6f:30:e6:71:71:b8:29:81: cd:e4:f5:5d:a4:01:96:1f:5c:82:73:36:8c:b4:d0:a6:9f:6a: 2e:83:eb:20:d0:e3:80:f1:f0:5c:6c:88:1f:4b:f0:6a:4d:8a: a0:12:aa:5a:1b:2e:86:9d:2d:d5:98:08:97:0d:34:39:53:96: 7d:58:79:3e:f3:3d:3a:70:13:7d:38:7d:df:47:b6:ba:00:27: 32:7e:1f:45:4b:d8:ed:3e:cd:41:07:c6:ed:6f:ea:ac:0c:60: 71:98:c5:bd:86:5d:b5:d4:15:2c:58:bc:97:f5:dc:4d:3e:58: df:73:33:8b:39:ea:90:fb:ea:2a:bb:f9:e8:d1:a4:12:5b:42: 3d:a7:c8:18:ac:20:f5:56:fc:c3:47:04:3f:96:77:37:c0:33: fb:21:bd:ca:06:08:99:79:66:1c:14:29:0e:a5:18:cc:84:84: 85:bf:06:e5:a5:2a:7e:94:45:ea:1b:c2:05:84:1e:1e:41:a1: eb:47:06:37:89:a0:ea:23:70:be:9f:49:cf:3b:b4:85:34:7b: 74:cd:77:db:2b:72:55:2e:6e:36:fc:c8:6d:69:11:76:d8:c8: ba:0d:d5:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8SZbE13ymgcv43qHbaimeLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjYwNjI5MDgwMTIyWhcNMjYwNjMwMDgwMTIyWjAzMTEwLwYDVQQD Eyg2M2IxNTRmNjM3MTA2MTU0NThlNTVjNmFkYzdmMDNhMGM3ZmIxNjNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqby1P83jgJa5bGvi/e9qxEQfLIno BjR3ArmdYe0GphJfuevwLeoymSc0Jq2t6U4zMVhQ0kIJkReDFi1YXw58xTNQh6ZS ZsmltHD069zj5/owe/9WnkR+c+plczzAD2mPtRDzn59m3jtd1Scy8De+hutMrHPN LJOAsKamDkaXkK8V73a9Yc8ePYy2JPgSrCMSL9aHnJ/9Hm7DSbtABRtB8lv831Rp IAyjfAjLpogioBevvuHVhW+h/SZdVmPjBCzUDPZdttCz8HO9GTthr7D9L9FkpLvB cJIJ8TB8mqjd6FPpO6Ghw374wScl6q7bznU1+C6ch82h1sxN4dZJ+bwsoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOxVPY3EGFUWOVcatx/A6DH+xY6MB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAclAf7P6g PM08c6FTaG0MFIfEV9JasA4b5zpO928w5nFxuCmBzeT1XaQBlh9cgnM2jLTQpp9q LoPrINDjgPHwXGyIH0vwak2KoBKqWhsuhp0t1ZgIlw00OVOWfVh5PvM9OnATfTh9 30e2ugAnMn4fRUvY7T7NQQfG7W/qrAxgcZjFvYZdtdQVLFi8l/XcTT5Y33Mziznq kPvqKrv56NGkEltCPafIGKwg9Vb8w0cEP5Z3N8Az+yG9ygYImXlmHBQpDqUYzISE hb8G5aUqfpRF6hvCBYQeHkGh60cGN4mg6iNwvp9Jzzu0hTR7dM132ytyVS5uNvzI bWkRdtjIug3VoA== -----END CERTIFICATE-----Generated at Mon Jun 29 10:38:31 2026 by rpki-client