$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: mltWakPLLiap1Xwrx/qgpPBDRL0pFyuCRbRtKKtxVpo= Subject key identifier: 1F:47:69:F6:74:AF:21:A9:64:01:D3:3E:2D:4F:96:4B:DC:3C:DC:26 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019E2F5FFB674661F6AD157B79C0995B1BDF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0C68 Signing time: Sat 16 May 2026 06:01:19 +0000 Manifest this update: Sat 16 May 2026 06:01:19 +0000 Manifest next update: Sun 17 May 2026 06:01:19 +0000 Files and hashes: 1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=) 2: 6WWr83TSCDVC54Q6T3lJdNTzhec.roa (hash: bqOXRmyjRmssTC0gEpcTMmCXeTubysghN9/RhsWfZ2I=) 3: 8d1TSvhqd070e1gxYQ3MnczO_xc.roa (hash: /b+G6xqm7avkCzyKrxmL+NHi0UtXKICGZqK/1lGYRPA=) 4: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: aBYtc5/wnYcJKNDs/4Kpe+QmEF5F+QuOA5D853ybU8k=) 5: FtMZg51tUzPpWWTljAx452AUEnY.roa (hash: Azl4uTerLwkA4yzzvMhJnM0N39SV857Tn7tfTMmNZBM=) 6: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=) 7: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=) 8: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=) 9: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=) 10: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=) 11: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=) 12: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=) 13: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=) 14: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=) 15: kGneqi-DhIJThQbxo8k8aRtzhC0.roa (hash: LH1+UqmotTldhBb3/js9nM0r1q8ixXwicRK2tem2Z4A=) 16: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=) 17: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 06:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:2f:5f:fb:67:46:61:f6:ad:15:7b:79:c0:99:5b:1b:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: May 16 06:01:19 2026 GMT Not After : May 17 06:01:19 2026 GMT Subject: CN=1f4769f674af21a96401d33e2d4f964bdc3cdc26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2d:3b:41:ec:49:8f:11:c4:13:d2:b8:0a:34: 5e:3f:8c:e7:de:8c:91:14:7e:18:9c:5b:92:60:16: 4b:67:c9:14:52:0f:4b:bf:07:7b:43:7f:b8:17:4d: e8:18:23:44:da:e9:d1:5f:73:6e:06:ed:3e:4a:4f: c9:5c:aa:0c:e8:39:e9:b5:5f:b3:66:c3:e7:e5:bf: 92:e4:7e:df:ae:6f:4b:ac:6a:06:f7:dd:f1:2a:68: 1b:f2:af:c5:23:63:6d:53:75:c1:72:f3:36:8e:df: 22:b1:a5:ed:70:87:bd:6b:10:c9:9a:e0:71:92:a3: a4:b8:ff:71:15:c2:d9:12:c5:bc:63:94:83:c4:f0: a4:90:d5:33:dd:7f:cf:c4:e1:09:13:80:c0:53:dc: 48:6c:6d:98:24:f2:00:5c:51:ca:0d:09:6f:01:a2: ba:df:08:ea:96:b1:34:00:b6:bf:ac:99:2e:59:fe: ec:7f:1d:42:58:0d:f8:bb:66:32:cb:69:05:5a:e2: 33:0d:99:d1:46:3b:66:fb:f7:45:6e:1a:78:fc:c3: c5:9a:81:40:0d:8b:c6:38:64:94:7a:1c:91:84:46: c3:a2:16:d6:36:fc:0c:5f:5c:58:33:9b:fd:19:32: fa:d3:79:b0:41:c0:c0:78:64:87:7a:d7:e9:b0:d0: bc:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:47:69:F6:74:AF:21:A9:64:01:D3:3E:2D:4F:96:4B:DC:3C:DC:26 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:78:27:67:52:6e:f3:a6:d9:e8:cb:db:56:22:ee:11:60:03: 5b:18:2c:eb:67:f0:d3:f8:b4:b7:c8:c0:40:11:76:11:c6:0d: 10:9c:47:ed:63:06:c0:da:f8:8a:c7:8c:4d:af:18:e1:40:2f: 54:70:61:b8:2c:ba:59:b7:7f:bc:ba:5b:8b:0c:e1:50:50:00: 2b:e2:1e:71:9b:81:72:57:4c:c6:6b:d7:0d:fb:b7:94:06:1b: c1:1a:4e:02:d9:03:6d:68:bc:19:b8:42:99:d1:3b:6f:6d:5f: dd:d6:01:7e:3f:b3:35:96:da:29:3e:6d:37:f0:5a:69:b6:b4: ca:33:d1:11:43:f9:6c:c7:c3:be:2c:97:b5:21:c3:78:5b:fe: 43:73:52:f3:42:af:a9:23:b0:29:2e:4c:f5:70:cd:a3:ba:67: 8c:47:be:8c:6f:92:43:8b:e7:a5:20:9e:f0:c8:4c:3a:38:ad: 30:5b:00:a9:fb:4d:a6:ab:8c:2f:f9:43:d9:c4:ce:9f:6b:4e: c6:e9:27:12:a1:5f:9b:f4:f3:51:82:a9:98:bc:8d:03:a4:ad: f9:d1:01:c2:49:52:e7:24:44:19:2d:31:69:f8:b3:17:c7:25: 2b:41:72:74:29:47:2e:fc:52:5f:cd:52:cf:65:35:94:b7:d6: 93:5c:d8:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4vX/tnRmH2rRV7ecCZWxvfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwNTE2MDYwMTE5WhcNMjYwNTE3MDYwMTE5WjAzMTEwLwYDVQQD EygxZjQ3NjlmNjc0YWYyMWE5NjQwMWQzM2UyZDRmOTY0YmRjM2NkYzI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqi07QexJjxHEE9K4CjReP4zn3oyR FH4YnFuSYBZLZ8kUUg9Lvwd7Q3+4F03oGCNE2unRX3NuBu0+Sk/JXKoM6DnptV+z ZsPn5b+S5H7frm9LrGoG993xKmgb8q/FI2NtU3XBcvM2jt8isaXtcIe9axDJmuBx kqOkuP9xFcLZEsW8Y5SDxPCkkNUz3X/PxOEJE4DAU9xIbG2YJPIAXFHKDQlvAaK6 3wjqlrE0ALa/rJkuWf7sfx1CWA34u2Yyy2kFWuIzDZnRRjtm+/dFbhp4/MPFmoFA DYvGOGSUehyRhEbDohbWNvwMX1xYM5v9GTL603mwQcDAeGSHetfpsNC8TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB9HafZ0ryGpZAHTPi1PlkvcPNwmMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmngnZ1Ju 86bZ6MvbViLuEWADWxgs62fw0/i0t8jAQBF2EcYNEJxH7WMGwNr4iseMTa8Y4UAv VHBhuCy6Wbd/vLpbiwzhUFAAK+IecZuBcldMxmvXDfu3lAYbwRpOAtkDbWi8GbhC mdE7b21f3dYBfj+zNZbaKT5tN/Baaba0yjPREUP5bMfDviyXtSHDeFv+Q3NS80Kv qSOwKS5M9XDNo7pnjEe+jG+SQ4vnpSCe8MhMOjitMFsAqftNpquML/lD2cTOn2tO xuknEqFfm/TzUYKpmLyNA6St+dEBwklS5yREGS0xafizF8clK0FydClHLvxSX81S z2U1lLfWk1zYrA== -----END CERTIFICATE-----Generated at Sat May 16 16:25:20 2026 by rpki-client