$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json) Hash identifier: dotylHrCwMlfE55ZsWUdQMGDMVftZ0RyambUP+KU2gc= Subject key identifier: E0:FF:57:CD:64:FF:EE:8F:06:BD:59:39:CF:05:8D:4F:AB:88:B7:AA Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 019E9A72204E86CAE9D79758E315A3012AFA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft Manifest number: 0547 Signing time: Sat 06 Jun 2026 01:00:30 +0000 Manifest this update: Sat 06 Jun 2026 01:00:30 +0000 Manifest next update: Sun 07 Jun 2026 01:00:30 +0000 Files and hashes: 1: 1-lGH1nu7CvzHWYEiuO1j3MNSzJY.roa (hash: 9/b6BBId/Kn5DB9SmUCWKxBwcAQLvltddZcgBj268UQ=) 2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: ZspouYYAD9uJmxAl8VtaxaXOy9Q2ziYHtpojLR6Yk+o=) 3: 4vxZx7uBqQQ6FyEF2MVBFY1WSaQ.roa (hash: yT8MYmQtVQnTBHZPhbP/WPtpcUBRa3XEcKCSlPgpz98=) 4: AfpxLvj3BiyLwMcA6kKVrdFgW6Y.roa (hash: KKSEdsLLrws/RATwLIqwcq742JLEElRzqndIEau2IyI=) 5: QxbU9vvhcA75ENS1lZHkpNyfErk.roa (hash: yv8oGh8GGZWvW+9jiR8h6piajHrkuA5egN2MppGfk+w=) 6: SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa (hash: kRtJ8SNMjyDbUxu98aNT/p/eOM2tAQZf30u+RPiQ1f8=) 7: _msrPFl7j-h-scWfwUUyG5vmI0Q.roa (hash: C0U0oHsxASzeTthWbTeZAy4SqW+0azDdamHmVesAW1U=) 8: gA8K0uCGARt0iMHybj1fl0_l9iM.roa (hash: oF5vhF0FQd0hgOhUSqj7/e1FPt2MEHPpP+wGYckBTNY=) 9: koXw3LvEwrzn9qCWrcZnQPR8iMs.roa (hash: gNqdDH2AralOcsOhDuMpE5EfKzaR6A0T5YWUJwlNSmY=) 10: l8TSNwU2prw2gsntuaJ9QdkRHKw.roa (hash: gb+3/D4Y4zC34TYQcD7+qVWbJgAtu0xBM1r/dmFP8pw=) 11: mnp_uzPNuPiUK3TrUmFNgiNmNY8.roa (hash: 9S7aILwvPQVBbceAkPURmV9yU8Bufrpsa3/9WSfefOI=) 12: nmunvZ8NjUAQxyXLc7q3E6asADA.roa (hash: bcuDcNnBDq7F5VI75bQ3a3MYz4yXIjZXvHo8ZRs1H3g=) 13: qbUtGSmF4OJDy4q4dlRGp4OciDs.roa (hash: VVCFN7s9B67WrTXffUSFAE1mRjFGjdVcuJGLxmq/AY8=) 14: tUYOdiUxF4HxrSVOg847WMoBqws.roa (hash: N6nWp89HDr0pIhLLPi1oB+mkzKMLsBnFNGgdLRBYN30=) 15: tevOSAyMp-1DHWOc8A6PPAJZLUs.roa (hash: /4F2MJ2YCwSX6I/W4Ebbet4QyTAZ6jd4w/oq57g4Qcw=) 16: xOtKmGFOQ0Si4ry-DnEnpbMZzfw.roa (hash: uloNgiaPX4XD2hk6wXEnVMKHkzySU+UwLh3IKRIIyAY=) 17: xUHiwbmdxyG7zhauG_jIHmi1gno.roa (hash: 03dvwh0NeW2YpGtwR7ObeLzcikhW32DldU3aMDZzsfI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Jun 2026 01:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:9a:72:20:4e:86:ca:e9:d7:97:58:e3:15:a3:01:2a:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Jun 6 01:00:30 2026 GMT Not After : Jun 7 01:00:30 2026 GMT Subject: CN=e0ff57cd64ffee8f06bd5939cf058d4fab88b7aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:20:48:3e:23:fe:6a:90:76:92:ee:7c:05:a7: 8c:85:6a:48:12:df:ae:2c:3d:16:48:72:66:01:fe: 4e:0d:17:9a:fb:c2:1e:8b:94:f5:43:a8:19:eb:f2: e3:23:5f:9c:76:25:6b:2c:07:69:e5:c7:51:96:a4: 40:e0:ea:3d:fa:e4:b7:1b:46:2b:0a:4a:a8:7a:7f: d6:32:e0:2a:47:f5:59:1f:0f:b1:ea:e7:6f:20:53: 8b:c2:0b:4d:b7:42:7b:39:40:eb:3d:41:2f:0a:db: 4f:b8:1d:09:8b:6e:24:3d:bb:bc:d3:95:68:0d:03: ce:7b:4f:82:2e:92:c8:94:56:63:e3:b8:80:9d:d6: 8e:53:64:2f:78:99:74:be:78:9c:0e:10:e2:2b:da: c7:a7:fc:3a:b3:cb:60:d3:92:be:9f:0f:c6:e6:bf: 63:3c:16:41:19:44:8e:f7:e9:45:c6:e3:45:52:27: 89:eb:33:2d:e3:f0:d6:41:5b:22:21:e3:08:91:f0: da:7f:5a:24:07:c0:cc:d2:4b:be:cd:49:5b:85:fa: 22:71:1a:9d:78:8b:06:ea:8e:6d:6b:ce:15:42:25: fd:4b:72:c7:b2:68:7c:9f:28:a0:44:8e:68:25:c1: 24:f5:63:9c:1d:e5:be:ba:9c:96:ab:72:b6:40:16: 74:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:FF:57:CD:64:FF:EE:8F:06:BD:59:39:CF:05:8D:4F:AB:88:B7:AA X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:10:fb:87:6a:3c:c3:b6:69:1c:5b:db:00:0c:0f:b6:b9:4e: 03:0f:5f:74:dd:d2:c0:e6:a2:5c:5c:91:2d:2e:c6:1a:44:21: 89:0e:93:b2:2c:dc:62:ab:66:b4:66:33:cc:65:0b:93:34:58: e0:d7:09:64:f5:c4:49:2e:a1:e2:f5:fd:dc:8a:d0:f3:e6:50: 31:4c:e7:9f:71:84:44:54:d6:f9:2c:5e:a5:0b:e2:7b:f7:90: 89:f7:13:92:4f:4e:27:c9:ab:59:57:d4:c3:61:3d:fd:7e:a4: 85:33:8c:e8:c1:00:35:94:9b:c1:09:c6:c9:3d:61:34:c5:ce: b6:02:50:58:30:8a:dd:61:7c:c9:36:b3:ed:8a:93:60:6f:9c: 9a:e3:40:b1:04:1c:74:a7:88:04:8a:e9:21:01:e6:f2:a1:85: 80:a0:7a:56:0f:9d:c1:eb:60:f8:b4:26:1d:fc:d8:ca:8e:a4: 8f:7b:d2:49:c1:73:8d:df:1d:5c:7d:8e:22:8b:8f:b7:c0:22: e0:fb:f9:c1:77:d6:19:6e:7e:44:e2:34:16:f2:bc:5c:f9:fc: 34:18:51:44:d9:7e:73:35:05:3d:1f:51:97:73:25:a9:21:27: 4f:ba:51:42:46:42:54:83:ba:b1:18:b9:dd:13:c6:96:90:54: 45:52:8b:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6aciBOhsrp15dY4xWjASr6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYwNjA2MDEwMDMwWhcNMjYwNjA3MDEwMDMwWjAzMTEwLwYDVQQD EyhlMGZmNTdjZDY0ZmZlZThmMDZiZDU5MzljZjA1OGQ0ZmFiODhiN2FhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yBIPiP+apB2ku58BaeMhWpIEt+u LD0WSHJmAf5ODRea+8Iei5T1Q6gZ6/LjI1+cdiVrLAdp5cdRlqRA4Oo9+uS3G0Yr Ckqoen/WMuAqR/VZHw+x6udvIFOLwgtNt0J7OUDrPUEvCttPuB0Ji24kPbu805Vo DQPOe0+CLpLIlFZj47iAndaOU2QveJl0vnicDhDiK9rHp/w6s8tg05K+nw/G5r9j PBZBGUSO9+lFxuNFUieJ6zMt4/DWQVsiIeMIkfDaf1okB8DM0ku+zUlbhfoicRqd eIsG6o5ta84VQiX9S3LHsmh8nyigRI5oJcEk9WOcHeW+upyWq3K2QBZ0JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOD/V81k/+6PBr1ZOc8FjU+riLeqMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArRD7h2o8 w7ZpHFvbAAwPtrlOAw9fdN3SwOaiXFyRLS7GGkQhiQ6TsizcYqtmtGYzzGULkzRY 4NcJZPXESS6h4vX93IrQ8+ZQMUznn3GERFTW+SxepQvie/eQifcTkk9OJ8mrWVfU w2E9/X6khTOM6MEANZSbwQnGyT1hNMXOtgJQWDCK3WF8yTaz7YqTYG+cmuNAsQQc dKeIBIrpIQHm8qGFgKB6Vg+dwetg+LQmHfzYyo6kj3vSScFzjd8dXH2OIouPt8Ai 4Pv5wXfWGW5+ROI0FvK8XPn8NBhRRNl+czUFPR9Rl3MlqSEnT7pRQkZCVIO6sRi5 3RPGlpBURVKLzw== -----END CERTIFICATE-----Generated at Sat Jun 6 07:01:41 2026 by rpki-client