$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: N5Q81+VPD2FF0MTNmRgMePkNxaFL9TrC2d1q4vKoyt8= Subject key identifier: E1:15:A2:A7:78:81:72:53:AC:17:3C:EF:48:F3:A5:33:B0:09:A2:CC Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019EB6C52BA753D0E961664CCC9700013E11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 1974 Signing time: Thu 11 Jun 2026 13:00:35 +0000 Manifest this update: Thu 11 Jun 2026 13:00:35 +0000 Manifest next update: Fri 12 Jun 2026 13:00:35 +0000 Files and hashes: 1: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: ww1nI4wQD+ULpYCzvTfkQRwA3ATaLXDd/3ZsZBarZN0=) 2: 3gBGUy3u0kv0cMFfYhefm1zv6V4.roa (hash: wbVQO0NG95NJdUKsQ+Wjm9lVf3DsbDyNxF0jF2IdjBg=) 3: 6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa (hash: 1JXCVihKxq73Qe1ncqplSKlgiZyg5/rbL6k+wZhdDKo=) 4: 7DBa_6nBybw3J8T8dr7yX7ebiwU.roa (hash: 9lkcVj8pg/THlhFClMP/jc7G+HKyv/jKnpXVV+mQkS4=) 5: 9VcWKWB5puA52wsDDDkNDjxeGR4.roa (hash: GlsIfnVs54CADMaRa3Sk/1oPA7tZtu4TEPhze/G9m8w=) 6: B7nfsbI7vpYat2Veoezdf_TcIy8.roa (hash: ZifWcufC5UurQhjWI81wwKVDTfPl5QEDU7f59ef2yA4=) 7: Daz8bhqhbaAz3OEyLaZDp_txPzA.roa (hash: FM1qUTL0CvrCixQ27I0/1ARdD95NXI7GlqZPBu6d9FA=) 8: KZXfDjuE-PvJiBRVRI6B8WHyooo.roa (hash: OMT2qoqGQOn2tlDcwwNCQQxD6FlT7A94fPogcjgcLoY=) 9: MAbKsaJixjU16-YxviDdUW3E9O0.roa (hash: G7uQcrymoMNiTSNS0GkaRs7zRkNHWrcTl4RG77CdYN0=) 10: RVfXd-D1ecB560CRD5YifVCpd1s.roa (hash: VBLJ7mxpiyU44wmUNd5IC/WX+1HbYUo9OBJtin4d0Sc=) 11: TLi5DNB1nha4h6YESMgyGrCORWo.roa (hash: EUg1KiZtD+nVctjCGIesOCkqRzlFdgvGJVlZhMuO3Jw=) 12: a4e-5HcXuyyRW82YjyXKassrVo8.roa (hash: LjIo0mjkPTCoI0owtR5lNhwGCbcbFzLDlXxT76bUTMg=) 13: gjhjBLir8IRFlK670wG4nH4oaXk.roa (hash: cv4ygh/KOqNvTQ/oTMBYXfBkQ2u91AyKM5PUQ/5gKm8=) 14: j4OaetARNIVx-9EsgUUwBCsDjoA.roa (hash: 4DqJXihPNyacK6qcrUCR2jeCbK8fq/Etn5AHTyGsM5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 12 Jun 2026 13:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:b6:c5:2b:a7:53:d0:e9:61:66:4c:cc:97:00:01:3e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jun 11 13:00:35 2026 GMT Not After : Jun 12 13:00:35 2026 GMT Subject: CN=e115a2a778817253ac173cef48f3a533b009a2cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:bf:1b:15:10:71:07:98:10:ee:70:be:4e:82: 04:e8:e1:f5:b7:9c:3f:97:7d:17:73:ac:c6:0d:53: 99:df:bb:41:43:a4:41:ea:9f:2e:52:42:92:03:7e: d4:98:42:c3:fd:8a:ec:7f:71:24:32:46:a9:03:de: 45:16:80:f0:4a:43:bb:d5:9b:80:42:9b:4c:9a:78: 0f:8c:30:eb:ff:5f:e6:0f:02:08:b5:79:21:9a:24: 50:a4:f0:58:47:02:72:e5:33:27:c5:b1:ca:52:54: 21:d4:5e:7a:4c:86:fe:b4:ec:be:1b:9f:f3:42:44: a7:48:b0:a7:18:6b:a9:87:2c:97:e4:f8:a1:ec:c5: cb:b6:15:68:75:fc:a6:3d:65:87:1f:fa:78:c8:18: d9:35:cc:81:ac:1c:33:ae:d7:be:a2:d2:f0:ab:32: a5:7a:7f:7e:f8:f8:36:45:a1:ba:ca:93:ae:3f:80: 67:8e:e2:24:29:de:f0:77:b3:18:f4:41:c4:fe:ea: 07:5c:96:f6:09:0d:34:45:96:26:b0:25:c2:55:29: aa:60:51:4c:1b:ae:11:5a:79:16:c8:cc:ac:5d:96: 1a:0e:e7:af:27:8b:f8:47:c9:67:34:0b:71:f3:0d: 8f:56:57:19:51:df:9b:f6:38:f1:02:e9:c9:e0:7a: 30:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:15:A2:A7:78:81:72:53:AC:17:3C:EF:48:F3:A5:33:B0:09:A2:CC X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:69:b1:c9:a1:5a:5c:be:75:4c:6d:2b:b0:7e:18:46:3d:f0: c2:48:2c:30:ae:ce:12:8b:00:dc:37:60:54:a0:f8:4b:16:ab: e4:05:d7:df:89:39:b2:e2:16:85:50:64:39:7d:c0:27:1d:cb: c1:2c:26:07:6a:b0:62:53:3d:59:1b:10:86:15:0b:88:01:4a: c7:43:af:3c:08:44:fa:01:74:0e:76:5d:52:1f:54:bd:33:f2: 7f:b9:95:5c:bc:14:ef:fe:8b:28:19:cb:82:60:67:0e:fb:1f: 0e:65:38:d9:25:f3:66:2c:5b:20:42:ac:a3:a6:f4:40:a3:b6: 7e:55:0f:b7:22:57:6d:44:4c:6b:fd:f4:2b:52:d8:9d:13:9c: 06:87:6c:52:cf:f1:14:92:c4:ae:3c:af:5f:a7:86:fa:c3:10: 20:0b:49:ca:e4:4a:4b:be:d1:99:a8:9a:b9:fc:8c:4b:b4:c7: 71:1e:f5:9f:f0:47:71:1c:88:c1:a0:98:42:9b:2d:93:9f:db: 33:2d:8b:b9:cd:42:1e:30:ce:88:5d:b5:ba:6e:0c:01:1b:52: e7:8d:85:0c:ff:b1:d4:28:14:8e:79:2f:79:72:06:89:0f:cc: 9c:fa:ac:77:75:1b:47:c7:fa:21:de:6e:b2:b8:0e:8b:f0:30: 42:c5:b4:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ62xSunU9DpYWZMzJcAAT4RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwNjExMTMwMDM1WhcNMjYwNjEyMTMwMDM1WjAzMTEwLwYDVQQD EyhlMTE1YTJhNzc4ODE3MjUzYWMxNzNjZWY0OGYzYTUzM2IwMDlhMmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir8bFRBxB5gQ7nC+ToIE6OH1t5w/ l30Xc6zGDVOZ37tBQ6RB6p8uUkKSA37UmELD/Yrsf3EkMkapA95FFoDwSkO71ZuA QptMmngPjDDr/1/mDwIItXkhmiRQpPBYRwJy5TMnxbHKUlQh1F56TIb+tOy+G5/z QkSnSLCnGGuphyyX5Pih7MXLthVodfymPWWHH/p4yBjZNcyBrBwzrte+otLwqzKl en9++Pg2RaG6ypOuP4BnjuIkKd7wd7MY9EHE/uoHXJb2CQ00RZYmsCXCVSmqYFFM G64RWnkWyMysXZYaDuevJ4v4R8lnNAtx8w2PVlcZUd+b9jjxAunJ4HowBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEVoqd4gXJTrBc870jzpTOwCaLMMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAummxyaFa XL51TG0rsH4YRj3wwkgsMK7OEosA3DdgVKD4Sxar5AXX34k5suIWhVBkOX3AJx3L wSwmB2qwYlM9WRsQhhULiAFKx0OvPAhE+gF0DnZdUh9UvTPyf7mVXLwU7/6LKBnL gmBnDvsfDmU42SXzZixbIEKso6b0QKO2flUPtyJXbURMa/30K1LYnROcBodsUs/x FJLErjyvX6eG+sMQIAtJyuRKS77RmaiaufyMS7THcR71n/BHcRyIwaCYQpstk5/b My2Luc1CHjDOiF21um4MARtS542FDP+x1CgUjnkveXIGiQ/MnPqsd3UbR8f6Id5u srgOi/AwQsW0Pw== -----END CERTIFICATE-----Generated at Thu Jun 11 17:53:49 2026 by rpki-client