$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: TqKRPgcj5oBKFvIarGxA1AbaNtz7aGuNVVXeBAcGojY= Subject key identifier: 03:0C:15:F9:B7:44:82:25:F4:01:27:79:FF:40:7A:51:F8:8A:2E:22 Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019E32CEE0781C7DE7A961AB4039E9EF9353 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 17D5 Signing time: Sat 16 May 2026 22:01:19 +0000 Manifest this update: Sat 16 May 2026 22:01:19 +0000 Manifest next update: Sun 17 May 2026 22:01:19 +0000 Files and hashes: 1: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (hash: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU=) 2: FQ-zr24LwDkwYEmw_FlDbzx5P4s.roa (hash: 72rsnmpdkRSkNBR0uk4zMj5njaCBagS3GBHGnSWVLYw=) 3: hAy8VtAwci_v3cGOO19dEdefvMA.roa (hash: g1nY4ONoPi4/cXPph4hFcjnMaUzSfWsZYHkL3fHcL7Y=) 4: kxHXeC-RgFki1x0jEKzH48eBz8c.roa (hash: E6qamccMc25rG9FxeXNYkNGoky+PcxFg+Xq4GlM3NUs=) 5: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (hash: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk=) 6: plMF4273xJNdefV7r7jo8RJ8QbU.roa (hash: D9odZxGtxbDzG6OiIstvUcJ7z0OpJ5jME5X2lJ31p5A=) 7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: TAxEvVyE4ZNtDm6NI27pDoLq37KhJc8FQ/Oyur622j4=) 8: suUbWGeNBw5ePtioMY9U94S7lSw.roa (hash: M06oDkMYsepjO/1pxSEeQ8cUvDUMgzU9aQtQ7cy78x8=) 9: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (hash: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk=) 10: zLCHjeiw_ejDI_VbLsjC7k1DbE4.roa (hash: 5Mti0up92969Oa1c08K/2LG50PP0mj7MqErSz+8DQcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 21:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:32:ce:e0:78:1c:7d:e7:a9:61:ab:40:39:e9:ef:93:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: May 16 22:01:19 2026 GMT Not After : May 17 22:01:19 2026 GMT Subject: CN=030c15f9b7448225f4012779ff407a51f88a2e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f1:fb:d7:93:65:32:37:2e:1f:dd:c0:83:3e: e8:24:3c:d5:38:6e:91:10:7c:3c:1d:69:78:7a:db: ba:64:a3:f1:d1:45:e0:7b:49:f8:ab:be:a9:d5:f7: 8a:41:c8:22:e4:74:2b:83:74:f4:49:d2:9f:19:3b: 0e:97:95:cf:a1:ff:f0:0f:6d:90:98:5a:20:c3:ee: 5a:6f:43:54:7b:bf:78:fe:f6:7c:ff:d2:10:b4:b6: 93:1e:2d:4f:16:70:32:c0:2e:12:ba:bc:c1:c5:f0: f0:46:f0:99:05:0b:11:c9:8b:53:29:ab:03:ba:c4: c9:ed:0e:99:76:47:3b:e4:0e:ce:86:2c:70:b8:cd: f3:d1:90:14:d7:77:1d:b1:22:be:e5:75:39:0e:31: d0:0e:fb:27:a2:21:e0:4c:c6:ca:59:20:0c:d1:17: 72:10:47:a7:4a:eb:b4:0f:8b:e6:a2:82:97:af:0a: ca:c4:f4:ff:75:3d:1f:c4:42:61:ea:1f:a4:d7:de: a4:e5:26:03:ee:7d:85:4c:eb:39:15:60:8e:38:f3: 47:d8:3e:f9:de:15:b5:b6:03:8b:9c:43:8b:b0:a2: 80:43:2e:03:f0:01:3a:bf:2c:f7:4f:b5:46:48:a6: c6:83:58:85:e5:15:49:88:16:c9:e0:87:66:48:dd: c4:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:0C:15:F9:B7:44:82:25:F4:01:27:79:FF:40:7A:51:F8:8A:2E:22 X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:52:50:0c:bc:18:ea:0c:89:4b:79:13:c5:35:97:55:5d:5c: d9:fe:6d:5b:72:a9:d7:b5:24:2e:a0:c2:89:36:3e:7b:7d:23: c6:12:bc:9b:e0:32:0e:12:d9:b8:6c:92:2e:e1:11:07:e6:1b: d9:89:70:3b:cf:ee:5c:8e:d1:89:64:53:34:ed:23:f2:49:1c: 0c:df:60:85:89:52:1d:ec:1c:e8:0c:c5:c1:0b:ec:67:9f:6e: 7e:93:63:bf:1e:3c:51:29:5f:2d:19:55:fd:06:a5:0f:bf:59: 74:5f:93:49:81:72:2d:e6:55:7b:e2:83:0e:96:b3:8c:be:7f: c6:28:6c:4f:59:fa:42:f1:25:58:20:c8:3d:18:90:e5:5f:65: b7:a0:4a:6e:ba:45:eb:05:dd:28:5e:2c:55:70:c0:51:f9:53: d9:15:01:04:c6:e4:eb:65:6e:e4:6f:c5:a4:b1:f6:f2:a5:f5: d0:53:18:51:33:4f:ef:ff:ca:56:e9:d0:2d:b7:05:63:fd:41: 37:a9:7f:2f:23:e3:67:6d:a1:93:c3:3d:9d:2c:06:3e:9f:00: 49:71:9b:06:53:d4:e1:2d:8c:45:b6:b4:4b:10:dd:46:eb:e5: bc:2f:7d:c5:bb:1d:4a:57:fd:f5:d3:83:52:d3:83:36:bd:49: 9e:22:bb:8d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4yzuB4HH3nqWGrQDnp75NTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjYwNTE2MjIwMTE5WhcNMjYwNTE3MjIwMTE5WjAzMTEwLwYDVQQD EygwMzBjMTVmOWI3NDQ4MjI1ZjQwMTI3NzlmZjQwN2E1MWY4OGEyZTIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPH715NlMjcuH93Agz7oJDzVOG6R EHw8HWl4etu6ZKPx0UXge0n4q76p1feKQcgi5HQrg3T0SdKfGTsOl5XPof/wD22Q mFogw+5ab0NUe794/vZ8/9IQtLaTHi1PFnAywC4SurzBxfDwRvCZBQsRyYtTKasD usTJ7Q6Zdkc75A7OhixwuM3z0ZAU13cdsSK+5XU5DjHQDvsnoiHgTMbKWSAM0Rdy EEenSuu0D4vmooKXrwrKxPT/dT0fxEJh6h+k196k5SYD7n2FTOs5FWCOOPNH2D75 3hW1tgOLnEOLsKKAQy4D8AE6vyz3T7VGSKbGg1iF5RVJiBbJ4IdmSN3ErQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAMMFfm3RIIl9AEnef9AelH4ii4iMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASVJQDLwY 6gyJS3kTxTWXVV1c2f5tW3Kp17UkLqDCiTY+e30jxhK8m+AyDhLZuGySLuERB+Yb 2YlwO8/uXI7RiWRTNO0j8kkcDN9ghYlSHewc6AzFwQvsZ59ufpNjvx48USlfLRlV /QalD79ZdF+TSYFyLeZVe+KDDpazjL5/xihsT1n6QvElWCDIPRiQ5V9lt6BKbrpF 6wXdKF4sVXDAUflT2RUBBMbk62Vu5G/FpLH28qX10FMYUTNP7//KVunQLbcFY/1B N6l/LyPjZ22hk8M9nSwGPp8ASXGbBlPU4S2MRba0SxDdRuvlvC99xbsdSlf99dOD UtODNr1JniK7jQ== -----END CERTIFICATE-----Generated at Sun May 17 03:02:32 2026 by rpki-client