$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft File: FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json) Hash identifier: xean4zS2DKYeAjzv+H5Gdz54Ie/ms/MqCz1IRWsz9AY= Subject key identifier: 86:8A:7D:BD:75:C9:78:1F:8D:A7:8C:D0:2A:E2:A6:C2:E8:4D:AD:CC Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 019E29268B102334BA4BB194C5BA69E7DED5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft Manifest number: 1942 Signing time: Fri 15 May 2026 01:00:52 +0000 Manifest this update: Fri 15 May 2026 01:00:52 +0000 Manifest next update: Sat 16 May 2026 01:00:52 +0000 Files and hashes: 1: 43xKNj8d1J5ZbdUCB9huFf51dlY.roa (hash: 0C77rsfbABsBAgXhMhHrXliF4EtBR+zdrxbfWGDutkA=) 2: B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa (hash: aDzq92qdJqLonxrkAlG+0ptE83HlOqTUO72kLOAz1Z0=) 3: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: Dm7+KyKJGgyt2TbSgO/+el3dSf6eAx2Jitfgd4FJNKU=) 4: IgfAmjFLqVW-uCkvUtRuUz3fQFI.asa (hash: 1m1DNwPZO7HOKfXGKGJtUoAVRSnQcqTWcdbAqBMwcJk=) 5: Mqx-zb562ywYV8pX6wNPPIxwnPA.roa (hash: OtbembzOi1Q67rhuvfY9lENyB3xApH7b2U9zu5YCpzg=) 6: NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa (hash: BsmxkgNXTeP+5y0lVg3F5Vd5iIuPFhBIw5y8AiZA+lg=) 7: OFmVOiCQetrNkOtmu3zCnKSHdbQ.asa (hash: Hjgzl6kCFsNx4hG5pItQKTRXXfWNO1jZJVBkNf2hlCc=) 8: VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa (hash: meHtFxM6jSoAy9Y7SaMHGYbPp+WrlG0Kpg1DeuyayZE=) 9: X01sfTguEZRlbViMsVbdLRhWtwM.asa (hash: ITEiwLtEtyei9oziGBBYKolA2UiS65//73HaFywy0cU=) 10: ZYc4R1ZUoLFLDb0ExiBMqNZo4PI.asa (hash: hLDXFm9fYXyP3hsrCVS9C7xEpV87H1Pnzgc7QhcK0xY=) 11: bFkaQMapJshDo2hgXls_q4kXpds.asa (hash: Sdg8D0zVBbo49fzIHdCt36EnpRZv3zi4DnsZ64hwpRw=) 12: dAyDeUp51SPbYS8fxmJNG0482Ng.asa (hash: 6/i5RS8ShUMSXbYzZlVqHGyL8kobjym9yxw0gdprH7E=) 13: oxOGLICEA4GzU1uD1B6su4tziyQ.roa (hash: TvZctkDtv5gSKLWgki0lkEZNOjTs1UPnuilELJQxzxc=) 14: plAxktASIb4YACIP-hXXxq1vBPQ.asa (hash: YS1t0iZi+tG5TRUgxqQhrFYuMkSCCdM92QwP+HVjJ7w=) 15: xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa (hash: AKh2Xxbl7XMpoBpUm83TcjMuEMCZWE9rKYeV/5q4Gew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 16 May 2026 01:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:29:26:8b:10:23:34:ba:4b:b1:94:c5:ba:69:e7:de:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: May 15 01:00:52 2026 GMT Not After : May 16 01:00:52 2026 GMT Subject: CN=868a7dbd75c9781f8da78cd02ae2a6c2e84dadcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:93:06:49:e2:3d:9e:bf:69:ec:df:57:06:01: 60:b6:f5:ed:72:f4:e0:90:93:9c:c9:04:64:e0:c9: 5a:0e:b4:18:f6:96:6c:05:1b:d5:4e:d5:17:fd:e8: 93:46:aa:52:01:46:51:aa:89:50:87:f1:69:4e:f4: 56:2e:cb:ff:17:6a:ff:f2:b2:a4:84:2e:8f:e0:31: d1:bb:64:9b:34:34:3c:00:1f:1e:9c:15:c1:d1:74: e1:b0:57:6a:51:fb:8b:89:ca:c9:33:1a:64:db:5b: a3:ea:f3:bd:43:80:c9:47:b4:51:3d:e6:3a:bb:ae: 8a:a0:66:c7:0d:dc:3a:db:54:74:8a:cd:b2:b3:e3: f9:67:51:fd:41:3f:03:87:b0:1e:0c:3e:6a:78:ce: 3b:5c:cd:07:a3:7b:37:b3:e2:48:60:f0:c1:6f:06: 85:e0:93:8d:a4:01:02:d3:bc:2b:38:11:b8:28:38: ca:1e:65:a0:77:20:f3:c7:22:6d:78:74:c0:5d:1b: cc:20:6f:de:89:9f:03:11:00:a6:5b:65:f4:4d:b7: 97:f8:09:5e:13:9f:91:bd:25:00:ca:74:45:c4:0f: e5:a8:fc:0c:4d:e1:33:f3:aa:18:71:16:8d:9a:f2: 65:32:1c:9f:d3:9c:5f:53:94:15:30:2d:0f:1b:13: 6d:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:8A:7D:BD:75:C9:78:1F:8D:A7:8C:D0:2A:E2:A6:C2:E8:4D:AD:CC X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:1e:e3:2c:cb:06:2c:87:6c:39:58:4f:73:83:00:12:6f:f8: 42:36:40:27:16:c2:2b:81:fa:92:f5:25:66:67:36:cc:b3:73: a3:02:7a:41:ed:a7:78:d5:4e:1a:16:da:00:67:6d:52:00:30: 5e:9b:a2:0e:c8:dc:e0:95:22:b6:98:1a:19:24:d3:e2:2e:fc: 85:9f:6d:67:91:3a:50:c2:fd:46:4d:4a:57:7b:12:ea:ef:de: b2:87:7f:29:ec:d8:f7:04:34:e8:5b:f4:a9:64:e8:24:2c:70: e9:13:47:d6:5c:af:ef:b4:57:13:d8:f1:26:92:dd:65:e9:8d: 90:2f:ba:c0:34:05:89:51:87:ee:3f:4d:00:60:46:24:b9:6c: 5d:cf:eb:bb:20:32:06:71:8c:da:a0:a9:8b:63:13:94:74:ab: 94:9f:a1:8d:a5:ee:07:72:8f:82:b5:ac:10:60:08:b5:8d:cf: 12:51:4c:95:c2:71:a1:a8:d0:4a:68:12:da:0a:9f:ce:04:a1: b5:2e:c1:08:da:71:f2:7b:08:bf:ec:7b:d8:d3:9b:2c:65:a6: be:ad:a6:dc:0b:37:22:7b:77:77:28:87:2a:01:d4:46:aa:9a: 37:02:86:13:2a:bf:b1:60:b4:f8:e7:c8:1d:24:c1:d9:8c:4f: ce:48:0d:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4pJosQIzS6S7GUxbpp597VMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjYwNTE1MDEwMDUyWhcNMjYwNTE2MDEwMDUyWjAzMTEwLwYDVQQD Eyg4NjhhN2RiZDc1Yzk3ODFmOGRhNzhjZDAyYWUyYTZjMmU4NGRhZGNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35MGSeI9nr9p7N9XBgFgtvXtcvTg kJOcyQRk4MlaDrQY9pZsBRvVTtUX/eiTRqpSAUZRqolQh/FpTvRWLsv/F2r/8rKk hC6P4DHRu2SbNDQ8AB8enBXB0XThsFdqUfuLicrJMxpk21uj6vO9Q4DJR7RRPeY6 u66KoGbHDdw621R0is2ys+P5Z1H9QT8Dh7AeDD5qeM47XM0Ho3s3s+JIYPDBbwaF 4JONpAEC07wrOBG4KDjKHmWgdyDzxyJteHTAXRvMIG/eiZ8DEQCmW2X0TbeX+Ale E5+RvSUAynRFxA/lqPwMTeEz86oYcRaNmvJlMhyf05xfU5QVMC0PGxNtcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIaKfb11yXgfjaeM0CripsLoTa3MMB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaR7jLMsG LIdsOVhPc4MAEm/4QjZAJxbCK4H6kvUlZmc2zLNzowJ6Qe2neNVOGhbaAGdtUgAw XpuiDsjc4JUitpgaGSTT4i78hZ9tZ5E6UML9Rk1KV3sS6u/esod/KezY9wQ06Fv0 qWToJCxw6RNH1lyv77RXE9jxJpLdZemNkC+6wDQFiVGH7j9NAGBGJLlsXc/ruyAy BnGM2qCpi2MTlHSrlJ+hjaXuB3KPgrWsEGAItY3PElFMlcJxoajQSmgS2gqfzgSh tS7BCNpx8nsIv+x72NObLGWmvq2m3As3Int3dyiHKgHURqqaNwKGEyq/sWC0+OfI HSTB2YxPzkgNQQ== -----END CERTIFICATE-----Generated at Fri May 15 07:02:20 2026 by rpki-client