$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json) Hash identifier: 1EAcbclDgJKTQCWfXj8InkS2XQb5yaxoOweSn26KD70= Subject key identifier: 5E:0F:AA:EC:BF:11:DB:01:52:3C:11:43:E2:EB:36:C4:FF:D2:BB:58 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019E1FB5BDB424F473CF23C5C0FB95073FC3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft Manifest number: 02E9 Signing time: Wed 13 May 2026 05:01:04 +0000 Manifest this update: Wed 13 May 2026 05:01:04 +0000 Manifest next update: Thu 14 May 2026 05:01:04 +0000 Files and hashes: 1: 1E8AiSnlYGPXbOfAXqZEBvdti0Q.roa (hash: zg4/KmKPBBnWqoo6XqmqqOeEWKX38ZMsmowwS7V3CsY=) 2: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: 3/r59Opg7HYG4nFsF2tOlARhbf9YPOIxQrJeK9ou1vw=) 3: AvhSVHbyFsNJfn-87fA7oHcica0.roa (hash: JjNvwI8D/DTZ5Kz60xSRCIvB7TZ/neKfvnL3MZ2ZTSU=) 4: GG4z91MdDpV2DBV_RNPbWkwIoJw.roa (hash: Eqt3BxDIeVAQpNBJJYqmZDf6uBVXq8wo47BPWDDy060=) 5: IDaB4QRCh7bNLOMPnckPg5zcOzM.roa (hash: xXBnKlpTinvrp0RhxiHrGrTuEu3qhcErapcrqhwSfb0=) 6: KF0QvzJGblVPKQsNf06hZ3SB34U.roa (hash: beoVL4CcUiF/X+RqTuUlwhqclMvthXIihpSTECe+GcU=) 7: L6Ra25CjKp_mEEvb6fnLzB9z48Y.roa (hash: gAYyNL8en1bwIuDNmy096pQ8EjEcbk/vtZcx5FewlIM=) 8: ZmA7YXk1EXie8V8IljOsrQAeVMc.roa (hash: KfN3YtXoCnYtbOhys/L3JbGSTPU3Jpxa1rNO5rVZaaM=) 9: _OsxCQ1e4_ibO69prTBr0y__bJ0.roa (hash: jyzI1ocjI/t6Rr16QFOtQXXWn6pUug9g1eA1+Oe0GVs=) 10: adb_NQqDE2btKs5IvofM8ruzaqs.roa (hash: mZd2SOSViUwqdouzHTAAV8V8TgiRqrWPvi7A8y6abkk=) 11: hbHoK0o2p6Bt0sMLz48Nn7EIEws.roa (hash: AabyFao1094cA8E0S9PcCwFVPGA7d1c7Y+W9MYMaIkQ=) 12: iCAoTJ6_FbKXxlsZVDeLJRceNFg.roa (hash: bMQFyA/DfiURPI0ApEpZ777S9eYeQRmm3uEDLrIS7DM=) 13: iNlyy6fzG-pZXJKLvpBU9XAYkVo.roa (hash: S8q8QiAGEz7MV6+djxO4YwhYaC2j/vE52wvZ9iUEIgY=) 14: rTCIQuB8b5-23Fe16EFzxOkFAo0.roa (hash: 85dTReYxmMkhMzb7ZnE2kpCceaZUsUjOdsiOl8VJLKg=) 15: vTVExLKhWEraxLaHbYbF-5rPbAY.roa (hash: OkUaeri0ORy5KS5pNVCt7QDJ9Jtk+GKFKqYmDLuRx/Q=) 16: wMIGg_895xsUud_tObIdM45E8XQ.roa (hash: LP5aF2JP0E54B5AqB2G8lcqC6PTsBN6TaHhp9g0P2hY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 14 May 2026 05:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:1f:b5:bd:b4:24:f4:73:cf:23:c5:c0:fb:95:07:3f:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: May 13 05:01:04 2026 GMT Not After : May 14 05:01:04 2026 GMT Subject: CN=5e0faaecbf11db01523c1143e2eb36c4ffd2bb58 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:93:93:e6:c4:be:a8:3b:1d:c5:20:c3:d3:ea: 70:31:cd:1d:b2:74:6d:2a:c9:99:53:5d:e7:e5:50: c7:36:8f:a9:80:f4:3d:94:11:f1:55:77:b4:a7:b4: 0b:d9:48:fd:42:32:4c:ee:9a:23:e1:32:bf:ce:7c: b8:47:72:ed:54:65:58:78:a3:36:b2:3c:a2:d8:97: 5a:8f:8c:79:00:d0:d6:2a:b4:55:49:d3:4c:b5:68: 1a:cb:ac:92:84:b0:f3:16:80:37:30:a1:3e:81:79: 8a:1c:ce:25:18:17:f1:84:b2:ff:ad:66:d6:1e:41: e3:5c:f8:67:9d:83:df:07:84:89:d9:c2:06:be:33: ee:59:e2:a0:0f:ec:60:44:ba:a4:b6:e3:32:ad:d6: 33:be:1a:c7:1e:a2:39:ed:bd:e6:ac:24:87:5e:5d: e8:1c:1e:f9:b1:bd:3c:80:ec:ad:68:81:86:11:f7: 4f:93:fb:8b:10:97:41:01:d8:6c:53:b8:1b:1b:79: ee:b3:04:20:f4:fa:25:84:56:94:90:55:5b:a1:71: 84:cb:ea:2e:22:d1:70:3c:1d:9c:68:95:ea:25:82: ed:29:78:07:b4:79:ad:bb:53:38:52:ab:78:fc:af: 91:27:69:4b:25:71:86:3d:55:e7:e8:9f:da:b8:0e: 8b:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:0F:AA:EC:BF:11:DB:01:52:3C:11:43:E2:EB:36:C4:FF:D2:BB:58 X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:28:e1:04:ff:c8:5d:02:6a:a8:7f:96:53:f1:61:9e:28:9b: 19:89:19:a6:4d:9c:e5:ee:d9:5e:43:5f:bd:b5:cf:74:10:8e: e8:66:1d:bf:29:99:12:8b:8a:d8:6d:e7:ce:64:94:99:b2:be: b4:90:91:e1:6b:7e:56:d9:28:52:3e:f8:00:df:e4:40:38:4e: 50:5f:9d:30:7e:e1:ab:d1:75:cb:58:12:a8:c8:59:7b:ac:2b: 0a:45:f4:78:18:50:f4:9e:2b:01:9f:1a:1d:02:87:36:9c:41: 38:63:17:95:be:85:f2:7d:84:43:06:19:db:ab:50:74:55:29: 23:77:39:c9:c8:38:de:81:79:d2:be:40:26:00:ee:51:20:b5: 6d:f5:00:e5:8b:c9:72:ab:5a:53:72:0a:c3:6f:c4:8e:92:66: 0b:b8:ce:94:e2:9e:3d:e0:26:25:c3:09:e5:7d:42:50:9c:52: d5:26:62:7f:59:69:34:aa:38:9f:30:de:0a:02:e1:48:f1:b3: 02:cc:1f:7e:75:35:2c:4f:4d:a3:44:15:2e:16:41:51:4e:a8: 60:fd:04:1f:35:f7:54:55:5c:4f:d6:cb:f2:49:af:6e:77:6d: df:b3:d0:48:3e:45:5c:b1:6c:bd:d2:32:8a:16:ce:6e:3e:f6: 34:1f:36:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4ftb20JPRzzyPFwPuVBz/DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwNTEzMDUwMTA0WhcNMjYwNTE0MDUwMTA0WjAzMTEwLwYDVQQD Eyg1ZTBmYWFlY2JmMTFkYjAxNTIzYzExNDNlMmViMzZjNGZmZDJiYjU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZOT5sS+qDsdxSDD0+pwMc0dsnRt KsmZU13n5VDHNo+pgPQ9lBHxVXe0p7QL2Uj9QjJM7poj4TK/zny4R3LtVGVYeKM2 sjyi2Jdaj4x5ANDWKrRVSdNMtWgay6yShLDzFoA3MKE+gXmKHM4lGBfxhLL/rWbW HkHjXPhnnYPfB4SJ2cIGvjPuWeKgD+xgRLqktuMyrdYzvhrHHqI57b3mrCSHXl3o HB75sb08gOytaIGGEfdPk/uLEJdBAdhsU7gbG3nuswQg9PolhFaUkFVboXGEy+ou ItFwPB2caJXqJYLtKXgHtHmtu1M4Uqt4/K+RJ2lLJXGGPVXn6J/auA6LPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF4Pquy/EdsBUjwRQ+LrNsT/0rtYMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSjhBP/I XQJqqH+WU/FhniibGYkZpk2c5e7ZXkNfvbXPdBCO6GYdvymZEouK2G3nzmSUmbK+ tJCR4Wt+VtkoUj74AN/kQDhOUF+dMH7hq9F1y1gSqMhZe6wrCkX0eBhQ9J4rAZ8a HQKHNpxBOGMXlb6F8n2EQwYZ26tQdFUpI3c5ycg43oF50r5AJgDuUSC1bfUA5YvJ cqtaU3IKw2/EjpJmC7jOlOKePeAmJcMJ5X1CUJxS1SZif1lpNKo4nzDeCgLhSPGz AswffnU1LE9No0QVLhZBUU6oYP0EHzX3VFVcT9bL8kmvbndt37PQSD5FXLFsvdIy ihbObj72NB82zg== -----END CERTIFICATE-----Generated at Wed May 13 14:36:28 2026 by rpki-client