$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json) Hash identifier: 38OVYiK/WWQxBp7IGM4TloMLbUSXTHLTfpY+Mm+AMOk= Subject key identifier: 51:14:71:77:F5:38:6F:99:9A:BA:CB:DF:2C:83:B4:90:0F:44:2D:D8 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019F0A3ECAB3DF9E580D34CFC7B0E9EB8CF1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft Manifest number: 036D Signing time: Sat 27 Jun 2026 18:01:54 +0000 Manifest this update: Sat 27 Jun 2026 18:01:54 +0000 Manifest next update: Sun 28 Jun 2026 18:01:54 +0000 Files and hashes: 1: 1E8AiSnlYGPXbOfAXqZEBvdti0Q.roa (hash: zg4/KmKPBBnWqoo6XqmqqOeEWKX38ZMsmowwS7V3CsY=) 2: 77Yu4ZkKaPznuOKi8y7bp9vM3Nc.roa (hash: MYuHr/ytBfhTDbqr7za9ExjlF7JJS2yYoVjndj2ysU0=) 3: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: Dnmsf4qIVUxKG8TVeI1bP+4tUZNZMSSziwhkLHc3cKA=) 4: AvhSVHbyFsNJfn-87fA7oHcica0.roa (hash: JjNvwI8D/DTZ5Kz60xSRCIvB7TZ/neKfvnL3MZ2ZTSU=) 5: Bs-3X2_3s1_ylp9HZ3u0qmqsKIc.roa (hash: OvB48quyvlskwvKB99l4RCiO0DI4olHfo4hrb7chq3E=) 6: Fpers4ckw8vskaNRVclqUBp0SoI.roa (hash: /ASq7BRZjDqtnx4xF8bUwVqbxsy5sT2w1mwn2Hyex7s=) 7: GG4z91MdDpV2DBV_RNPbWkwIoJw.roa (hash: Eqt3BxDIeVAQpNBJJYqmZDf6uBVXq8wo47BPWDDy060=) 8: HA6dWYIAIrLhHc3ZlMS0mNXwzj4.roa (hash: XvISgt0pWE+2sLOF5BQxSPwWN9GZTCyY6++CM98GOTc=) 9: L6Ra25CjKp_mEEvb6fnLzB9z48Y.roa (hash: gAYyNL8en1bwIuDNmy096pQ8EjEcbk/vtZcx5FewlIM=) 10: WuBrzTMwE7HOdA0Tjdz_HZVzBgo.roa (hash: DnIEHQKHfh076YMR1PXf1VI9TILeIAYv9upMo2Ja63I=) 11: XQH6M8DZ2SjCEWZpLUNQCl7_wtI.roa (hash: TxAgRgqgldVage91ycpVdCsYHeGeeaBXaxq0hHxwHGA=) 12: ZmA7YXk1EXie8V8IljOsrQAeVMc.roa (hash: KfN3YtXoCnYtbOhys/L3JbGSTPU3Jpxa1rNO5rVZaaM=) 13: adb_NQqDE2btKs5IvofM8ruzaqs.roa (hash: mZd2SOSViUwqdouzHTAAV8V8TgiRqrWPvi7A8y6abkk=) 14: hbHoK0o2p6Bt0sMLz48Nn7EIEws.roa (hash: AabyFao1094cA8E0S9PcCwFVPGA7d1c7Y+W9MYMaIkQ=) 15: iCAoTJ6_FbKXxlsZVDeLJRceNFg.roa (hash: bMQFyA/DfiURPI0ApEpZ777S9eYeQRmm3uEDLrIS7DM=) 16: khb_nHg0pSGTidoxptDUDhVpMRE.roa (hash: a1Y69sqRSLymfDktz/oYdmUj3z7+Bwa6JrhSMrXtZDY=) 17: rTCIQuB8b5-23Fe16EFzxOkFAo0.roa (hash: 85dTReYxmMkhMzb7ZnE2kpCceaZUsUjOdsiOl8VJLKg=) 18: wMIGg_895xsUud_tObIdM45E8XQ.roa (hash: LP5aF2JP0E54B5AqB2G8lcqC6PTsBN6TaHhp9g0P2hY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 28 Jun 2026 18:01:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:0a:3e:ca:b3:df:9e:58:0d:34:cf:c7:b0:e9:eb:8c:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Jun 27 18:01:54 2026 GMT Not After : Jun 28 18:01:54 2026 GMT Subject: CN=51147177f5386f999abacbdf2c83b4900f442dd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5f:0d:6c:1a:6e:13:b6:e9:ae:d6:9e:ed:10: c7:1d:db:5e:9f:c0:f0:cb:80:28:2a:68:59:15:26: 20:1b:9b:07:65:0e:d2:e1:5b:40:11:76:49:95:a7: 50:10:28:85:17:ba:7f:9d:e8:35:92:f7:05:a7:80: 00:4b:ef:c4:a1:22:22:3d:68:af:14:7b:af:65:c8: ab:eb:16:5c:6c:d4:5b:e4:a6:83:d8:f5:91:6e:b0: 24:49:6a:b5:b8:78:58:7d:05:e7:fa:b1:be:3d:fc: 42:0f:4c:a9:b1:75:15:de:ac:78:06:68:f6:cc:48: bf:9e:cc:97:e5:34:d4:72:40:5e:6c:92:4e:63:8e: 23:4b:47:4f:51:28:27:88:48:fb:e1:b7:df:3a:c5: 55:83:04:4d:a2:a9:28:73:89:23:de:f2:19:69:36: 4f:53:82:11:73:fa:ea:29:84:73:ea:88:94:56:88: 51:55:4e:9b:23:11:4d:b1:e1:f7:42:44:89:a4:9c: b0:23:41:2c:af:85:c2:5b:e1:e1:03:a5:ba:22:6e: b2:a0:a9:24:ae:14:27:6f:b5:26:30:51:3b:95:95: cb:be:1f:4d:fc:8b:1e:97:80:dd:49:8d:0c:72:70: 9a:13:03:8b:4b:57:10:c1:5d:1a:74:a0:a3:1b:d2: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:14:71:77:F5:38:6F:99:9A:BA:CB:DF:2C:83:B4:90:0F:44:2D:D8 X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:a9:b7:b6:b0:13:c7:01:2b:c9:a7:79:53:ac:8f:c4:b2:56: 6e:a3:8a:26:e7:fc:bf:43:dc:c7:d4:68:89:d6:ad:98:21:03: ec:67:8a:e7:a0:70:24:ce:24:43:aa:7c:ec:b2:20:12:51:11: b6:0c:e3:32:9e:b6:88:4a:09:ee:63:e0:56:c9:38:ef:df:f1: 49:d2:df:b1:6d:9c:7d:e0:40:ef:14:82:ec:4a:3a:0c:94:d3: a9:14:2f:ab:8c:f6:ad:7c:ea:40:4c:38:f6:82:74:70:53:7e: 0b:ec:59:65:62:62:04:f6:14:19:d3:e6:2a:67:fc:1d:08:06: 3d:5f:4f:4f:57:16:3f:84:ce:88:d6:2f:03:0b:27:dc:d6:41: 90:aa:81:c8:ab:ed:e3:20:50:50:3d:21:41:d9:3c:e3:e9:f8: 76:45:99:f2:84:9a:13:70:0d:a6:8e:f9:96:8b:8c:7b:80:60: 68:85:5f:e7:c8:da:2b:c2:38:28:cd:5f:62:28:5c:51:ff:5e: a0:5c:81:74:ee:db:0b:ae:f1:52:10:5b:0f:21:83:45:9d:3f: 72:ca:e1:c8:47:24:0b:f3:fd:10:d8:f5:8f:59:8e:07:dc:2c: 20:be:44:85:af:73:df:ca:6f:a9:bc:2b:40:93:57:29:a2:3b: b4:c3:90:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8KPsqz355YDTTPx7Dp64zxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwNjI3MTgwMTU0WhcNMjYwNjI4MTgwMTU0WjAzMTEwLwYDVQQD Eyg1MTE0NzE3N2Y1Mzg2Zjk5OWFiYWNiZGYyYzgzYjQ5MDBmNDQyZGQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAol8NbBpuE7bprtae7RDHHdten8Dw y4AoKmhZFSYgG5sHZQ7S4VtAEXZJladQECiFF7p/neg1kvcFp4AAS+/EoSIiPWiv FHuvZcir6xZcbNRb5KaD2PWRbrAkSWq1uHhYfQXn+rG+PfxCD0ypsXUV3qx4Bmj2 zEi/nsyX5TTUckBebJJOY44jS0dPUSgniEj74bffOsVVgwRNoqkoc4kj3vIZaTZP U4IRc/rqKYRz6oiUVohRVU6bIxFNseH3QkSJpJywI0Esr4XCW+HhA6W6Im6yoKkk rhQnb7UmMFE7lZXLvh9N/Isel4DdSY0McnCaEwOLS1cQwV0adKCjG9LsUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFEUcXf1OG+ZmrrL3yyDtJAPRC3YMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeqm3trAT xwEryad5U6yPxLJWbqOKJuf8v0Pcx9RoidatmCED7GeK56BwJM4kQ6p87LIgElER tgzjMp62iEoJ7mPgVsk479/xSdLfsW2cfeBA7xSC7Eo6DJTTqRQvq4z2rXzqQEw4 9oJ0cFN+C+xZZWJiBPYUGdPmKmf8HQgGPV9PT1cWP4TOiNYvAwsn3NZBkKqByKvt 4yBQUD0hQdk84+n4dkWZ8oSaE3ANpo75louMe4BgaIVf58jaK8I4KM1fYihcUf9e oFyBdO7bC67xUhBbDyGDRZ0/csrhyEckC/P9ENj1j1mOB9wsIL5Eha9z38pvqbwr QJNXKaI7tMOQcw== -----END CERTIFICATE-----Generated at Sun Jun 28 03:04:50 2026 by rpki-client