$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: ieY258XUo6aC/BQLCwsa7l5sC+qFNwX966CMO+3+pQU= Subject key identifier: 38:D9:28:82:BF:C9:51:0D:A4:4B:CC:A5:17:DC:3D:66:44:1E:22:55 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019F19E88BC66D0E91B7DC089068A5C18A94 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0D3E Signing time: Tue 30 Jun 2026 19:01:38 +0000 Manifest this update: Tue 30 Jun 2026 19:01:38 +0000 Manifest next update: Wed 01 Jul 2026 19:01:38 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: 8fi/g47OOclulMIv4J2DS7efSnUqUHHnfjELTWKFc3g=) 9: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 10: aV15c49lSGl3dteQSHc3IvNZ2Yw.roa (hash: idSDFzUORIOI2C3DdmyZjUWIVKrr2rvoia+URiMKZUk=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 14: jdhRRSqw1KV-OBkZuUAJ-tCWDik.roa (hash: PZnlHT69L4VcU/X0HEwE+Wn3yCWoZ+g03Z4fHifOKPg=) 15: ta9QPHmvElN9LQbU3Ml0S8yt9cs.roa (hash: pWwk3bYPZv/2DLVIuX6tB76kOFRVtUjaqBNqlUqnu+g=) 16: wea1j7CCiOwKhbp9xRs9xEsak8o.roa (hash: hckz/qMoMAZzO9HmBfzADkSbkz16uEss9Ro4N3hyVDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 01 Jul 2026 14:31:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:19:e8:8b:c6:6d:0e:91:b7:dc:08:90:68:a5:c1:8a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jun 30 19:01:38 2026 GMT Not After : Jul 1 19:01:38 2026 GMT Subject: CN=38d92882bfc9510da44bcca517dc3d66441e2255 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b1:82:41:0e:ab:e5:26:f3:97:1e:dd:6a:ef: 25:41:d4:ff:39:96:af:c8:f0:cc:cc:3b:b6:2f:c3: ed:09:31:11:42:4e:e8:73:20:fb:a9:45:f1:b8:cd: 8a:7a:ff:43:74:d1:b3:83:dd:71:1d:cd:dc:68:00: 87:5e:27:ed:65:49:9e:2f:16:a5:88:b2:93:b0:fa: 9d:8b:3a:5c:50:6b:76:95:78:ff:ae:e5:61:6a:1e: 38:be:44:91:de:41:60:44:20:da:1d:48:58:f3:bf: f7:95:7e:5b:52:44:07:68:de:82:79:d8:f5:98:49: 57:de:52:95:23:01:98:59:ea:19:b2:0a:b5:1a:c7: 5d:29:53:e9:02:02:f7:cf:f2:f8:87:cd:6c:5c:3b: 7c:95:27:d5:82:b4:aa:aa:9e:7e:a1:c6:5d:8c:f5: d4:ec:42:ee:4e:fa:3b:48:6c:e7:45:98:a3:3b:4c: 69:15:f8:87:03:72:14:6a:ba:b8:ed:1f:90:de:0d: 2d:22:f4:dc:e9:ac:b3:ac:30:b7:dc:18:5f:85:f4: 9c:d4:0a:15:76:bc:dc:28:ae:43:4d:02:cc:bb:ec: 3b:b1:c3:00:e9:e8:90:e9:b3:64:b9:42:a6:f4:50: 0a:30:fa:6f:07:d9:2a:05:4d:e0:ae:d3:ed:f6:eb: c6:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D9:28:82:BF:C9:51:0D:A4:4B:CC:A5:17:DC:3D:66:44:1E:22:55 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:27:fc:b3:68:26:4f:75:e8:12:49:d7:7c:b2:5e:89:60:92: 60:89:57:a7:58:9f:0e:2b:98:28:c4:df:b8:4e:76:5c:c8:e4: a3:36:86:28:65:bc:b5:23:82:a6:43:16:09:76:fc:bc:82:b3: ac:57:70:23:b6:21:e5:1e:e2:90:07:cb:9b:22:a6:e2:87:c1: e1:ed:f7:e3:0a:1a:4e:5e:a8:ca:10:63:c6:b1:9d:5c:b3:72: 30:3d:f5:6b:45:fa:b8:23:5f:18:cf:09:7a:a1:1f:09:0b:ed: 5a:98:d5:c9:ad:9b:11:b2:77:f0:97:8c:17:3c:06:56:70:5f: ef:37:a9:74:fc:fc:6c:dd:f3:77:45:69:7d:39:0f:73:d5:2a: e6:b0:5f:fa:37:ce:76:09:28:54:2b:cd:cd:01:dc:d4:db:9d: a4:c1:d1:cd:b3:17:7b:2e:07:21:78:e2:b5:28:88:d7:a3:53: 35:3d:d8:9c:49:2c:0d:ea:c8:71:e0:01:da:62:e2:d1:f3:67: 0b:f8:0f:cb:f6:2e:df:64:25:24:d9:62:20:46:a5:05:a9:21: 3a:e3:b2:55:55:fb:49:09:f6:c8:2b:f3:06:6a:e8:41:bc:f5: 73:1c:00:eb:21:ed:3f:08:66:d7:81:8b:80:b2:ef:7f:4d:b1: 0b:05:2a:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ8Z6IvGbQ6Rt9wIkGilwYqUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwNjMwMTkwMTM4WhcNMjYwNzAxMTkwMTM4WjAzMTEwLwYDVQQD EygzOGQ5Mjg4MmJmYzk1MTBkYTQ0YmNjYTUxN2RjM2Q2NjQ0MWUyMjU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvLGCQQ6r5Sbzlx7dau8lQdT/OZav yPDMzDu2L8PtCTERQk7ocyD7qUXxuM2Kev9DdNGzg91xHc3caACHXiftZUmeLxal iLKTsPqdizpcUGt2lXj/ruVhah44vkSR3kFgRCDaHUhY87/3lX5bUkQHaN6Cedj1 mElX3lKVIwGYWeoZsgq1GsddKVPpAgL3z/L4h81sXDt8lSfVgrSqqp5+ocZdjPXU 7ELuTvo7SGznRZijO0xpFfiHA3IUarq47R+Q3g0tIvTc6ayzrDC33BhfhfSc1AoV drzcKK5DTQLMu+w7scMA6eiQ6bNkuUKm9FAKMPpvB9kqBU3grtPt9uvGkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjZKIK/yVENpEvMpRfcPWZEHiJVMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEyf8s2gm T3XoEknXfLJeiWCSYIlXp1ifDiuYKMTfuE52XMjkozaGKGW8tSOCpkMWCXb8vIKz rFdwI7Yh5R7ikAfLmyKm4ofB4e334woaTl6oyhBjxrGdXLNyMD31a0X6uCNfGM8J eqEfCQvtWpjVya2bEbJ38JeMFzwGVnBf7zepdPz8bN3zd0VpfTkPc9Uq5rBf+jfO dgkoVCvNzQHc1NudpMHRzbMXey4HIXjitSiI16NTNT3YnEksDerIceAB2mLi0fNn C/gPy/Yu32QlJNliIEalBakhOuOyVVX7SQn2yCvzBmroQbz1cxwA6yHtPwhm14GL gLLvf02xCwUqZA== -----END CERTIFICATE-----Generated at Tue Jun 30 22:42:14 2026 by rpki-client