$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: JKrlIWqo6AxGyCxugOVnZ5wm6Ojn9lbMnEFVw4j3n2w= Subject key identifier: 1C:60:F7:EE:CD:F3:DA:21:41:BD:68:8D:06:1B:52:EE:D9:20:BE:9A Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019E31F3AAD0A0A28BBE42606191C520DB6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0CC2 Signing time: Sat 16 May 2026 18:01:53 +0000 Manifest this update: Sat 16 May 2026 18:01:53 +0000 Manifest next update: Sun 17 May 2026 18:01:53 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: QP9CNlQFuVB9wS0BW21smKX3lBU.roa (hash: dwNtwT/3EY1R/q2zrzRe6Xma12Bkc4BEFlUrU3pbm+Q=) 9: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: xXmGUbuo6LwnbQ68Oe/I2gZdCTTDy5GiQ1XU0T5kJ/4=) 10: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: fzxoNfiPUD7xeSSlqYVskKUZ9gQ.roa (hash: XjcQQ4lJaJtOIDs0K1l+gH5MfloiUUpBeoZaPEDBX6c=) 14: imTf8No1ZINbCYJNVjvMbyKdYDc.roa (hash: v7b/CtSyIh4Qh/63ZcyMa4HLHKrxYzw4yW2zbhrt2aQ=) 15: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 16: jdhRRSqw1KV-OBkZuUAJ-tCWDik.roa (hash: PZnlHT69L4VcU/X0HEwE+Wn3yCWoZ+g03Z4fHifOKPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 17 May 2026 12:40:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:31:f3:aa:d0:a0:a2:8b:be:42:60:61:91:c5:20:db:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: May 16 18:01:53 2026 GMT Not After : May 17 18:01:53 2026 GMT Subject: CN=1c60f7eecdf3da2141bd688d061b52eed920be9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5c:a7:8c:43:27:81:85:94:e1:ae:e9:1d:b6: 46:3a:4d:99:6c:d8:04:f6:c2:6b:0d:ee:47:1b:53: 2a:75:1e:46:5b:c0:83:b8:1f:e6:55:fa:54:46:d1: 02:2b:51:fe:04:d9:4a:37:46:ae:9d:04:1c:35:97: 89:11:60:74:e4:00:d9:64:1a:f9:72:0b:d5:65:ae: 10:fa:21:16:49:bc:91:b0:26:78:8c:14:e0:b6:25: d7:91:b4:29:42:18:1a:2d:c5:b5:9d:55:53:8c:59: a2:22:3c:26:ab:4b:7a:55:80:e1:fd:60:05:33:81: ae:6c:16:3c:17:fb:ba:b9:2f:49:5c:a7:3d:94:26: 51:1e:a2:39:13:73:79:46:f6:4e:ea:a1:25:7e:1c: db:b3:67:18:c3:6a:dc:db:fb:a1:ef:95:fe:0b:56: 13:74:ff:ff:65:6c:ca:a2:78:8c:9a:b3:d1:2c:32: 05:77:14:85:95:03:ce:93:66:d9:a3:77:b2:02:1b: 7d:92:eb:f3:79:fe:1d:00:f4:71:b8:39:50:21:be: 87:d6:4f:74:19:25:ef:89:ca:e0:7b:58:c1:a4:98: 49:47:b9:b6:03:39:a3:50:f7:21:b5:67:f4:b5:03: ee:ab:01:6e:27:11:72:1a:20:0b:51:57:da:e4:05: ad:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:60:F7:EE:CD:F3:DA:21:41:BD:68:8D:06:1B:52:EE:D9:20:BE:9A X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:68:33:f3:f8:9e:a0:33:b1:7f:10:17:2b:05:59:3b:26:5b: 81:11:02:c2:e1:ee:e2:58:04:06:3d:4e:64:1c:b1:df:32:e7: da:5a:08:f7:21:d1:1d:8f:da:e4:e2:ce:05:28:98:30:84:a4: b7:d1:2d:e4:9f:5c:a9:be:89:6d:e7:fa:c5:bf:33:79:90:c8: 62:bc:46:db:66:1d:0b:d5:b8:6e:f9:49:76:60:48:c6:8e:26: 81:c1:ed:77:72:0c:37:ec:31:6d:a9:9f:2c:1a:c6:1f:cc:23: 18:1b:cd:38:a6:2e:5d:d9:7c:c2:2a:f0:ce:c5:f8:21:10:d5: 17:67:e2:1f:0f:1a:38:f1:29:20:82:93:aa:41:07:33:86:3c: 94:96:5c:f4:48:11:80:24:d6:09:c4:0f:61:ee:9c:42:ef:51: aa:70:4c:e1:da:86:2e:22:e0:c3:c7:0e:2a:1c:97:ce:d1:f9: fe:f3:9f:8b:3b:c4:83:af:96:6e:d0:3b:3b:bd:ec:48:0d:f7: ce:fe:59:e2:a4:4f:33:e2:08:02:bf:e6:3c:29:7f:f1:9d:0a: a1:1b:e7:62:42:c3:2d:43:e2:98:c9:95:60:a1:3e:86:6e:ed: 19:88:60:28:da:af:6f:08:89:8c:93:41:b0:03:c4:85:3f:5b: 5b:90:7c:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ4x86rQoKKLvkJgYZHFINtuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwNTE2MTgwMTUzWhcNMjYwNTE3MTgwMTUzWjAzMTEwLwYDVQQD EygxYzYwZjdlZWNkZjNkYTIxNDFiZDY4OGQwNjFiNTJlZWQ5MjBiZTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulynjEMngYWU4a7pHbZGOk2ZbNgE 9sJrDe5HG1MqdR5GW8CDuB/mVfpURtECK1H+BNlKN0aunQQcNZeJEWB05ADZZBr5 cgvVZa4Q+iEWSbyRsCZ4jBTgtiXXkbQpQhgaLcW1nVVTjFmiIjwmq0t6VYDh/WAF M4GubBY8F/u6uS9JXKc9lCZRHqI5E3N5RvZO6qElfhzbs2cYw2rc2/uh75X+C1YT dP//ZWzKoniMmrPRLDIFdxSFlQPOk2bZo3eyAht9kuvzef4dAPRxuDlQIb6H1k90 GSXvicrge1jBpJhJR7m2AzmjUPchtWf0tQPuqwFuJxFyGiALUVfa5AWtnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxg9+7N89ohQb1ojQYbUu7ZIL6aMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALGgz8/ie oDOxfxAXKwVZOyZbgRECwuHu4lgEBj1OZByx3zLn2loI9yHRHY/a5OLOBSiYMISk t9Et5J9cqb6Jbef6xb8zeZDIYrxG22YdC9W4bvlJdmBIxo4mgcHtd3IMN+wxbamf LBrGH8wjGBvNOKYuXdl8wirwzsX4IRDVF2fiHw8aOPEpIIKTqkEHM4Y8lJZc9EgR gCTWCcQPYe6cQu9RqnBM4dqGLiLgw8cOKhyXztH5/vOfizvEg6+WbtA7O73sSA33 zv5Z4qRPM+IIAr/mPCl/8Z0KoRvnYkLDLUPimMmVYKE+hm7tGYhgKNqvbwiJjJNB sAPEhT9bW5B8ig== -----END CERTIFICATE-----Generated at Sat May 16 20:20:17 2026 by rpki-client