$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: AKcurVEhtPFyYozc2wJdBZYBt6Ujs2aeZsKkGEIviq0= Subject key identifier: A6:4A:72:54:98:06:58:BE:99:91:46:47:16:51:37:74:8E:A3:9B:02 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019EBFC8956A533DC06B2D2C0679F4DF130E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 19B3 Signing time: Sat 13 Jun 2026 07:00:54 +0000 Manifest this update: Sat 13 Jun 2026 07:00:54 +0000 Manifest next update: Sun 14 Jun 2026 07:00:54 +0000 Files and hashes: 1: 1-Dw7363-gcZT5BcZS3h3DULOLy8.roa (hash: ycAjWS2LKG3rf+AnuA7L1QjlHbaxU1ClqDSIOlIjNCE=) 2: BiYRVVML9NNTA_8LHQsEIyn-udM.roa (hash: MQi6PP1rzRM1KN1VV4mGhoaMI5G3SPq1bp7SEkx+KmA=) 3: H5Lw4z72o4JukubyJogRFNVhJ6w.roa (hash: x90xOVzv+WXaNWRhikp9C29Pc0et2AxQpDCFcAlXP5U=) 4: M4jgPZ-bQfm27ad0PSbYVT7hlGs.roa (hash: iwNBV+vpEbRSbqBny+pSg2+DuLOeDC0Bsr5os43H+zs=) 5: Nc3Qv6HWCUL0coHdhzehCvqorjQ.roa (hash: 1cr7/XMm8bJJ1VGTZJBo+emXZtefD8zXujejZu9BwnE=) 6: RiJbycN_HnEaFdxBy-0QqogHp9w.roa (hash: HrWeheuaH2PNBF70Yz5xTkWSf+oor2QnLluzhSuwnU8=) 7: cd86fuGEpcvGitdJ6j4qmONtrs4.roa (hash: OyWo2jddiuk9oXVabZhwBWcG9HobQGDOXj6VfpvDkjo=) 8: deTEkBZi5H7AIejV16ysjHwAbxY.roa (hash: l0JbGg+HLxrf5Ag/2z2pTojVken0ajBmDjhItX+Hm3I=) 9: hPDJ7bwWMVeeA66R-Nm66UMAI3I.roa (hash: S6FoRCGZ+2A7ou0QqZgDgmiPo527/Z9rU6I1qlBMQXY=) 10: m6p9BPIWsOH7v6W6AZC6nXJi-io.roa (hash: BC8bK8NI3x8c8eq0EtwDBtytWqxyhe3PkZuZECz3SIo=) 11: oKVovXTv2aNAyZu9y-AHgX6RbJ8.roa (hash: UsgdfjEOvyD+5ioDpDRHljoPckkLzWdsqZQnU51Gug0=) 12: ocHryKy0JCZoZXuWFydbiaPAXvA.roa (hash: VJkfS4R1R0/kVOkQFygl/eqzEOXMlTWCdbkGDaHwbCQ=) 13: pGPZirCKZzbNWc11cAMZui5y53g.roa (hash: x16id1SP+uWE4b9i/PFLiuYNReYseV++lthZDwFfk5U=) 14: pKSlP4qI-iIWoFFAgY7hZYUI5lE.roa (hash: fJiLeKrrQ0jkNTOG3gU1SfB8kCZt5PRpsv9OHklxoM8=) 15: qltZRt6yv2xmd-YFzKK4-T95t70.roa (hash: ouYg4rusjDVFIksWY2y+Jv/jtKdXu+HEE/CHgFLthz4=) 16: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: UfCysHJBXEVPTREqXLcLys3cP+HZiNyIQNnShJVIYLY=) 17: sQ8qQg5RChJp9JsfMBZ7VZwT8WE.roa (hash: obNWII8S7VxaHifOdhDpl8/q/V3M1i4VuliV8Z+MBow=) 18: z4qbPsOP-xo2NMp3HqpekMdf7sA.roa (hash: CIa0hH24rP2xgaENBe4fdRe+EVe1YceIYbMEnicxUf8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:c8:95:6a:53:3d:c0:6b:2d:2c:06:79:f4:df:13:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Jun 13 07:00:54 2026 GMT Not After : Jun 14 07:00:54 2026 GMT Subject: CN=a64a7254980658be99914647165137748ea39b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:35:64:67:eb:76:db:83:58:f1:f2:f7:11:17: 9c:fa:08:23:3b:8f:f5:6f:02:b2:59:7b:9b:3c:28: cf:5a:a0:aa:48:22:26:63:68:90:74:3a:7f:ac:61: 4b:bb:4d:24:0d:cd:a0:db:81:86:69:0f:6e:ec:4c: 46:6c:11:b0:bc:33:c5:47:54:d2:15:fc:17:7c:aa: e8:9d:1f:a9:8f:ba:b9:d6:bc:3a:10:ec:16:75:d0: 60:7a:3d:8e:fa:38:0c:14:00:8f:8d:05:de:4c:fa: a2:43:79:7c:fd:f6:fd:39:97:03:0f:ab:07:71:b2: 04:55:2e:fd:e3:70:b2:c9:99:ab:6b:aa:59:26:12: d0:b4:0b:bb:70:3e:c1:bd:5b:bd:e2:b0:6a:80:22: 8a:b2:33:c4:c5:04:11:26:ee:cd:0d:6c:d3:0d:32: 21:06:c2:f8:d1:06:11:8c:fb:f7:17:07:d2:b9:27: ef:ea:31:75:ea:b3:cf:06:01:37:f1:25:d9:fd:43: 42:ae:cc:50:f2:31:4c:61:9d:58:ad:26:f5:24:3c: 92:b3:cc:6d:eb:b7:77:55:81:65:fb:a7:50:84:be: 32:ef:37:83:f0:d9:9a:75:9b:cd:f6:61:7a:f9:b4: a0:4b:86:db:7d:1c:28:12:cc:ad:45:86:5d:c1:f3: b5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:4A:72:54:98:06:58:BE:99:91:46:47:16:51:37:74:8E:A3:9B:02 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:86:7a:7f:b9:12:b2:fb:46:03:96:de:95:cc:09:b0:17:76: 1e:18:46:a1:dd:04:b0:eb:19:e3:71:d1:6f:f3:69:6d:e2:9f: da:0f:60:5c:9e:e1:4b:d5:3b:12:ad:6f:df:17:78:b0:f6:9f: 5a:db:89:84:15:72:67:0b:6e:70:6a:c4:c0:c1:e3:30:a9:9f: c0:a7:22:d0:0c:b6:72:76:46:49:2b:69:6a:21:87:f0:d3:16: c8:1c:85:94:3e:44:d2:4c:12:a9:78:51:9f:b1:b7:8c:01:b2: 3e:f4:0b:08:04:49:be:91:06:55:fe:f7:3f:c4:cd:57:f8:41: 72:89:ef:1d:b8:a5:38:3f:f5:3e:5a:1e:5a:94:a1:75:6a:77: 85:9a:14:66:b7:f8:89:86:85:d0:21:8f:ec:b7:19:d6:bc:00: 17:99:ad:96:a8:ce:d4:ee:31:3c:cd:e1:79:dd:d4:e0:1a:6d: 05:f0:cb:f0:4c:cd:97:d8:66:7d:6a:f6:e9:ad:3a:f6:27:19: 05:0e:13:8c:cf:3c:ce:a6:3a:f3:1b:8a:6d:0e:35:f1:f1:21: f7:f3:95:0b:80:6d:bb:23:09:d3:99:31:0d:7a:e5:05:1a:e8: 9a:ce:63:2b:ae:b0:a7:55:14:44:19:74:a5:e9:bf:80:89:71: f3:7c:87:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/yJVqUz3Aay0sBnn03xMOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwNjEzMDcwMDU0WhcNMjYwNjE0MDcwMDU0WjAzMTEwLwYDVQQD EyhhNjRhNzI1NDk4MDY1OGJlOTk5MTQ2NDcxNjUxMzc3NDhlYTM5YjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjVkZ+t224NY8fL3ERec+ggjO4/1 bwKyWXubPCjPWqCqSCImY2iQdDp/rGFLu00kDc2g24GGaQ9u7ExGbBGwvDPFR1TS FfwXfKronR+pj7q51rw6EOwWddBgej2O+jgMFACPjQXeTPqiQ3l8/fb9OZcDD6sH cbIEVS7943CyyZmra6pZJhLQtAu7cD7BvVu94rBqgCKKsjPExQQRJu7NDWzTDTIh BsL40QYRjPv3FwfSuSfv6jF16rPPBgE38SXZ/UNCrsxQ8jFMYZ1YrSb1JDySs8xt 67d3VYFl+6dQhL4y7zeD8NmadZvN9mF6+bSgS4bbfRwoEsytRYZdwfO1BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKZKclSYBli+mZFGRxZRN3SOo5sCMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYZ6f7kS svtGA5belcwJsBd2HhhGod0EsOsZ43HRb/NpbeKf2g9gXJ7hS9U7Eq1v3xd4sPaf WtuJhBVyZwtucGrEwMHjMKmfwKci0Ay2cnZGSStpaiGH8NMWyByFlD5E0kwSqXhR n7G3jAGyPvQLCARJvpEGVf73P8TNV/hBconvHbilOD/1PloeWpShdWp3hZoUZrf4 iYaF0CGP7LcZ1rwAF5mtlqjO1O4xPM3hed3U4BptBfDL8EzNl9hmfWr26a069icZ BQ4TjM88zqY68xuKbQ418fEh9/OVC4BtuyMJ05kxDXrlBRroms5jK66wp1UURBl0 pem/gIlx83yH4Q== -----END CERTIFICATE-----Generated at Sat Jun 13 09:59:03 2026 by rpki-client