$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: JuNUyIz181UlOrktWmF6hVXPeTvUNU/IqW9zRUF1R1k= Subject key identifier: BB:1E:15:66:78:3E:CD:CD:78:DA:23:94:35:53:22:7C:41:C8:CC:93 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 019EBDA329BD8F9FB59058CFAE6D18D18847 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0E9B Signing time: Fri 12 Jun 2026 21:00:47 +0000 Manifest this update: Fri 12 Jun 2026 21:00:47 +0000 Manifest next update: Sat 13 Jun 2026 21:00:47 +0000 Files and hashes: 1: 1raBdrG8cJ9Bp5UTf1-3ySXpvNU.roa (hash: nidyHf42+8qviczWax8TG8WbQgA/HNtQCPEG+F+WBIY=) 2: 35OSfnIHBzgeVNUOnTTlLCJ-41Q.asa (hash: AtHm41TjTKHIFJ2bQdWE7+1O/PQj6BaIk8dinW6LOjs=) 3: 4kD5axCPDSh_OTr3bDY6hTRuR-Y.asa (hash: dytt7ty1MYNg2mHD9RN1VQfKWAI0ZZD9QAq0LJCg/iM=) 4: 7_Kx6Ctl8DaaoL5p_Ek3ZtApVT4.asa (hash: 8uOvnBvZoQsY2783oMLIp4UXHsh3oz2EmqHH8OrzbmU=) 5: PMb5QpHERgutl-yC5RQn75DTGLw.asa (hash: J3iqeMWpp9y9r2qafPxIekHw1hn9lS8glb6D3OYiiTQ=) 6: RkZNyp9wmYxkjqAQhf5rttwR3xU.asa (hash: f/5DtLEb4wh+D+8sMIfmagBhhWS2Yg6kDyhzQs/zOTY=) 7: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 8: bqKa0YRsYxH7tFUT4rHgcN42asw.roa (hash: 8oWhUO/dKOps3lszSUNTka8Z4cLC6TKDR/CwR798z8A=) 9: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 10: nqCowGB0ICzLbyaA3M41ICLCHf8.asa (hash: vdGJUwM6cjDv1l7k94p+qDqZhellVdm1aKK/aatWVNA=) 11: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: FiG8AYvLsiJYW7UWJFUAy+irxYtPq4cVBzoCM0HjIww=) 12: w8W811TbOURa8f5-mcUpSAfk2n0.asa (hash: b96roN8WeCshD8FoZxjRFm4baoilKTWmZSNLBHUvnfc=) 13: x6T6GqRVAh0o9EoIdLMe4raaS10.asa (hash: MNgMjRK2BIwfms49ydVNFTqMQqZeRrZembCusJ+wf3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 21:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bd:a3:29:bd:8f:9f:b5:90:58:cf:ae:6d:18:d1:88:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Jun 12 21:00:47 2026 GMT Not After : Jun 13 21:00:47 2026 GMT Subject: CN=bb1e1566783ecdcd78da23943553227c41c8cc93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:17:9c:25:15:7d:bf:de:ab:ee:0f:b3:78:8e: 7d:20:b4:bd:5f:e2:02:4b:b9:e0:21:4d:9c:2f:d7: c1:cb:64:83:60:80:d6:45:dd:c3:6f:13:fb:79:0d: c0:df:f3:14:bf:80:e6:78:68:1d:9b:c3:cd:ed:7d: b5:12:5e:b8:e4:d5:ec:e6:58:8f:a9:64:33:f8:59: f2:52:96:26:c1:0f:db:eb:9f:83:b0:b1:63:81:ed: 54:09:d8:dd:ef:9c:0b:23:49:64:9e:3d:de:73:fb: b9:04:5e:70:09:de:60:f6:35:9a:61:84:2b:ea:00: c3:ea:bb:76:17:7e:d9:d5:b7:26:80:8b:73:1c:b0: a1:10:15:49:0c:0f:47:0d:d4:0a:59:fd:83:f3:a1: fb:5f:35:82:3c:4b:37:32:12:9f:ee:4c:f7:01:8f: c5:cb:39:c1:7e:26:7e:43:45:89:c5:9f:5a:a7:c0: 53:e4:67:1e:a6:ca:9e:c7:67:10:ed:13:97:1c:41: dc:60:40:85:ef:d5:3e:23:04:be:7d:5a:72:d9:f8: 40:c6:fe:21:da:e1:77:4d:05:a4:b9:7c:8c:4f:94: 89:dd:16:5c:2b:40:c9:c9:de:09:cd:7b:5b:e1:3b: 64:b6:1e:4c:f7:fb:ce:86:13:fd:2c:ff:fb:f1:92: 88:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1E:15:66:78:3E:CD:CD:78:DA:23:94:35:53:22:7C:41:C8:CC:93 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:8f:89:5d:ce:ec:24:93:3c:e5:f0:43:92:7a:e7:9a:ff:76: 2f:9a:c5:ac:03:c4:88:ba:c2:f4:3b:a4:98:36:df:06:11:81: a0:60:6d:5c:28:d7:f8:a7:9b:1e:0e:2f:96:5f:17:e7:a0:be: 53:f9:fb:be:51:00:11:d9:94:48:4f:39:39:9d:42:d0:bf:c4: 24:55:51:9e:8e:ef:55:43:fc:7c:7a:7a:d8:f1:13:c0:b7:80: 34:6e:02:52:23:66:53:10:4d:c6:b3:a6:14:88:43:62:76:76: e4:a7:bb:96:82:9b:92:3d:0f:01:b0:38:f5:aa:08:60:29:3e: 7f:87:5f:67:da:44:3d:8f:11:d2:25:78:3f:ff:cc:b3:04:9d: 67:e3:bb:78:37:b6:57:45:f7:87:0a:b9:e1:04:7a:d1:bb:28: d9:79:f7:37:1e:87:54:97:45:af:f5:8e:1c:db:ec:54:4c:46: 07:b7:70:aa:7d:11:9c:44:e4:e6:62:59:ac:b1:90:9a:8d:e4: 82:ef:f2:95:36:d3:42:52:3e:db:2c:ff:bf:e5:d0:d8:f4:a3: 2d:f8:56:56:31:57:dc:c5:4e:3e:a4:f3:da:6d:b9:40:ae:4b: 2a:8b:38:a1:82:f2:03:ab:f4:6f:ad:88:6c:f6:fc:c7:45:87: 71:75:38:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ69oym9j5+1kFjPrm0Y0YhHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwNjEyMjEwMDQ3WhcNMjYwNjEzMjEwMDQ3WjAzMTEwLwYDVQQD EyhiYjFlMTU2Njc4M2VjZGNkNzhkYTIzOTQzNTUzMjI3YzQxYzhjYzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxecJRV9v96r7g+zeI59ILS9X+IC S7ngIU2cL9fBy2SDYIDWRd3DbxP7eQ3A3/MUv4DmeGgdm8PN7X21El645NXs5liP qWQz+FnyUpYmwQ/b65+DsLFjge1UCdjd75wLI0lknj3ec/u5BF5wCd5g9jWaYYQr 6gDD6rt2F37Z1bcmgItzHLChEBVJDA9HDdQKWf2D86H7XzWCPEs3MhKf7kz3AY/F yznBfiZ+Q0WJxZ9ap8BT5Gcepsqex2cQ7ROXHEHcYECF79U+IwS+fVpy2fhAxv4h 2uF3TQWkuXyMT5SJ3RZcK0DJyd4JzXtb4Ttkth5M9/vOhhP9LP/78ZKIRwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLseFWZ4Ps3NeNojlDVTInxByMyTMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaY+JXc7s JJM85fBDknrnmv92L5rFrAPEiLrC9DukmDbfBhGBoGBtXCjX+KebHg4vll8X56C+ U/n7vlEAEdmUSE85OZ1C0L/EJFVRno7vVUP8fHp62PETwLeANG4CUiNmUxBNxrOm FIhDYnZ25Ke7loKbkj0PAbA49aoIYCk+f4dfZ9pEPY8R0iV4P//MswSdZ+O7eDe2 V0X3hwq54QR60bso2Xn3Nx6HVJdFr/WOHNvsVExGB7dwqn0RnETk5mJZrLGQmo3k gu/ylTbTQlI+2yz/v+XQ2PSjLfhWVjFX3MVOPqTz2m25QK5LKos4oYLyA6v0b62I bPb8x0WHcXU4FQ== -----END CERTIFICATE-----Generated at Sat Jun 13 07:21:59 2026 by rpki-client