$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: C1a0JJZr7ymZQj/acwsz7iMtyrxvmFvQ/HQxsAU0TcI= Subject key identifier: 70:F3:E9:6B:DC:17:4A:29:7B:0D:6E:DD:A3:5D:14:BF:C1:65:3E:55 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019EBF91AC8975BC5A52F910022E3F2EBAEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 132A Signing time: Sat 13 Jun 2026 06:00:55 +0000 Manifest this update: Sat 13 Jun 2026 06:00:55 +0000 Manifest next update: Sun 14 Jun 2026 06:00:55 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 3: IT-G9anfftKLn-JNHdB3nhqaHRg.roa (hash: 8S5tnd+3z64Mysha0HCn0KENKA3IjsNdvVfiIIaQQlM=) 4: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 5: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 6: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 7: UtuUMQUSfAe-27w8Nb05fTayiGU.roa (hash: AmMNeRGPrTgI2qZuMl1mv9LKIiaqIWQ8VyjSfG7bkaE=) 8: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 9: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 10: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 11: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: dLVJVqLSEXARsJXIpjcqm+67LI+dH6GcIFzUERJcGOM=) 12: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) 13: uCc138TA6I8oKDd9GfZ4DDo3vbk.roa (hash: 9QywaX+xNWWX8/eIoZHqrPbZhEsxSCi5Zlf0wOs/po0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:91:ac:89:75:bc:5a:52:f9:10:02:2e:3f:2e:ba:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jun 13 06:00:55 2026 GMT Not After : Jun 14 06:00:55 2026 GMT Subject: CN=70f3e96bdc174a297b0d6edda35d14bfc1653e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:9d:9c:6e:96:70:36:99:c5:ff:5d:86:b2:b7: 91:91:e4:63:23:88:6f:54:d5:3c:af:51:2f:f3:ad: 24:fa:db:1d:16:ac:6b:91:ac:77:3e:a1:97:b2:07: 5c:fd:ac:2c:c1:5e:fd:08:f4:37:65:86:c7:94:88: 2b:1d:44:7f:f9:ae:63:0a:2b:d7:7a:75:a0:f7:14: 17:f1:45:5e:83:23:7a:61:8e:4b:4d:16:06:8d:61: 6f:20:99:9a:73:d9:19:89:06:89:24:63:9a:13:e0: 72:ef:aa:c1:b7:2d:7a:4d:cb:3e:e3:64:bf:14:d2: 72:05:4e:48:8d:dd:40:9b:ed:47:fb:9d:30:18:bf: 95:66:91:9a:78:6e:91:4f:c8:d3:99:64:02:28:7c: ce:a7:21:83:9d:f4:a3:25:24:2d:23:6c:d1:23:62: 0f:50:a9:2e:53:e2:34:7b:1a:47:e3:6e:60:e2:dd: 67:89:66:18:cc:62:c0:f9:d2:2b:4c:f8:cf:58:0c: 7e:89:40:8b:b8:55:b2:82:07:fe:94:0f:32:cb:10: c5:cb:9b:67:65:00:02:59:32:ab:e0:e5:f9:cc:6b: 2a:cc:c5:97:90:3d:a3:e1:f4:9c:56:93:00:bc:9c: f5:50:56:13:89:5e:fe:ed:d3:ad:c6:bd:80:81:5f: b9:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F3:E9:6B:DC:17:4A:29:7B:0D:6E:DD:A3:5D:14:BF:C1:65:3E:55 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:98:32:ed:d4:40:e9:ce:ed:1d:9a:43:cb:cf:62:e7:0c:ed: da:0c:c1:75:69:78:15:3c:de:81:cb:d9:0d:f4:33:92:43:1f: 2f:05:6a:40:d7:77:16:41:e7:1f:ac:03:53:e1:ee:bf:3d:a6: 32:dd:d4:48:25:e2:42:6d:6f:bb:a3:58:ac:59:eb:77:1e:db: 2e:4b:ab:c7:16:81:a6:38:04:7c:e7:f1:32:ff:86:b3:2e:61: 0c:cf:30:17:5d:78:35:77:22:2f:10:bb:4a:bf:f4:f5:83:79: 50:c5:da:12:6b:b2:f9:11:0d:0b:2f:ff:5e:9d:28:f5:d7:66: 48:e7:c5:26:b8:29:da:6f:26:41:ff:6e:a3:21:69:f4:cb:c8: 2d:33:d4:3a:da:3d:96:82:fe:7e:de:a6:0a:2f:30:31:2a:b4: b9:1d:2a:d8:62:06:b8:49:e7:9a:dd:8e:56:aa:83:73:6f:8a: 42:eb:86:b9:f9:3c:03:3d:8b:e3:ea:ab:12:18:1e:fd:92:43: 08:20:77:a2:1c:ce:63:cd:f6:73:19:9f:a5:3f:a8:2c:1c:1f: ce:37:1c:ea:8a:00:cb:50:87:cd:c1:2f:87:f9:6e:92:59:67: cb:38:d9:68:b8:7d:63:59:f1:ed:b5:b0:e3:6a:a9:9f:bf:70: 0e:1a:c6:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/kayJdbxaUvkQAi4/LrruMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwNjEzMDYwMDU1WhcNMjYwNjE0MDYwMDU1WjAzMTEwLwYDVQQD Eyg3MGYzZTk2YmRjMTc0YTI5N2IwZDZlZGRhMzVkMTRiZmMxNjUzZTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw52cbpZwNpnF/12GsreRkeRjI4hv VNU8r1Ev860k+tsdFqxrkax3PqGXsgdc/awswV79CPQ3ZYbHlIgrHUR/+a5jCivX enWg9xQX8UVegyN6YY5LTRYGjWFvIJmac9kZiQaJJGOaE+By76rBty16Tcs+42S/ FNJyBU5Ijd1Am+1H+50wGL+VZpGaeG6RT8jTmWQCKHzOpyGDnfSjJSQtI2zRI2IP UKkuU+I0expH425g4t1niWYYzGLA+dIrTPjPWAx+iUCLuFWyggf+lA8yyxDFy5tn ZQACWTKr4OX5zGsqzMWXkD2j4fScVpMAvJz1UFYTiV7+7dOtxr2AgV+5rwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDz6WvcF0opew1u3aNdFL/BZT5VMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALJgy7dRA 6c7tHZpDy89i5wzt2gzBdWl4FTzegcvZDfQzkkMfLwVqQNd3FkHnH6wDU+Huvz2m Mt3USCXiQm1vu6NYrFnrdx7bLkurxxaBpjgEfOfxMv+Gsy5hDM8wF114NXciLxC7 Sr/09YN5UMXaEmuy+RENCy//Xp0o9ddmSOfFJrgp2m8mQf9uoyFp9MvILTPUOto9 loL+ft6mCi8wMSq0uR0q2GIGuEnnmt2OVqqDc2+KQuuGufk8Az2L4+qrEhge/ZJD CCB3ohzOY832cxmfpT+oLBwfzjcc6ooAy1CHzcEvh/lukllnyzjZaLh9Y1nx7bWw 42qpn79wDhrGkg== -----END CERTIFICATE-----Generated at Sat Jun 13 09:50:38 2026 by rpki-client