$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: hmhxTNKItH2Ry3bdpXZGTjtYUp6ErsZkeucIEjedSgU= Subject key identifier: 73:CB:05:C0:53:D9:5D:74:4B:6C:C6:80:2B:DB:52:A1:91:A1:5A:3D Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019EBDA31E22158EDFCC145436A9CF0078EE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 1329 Signing time: Fri 12 Jun 2026 21:00:44 +0000 Manifest this update: Fri 12 Jun 2026 21:00:44 +0000 Manifest next update: Sat 13 Jun 2026 21:00:44 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 3: IT-G9anfftKLn-JNHdB3nhqaHRg.roa (hash: 8S5tnd+3z64Mysha0HCn0KENKA3IjsNdvVfiIIaQQlM=) 4: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 5: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 6: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 7: UtuUMQUSfAe-27w8Nb05fTayiGU.roa (hash: AmMNeRGPrTgI2qZuMl1mv9LKIiaqIWQ8VyjSfG7bkaE=) 8: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 9: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 10: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 11: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: ePHhfggSKO0g6aIP4kMdtgaguUtKQOvTfHndLUAWa78=) 12: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) 13: uCc138TA6I8oKDd9GfZ4DDo3vbk.roa (hash: 9QywaX+xNWWX8/eIoZHqrPbZhEsxSCi5Zlf0wOs/po0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 21:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bd:a3:1e:22:15:8e:df:cc:14:54:36:a9:cf:00:78:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jun 12 21:00:44 2026 GMT Not After : Jun 13 21:00:44 2026 GMT Subject: CN=73cb05c053d95d744b6cc6802bdb52a191a15a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:d1:e7:7a:aa:45:f5:16:e6:3c:b6:0c:8e:21: 61:e6:6e:6f:2a:56:7d:4a:f4:72:62:40:47:fb:eb: 2c:9c:23:c4:51:5e:53:53:49:b7:ad:e0:bf:54:a6: ad:d7:06:59:85:ec:fc:b3:b8:d9:17:7e:4d:07:9b: a9:44:ce:c3:68:40:05:80:cd:dd:19:cd:ec:c8:96: 20:1d:8a:82:ec:a3:3a:c6:4a:7a:27:f0:9b:f5:34: 47:ad:9b:cf:7a:47:c2:36:af:26:84:09:a4:7e:70: f2:41:a8:5f:26:f5:64:26:a6:a5:cb:b3:f6:c0:de: 3f:8b:b5:20:07:4b:c7:07:05:4c:55:2a:18:de:72: 1d:37:6e:bd:b2:6b:cf:42:1c:9b:6c:1a:2d:32:df: 03:17:89:65:79:1f:8e:bf:aa:4d:86:d8:06:f7:47: eb:d8:bf:62:b6:d1:2a:be:a0:7c:3e:59:6a:62:2c: 68:73:cb:b5:9c:f7:af:01:e6:c7:53:54:e8:98:c0: e9:c0:ff:7b:25:d4:02:c7:76:2b:35:8d:48:df:6f: 80:57:25:78:d5:6c:93:67:9b:e4:27:d2:12:3c:66: 3d:1f:cb:92:93:cc:64:11:89:a9:fb:ad:4c:60:fb: c2:31:09:94:df:eb:1a:97:15:f1:da:e5:36:4b:82: 30:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:CB:05:C0:53:D9:5D:74:4B:6C:C6:80:2B:DB:52:A1:91:A1:5A:3D X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:a5:25:a7:76:31:b1:47:7f:1c:86:56:0a:c9:b9:f1:b6:a3: e8:b7:6e:9a:46:a2:de:e5:0b:1c:26:66:d5:94:bb:24:02:6a: c2:59:9b:c4:80:8c:85:25:33:4e:d9:41:0f:51:00:27:92:c7: 27:3d:6c:c0:ea:7e:a4:74:c1:86:2d:ee:6e:c5:15:8f:4c:03: ef:d2:3e:51:94:2d:8a:90:a9:24:ba:da:be:92:08:60:37:1f: 97:fc:06:bc:a7:d6:bf:35:e0:a3:04:79:65:43:3d:6e:8f:d1: 6c:53:71:c4:d1:6a:60:04:bd:5f:32:9e:cd:d9:ca:f0:11:d8: 59:8e:96:69:66:ab:24:cc:17:de:79:bf:97:26:ab:b2:31:e6: e3:d9:a6:0f:cc:05:a0:50:51:22:6a:20:cb:01:a9:cf:37:db: 95:af:8a:8e:7c:f5:d0:70:19:3b:fc:57:42:48:6c:6f:04:ef: 7e:a3:5a:de:df:c9:81:22:d7:4e:2e:49:e2:e2:f7:1e:8a:50: d8:a2:dc:05:97:ae:9c:22:28:01:23:0c:5a:2f:a8:f7:f7:6c: 9d:17:58:e7:7b:9f:cd:f6:c4:a8:09:a3:c3:91:6e:31:c3:74: 4a:e9:de:a1:8d:c2:64:31:84:9e:67:5a:d8:8f:f3:e1:d9:0b: ad:1f:c5:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ69ox4iFY7fzBRUNqnPAHjuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwNjEyMjEwMDQ0WhcNMjYwNjEzMjEwMDQ0WjAzMTEwLwYDVQQD Eyg3M2NiMDVjMDUzZDk1ZDc0NGI2Y2M2ODAyYmRiNTJhMTkxYTE1YTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNHneqpF9RbmPLYMjiFh5m5vKlZ9 SvRyYkBH++ssnCPEUV5TU0m3reC/VKat1wZZhez8s7jZF35NB5upRM7DaEAFgM3d Gc3syJYgHYqC7KM6xkp6J/Cb9TRHrZvPekfCNq8mhAmkfnDyQahfJvVkJqaly7P2 wN4/i7UgB0vHBwVMVSoY3nIdN269smvPQhybbBotMt8DF4lleR+Ov6pNhtgG90fr 2L9ittEqvqB8PllqYixoc8u1nPevAebHU1TomMDpwP97JdQCx3YrNY1I32+AVyV4 1WyTZ5vkJ9ISPGY9H8uSk8xkEYmp+61MYPvCMQmU3+salxXx2uU2S4IwNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHPLBcBT2V10S2zGgCvbUqGRoVo9MB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKUlp3Yx sUd/HIZWCsm58baj6Ldumkai3uULHCZm1ZS7JAJqwlmbxICMhSUzTtlBD1EAJ5LH Jz1swOp+pHTBhi3ubsUVj0wD79I+UZQtipCpJLravpIIYDcfl/wGvKfWvzXgowR5 ZUM9bo/RbFNxxNFqYAS9XzKezdnK8BHYWY6WaWarJMwX3nm/lyarsjHm49mmD8wF oFBRImogywGpzzfbla+Kjnz10HAZO/xXQkhsbwTvfqNa3t/JgSLXTi5J4uL3HopQ 2KLcBZeunCIoASMMWi+o9/dsnRdY53ufzfbEqAmjw5FuMcN0SuneoY3CZDGEnmda 2I/z4dkLrR/FEA== -----END CERTIFICATE-----Generated at Sat Jun 13 08:11:31 2026 by rpki-client