$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft File: I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft (raw, json) Hash identifier: lt8Lkkrq340H4EHoPCZO8WRlkcQIBV0h0C0l75KwX2I= Subject key identifier: 1B:CD:58:70:ED:2F:BD:DB:6B:99:1F:F7:27:84:51:ED:4A:33:2D:9D Authority key identifier: 23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 Certificate issuer: /CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Certificate serial: 019EC0A40A0274E3369260C4AE8D1475F6A0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft Manifest number: 168D Signing time: Sat 13 Jun 2026 11:00:36 +0000 Manifest this update: Sat 13 Jun 2026 11:00:36 +0000 Manifest next update: Sun 14 Jun 2026 11:00:36 +0000 Files and hashes: 1: 1-VP1JTZYEEXjN2sPzoDElqqqpAA.roa (hash: LlUyvkpU2lxh4F/inJGyJ5IsPKqPjH4THXEg1ohXwns=) 2: 2zIgCHVsuwyzUlczHTmtHzKbcqo.roa (hash: XtTVvuJ7wJ6AMvDlLc/Z9ph2kaE/WMDOHDw0P5r/pfY=) 3: 5a2tVJSA7-aN0SRuVG0OxuxPaTI.roa (hash: ngRWxztuZ4gf4dqFuQH0sXxlseI1zKXXWW7i/sJRBxI=) 4: 5r48GUKh84ROTbw9-gcbQDQKFBI.roa (hash: kZhIGOWN74m811rpgOu6MCBVwQ1U5x239x2EZ4sKGT4=) 5: 8Wjrdj2WKMSM7VLq6O2_WIUlNCk.roa (hash: dgE2Ab9ZfpajFKmcACCOgi+fkWx+nQ+aZGAo8XG7CBs=) 6: GsdSTdPPwI0228ECIt2r0rK9RWw.roa (hash: X0Lt5c9WzmkCc5QBBKneyZXk9AJbwJF87NdzB2X/zUg=) 7: I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl (hash: /q5RYJUV4MJP5IXuwyMLIMP4WgtK9AmZ6SZ3wkh+Odo=) 8: JOGLGMeeIhLZyrqKrSQvitYx3gE.roa (hash: rIepwbyFrt40XcXdnXtrMH+SOHeI5RBBG2uhOtl2jXU=) 9: Kw3halcLJqtOzptZpUiCUgnn2C8.roa (hash: fykawWENEq2Aj5HKOD8iBpZCBO+i2gcxksOXX0gXKNw=) 10: _paVXI4yFigy-9MGkkSdZ4KElMA.roa (hash: EX3gggfhaPgMOhanerc0ccEXCfzIrPeo/9AxaL7NDEI=) 11: d2890PaygR0MS5u8p7dH6H66pb4.roa (hash: HhGnLAPS8EnA/7AkwrL0JfpWX2Nt+s9/OgXKlvI6K0o=) 12: f2ibodhi73IEqUM4cvZAIZV8Hok.roa (hash: iuBb094qNV26BCqiT/s6okKeHa8HQorZ2XlGErbzB6I=) 13: wEBX4egrVoQFZyAMyTEno5yUCOY.roa (hash: JVIel+aBTu4sxJNb5K/I38Lr9D6irqTd1dd5wgzfvfI=) 14: yASHIeGE31fHJVZ0fQbOi-u4QA8.roa (hash: jxtVG5D7zD64YsgjQlkTPTGYDilsRwLsgfxlh3qz7jg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 10:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:a4:0a:02:74:e3:36:92:60:c4:ae:8d:14:75:f6:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23e3d92bfe16619ca500c03267effa9aa7ca0c47 Validity Not Before: Jun 13 11:00:36 2026 GMT Not After : Jun 14 11:00:36 2026 GMT Subject: CN=1bcd5870ed2fbddb6b991ff7278451ed4a332d9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:5f:ff:f7:af:ba:58:33:4d:ac:49:9f:5c: 47:bc:65:3c:e2:b5:00:a3:15:dc:1f:bd:aa:50:fe: 7f:bc:0d:ae:91:87:3f:b8:be:b2:a9:86:27:c8:e5: 03:79:b9:34:79:c9:b0:4c:65:08:14:f3:87:04:d0: 51:41:ab:de:b6:d4:ab:a2:e1:6f:e0:25:4f:1f:a4: 0f:aa:e7:72:80:34:97:a6:a7:8a:65:ca:14:78:7e: a8:dc:5e:ef:8f:b7:a9:a8:48:a5:25:1b:b9:b0:18: 7b:51:71:d2:da:6c:ae:e5:a1:04:8a:a4:5c:bc:37: 9d:60:92:49:ef:b9:04:99:b3:ee:b3:c4:df:8b:4a: 44:da:7a:b7:b4:5e:1f:3a:28:db:4f:24:0e:48:12: 05:3e:a4:9a:83:a0:d8:da:22:b6:81:a4:69:e7:ad: 66:7b:ef:c1:f3:53:c7:75:8c:a9:e3:52:8f:66:fa: 34:d0:c3:da:63:80:c1:08:27:be:b0:d1:13:32:16: 5b:d6:40:77:38:ba:42:f4:91:a2:b5:96:35:1f:ef: 6c:50:08:1c:24:20:37:e5:e5:2f:f6:95:4e:9c:3f: bd:25:85:6a:7b:fe:e2:02:4e:8e:c1:11:4c:2c:ab: 20:b9:bb:b0:37:42:34:73:57:4b:6b:71:50:85:c7: 5c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:CD:58:70:ED:2F:BD:DB:6B:99:1F:F7:27:84:51:ED:4A:33:2D:9D X509v3 Authority Key Identifier: keyid:23:E3:D9:2B:FE:16:61:9C:A5:00:C0:32:67:EF:FA:9A:A7:CA:0C:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I-PZK_4WYZylAMAyZ-_6mqfKDEc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9c2c90-c7d4-48b7-9baf-f1bf0c33a908/1/I-PZK_4WYZylAMAyZ-_6mqfKDEc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:bc:15:6c:e4:b4:8f:60:94:c3:92:94:55:46:d6:49:68:cf: 2a:cf:c9:96:7e:0d:15:6d:a3:77:54:a7:ee:9d:6c:c7:16:35: 62:ea:ff:b0:b5:14:e6:48:81:4b:9c:a5:99:b0:b0:84:3a:b5: 85:89:dc:45:8d:a1:67:cd:04:50:5d:d2:80:11:df:a0:44:f7: af:f0:9c:91:ed:c0:4f:cf:27:64:22:71:2b:16:47:d1:5f:4b: 87:50:cc:e5:ad:b3:b7:e8:92:1e:06:75:62:01:b1:46:a7:89: 23:fc:bf:f7:98:70:1e:1f:50:7b:c1:93:e9:e4:6b:59:0a:ad: 7d:3e:e5:35:2a:91:28:81:d3:c8:bd:a7:bc:c7:74:bf:a6:46: c9:bf:d1:5f:8c:17:f8:6c:77:b5:f9:c0:5c:e2:5e:d0:ac:b1: e8:db:85:7d:27:f7:3d:1a:a8:a8:f2:69:18:ff:17:8d:2b:a3: 02:23:37:56:3d:ce:e2:c3:8d:94:c7:1d:b9:52:39:07:4a:2e: d3:9e:b5:e0:9a:19:25:d2:14:ed:91:ac:87:44:f6:9f:21:66: a7:1d:b1:d9:d2:ba:e5:d1:8a:28:e2:1f:26:bd:9c:e0:77:ce: 3c:d2:e5:35:22:c9:40:57:ca:79:4d:4f:af:43:5f:70:ba:6a: 4c:1a:f8:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7ApAoCdOM2kmDEro0UdfagMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzZTNkOTJiZmUxNjYxOWNhNTAwYzAzMjY3ZWZmYTlhYTdj YTBjNDcwHhcNMjYwNjEzMTEwMDM2WhcNMjYwNjE0MTEwMDM2WjAzMTEwLwYDVQQD EygxYmNkNTg3MGVkMmZiZGRiNmI5OTFmZjcyNzg0NTFlZDRhMzMyZDlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCJf//evulgzTaxJn1xHvGU84rUA oxXcH72qUP5/vA2ukYc/uL6yqYYnyOUDebk0ecmwTGUIFPOHBNBRQavettSrouFv 4CVPH6QPqudygDSXpqeKZcoUeH6o3F7vj7epqEilJRu5sBh7UXHS2myu5aEEiqRc vDedYJJJ77kEmbPus8Tfi0pE2nq3tF4fOijbTyQOSBIFPqSag6DY2iK2gaRp561m e+/B81PHdYyp41KPZvo00MPaY4DBCCe+sNETMhZb1kB3OLpC9JGitZY1H+9sUAgc JCA35eUv9pVOnD+9JYVqe/7iAk6OwRFMLKsgubuwN0I0c1dLa3FQhcdcHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvNWHDtL73ba5kf9yeEUe1KMy2dMB8GA1UdIwQY MBaAFCPj2Sv+FmGcpQDAMmfv+pqnygxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYt ZjFiZjBjMzNhOTA4LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMC85YzJjOTAtYzdkNC00OGI3LTliYWYtZjFiZjBjMzNhOTA4 LzEvSS1QWktfNFdZWnlsQU1BeVotXzZtcWZLREVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALbwVbOS0 j2CUw5KUVUbWSWjPKs/Jln4NFW2jd1Sn7p1sxxY1Yur/sLUU5kiBS5ylmbCwhDq1 hYncRY2hZ80EUF3SgBHfoET3r/Ccke3AT88nZCJxKxZH0V9Lh1DM5a2zt+iSHgZ1 YgGxRqeJI/y/95hwHh9Qe8GT6eRrWQqtfT7lNSqRKIHTyL2nvMd0v6ZGyb/RX4wX +Gx3tfnAXOJe0Kyx6NuFfSf3PRqoqPJpGP8XjSujAiM3Vj3O4sONlMcduVI5B0ou 05614JoZJdIU7ZGsh0T2nyFmpx2x2dK65dGKKOIfJr2c4HfOPNLlNSLJQFfKeU1P r0NfcLpqTBr4aQ== -----END CERTIFICATE-----Generated at Sat Jun 13 20:22:44 2026 by rpki-client