$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft File: v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json) Hash identifier: g88MteW+6yaTWo0pT+6/cGHxsNHFWl/j+p8tpgw4Myo= Subject key identifier: 13:72:09:FA:45:DE:D3:1F:B2:5B:EF:B1:E8:58:49:A8:94:CB:71:DF Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019EBFFFA0A680658EFAE450B7A6A98E8146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft Manifest number: 1648 Signing time: Sat 13 Jun 2026 08:01:01 +0000 Manifest this update: Sat 13 Jun 2026 08:01:01 +0000 Manifest next update: Sun 14 Jun 2026 08:01:01 +0000 Files and hashes: 1: 0kXS2WjCCmGHS0asFcjHjq0ESdA.roa (hash: NcRJslp6Cst9ywqKbBrXM4eKGnOe3QAwekOYiXZ066c=) 2: 0xTXzw65S6SAKbF2ypbnQR8flBY.roa (hash: KPGmo03a7ngvQ5hpXQozCZzOmDre3xu+doPSkJFQPEI=) 3: 2j9VUbHTcDA1b90rifQ58Inn2f8.roa (hash: Lgs88tbxXG61dcN+ofeHaAXMJYWju9945L7ezP0hATg=) 4: 35-RC4YDZpErq0qZEtlrtSl4SMw.roa (hash: FOYizqXKHMLapyQGMwFyEz9qVvs69XW13Uh469YQNIU=) 5: 4sHcg46CKKDvMyDChpwWDh0Egl4.roa (hash: w75qFMjuUV9F/cJXn+EoOEYDQsrts8ozrq3p5+rPA14=) 6: 81eHHbv2rPJYI93isZ476W6B7zM.roa (hash: rilqDOE3ousOR3KDCOC0oQFrfowQVUhBVFfyKLTOWP8=) 7: DNKVTDfCdlLHW9MrVOz_V6C3F8g.roa (hash: uasjkvXg+88xW1j9weGfc4+Lwe8xp4HgPIRySLA8dcs=) 8: EfB0MxJFEM8P-mBHWzWP2g-vuRg.roa (hash: 5I3dde4Z0pGqorT+Es4EH70Wh9X5Be4WVxahJvSkgLw=) 9: GH317hM4slUsY4C_aRa8fOTyx88.roa (hash: jr3FDIWwWbGXIPZeuR0U5SYG9jDy+S/+izTJeLHKZaA=) 10: JFQGAOGdlBoIozV3Kg-vDWtfVao.roa (hash: Z1+P9csIB0WjKmg8chhTuD4xrRsrTBYnir8esGAQC6M=) 11: JP2YTEXKfbz2rysCMlsFUJ9glSA.roa (hash: uVECZc2WYQz19jnkv5udVj9qIJJkl75Ld5dAAc4lGkI=) 12: K2kXXUMGcaKa7rD6RGsaKEmV9Wg.roa (hash: 4AJJT3KGPCqJR4OBHfMLmZzKwbu+xSqi/JOf68BFrzw=) 13: MdUIZIJ4fMdMmnWpGakpfnXUhu8.roa (hash: 0v7DpVyOb9ZenfEj+uZlG8WAK7SkWOmPeuDGZI04ctc=) 14: PY9DCNlwLD7ejVBXpUKsZjzW_qs.roa (hash: WsUPkIgFvWT/RRRySu92Di42VU11w6gI/VSIsfWKIOw=) 15: SPffAYS64U7u27GBmdl07WWErQg.roa (hash: vr6LcPLMe9RSzc82PbDWlTuc7hI9MZj2/NAkezEnd3I=) 16: WZWGYo1-x5iiMmTQB8f7pscBQ5Q.roa (hash: IhIWhgnItgwnoOUYHAHgKAbDJ1m2IH1w4DFw6ZTXRMU=) 17: YTDC7hzg7QzGtp6thpinDTGP-qo.roa (hash: ElrXjVymqeJpITeqYHAjPG6cT36CVjD0Pv4HTFntjRY=) 18: _eLosOoEd8yDU_N8Qvcrlr44u1s.roa (hash: 7dNJprnXNblqOmi4KvjwoY4AaJL/D5R6qT8hf0u15fk=) 19: e-D3VZHxEnpb_XDj-m8FygPLC-s.roa (hash: WK2WT9RvaBwGkJpwbeKYdSX5XZW7KaarQn4kK4Tt/3Q=) 20: f3fqu4tTHl2vcBZdGXPsMyAjKYU.roa (hash: YnhL3R6TQw9jOlB6ezNd4A83xIKsm64Z7pwt9aESzIw=) 21: fjse87W44P51UOVIGX0DCsEjxWY.roa (hash: D/rrQpS+2FkVVqoE2nZZbtPj0yMnQI478zTpRsOTiWY=) 22: gWgAGHArAQssrrGXIRyn4VHTFXU.roa (hash: B6SPcVHep6hBRDtoMqsctR3R17FHDgKNs8lCIVE2720=) 23: h8D1gq051tBYJNb_Y4nlpSpaChc.roa (hash: 1sY2UtAw3qppMv1YMtACKA33nss4PyBDyZbo40TbUgc=) 24: qzMo16nmO71L2QshypR-MMDDoCo.roa (hash: l9OxB1GKfb3RigjCep1J7ekawkvlh+mNfXTsSVv2Rdo=) 25: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: YYjh7JiJYAFrOQEGW4xMsAMBslqzLLhIBh/zdPk5zb0=) 26: yvCCpk4_0puwnurWWSMz-GRqa9g.roa (hash: plmFtmIHnJ65gF4go6f2ImnNM5YPATO4+CT4TY1gN5c=) 27: zSbJ_zmLsvnYD4Tj3NdHFOYhGs0.roa (hash: DJQ4yfm4mN/el8pVTO9ZIBKqMkmNeH54/xwSWHyykMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:ff:a0:a6:80:65:8e:fa:e4:50:b7:a6:a9:8e:81:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jun 13 08:01:01 2026 GMT Not After : Jun 14 08:01:01 2026 GMT Subject: CN=137209fa45ded31fb25befb1e85849a894cb71df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:ee:37:d9:12:c7:63:44:2a:53:d5:de:c2:6e: b2:0a:f9:e8:97:6d:8a:c0:2b:88:c7:d2:47:bd:f8: 56:38:00:09:49:a8:64:fd:56:28:87:5b:d4:83:50: cb:3e:03:d7:c8:e5:2c:8d:ae:3a:cf:2b:9f:18:1d: f7:91:d7:fb:03:1c:86:8b:8d:a8:ab:9c:bd:71:c9: 1f:2a:f8:b1:d5:da:95:b1:ca:81:0a:d0:2c:3d:25: c7:65:2d:01:fb:c4:84:33:c4:fc:3d:f8:02:96:8f: 5c:74:39:81:b5:29:d6:55:b1:0f:81:81:24:fa:95: 16:7f:81:0f:4f:0f:66:a6:e0:09:9d:5d:f3:ac:f2: 8f:67:8e:c6:98:cc:e5:23:96:d2:67:cc:fa:0e:d6: ff:66:95:77:80:93:82:df:b5:9b:04:46:06:55:9b: aa:60:30:63:84:f1:54:3e:25:bf:72:47:c4:11:9a: b7:7c:4d:af:58:45:db:c5:8b:9e:68:09:a0:16:8b: 61:a9:db:10:0f:88:46:b1:8f:cb:87:e1:d6:cc:26: 6b:f3:60:13:9b:bc:a3:48:ba:65:91:43:cd:f5:31: 74:f5:62:57:3e:42:5a:d9:5f:a0:a8:05:91:2d:75: 98:11:f9:26:52:04:9e:3f:c0:b1:50:62:2d:3f:21: 19:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:72:09:FA:45:DE:D3:1F:B2:5B:EF:B1:E8:58:49:A8:94:CB:71:DF X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:66:d2:d2:eb:05:bf:e4:15:d3:76:79:1a:83:43:01:62:d6: b1:08:24:8f:5a:84:df:b6:03:e3:7f:b3:11:55:2c:11:b9:11: de:6a:52:20:bd:2c:b5:f7:b6:e6:35:36:81:50:3d:b4:6d:c2: 4c:f1:0f:d3:78:17:f6:7e:40:97:05:3b:48:70:c9:84:79:0a: 63:ee:ce:df:6a:cb:46:a3:2c:7d:69:97:17:0d:e6:d2:bf:e1: 90:40:17:05:bc:2e:cc:7c:f7:1d:3a:38:62:a9:45:1e:aa:c5: 79:1a:af:12:2c:8c:99:48:c9:c1:c6:6b:c5:e2:78:81:e5:2c: 04:cb:59:17:d3:b8:d6:e4:99:2d:10:99:32:7b:fa:4a:ad:0f: df:d5:9a:c3:09:c6:61:5f:12:ea:9c:cb:d7:db:40:83:d2:ba: 6f:6a:ad:ed:d0:84:9f:78:11:8b:6c:f1:67:02:58:d8:bc:a0: b9:a0:9e:c0:18:a9:66:d6:ec:fc:8e:2f:27:e9:29:26:7b:63: 7c:78:71:aa:ed:d1:5b:f3:e2:8a:bb:19:6d:04:f3:16:bc:34: 0e:43:64:b0:cc:04:b5:d3:40:f1:f8:46:5d:f4:0e:ce:c0:50: c2:a8:57:e6:08:41:d5:b7:72:43:91:1e:d2:71:10:9d:05:65: ea:02:ee:16 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6//6CmgGWO+uRQt6apjoFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwNjEzMDgwMTAxWhcNMjYwNjE0MDgwMTAxWjAzMTEwLwYDVQQD EygxMzcyMDlmYTQ1ZGVkMzFmYjI1YmVmYjFlODU4NDlhODk0Y2I3MWRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx+432RLHY0QqU9Xewm6yCvnol22K wCuIx9JHvfhWOAAJSahk/VYoh1vUg1DLPgPXyOUsja46zyufGB33kdf7AxyGi42o q5y9cckfKvix1dqVscqBCtAsPSXHZS0B+8SEM8T8PfgClo9cdDmBtSnWVbEPgYEk +pUWf4EPTw9mpuAJnV3zrPKPZ47GmMzlI5bSZ8z6Dtb/ZpV3gJOC37WbBEYGVZuq YDBjhPFUPiW/ckfEEZq3fE2vWEXbxYueaAmgFothqdsQD4hGsY/Lh+HWzCZr82AT m7yjSLplkUPN9TF09WJXPkJa2V+gqAWRLXWYEfkmUgSeP8CxUGItPyEZHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNyCfpF3tMfslvvsehYSaiUy3HfMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu2bS0usF v+QV03Z5GoNDAWLWsQgkj1qE37YD43+zEVUsEbkR3mpSIL0stfe25jU2gVA9tG3C TPEP03gX9n5AlwU7SHDJhHkKY+7O32rLRqMsfWmXFw3m0r/hkEAXBbwuzHz3HTo4 YqlFHqrFeRqvEiyMmUjJwcZrxeJ4geUsBMtZF9O41uSZLRCZMnv6Sq0P39WawwnG YV8S6pzL19tAg9K6b2qt7dCEn3gRi2zxZwJY2LyguaCewBipZtbs/I4vJ+kpJntj fHhxqu3RW/PiirsZbQTzFrw0DkNksMwEtdNA8fhGXfQOzsBQwqhX5ghB1bdyQ5Ee 0nEQnQVl6gLuFg== -----END CERTIFICATE-----Generated at Sat Jun 13 14:27:25 2026 by rpki-client