$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: TfzpyGW/gBBevvh/iUMnVIVXP4DS6JOm3P+lIE62mcA= Subject key identifier: A5:DE:83:98:75:8F:B2:16:EF:38:0C:B6:B8:05:1A:DB:B4:51:5E:2A Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019EBEB5AEB3816E1EF5B83D9CCB61403CC2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 196F Signing time: Sat 13 Jun 2026 02:00:38 +0000 Manifest this update: Sat 13 Jun 2026 02:00:38 +0000 Manifest next update: Sun 14 Jun 2026 02:00:38 +0000 Files and hashes: 1: 5bw3FxzpBWgCUPFGor6BeS_x13E.roa (hash: vbv6Fyo711z5Y6WllYiF1+hQCuBRfjBj2SnqOdmQ/Ko=) 2: KClfXxgk0wRzsCWY2cBjE-9OUBw.roa (hash: mZTkzVHUlv75y3/sF2jX1yQ3NF8yk3kbKCgMEXnClVc=) 3: OPUmPq2MCSSLajil_N8xjasEED0.roa (hash: 3ErCgLhuftk7qbnRHyFbXfh2aIHoI6pTjwOjuX9ybbI=) 4: PVZJLc9tODZFqXK-cJmdd7K-baM.roa (hash: nv2FNyj3NvI+l9/bwumlpSj6KXBZJHOiEr8IoIDWWBs=) 5: RD2bQy42cJtcLUpPd6bwEgSdC5g.roa (hash: EXR+FPHGsONaMy04ozJgDUBq2GB63B3p6cERU165gBY=) 6: RTtrcIMD_1Pooh2hybtppswd0Cs.roa (hash: gHzBppcBQRTrZFKZdzTeaIz8G3KIuJKhpm0DEQdKM5o=) 7: ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa (hash: 3HGI+6qeROUPLoU4ORnifqLKfR+6cyux8LhHwuDQCzI=) 8: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: fX7RdMFMdEBgytpVblyON8Vxuv6hTw8A1dCL2fsDeHg=) 9: iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa (hash: Xmy3joGzE7DOFCUoxtKq+8sQb3nS9R29UjEKhSZ9+oA=) 10: jwL6ZedQy9jrx6zRLmC34t2VuNI.roa (hash: JjbOSGoIoxnMnWQdAupasyiznFb2Rz/tCe7dz0MfJkM=) 11: taRmnaIWL0Lvnk8-ztV91eCLqRU.roa (hash: Duq2TEYTpeDcixHF5tGgiY61uowG5KKhAb2ieJRR8c4=) 12: vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa (hash: HHDiRi1+BOUzXevtTy1X6aaBtWS9/5nRjSa9y3Tpifg=) 13: wUgkHiQ86rCh1plfV-1fhX-AaMg.roa (hash: 86ia7TUjUS+IoQf3wQbTT6jWw8UWMBIHEfrKwtfOipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:b5:ae:b3:81:6e:1e:f5:b8:3d:9c:cb:61:40:3c:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jun 13 02:00:38 2026 GMT Not After : Jun 14 02:00:38 2026 GMT Subject: CN=a5de8398758fb216ef380cb6b8051adbb4515e2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:a9:3b:7f:42:e4:02:4d:40:00:7d:ec:8e:69: 35:88:af:3c:e9:a9:a3:da:1a:89:62:5a:a3:50:31: 4c:55:fb:de:02:3f:52:4a:32:14:fc:27:82:45:ce: 4c:b1:a6:46:2d:f1:8e:63:99:4b:8f:5b:cd:9d:45: 72:a7:08:5b:23:05:ac:b3:fc:ad:af:64:ee:c0:57: e0:a3:84:26:50:e8:4f:3a:14:21:e8:59:22:c2:66: 6d:29:bf:e6:22:c8:57:4e:93:cc:98:bd:c3:18:27: c2:44:62:12:e2:ac:fa:be:f1:50:39:5b:d6:ab:d3: e3:84:59:cf:52:25:a3:72:11:20:92:cc:48:25:0f: 45:4b:f7:32:48:df:87:83:dd:fe:0c:6a:ed:18:18: 85:06:74:c3:04:d1:28:a1:57:ea:65:7e:bc:35:20: 39:99:4d:dd:f4:fd:6b:02:86:e5:3a:92:c6:18:6f: 80:ea:fd:0c:cb:bb:f6:07:f8:36:66:64:a9:84:04: de:db:84:08:63:aa:b2:f6:3d:b7:3f:11:1e:92:32: 3b:8a:29:db:b0:17:3e:ac:0e:48:0f:90:f6:62:2b: bc:5e:ea:b3:83:a5:89:95:d3:8b:57:97:bf:56:ac: a9:d0:5c:b4:84:a5:69:fb:40:ac:f7:3c:ea:92:b8: 81:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:DE:83:98:75:8F:B2:16:EF:38:0C:B6:B8:05:1A:DB:B4:51:5E:2A X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:7e:0b:44:00:82:71:09:85:13:76:74:f7:8d:cf:ec:03:55: 30:ba:5a:18:87:d0:15:49:58:a1:bb:75:8c:46:ce:14:85:75: 88:88:ed:5f:fe:c9:70:8e:40:0b:a6:61:78:b8:ef:70:b1:99: 82:4e:c1:e3:5f:a7:5b:3b:7d:ca:4d:4f:8e:31:56:a7:60:4a: 3f:33:90:7a:69:b6:04:df:cf:e9:78:a8:0c:cc:90:55:0f:85: 33:22:04:76:79:0b:95:5f:ca:24:ce:61:df:1f:30:a3:8b:da: 0f:f9:df:12:b4:be:b7:ba:8a:56:44:ab:54:5a:0f:36:f1:3e: ca:ca:1a:26:d4:ee:08:52:b3:fa:89:a4:d7:92:e1:aa:3e:f9: 98:90:68:fd:cd:7b:18:39:45:eb:5f:f3:79:af:a7:93:09:e4: 56:dc:57:46:ca:da:00:08:60:7f:af:db:18:76:03:99:cd:02: 6e:b5:81:36:8f:61:8e:1a:76:c9:1d:3f:b3:9b:19:d4:d7:1a: 01:de:67:b6:2f:f4:e7:46:c1:e4:e1:95:11:a6:c4:b1:52:f7: e2:aa:9c:d0:33:b0:9d:47:41:07:74:cf:c3:6d:d5:50:d2:fc: 25:35:56:3d:1a:dc:75:9f:f7:30:ed:da:c1:03:08:e5:08:4b: 8f:ee:23:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+ta6zgW4e9bg9nMthQDzCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwNjEzMDIwMDM4WhcNMjYwNjE0MDIwMDM4WjAzMTEwLwYDVQQD EyhhNWRlODM5ODc1OGZiMjE2ZWYzODBjYjZiODA1MWFkYmI0NTE1ZTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqk7f0LkAk1AAH3sjmk1iK886amj 2hqJYlqjUDFMVfveAj9SSjIU/CeCRc5MsaZGLfGOY5lLj1vNnUVypwhbIwWss/yt r2TuwFfgo4QmUOhPOhQh6FkiwmZtKb/mIshXTpPMmL3DGCfCRGIS4qz6vvFQOVvW q9PjhFnPUiWjchEgksxIJQ9FS/cySN+Hg93+DGrtGBiFBnTDBNEooVfqZX68NSA5 mU3d9P1rAoblOpLGGG+A6v0My7v2B/g2ZmSphATe24QIY6qy9j23PxEekjI7iinb sBc+rA5ID5D2Yiu8Xuqzg6WJldOLV5e/Vqyp0Fy0hKVp+0Cs9zzqkriBaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXeg5h1j7IW7zgMtrgFGtu0UV4qMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMX4LRACC cQmFE3Z0943P7ANVMLpaGIfQFUlYobt1jEbOFIV1iIjtX/7JcI5AC6ZheLjvcLGZ gk7B41+nWzt9yk1PjjFWp2BKPzOQemm2BN/P6XioDMyQVQ+FMyIEdnkLlV/KJM5h 3x8wo4vaD/nfErS+t7qKVkSrVFoPNvE+ysoaJtTuCFKz+omk15Lhqj75mJBo/c17 GDlF61/zea+nkwnkVtxXRsraAAhgf6/bGHYDmc0CbrWBNo9hjhp2yR0/s5sZ1Nca Ad5nti/050bB5OGVEabEsVL34qqc0DOwnUdBB3TPw23VUNL8JTVWPRrcdZ/3MO3a wQMI5QhLj+4jJQ== -----END CERTIFICATE-----Generated at Sat Jun 13 08:10:20 2026 by rpki-client