$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: pmJqZiwl/aOcwDIerCA/vN3KQWWz2+SqlqwlLjZIHts= Subject key identifier: 58:C0:98:62:7D:B3:34:4C:D5:0A:03:EA:9B:5A:EA:FB:FA:1E:C0:4E Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019EC0A3C368A75561A7900D8EEFF1D6D002 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 1970 Signing time: Sat 13 Jun 2026 11:00:18 +0000 Manifest this update: Sat 13 Jun 2026 11:00:18 +0000 Manifest next update: Sun 14 Jun 2026 11:00:18 +0000 Files and hashes: 1: 5bw3FxzpBWgCUPFGor6BeS_x13E.roa (hash: vbv6Fyo711z5Y6WllYiF1+hQCuBRfjBj2SnqOdmQ/Ko=) 2: KClfXxgk0wRzsCWY2cBjE-9OUBw.roa (hash: mZTkzVHUlv75y3/sF2jX1yQ3NF8yk3kbKCgMEXnClVc=) 3: OPUmPq2MCSSLajil_N8xjasEED0.roa (hash: 3ErCgLhuftk7qbnRHyFbXfh2aIHoI6pTjwOjuX9ybbI=) 4: PVZJLc9tODZFqXK-cJmdd7K-baM.roa (hash: nv2FNyj3NvI+l9/bwumlpSj6KXBZJHOiEr8IoIDWWBs=) 5: RD2bQy42cJtcLUpPd6bwEgSdC5g.roa (hash: EXR+FPHGsONaMy04ozJgDUBq2GB63B3p6cERU165gBY=) 6: RTtrcIMD_1Pooh2hybtppswd0Cs.roa (hash: gHzBppcBQRTrZFKZdzTeaIz8G3KIuJKhpm0DEQdKM5o=) 7: ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa (hash: 3HGI+6qeROUPLoU4ORnifqLKfR+6cyux8LhHwuDQCzI=) 8: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: Nl+giceQg7LqV0dX9HOWIgu03X088aKOyZLhLHD4cXU=) 9: iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa (hash: Xmy3joGzE7DOFCUoxtKq+8sQb3nS9R29UjEKhSZ9+oA=) 10: jwL6ZedQy9jrx6zRLmC34t2VuNI.roa (hash: JjbOSGoIoxnMnWQdAupasyiznFb2Rz/tCe7dz0MfJkM=) 11: taRmnaIWL0Lvnk8-ztV91eCLqRU.roa (hash: Duq2TEYTpeDcixHF5tGgiY61uowG5KKhAb2ieJRR8c4=) 12: vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa (hash: HHDiRi1+BOUzXevtTy1X6aaBtWS9/5nRjSa9y3Tpifg=) 13: wUgkHiQ86rCh1plfV-1fhX-AaMg.roa (hash: 86ia7TUjUS+IoQf3wQbTT6jWw8UWMBIHEfrKwtfOipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:a3:c3:68:a7:55:61:a7:90:0d:8e:ef:f1:d6:d0:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jun 13 11:00:18 2026 GMT Not After : Jun 14 11:00:18 2026 GMT Subject: CN=58c098627db3344cd50a03ea9b5aeafbfa1ec04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e4:c1:a5:6a:b1:37:61:c0:fc:be:4f:dd:f8: 1e:69:06:87:46:4e:b2:1d:b8:73:c3:8f:7a:8f:d6: cd:f4:f5:77:4e:1f:c8:70:95:9f:95:76:3e:8b:e1: e5:70:35:3e:d1:3a:18:12:bf:28:87:11:c8:b6:d1: e5:8e:81:c7:20:40:78:ec:bf:94:99:7c:99:8b:28: 90:c6:9c:b5:3f:12:df:43:a1:45:9c:d1:c2:f5:1a: 1d:96:79:e2:68:f3:e3:29:8b:c8:2b:4c:cb:8a:a5: fc:2b:53:2b:25:50:ad:63:f7:49:e6:d4:dd:2d:31: 1d:ca:a0:bd:2d:b9:4c:2e:f2:18:12:41:75:c1:3d: b5:d1:a0:18:92:23:86:ed:30:dd:0c:d0:d2:1b:46: 66:d8:2c:5f:e8:dc:54:af:3c:4a:6b:e1:6d:14:5c: 5b:ca:6d:df:25:0a:53:44:45:41:ca:45:ce:b7:74: 1b:be:9b:ce:d4:29:1b:40:0b:13:80:18:92:3f:ec: 14:90:2b:93:06:98:3c:80:f8:0a:3c:59:21:79:bf: 4a:8d:20:21:61:b1:9f:cc:04:a8:4f:07:46:b2:03: db:f6:8b:42:48:0e:97:91:9d:c0:e5:d0:34:11:56: a3:31:e8:1d:68:01:1e:82:08:5c:e8:e5:1e:0f:f9: f5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:C0:98:62:7D:B3:34:4C:D5:0A:03:EA:9B:5A:EA:FB:FA:1E:C0:4E X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:16:53:bc:bd:cd:b1:a1:4e:62:b9:7c:e5:62:80:da:f6:74: 9b:30:e9:56:f0:cf:5b:aa:1e:04:78:15:c8:0f:c5:16:4c:a0: e9:31:3a:01:fb:82:de:5c:8c:48:3a:f0:03:3c:a4:f1:ac:90: ad:1c:63:73:5f:27:ea:2f:af:6e:5e:ac:33:fc:58:ee:e8:03: 20:85:b1:e6:13:89:24:1f:21:3c:53:8a:00:1e:da:fc:6d:7a: 73:2e:5e:b4:6d:f6:76:6b:6f:90:71:c7:cf:0f:d1:94:f4:2c: 90:1a:9f:e1:6d:ea:8a:99:c5:ec:19:c0:54:e9:e6:5c:6f:36: 49:44:07:5e:24:c8:12:44:09:8b:88:ef:d2:37:04:4a:87:75: 97:96:f3:14:23:c8:18:2f:60:c0:9c:ea:8f:7e:97:00:ab:29: af:e6:5e:ef:f4:24:19:47:eb:7e:28:79:5a:4d:77:c4:05:34: c3:69:c8:5b:a1:bb:db:96:31:2c:c4:6a:48:45:5e:d1:68:36: 35:ac:3e:22:7f:24:12:ee:81:74:0b:03:ab:25:cd:b4:e2:3f: 0c:c7:d5:71:84:04:f3:61:24:e6:ac:09:c2:94:b2:a9:e5:56: 87:12:9e:4f:29:a2:55:b8:88:0a:f8:fe:dd:b8:f1:3f:3a:96: fd:ad:d7:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7Ao8Nop1Vhp5ANju/x1tACMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwNjEzMTEwMDE4WhcNMjYwNjE0MTEwMDE4WjAzMTEwLwYDVQQD Eyg1OGMwOTg2MjdkYjMzNDRjZDUwYTAzZWE5YjVhZWFmYmZhMWVjMDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2uTBpWqxN2HA/L5P3fgeaQaHRk6y Hbhzw496j9bN9PV3Th/IcJWflXY+i+HlcDU+0ToYEr8ohxHIttHljoHHIEB47L+U mXyZiyiQxpy1PxLfQ6FFnNHC9RodlnniaPPjKYvIK0zLiqX8K1MrJVCtY/dJ5tTd LTEdyqC9LblMLvIYEkF1wT210aAYkiOG7TDdDNDSG0Zm2Cxf6NxUrzxKa+FtFFxb ym3fJQpTREVBykXOt3QbvpvO1CkbQAsTgBiSP+wUkCuTBpg8gPgKPFkheb9KjSAh YbGfzASoTwdGsgPb9otCSA6XkZ3A5dA0EVajMegdaAEegghc6OUeD/n1ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFjAmGJ9szRM1QoD6pta6vv6HsBOMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADhZTvL3N saFOYrl85WKA2vZ0mzDpVvDPW6oeBHgVyA/FFkyg6TE6AfuC3lyMSDrwAzyk8ayQ rRxjc18n6i+vbl6sM/xY7ugDIIWx5hOJJB8hPFOKAB7a/G16cy5etG32dmtvkHHH zw/RlPQskBqf4W3qipnF7BnAVOnmXG82SUQHXiTIEkQJi4jv0jcESod1l5bzFCPI GC9gwJzqj36XAKspr+Ze7/QkGUfrfih5Wk13xAU0w2nIW6G725YxLMRqSEVe0Wg2 Naw+In8kEu6BdAsDqyXNtOI/DMfVcYQE82Ek5qwJwpSyqeVWhxKeTymiVbiICvj+ 3bjxPzqW/a3XXg== -----END CERTIFICATE-----Generated at Sat Jun 13 14:22:35 2026 by rpki-client