$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft File: jNgCUSzLdFsqG48xVxTr45OVQD4.mft (raw, json) Hash identifier: mgTYwxnW68isIXoP0CsQ80ejTLEc9dDsXXFszs43MEI= Subject key identifier: 6A:EC:37:D4:0C:F6:B3:8E:5A:80:1A:6C:BD:19:D3:BE:4D:30:C8:C4 Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e Certificate serial: 019EBE484EA8ED13D523336991DF8AD13767 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft Manifest number: D6 Signing time: Sat 13 Jun 2026 00:01:10 +0000 Manifest this update: Sat 13 Jun 2026 00:01:10 +0000 Manifest next update: Sun 14 Jun 2026 00:01:10 +0000 Files and hashes: 1: 4inhnc0WsBAw97-SeDoXHxYvgdc.roa (hash: /iM51VLg7HJ8ztk87Lm4bDvMywJ+LPB7Mld35hoQjWE=) 2: FOFTEst8oF0q0X3OdQgxLZ9oed8.roa (hash: g3Bb+RZcj9ZCWcwsCCB0Hz+Q7AkmMt0+i5iC3617N+w=) 3: Mkh5aQjh3GPs5zV6ewUEffwhz6Y.roa (hash: ZhgNbadvWzbwSGWjxYadekjwT/j2dOnk9v/v77ZXLC8=) 4: NueNRL5wm4cxcYHE_E2Q4bYmOjA.roa (hash: TfRkOz0goqzjaEodDhFwiei8/n8mFcYT40hAji7gK7Q=) 5: RJ_8MLiQcEMQljmCDmVnOOnfQyY.roa (hash: qITG72dsAnXhR2+Wt6OI6k5v+TEp09wmHQrA/LqWJPc=) 6: ZZ4HmXsncRW4Duwlwd9BhGfdvNU.roa (hash: AltMyFS1s/HAyVQ82EJUVtjUQ8FL/MMkrFmI+rDpQvg=) 7: hp01qqaG6ojwTceGwUYjwpMc_FA.roa (hash: +EoDWRDS7zIW8lYYUpVakjrqTS94dDcew7HVE2+smMs=) 8: jNgCUSzLdFsqG48xVxTr45OVQD4.crl (hash: ZN0TiTna8g7nbFRZ+3JOuYpxATMLdrMl72uHbVXsTdk=) 9: qbinC6Bue2GJIuNLnptWJaA-Dds.roa (hash: 6HXvSYL8Dx9Ja4sY1cHp96tpfM1YjHJq65VRixXzZSc=) 10: vAyvqClj_fNj-JPGw0WVFpTXnec.roa (hash: zcYIEoZwOnalFjsK7SRCcbtULguKAUh8BvgH8JPZTCc=) 11: yTtSJ-72gvZbFezzjuP8atI2Y74.roa (hash: wldJRvptVpmVW5JI0I+zGNq+GzlHt2h7rIbCYaZ8Fsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 00:01:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:48:4e:a8:ed:13:d5:23:33:69:91:df:8a:d1:37:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e Validity Not Before: Jun 13 00:01:10 2026 GMT Not After : Jun 14 00:01:10 2026 GMT Subject: CN=6aec37d40cf6b38e5a801a6cbd19d3be4d30c8c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:ea:75:db:46:38:22:47:f5:f3:56:7e:56: 87:48:cc:bd:16:23:bb:bf:9a:0b:e3:a9:61:d0:a1: f0:4e:4e:0a:bb:b9:2c:4d:75:3e:38:cb:08:9a:ae: 1d:ff:70:dd:bc:5b:3f:c1:12:5f:6a:3f:e7:ac:ae: fa:9a:bc:75:a4:58:19:4c:f7:a1:e5:71:cb:62:dc: 72:71:b7:2d:07:33:bc:4f:64:d9:8e:14:e2:76:e6: cf:70:78:e8:cf:d8:cf:12:09:c6:69:df:71:e4:4f: d0:df:c1:c4:ac:a0:40:2c:da:b0:f7:b5:bb:13:be: b9:3a:9f:7d:8e:c8:ea:f6:9a:04:83:25:b7:f8:21: 3d:87:8c:36:2d:f1:87:16:0b:09:47:8e:6e:38:96: 8f:cd:d8:2f:a1:61:7b:1d:22:1e:c8:c1:ca:01:ec: 72:d8:25:e9:70:00:1e:43:51:2b:1b:5c:7d:76:39: fa:df:c7:d8:48:6c:ef:72:26:67:4a:04:43:0e:c6: 85:53:bc:1e:70:28:2a:8d:28:7d:3e:53:d1:ac:f1: 26:52:c2:78:3f:42:57:e1:9e:b0:e4:e3:35:99:e1: e8:de:bd:0d:08:fa:d7:58:2b:4a:fb:24:de:01:18: f7:af:9a:ac:27:df:49:7a:66:eb:ab:52:01:cb:db: e2:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:EC:37:D4:0C:F6:B3:8E:5A:80:1A:6C:BD:19:D3:BE:4D:30:C8:C4 X509v3 Authority Key Identifier: keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:0f:69:b6:df:aa:17:9a:79:55:c7:30:44:44:09:76:a8:f6: b7:4c:38:2f:1a:f3:ec:42:f6:5b:15:4e:8d:5b:e0:33:c0:0b: 8e:5f:ca:f1:d8:90:ab:3a:d6:72:b3:ab:04:07:e8:ef:93:12: 76:06:98:31:f5:ad:6b:7c:a4:67:d7:97:fe:a9:f7:e1:9a:74: 0b:26:62:95:63:4a:0c:e1:15:e0:04:4d:b2:48:75:6d:d6:6d: 2b:e1:e4:78:34:3c:56:99:28:1c:f2:0f:15:f2:9a:65:16:0e: c1:c7:4e:99:b3:a5:4e:00:06:83:08:65:cc:b5:52:bb:d6:bc: 10:08:f3:41:d3:e4:c4:c1:d3:14:95:4c:bd:7d:b5:c9:8a:f7: 96:ac:f0:27:6b:71:b7:3b:ae:c8:cd:26:27:59:16:6a:bc:e0: f5:19:47:01:c1:27:ae:c8:ee:6c:13:5a:d1:22:18:9f:a8:4d: 3e:f7:d9:56:9f:f4:88:91:1d:ce:d0:40:ca:3c:6e:81:fb:51: 28:2d:e9:37:90:50:84:28:95:53:a2:7a:55:47:e7:d2:38:44: 20:b1:6a:8b:c7:6e:b3:82:2d:73:ec:59:c3:5e:95:9d:e1:83: 52:0b:23:a7:4b:6e:c5:6b:cd:f8:b6:e7:d7:a0:28:7e:c8:5a: 30:ef:fa:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+SE6o7RPVIzNpkd+K0TdnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDgwMjUxMmNjYjc0NWIyYTFiOGYzMTU3MTRlYmUzOTM5 NTQwM2UwHhcNMjYwNjEzMDAwMTEwWhcNMjYwNjE0MDAwMTEwWjAzMTEwLwYDVQQD Eyg2YWVjMzdkNDBjZjZiMzhlNWE4MDFhNmNiZDE5ZDNiZTRkMzBjOGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxdHqddtGOCJH9fNWflaHSMy9FiO7 v5oL46lh0KHwTk4Ku7ksTXU+OMsImq4d/3DdvFs/wRJfaj/nrK76mrx1pFgZTPeh 5XHLYtxycbctBzO8T2TZjhTidubPcHjoz9jPEgnGad9x5E/Q38HErKBALNqw97W7 E765Op99jsjq9poEgyW3+CE9h4w2LfGHFgsJR45uOJaPzdgvoWF7HSIeyMHKAexy 2CXpcAAeQ1ErG1x9djn638fYSGzvciZnSgRDDsaFU7wecCgqjSh9PlPRrPEmUsJ4 P0JX4Z6w5OM1meHo3r0NCPrXWCtK+yTeARj3r5qsJ99Jembrq1IBy9viZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrsN9QM9rOOWoAabL0Z075NMMjEMB8GA1UdIwQY MBaAFIzYAlEsy3RbKhuPMVcU6+OTlUA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmIt MzhlMDY4NTM2ZTZiLzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmItMzhlMDY4NTM2ZTZi LzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwg9ptt+q F5p5VccwREQJdqj2t0w4Lxrz7EL2WxVOjVvgM8ALjl/K8diQqzrWcrOrBAfo75MS dgaYMfWta3ykZ9eX/qn34Zp0CyZilWNKDOEV4ARNskh1bdZtK+HkeDQ8VpkoHPIP FfKaZRYOwcdOmbOlTgAGgwhlzLVSu9a8EAjzQdPkxMHTFJVMvX21yYr3lqzwJ2tx tzuuyM0mJ1kWarzg9RlHAcEnrsjubBNa0SIYn6hNPvfZVp/0iJEdztBAyjxugftR KC3pN5BQhCiVU6J6VUfn0jhEILFqi8dus4Itc+xZw16VneGDUgsjp0tuxWvN+Lbn 16AofshaMO/6xA== -----END CERTIFICATE-----Generated at Sat Jun 13 07:55:27 2026 by rpki-client