$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: +h4PJMr0kx7CiZj9HN+qkX90nZ0eAi0RZGGSQuO6ybQ= Subject key identifier: 34:E4:88:A2:1B:70:87:C6:1C:C5:94:4D:7B:F5:85:E2:52:F4:17:6F Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019EC2928ACB887B0191B0043433A6EE14F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 172D Signing time: Sat 13 Jun 2026 20:00:44 +0000 Manifest this update: Sat 13 Jun 2026 20:00:44 +0000 Manifest next update: Sun 14 Jun 2026 20:00:44 +0000 Files and hashes: 1: 1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa (hash: aO+cgckrFpHbMOnuICmuB1xPZYgfmGDfrFdfNUo8hwg=) 2: 5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa (hash: BbSg6kfepD5G3rCNp1AAX9gRiwipTBnqXkjrl5sWhEU=) 3: BN0rBq-tNCIxQPqmFjFDV44qYpk.roa (hash: jKAg3bTdZuNi/EJCwdlUsNQtwlFvyoL5tw2t5y9MU1I=) 4: HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa (hash: jIkU93mIxfPKkS6ZV5Em7YZjODmsWtP1r4eJlBEyOBI=) 5: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: OCGuY5k1Wm+t5kKch/lJgzDhr2l2pi2bHYRloIG5Etc=) 6: MPhp410gGVKP5mkd7p544bUnjxA.roa (hash: QAd6nrSjBEFE5oh4hmKUtP3RiDgmKVq2ERPv15zMcC4=) 7: PWFCC016ViMQwsbajGFaPsVXWpU.roa (hash: XU7EaVjH4kPpzpd1I6Ws6W/k6BLYUdpZHPYkfznROSU=) 8: R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa (hash: S8J2YibhrFYHi+05w7dwd4Hy2ZPqL9ZfsTP/e0tcqoA=) 9: SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa (hash: xZRfZAtOOEJIXE0XPSwwSTYi/tKeXWXICqEFbpdqCLE=) 10: Uvaa9lbnqHEUoncxKg-RipHuWoI.roa (hash: D8PxV6mfO3QDVLMAPM0ON4yh1dbS4DF73T3Is0Auul8=) 11: gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa (hash: Qu77EoHxyeTpqNbgaiHUpPIuYcauYq9nmWOzOey7QMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c2:92:8a:cb:88:7b:01:91:b0:04:34:33:a6:ee:14:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Jun 13 20:00:44 2026 GMT Not After : Jun 14 20:00:44 2026 GMT Subject: CN=34e488a21b7087c61cc5944d7bf585e252f4176f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:87:53:a2:2a:38:9b:45:ca:c4:eb:3b:5e:c1: 46:ab:14:f9:c4:92:0f:88:1d:d6:4c:75:f3:21:10: cc:b3:4d:83:c8:fb:d8:fd:aa:90:30:13:f7:e2:37: 41:d4:32:67:49:bc:2e:2e:ee:d9:85:9d:f7:7d:a9: 1e:8a:ee:cf:46:83:15:ca:ce:9c:d9:bf:b0:0d:cc: 64:ad:89:96:08:1c:74:2a:a1:ea:ff:f4:c3:c0:9c: 6f:4e:b9:35:7d:50:eb:45:80:4b:08:11:91:9c:c0: a1:03:99:81:9b:1f:0b:63:dc:8f:10:89:e2:70:bd: 82:b5:b7:9f:2b:dc:b1:65:2b:df:4f:c7:e5:bc:8d: 69:68:24:cb:79:58:fc:e2:c9:bd:23:49:e0:8d:8e: bd:f3:93:4e:f2:a4:ac:19:a1:84:20:22:c4:6c:58: b1:7b:7d:c9:ad:d9:86:c4:11:0d:59:fb:a0:3a:e4: 5c:98:45:6b:d2:d5:20:a2:3a:0f:87:7a:1b:d9:96: a3:0d:e9:9e:dc:13:0e:d6:82:ad:52:43:89:61:19: 36:ad:ad:01:99:24:f1:3a:e3:6f:1d:64:5a:2d:91: 94:99:5c:84:e6:76:4e:b9:b0:77:c6:7c:c8:18:2d: 97:be:9b:da:fb:2b:90:c0:23:70:5c:48:20:b2:dd: 5a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:E4:88:A2:1B:70:87:C6:1C:C5:94:4D:7B:F5:85:E2:52:F4:17:6F X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:86:7d:d5:ed:ba:69:f8:33:6a:94:d1:e8:c1:82:4e:69:31: 64:cd:f5:60:5c:9f:85:24:94:c6:ed:f9:62:b4:ec:96:77:d4: 38:b3:92:e3:a8:ec:72:1f:06:3c:63:be:17:0d:36:a5:ba:8e: 94:4f:3d:91:5f:a1:9c:2e:7b:48:a2:a8:1c:e1:0d:dd:9a:eb: e1:90:33:3a:fe:71:ce:64:f3:f4:cd:80:00:90:0b:9d:ae:78: 4e:64:4f:c8:8f:65:ad:f3:21:23:31:41:c2:3f:d0:cf:7a:78: 76:72:72:8f:d0:f2:a2:7e:54:1f:97:b2:1f:22:96:c9:74:ad: c2:8a:c4:1c:c7:23:f8:98:88:b3:1d:71:f2:27:86:ba:47:54: 32:7d:83:a7:57:a2:b7:26:04:2f:31:ef:0a:80:7c:bb:0b:2d: 16:cb:a3:4e:0e:08:44:40:37:6d:f1:5c:45:40:72:2f:15:ae: af:c7:9d:73:0b:6f:6a:11:a3:31:85:09:18:14:0f:93:bc:ca: df:e4:77:df:61:1d:de:ac:83:af:ee:d1:dd:bd:9d:58:31:ea: f0:3e:13:0f:ed:cc:ea:cf:2e:ec:f9:26:3b:71:5c:7b:5e:fe: 19:c8:85:c1:f5:fb:de:09:cf:2a:60:4c:c3:87:68:f6:60:35: c5:65:c4:b8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7CkorLiHsBkbAENDOm7hT2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwNjEzMjAwMDQ0WhcNMjYwNjE0MjAwMDQ0WjAzMTEwLwYDVQQD EygzNGU0ODhhMjFiNzA4N2M2MWNjNTk0NGQ3YmY1ODVlMjUyZjQxNzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4dToio4m0XKxOs7XsFGqxT5xJIP iB3WTHXzIRDMs02DyPvY/aqQMBP34jdB1DJnSbwuLu7ZhZ33fakeiu7PRoMVys6c 2b+wDcxkrYmWCBx0KqHq//TDwJxvTrk1fVDrRYBLCBGRnMChA5mBmx8LY9yPEIni cL2CtbefK9yxZSvfT8flvI1paCTLeVj84sm9I0ngjY6985NO8qSsGaGEICLEbFix e33JrdmGxBENWfugOuRcmEVr0tUgojoPh3ob2ZajDeme3BMO1oKtUkOJYRk2ra0B mSTxOuNvHWRaLZGUmVyE5nZOubB3xnzIGC2Xvpva+yuQwCNwXEggst1a3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTkiKIbcIfGHMWUTXv1heJS9BdvMB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI4Z91e26 afgzapTR6MGCTmkxZM31YFyfhSSUxu35YrTslnfUOLOS46jsch8GPGO+Fw02pbqO lE89kV+hnC57SKKoHOEN3Zrr4ZAzOv5xzmTz9M2AAJALna54TmRPyI9lrfMhIzFB wj/Qz3p4dnJyj9Dyon5UH5eyHyKWyXStworEHMcj+JiIsx1x8ieGukdUMn2Dp1ei tyYELzHvCoB8uwstFsujTg4IREA3bfFcRUByLxWur8edcwtvahGjMYUJGBQPk7zK 3+R332Ed3qyDr+7R3b2dWDHq8D4TD+3M6s8u7PkmO3Fce17+GciFwfX73gnPKmBM w4do9mA1xWXEuA== -----END CERTIFICATE-----Generated at Sat Jun 13 23:57:45 2026 by rpki-client