$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: v9YRTtjzdOQ0V5G41zb19xSpI1Z4CMNl3iBjszcRg1k= Subject key identifier: D5:1C:C0:96:DD:C0:D9:1E:8D:0C:8D:96:7C:43:C3:11:B0:64:9D:53 Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019EBDDA6F771E029EB9B1D253CCECB1E02E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1968 Signing time: Fri 12 Jun 2026 22:01:09 +0000 Manifest this update: Fri 12 Jun 2026 22:01:09 +0000 Manifest next update: Sat 13 Jun 2026 22:01:09 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 6: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 7: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: 4a5mzSfxT4n8+zR3OiVAgB7YDPx9Fv7fcMLB9pVaDDI=) 8: cIcqaLXZmekavhCmoIAJhBRw3JE.roa (hash: 8QflktthB1MZE1m+SbfCOvT58wwBH/AnF87SL9k5yss=) 9: cYY9JWownI4dxUC113BsmeB-bPg.asa (hash: mzYcpAgDjivMiDigXGlTibFV5zqA/T/HUHr0MSI0Bk4=) 10: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 11: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 12: iaTyWoYRTwRbH-8Asj0TijaPuO4.asa (hash: Z8zpBbBj2fntekitrlPrQF77k8Fhh9yLKV2dUy8NxuU=) 13: lPRgjXUJLzaOBHI1Ar3B6SKFErU.asa (hash: fjbHrRsPWcRvcVzpQntP9+B1NmK4Bi2Amk0MUakU4gE=) 14: oaZumtYBqB2DBSwMpqnmqOIkGm0.roa (hash: 9YqR7q1fJK+xrhMWwkV3smWMIV3JZ5y1OxTGOkJ6aPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 13 Jun 2026 22:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bd:da:6f:77:1e:02:9e:b9:b1:d2:53:cc:ec:b1:e0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Jun 12 22:01:09 2026 GMT Not After : Jun 13 22:01:09 2026 GMT Subject: CN=d51cc096ddc0d91e8d0c8d967c43c311b0649d53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:aa:99:b7:e4:ee:b1:c4:e7:aa:83:68:0d:97: 09:15:f7:31:f8:a3:45:ef:ca:7e:f8:e3:b0:30:9a: b4:ad:a1:c4:17:2e:6b:19:73:6e:cf:2c:9f:2f:94: 53:4e:52:e2:bb:4d:9c:89:7d:cd:84:6f:c7:cd:b0: b1:cf:38:62:53:08:3c:3a:3e:99:e9:8e:d0:cf:43: 35:0f:7d:86:55:b6:ce:5a:18:d5:0b:3b:de:e7:7c: a4:0b:52:65:b3:89:cc:f2:75:3e:df:e2:a8:66:29: 34:02:65:31:c0:7e:02:55:64:61:ec:82:d3:4e:f0: a4:23:a9:7e:e4:6a:25:ce:ff:9c:dd:5d:c2:02:2b: 21:d6:2b:a9:38:04:5d:54:39:c4:f9:93:1c:42:f5: be:b5:e7:b4:07:4d:ea:27:37:de:58:33:c7:29:a4: 79:7d:c9:71:56:72:a4:c9:2a:31:73:de:85:0b:e1: 8c:e1:10:c7:2e:00:99:3d:19:b6:a8:bf:56:1d:8c: 7d:f5:64:7b:32:80:e9:b8:25:fa:0f:09:c1:6e:19: ad:bb:8a:62:1e:dc:9b:b3:91:c8:b5:88:ac:47:8c: b9:3d:ed:b6:30:01:70:b8:68:88:f4:c9:ef:54:b1: 60:4c:d5:1c:af:0b:ac:bf:d3:f4:c6:a1:b7:ce:02: c0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1C:C0:96:DD:C0:D9:1E:8D:0C:8D:96:7C:43:C3:11:B0:64:9D:53 X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:0a:87:dd:ca:9f:5c:d7:c8:a4:1f:e3:9e:fb:8e:66:98:5d: 9e:e3:96:b4:48:c0:c9:00:e7:8e:35:e5:a6:88:4e:7c:15:0a: 13:cc:c0:a7:03:7e:20:a7:43:5b:a8:22:3c:2b:e7:28:65:ce: 34:60:7a:96:e9:c3:df:a3:d3:1d:a5:fe:17:00:ad:55:9f:a6: 78:60:72:3a:e3:cb:fe:dd:93:80:4a:b0:2d:db:2e:24:62:ff: b0:46:d5:8a:d7:d0:dd:bb:eb:00:49:f0:4a:b7:9a:9a:1d:2e: cb:ef:c0:ea:4d:08:08:94:e2:d5:9a:8d:bf:7d:a4:72:93:79: 65:e3:b7:a8:6e:53:2c:e5:01:14:8e:d2:ed:f5:61:15:f3:54: f9:be:a2:31:2e:4e:36:a4:bc:ba:45:29:57:59:7a:c8:56:3d: f4:2a:f7:d9:68:c4:8f:9f:99:02:44:83:87:8e:8e:90:1b:b9: b7:e0:31:81:3e:05:66:cf:5a:62:9b:b9:09:3a:f7:09:b8:fa: 74:62:80:c5:1a:8c:67:d5:7d:c4:ee:f2:96:1a:67:81:65:d4: f4:0d:3c:b4:fc:bd:22:30:db:28:3e:29:98:3b:cb:17:7a:db: fb:a6:9c:7e:c4:8d:eb:e7:d7:fa:27:10:e6:2b:82:e2:21:0a: 88:ec:90:e1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ692m93HgKeubHSU8zsseAuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwNjEyMjIwMTA5WhcNMjYwNjEzMjIwMTA5WjAzMTEwLwYDVQQD EyhkNTFjYzA5NmRkYzBkOTFlOGQwYzhkOTY3YzQzYzMxMWIwNjQ5ZDUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqqZt+TuscTnqoNoDZcJFfcx+KNF 78p++OOwMJq0raHEFy5rGXNuzyyfL5RTTlLiu02ciX3NhG/HzbCxzzhiUwg8Oj6Z 6Y7Qz0M1D32GVbbOWhjVCzve53ykC1Jls4nM8nU+3+KoZik0AmUxwH4CVWRh7ILT TvCkI6l+5Golzv+c3V3CAish1iupOARdVDnE+ZMcQvW+tee0B03qJzfeWDPHKaR5 fclxVnKkySoxc96FC+GM4RDHLgCZPRm2qL9WHYx99WR7MoDpuCX6DwnBbhmtu4pi Htybs5HItYisR4y5Pe22MAFwuGiI9MnvVLFgTNUcrwusv9P0xqG3zgLAowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNUcwJbdwNkejQyNlnxDwxGwZJ1TMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgqH3cqf XNfIpB/jnvuOZphdnuOWtEjAyQDnjjXlpohOfBUKE8zApwN+IKdDW6giPCvnKGXO NGB6lunD36PTHaX+FwCtVZ+meGByOuPL/t2TgEqwLdsuJGL/sEbVitfQ3bvrAEnw Sreamh0uy+/A6k0ICJTi1ZqNv32kcpN5ZeO3qG5TLOUBFI7S7fVhFfNU+b6iMS5O NqS8ukUpV1l6yFY99Cr32WjEj5+ZAkSDh46OkBu5t+AxgT4FZs9aYpu5CTr3Cbj6 dGKAxRqMZ9V9xO7ylhpngWXU9A08tPy9IjDbKD4pmDvLF3rb+6acfsSN6+fX+icQ 5iuC4iEKiOyQ4Q== -----END CERTIFICATE-----Generated at Sat Jun 13 07:12:18 2026 by rpki-client