$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: R/k4KehWXsEwS4GEbh9KgN0r5RZ3NzcLUpENlSyrU/k= Subject key identifier: 11:90:C4:2E:CE:1A:14:2E:31:AA:AC:0F:16:6A:FC:0B:15:ED:BD:00 Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019EC1EDAE4A18859B5D278559EE54EEAF7C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 151D Signing time: Sat 13 Jun 2026 17:00:39 +0000 Manifest this update: Sat 13 Jun 2026 17:00:39 +0000 Manifest next update: Sun 14 Jun 2026 17:00:39 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 3: 7tK-Y_2zDn6v9bsNxgC2WC7pK58.roa (hash: cLZskeRMwGxHkUDQXpA7UBDzbVsdE10cl/owbtiDKLo=) 4: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 5: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 6: _XQtBPNeW_iuy40orAGtRGhMTSk.roa (hash: LAWDSlOuHdvhK5NcbfNOkabxOshrkg3NCFkUAyd9zsY=) 7: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 8: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=) 9: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 10: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: vJMxxLOikiw/mGB/wgQqTYRUBTNvFELDCaZ0xD3FLog=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c1:ed:ae:4a:18:85:9b:5d:27:85:59:ee:54:ee:af:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Jun 13 17:00:39 2026 GMT Not After : Jun 14 17:00:39 2026 GMT Subject: CN=1190c42ece1a142e31aaac0f166afc0b15edbd00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:78:29:5f:56:26:b6:8e:ef:76:0a:65:15:d9: ed:20:2b:06:98:0a:ec:68:78:af:3c:11:be:97:00: 10:3b:30:25:4a:8e:01:f1:10:d5:24:f0:33:b7:5e: 17:7b:f7:d7:25:c1:6c:ce:d2:0f:1f:84:99:d1:36: f6:3e:4e:c8:e5:9f:02:ab:06:1c:68:4e:98:ae:bf: 76:03:e2:64:c3:df:d6:29:b1:33:55:aa:38:d6:f2: 51:81:94:9f:41:a0:19:26:d1:70:02:4f:2a:38:62: 81:bf:f9:2e:ee:09:9b:da:de:75:20:1f:9e:14:cb: cd:03:7a:bd:5a:6f:3d:21:b1:76:95:c8:06:1c:6f: 36:3b:1e:80:b2:f0:bd:97:90:1b:36:e9:fc:13:d1: 4e:de:fe:fa:5d:1c:6a:93:be:ef:2d:6c:06:ef:a4: 86:58:eb:fc:eb:13:02:2a:f8:97:30:95:47:f2:cc: e8:59:3d:29:b7:8f:66:a1:9d:75:d8:24:96:d7:50: a2:85:09:ab:4b:01:3b:00:c4:76:7c:82:c8:70:63: 86:b6:0f:ca:35:d4:cd:67:1a:2a:98:03:c4:60:1e: 36:d9:58:68:3b:69:f9:af:2f:73:38:99:1f:e9:12: b9:ca:c7:fc:5c:d1:9a:75:69:5e:1b:dc:1e:3d:06: 15:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:90:C4:2E:CE:1A:14:2E:31:AA:AC:0F:16:6A:FC:0B:15:ED:BD:00 X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:55:d8:bd:52:4e:3e:80:d0:7e:e5:67:94:f1:7a:9f:69:91: ad:08:58:79:f8:8e:12:c9:5b:61:75:1b:36:e8:9b:46:09:26: a5:97:43:33:7e:35:1e:a0:8b:06:f9:0e:be:1e:fd:a0:30:b5: 69:05:69:34:81:47:c6:4a:26:36:17:8e:a8:98:67:8a:81:a0: d7:c0:29:87:4d:23:54:ea:0d:30:04:19:5e:9b:05:31:2a:c3: d3:a4:a1:c0:6c:7b:da:cc:48:be:e1:e2:ad:2a:7f:5e:e7:fe: 27:60:41:81:0f:70:7a:d2:e9:2c:43:12:60:6d:e4:78:5b:a5: 67:0c:a7:71:63:69:88:c5:ea:81:38:c7:de:f5:8f:f6:e5:86: 5e:6e:c5:82:52:b0:2e:73:0c:ef:99:81:a5:0a:e0:55:91:4b: 0a:05:83:68:99:fa:17:08:31:67:4f:53:7a:b2:52:84:89:f1: e5:2c:e9:6a:e7:56:0e:4c:48:64:03:c6:4e:da:a3:8d:d7:b4: ae:b7:2d:8b:b6:c9:8f:82:73:a2:92:98:cf:46:54:68:eb:00: 8c:3e:ae:b8:da:cc:f6:b9:64:84:a9:d6:f9:20:5b:fb:9b:e3: 72:c2:db:fe:f1:49:4b:f5:6a:4d:ae:fe:8a:64:37:26:8d:ab: 35:ee:fe:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7B7a5KGIWbXSeFWe5U7q98MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwNjEzMTcwMDM5WhcNMjYwNjE0MTcwMDM5WjAzMTEwLwYDVQQD EygxMTkwYzQyZWNlMWExNDJlMzFhYWFjMGYxNjZhZmMwYjE1ZWRiZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXgpX1Ymto7vdgplFdntICsGmArs aHivPBG+lwAQOzAlSo4B8RDVJPAzt14Xe/fXJcFsztIPH4SZ0Tb2Pk7I5Z8CqwYc aE6Yrr92A+Jkw9/WKbEzVao41vJRgZSfQaAZJtFwAk8qOGKBv/ku7gmb2t51IB+e FMvNA3q9Wm89IbF2lcgGHG82Ox6AsvC9l5AbNun8E9FO3v76XRxqk77vLWwG76SG WOv86xMCKviXMJVH8szoWT0pt49moZ112CSW11CihQmrSwE7AMR2fILIcGOGtg/K NdTNZxoqmAPEYB422VhoO2n5ry9zOJkf6RK5ysf8XNGadWleG9wePQYVNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBGQxC7OGhQuMaqsDxZq/AsV7b0AMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaFXYvVJO PoDQfuVnlPF6n2mRrQhYefiOEslbYXUbNuibRgkmpZdDM341HqCLBvkOvh79oDC1 aQVpNIFHxkomNheOqJhnioGg18Aph00jVOoNMAQZXpsFMSrD06ShwGx72sxIvuHi rSp/Xuf+J2BBgQ9wetLpLEMSYG3keFulZwyncWNpiMXqgTjH3vWP9uWGXm7FglKw LnMM75mBpQrgVZFLCgWDaJn6FwgxZ09TerJShInx5SzpaudWDkxIZAPGTtqjjde0 rrcti7bJj4JzopKYz0ZUaOsAjD6uuNrM9rlkhKnW+SBb+5vjcsLb/vFJS/VqTa7+ imQ3Jo2rNe7+jA== -----END CERTIFICATE-----Generated at Sat Jun 13 21:46:34 2026 by rpki-client