$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: BlrdK+NenxO9pa1wQVX84q6hXpjqIad0twruPbvj9yM= Subject key identifier: 54:5E:52:8D:62:AB:F6:EE:99:46:DA:D4:DB:91:6B:71:4C:3B:6A:D2 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 019EC148FEAD2DA0BA60B78A7DD3D2E9A890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1963 Signing time: Sat 13 Jun 2026 14:00:46 +0000 Manifest this update: Sat 13 Jun 2026 14:00:46 +0000 Manifest next update: Sun 14 Jun 2026 14:00:46 +0000 Files and hashes: 1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=) 2: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: 023a6A7X/G+cv+dsK2g0uCNwAYmHuwqdxyFZF8hmYsM=) 3: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=) 4: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=) 5: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=) 6: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=) 7: icFgcPIuVEwDXoSkl0ySM_0s_10.roa (hash: m6BnteEoReQBu4GAYUMJxfQIRVgJC4sSvXHdkUa3NjE=) 8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=) 9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=) 10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=) 11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=) 12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=) 13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c1:48:fe:ad:2d:a0:ba:60:b7:8a:7d:d3:d2:e9:a8:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Jun 13 14:00:46 2026 GMT Not After : Jun 14 14:00:46 2026 GMT Subject: CN=545e528d62abf6ee9946dad4db916b714c3b6ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:04:67:3c:15:c9:d6:26:ba:8f:97:a2:c1:76: 43:d6:ff:57:f9:25:09:f3:01:89:1c:a7:8f:d1:65: 3d:2c:c7:16:8e:83:5f:f4:89:45:f2:5c:70:a2:9f: bf:08:64:56:dd:f4:01:7e:6b:6a:07:80:43:4c:88: 8b:d4:cf:df:c7:d2:b8:55:61:06:33:e0:20:a7:ad: 42:e1:f1:82:cc:ec:8e:ee:be:18:e3:c7:8a:8f:46: 25:29:1d:65:34:22:03:91:a9:dc:8a:ee:14:cb:a8: aa:6d:53:12:8e:ca:df:62:eb:7e:e4:dd:65:9f:f2: 37:ad:e9:f6:e9:da:0d:b2:1b:d7:cc:94:5b:24:9e: 8f:29:7a:7a:e3:ea:36:49:16:c0:96:31:02:aa:a4: b8:49:7c:c4:e8:ad:44:fb:db:06:de:51:f0:aa:ee: dc:1c:51:dd:e6:10:27:6a:7a:4f:c2:40:0b:35:db: ac:3d:8f:aa:2b:1c:cb:78:b8:d4:21:02:c5:95:5b: cb:b5:68:c9:44:4e:59:ec:e9:78:f7:a5:0c:04:58: 08:1e:b8:a9:b9:28:2b:c5:0b:47:9e:fb:d9:a4:db: 59:5c:1e:f9:72:84:81:96:98:c1:00:86:18:c5:e3: d6:00:0f:b5:91:f7:5b:e0:08:30:ae:78:ca:28:64: 05:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5E:52:8D:62:AB:F6:EE:99:46:DA:D4:DB:91:6B:71:4C:3B:6A:D2 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:3c:c0:87:06:33:4b:a0:18:b3:b2:c5:60:c7:05:28:ae:6e: 56:28:a0:0a:2c:55:92:4c:6c:ab:8a:c2:90:94:b1:0d:47:f9: ee:17:b8:fe:64:6b:b3:76:30:1e:34:30:00:7e:e8:0e:a1:9a: b0:7e:9d:68:18:dd:91:5d:50:70:d7:94:92:df:e7:c9:9f:18: 59:6d:52:ea:28:81:f1:4d:d7:2f:4c:4d:99:0c:26:2e:9c:93: 21:12:ac:ea:e0:13:b3:cd:a5:cb:64:7b:42:ca:61:a7:b5:35: f4:79:d4:08:6e:6b:f0:b4:19:23:6c:e9:b3:bb:3c:b0:2a:ee: f5:ff:04:d7:c9:bc:e5:eb:9d:2c:e2:43:83:d4:77:40:2c:30: 62:f8:4c:0d:b1:3c:04:cc:aa:62:23:d6:d1:b2:81:f9:25:d7: f5:ad:5a:57:ed:e9:67:a0:20:5d:b5:77:b9:8e:67:12:ba:9a: 58:fc:0a:af:6a:5c:a8:e6:d5:a7:fd:d5:0e:1b:36:7c:bc:3b: 48:c5:12:8c:2e:1e:67:cd:4c:a1:e9:c4:ea:20:db:23:ab:76: 8a:16:50:9f:0a:37:ee:2f:f1:8c:82:47:65:43:92:8e:d2:9f: ee:f9:99:47:42:f7:7f:ce:4e:41:9d:33:31:8e:91:99:11:ca: 54:67:9d:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7BSP6tLaC6YLeKfdPS6aiQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwNjEzMTQwMDQ2WhcNMjYwNjE0MTQwMDQ2WjAzMTEwLwYDVQQD Eyg1NDVlNTI4ZDYyYWJmNmVlOTk0NmRhZDRkYjkxNmI3MTRjM2I2YWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1QRnPBXJ1ia6j5eiwXZD1v9X+SUJ 8wGJHKeP0WU9LMcWjoNf9IlF8lxwop+/CGRW3fQBfmtqB4BDTIiL1M/fx9K4VWEG M+Agp61C4fGCzOyO7r4Y48eKj0YlKR1lNCIDkanciu4Uy6iqbVMSjsrfYut+5N1l n/I3ren26doNshvXzJRbJJ6PKXp64+o2SRbAljECqqS4SXzE6K1E+9sG3lHwqu7c HFHd5hAnanpPwkALNdusPY+qKxzLeLjUIQLFlVvLtWjJRE5Z7Ol496UMBFgIHrip uSgrxQtHnvvZpNtZXB75coSBlpjBAIYYxePWAA+1kfdb4AgwrnjKKGQFTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFReUo1iq/bumUba1NuRa3FMO2rSMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDzAhwYz S6AYs7LFYMcFKK5uViigCixVkkxsq4rCkJSxDUf57he4/mRrs3YwHjQwAH7oDqGa sH6daBjdkV1QcNeUkt/nyZ8YWW1S6iiB8U3XL0xNmQwmLpyTIRKs6uATs82ly2R7 Qsphp7U19HnUCG5r8LQZI2zps7s8sCru9f8E18m85eudLOJDg9R3QCwwYvhMDbE8 BMyqYiPW0bKB+SXX9a1aV+3pZ6AgXbV3uY5nErqaWPwKr2pcqObVp/3VDhs2fLw7 SMUSjC4eZ81MoenE6iDbI6t2ihZQnwo37i/xjIJHZUOSjtKf7vmZR0L3f85OQZ0z MY6RmRHKVGedVA== -----END CERTIFICATE-----Generated at Sat Jun 13 21:26:53 2026 by rpki-client