$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: HE3JJXkIKiJtRNm+Rfr6aiWQBaAhRrXPnNMeTA4lOtI= Subject key identifier: 31:A6:22:00:71:0B:CF:D7:B9:69:A8:0E:EC:4A:62:3A:C1:CA:96:C2 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019EBEB656FD7563F0ED2431AEA0F1230A90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 1984 Signing time: Sat 13 Jun 2026 02:01:21 +0000 Manifest this update: Sat 13 Jun 2026 02:01:21 +0000 Manifest next update: Sun 14 Jun 2026 02:01:21 +0000 Files and hashes: 1: 0ld9oICrjkM9PiOBYi7PkCMaP7g.roa (hash: 7pPoPeKMxfAld72vWaWuaU3WiGoLWbNKS8HJfbCj2GY=) 2: 1BFQM936y9WGcLJKwy60Wg2ag-8.roa (hash: NTbQFXMY5QSvW0BgWqBt3HeqiX8tXZPRJi0IS+SKq2s=) 3: DT8TXPB7Zoh4Y9JFFdsSZ2RIgLg.roa (hash: cdCtaCnFbbokb4IxB6SbsLXr+yswcQckTbmvZnS/sJA=) 4: H3d0QP653F6Jo-epVSXBiVH1h6k.roa (hash: B2NZF4jz4UwnLzA3KbDxjNp0EF7Qv4Th+B09WImKi2I=) 5: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: EDxJRH680nHUJF8ioRKcSq+V4p6WFOOA7smXkl/kiw8=) 6: O2mRnCNeDokP5q-PUWLd28D1SG8.roa (hash: XL7s2EUC28zeBKoJlmCFsu+5IjkYrbxfH3a9YMWon60=) 7: XPPuMgWRNY1QAnjWn2LftTc8cH4.roa (hash: LqWi3Xbli/jxxlx74n8O7L6EJtxaJ1UA0GYHmPMDyEU=) 8: ZRr2QwcqGgt_EOiTtMFoE-lkmow.roa (hash: SIg3ToChfd1+8YW/rxSI4oA419Stw5Sb9StcFL22beM=) 9: dY6eqUD4ykA92I5VKqHmYTX3q88.roa (hash: uvlx5CXBvfA8EWdxrFvclZnKJJH1HmhxtH5z6Fa+fBo=) 10: hCjWTJUhp9C-lxxCdRV4Jwzm4mk.roa (hash: ECwHPN5lxdIugX2ttk1L3l/uci2ps9CeCy1VAcBMeQs=) 11: lERL5Mrj2Bt3hRDr7br_N3d-JkE.roa (hash: /A5fyVRtCeR1gSok1lWq8T+wbRAaNz8PoEuYxSfdZSU=) 12: lWQXyxEJYv9OPJsRSSX1CCPbFb8.roa (hash: qyL/Gv6WkVcsE18337JVKs2VK9z6GTYDQ6GMJ2m3/WQ=) 13: whyP5FxoblHoIHhMTAeqWb1jp8w.roa (hash: a7SodNhSARcbHydA3wymHLN4IRqMOWIhBwT2PU/EoPc=) 14: zd2dqaKa6O4wz9TxJzSxhbKbteU.roa (hash: Sv1+bPBughIj/le0hfMKADppbA91Co/u0NeJGW/Uifs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:be:b6:56:fd:75:63:f0:ed:24:31:ae:a0:f1:23:0a:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Jun 13 02:01:21 2026 GMT Not After : Jun 14 02:01:21 2026 GMT Subject: CN=31a62200710bcfd7b969a80eec4a623ac1ca96c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9e:59:0c:33:6e:d0:b4:95:c2:3f:16:6b:98: c7:a4:ad:13:96:54:ab:3f:bb:39:7f:74:26:f7:6a: 87:a5:05:73:6a:af:e4:7a:3c:c2:b4:ee:d6:4d:d0: b4:d9:98:32:d2:a5:82:21:52:87:c9:1c:05:f9:53: b3:34:c2:05:aa:e5:cf:c3:6b:ca:69:e7:73:7b:7d: fe:92:a9:15:1e:a1:29:ff:6c:90:32:89:fd:26:22: e0:c0:2c:91:de:8e:ef:8b:05:94:99:47:61:f7:77: 85:06:b8:6c:fe:5d:59:77:b8:f5:57:7c:33:f5:d9: 20:a7:0b:47:0c:d2:e0:76:13:91:24:5f:26:49:09: dd:48:d7:0d:aa:96:6d:e2:63:85:af:c1:5a:47:84: 56:26:08:9d:da:46:67:c5:ae:58:cf:dc:1f:ec:f0: 29:28:9a:58:38:64:12:7c:a2:e2:0e:c0:65:ca:57: a4:0e:c4:84:11:7c:0b:a6:29:43:2e:a1:02:00:8f: 52:ba:d9:e3:a2:97:da:c2:e2:d7:6a:38:03:d6:e6: 34:bd:5c:79:0d:37:af:0e:b7:f6:10:4d:1a:78:15: e8:9d:79:28:7d:5a:9a:33:1d:7c:0d:e5:f3:4c:51: 87:35:fa:d9:29:24:92:39:eb:50:16:2c:0e:2e:3b: 19:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A6:22:00:71:0B:CF:D7:B9:69:A8:0E:EC:4A:62:3A:C1:CA:96:C2 X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:85:89:f9:17:23:f7:3d:31:be:29:f7:7b:62:1e:fd:47:64: e0:cb:82:1e:97:c0:b2:2f:02:a2:97:9d:f9:4a:75:97:e3:78: f4:0a:54:66:a8:2e:4d:83:b9:ce:a5:c6:06:f8:74:3b:5d:61: ec:6b:26:c6:47:6b:aa:1d:58:5b:6f:bf:d9:4e:6e:94:92:32: 92:58:ac:04:76:27:f8:29:f8:d2:e9:e0:d4:68:81:13:a4:46: 81:07:6b:26:e0:ed:d1:f0:b4:45:dd:03:10:b4:4d:f5:5b:4b: af:9a:e6:c7:3a:56:b2:17:da:ab:db:13:53:11:2e:60:fc:12: b5:5f:c8:92:55:a3:30:11:1e:26:1a:a2:e3:67:e7:cc:65:5b: e6:f1:f4:a3:b4:c8:af:40:30:63:b8:2c:a5:a8:fd:a0:8e:fe: c7:56:f5:2a:ac:7e:98:6b:1a:79:30:2a:97:49:c1:a0:58:c9: d7:7d:69:0c:59:ab:11:a8:fc:bd:e0:38:06:73:94:d6:e6:d5: 66:d2:34:4f:9b:cc:a3:b5:90:c4:ad:36:6f:6e:c8:68:f1:ae: 1a:3c:94:db:a0:25:7f:6c:aa:8e:07:4d:16:67:9a:c9:df:c0: a0:57:33:8c:0e:84:52:1a:bb:a5:df:cd:7e:af:78:5b:a0:1d: 73:bb:1d:0e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6+tlb9dWPw7SQxrqDxIwqQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwNjEzMDIwMTIxWhcNMjYwNjE0MDIwMTIxWjAzMTEwLwYDVQQD EygzMWE2MjIwMDcxMGJjZmQ3Yjk2OWE4MGVlYzRhNjIzYWMxY2E5NmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyJ5ZDDNu0LSVwj8Wa5jHpK0TllSr P7s5f3Qm92qHpQVzaq/kejzCtO7WTdC02Zgy0qWCIVKHyRwF+VOzNMIFquXPw2vK aedze33+kqkVHqEp/2yQMon9JiLgwCyR3o7viwWUmUdh93eFBrhs/l1Zd7j1V3wz 9dkgpwtHDNLgdhORJF8mSQndSNcNqpZt4mOFr8FaR4RWJgid2kZnxa5Yz9wf7PAp KJpYOGQSfKLiDsBlylekDsSEEXwLpilDLqECAI9SutnjopfawuLXajgD1uY0vVx5 DTevDrf2EE0aeBXonXkofVqaMx18DeXzTFGHNfrZKSSSOetQFiwOLjsZ1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDGmIgBxC8/XuWmoDuxKYjrBypbCMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF4WJ+Rcj 9z0xvin3e2Ie/Udk4MuCHpfAsi8Coped+Up1l+N49ApUZqguTYO5zqXGBvh0O11h 7Gsmxkdrqh1YW2+/2U5ulJIyklisBHYn+Cn40ung1GiBE6RGgQdrJuDt0fC0Rd0D ELRN9VtLr5rmxzpWshfaq9sTUxEuYPwStV/IklWjMBEeJhqi42fnzGVb5vH0o7TI r0AwY7gspaj9oI7+x1b1Kqx+mGsaeTAql0nBoFjJ131pDFmrEaj8veA4BnOU1ubV ZtI0T5vMo7WQxK02b27IaPGuGjyU26Alf2yqjgdNFmeayd/AoFczjA6EUhq7pd/N fq94W6Adc7sdDg== -----END CERTIFICATE-----Generated at Sat Jun 13 07:20:58 2026 by rpki-client