$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: Z0tXa+or/kYYuR9tj8aA4A0rRvr1cXopsiTZgAgjUJI= Subject key identifier: 09:C1:83:11:D5:D6:3C:63:68:E6:BA:94:B1:8C:FE:1B:13:A9:B6:33 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019EBF914B19C696B399A29457884EC75F51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 155C Signing time: Sat 13 Jun 2026 06:00:30 +0000 Manifest this update: Sat 13 Jun 2026 06:00:30 +0000 Manifest next update: Sun 14 Jun 2026 06:00:30 +0000 Files and hashes: 1: 8qONZL-zarmB_Y1tqZfwTzYcBJo.roa (hash: uD7uxv7CcmmCwKrR/rRY/falCkFooXd096XuRKXA53M=) 2: CbpfGSg2dc5xpDx_PKZcKtE-VO0.roa (hash: +TlZhPEmVcYWVFH6fNpO7ddzwFQ77lc3RH/hu8mjs6o=) 3: H52_1NjStSe7bo70-a34b3HOvac.roa (hash: HF55nNJHz3uWR//Z7REZtnPpt29LIrDGhY4TPWFKubA=) 4: P1pfIuguwdyriYi_GQFSe-izAhE.roa (hash: NKnyRGmEF3rjLPF+lRBevLDxlcCGJDG1k5PVPHODwso=) 5: Z5Q4cX10r4SFheIcdGTrUpCvuZU.roa (hash: wMHIcBIbfU58/UoUwoAfje3LCzt53bakhjFaSE6tCKY=) 6: a64DqNHBKDLRnRdZg0hgsItT--A.roa (hash: dpDNbplT+FTWKNSTl7kTKyMGdVIxcWXPGCF41IWUZLA=) 7: aIAMcUyQlBuQLF5VNVbyqznFMes.roa (hash: ZUSRjd0VjztvaPjHS4F+hfBZiOWPpIMPUxtksXLcsiY=) 8: bdiVopGRMa8RC0mEnWv6wm6w_-0.roa (hash: WzAENNvVjV1DRRjD7yBjtCDo9tO1r/3BMLbac/ZE6p0=) 9: cUx14a6zvbXoQsxgCu4lwaeteWo.roa (hash: z9zZDUVb5yLDsQYHoYGemDq5RVL+9VBrum00BPaUMRM=) 10: mNBBgKm6_yJQvs00m_igfi48DU0.roa (hash: VfVCA1B9bUSr+I9VT6pAPSKz/tBVJaLIu5iTuGtuCBc=) 11: nfsrhorPXoDNAav4xcAjYkGLsDs.roa (hash: OppZn43aKOgTyjnxVD0J0jb23xTBFqa9KdHazP1xwKo=) 12: otqVdGSDhlsKo4n0L7r6uoCi0oI.roa (hash: bNKtEIUh201fteeUndSmajMn25XvBKo8UM7BSb5raaE=) 13: qmoEJmDXHItBkRrR4CNCdNFXU5c.roa (hash: Za8kvJX7Ct2+gleepadRQ7a+MH3+z6fA5RKL0ksjJug=) 14: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: 5vaFUZZe9KRFx1q/i5S+TFx6S9NiT4EIKhujeoBTYjk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 06:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:91:4b:19:c6:96:b3:99:a2:94:57:88:4e:c7:5f:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Jun 13 06:00:30 2026 GMT Not After : Jun 14 06:00:30 2026 GMT Subject: CN=09c18311d5d63c6368e6ba94b18cfe1b13a9b633 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:88:0f:5a:dd:10:38:78:dd:08:e8:e5:25:0c: e9:19:7c:0c:fd:e9:f6:cb:64:bf:b9:3c:3e:84:6f: 0d:92:e7:fc:4c:42:75:73:db:69:17:1c:c5:54:61: 9a:1b:c3:e6:a9:94:4d:4a:84:c6:27:25:f7:96:94: c8:54:51:5b:57:db:4b:36:eb:2e:d4:9b:a5:37:5b: ec:40:4d:87:08:db:20:39:e6:07:35:05:b2:f9:9a: b3:65:ba:72:85:4c:1b:d4:6f:40:82:3d:20:7b:05: 53:c7:e7:37:75:5c:8b:17:86:34:ee:be:18:d1:0f: 7f:62:75:1b:f1:fb:89:77:b1:92:38:e3:1b:d4:6a: 5f:77:e4:de:00:77:c1:a2:e0:60:a2:1e:12:0b:1d: 8e:37:21:5a:9b:6a:db:f1:88:e9:84:17:a9:77:2d: 2f:cc:c4:8e:c7:f2:2d:df:7a:fd:9b:1e:e6:49:d1: 5f:a9:96:3e:34:8a:32:36:0e:9e:27:b5:96:e0:93: c9:75:62:f1:94:21:da:ae:a0:86:93:b4:60:64:f5: e9:77:0e:5d:75:73:b4:ca:87:ee:6a:9c:f4:42:d1: df:e4:b4:47:31:cc:f7:97:7c:5a:8a:b1:3f:e9:b3: b5:3e:f9:01:c5:19:43:af:d2:66:35:19:3c:cf:b5: bf:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:C1:83:11:D5:D6:3C:63:68:E6:BA:94:B1:8C:FE:1B:13:A9:B6:33 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:e3:40:17:2b:c8:53:3b:f7:03:11:a1:53:25:67:b2:f5:e0: b4:82:08:ed:54:12:08:b5:96:39:eb:cc:dd:c6:63:bd:ba:12: 17:c0:78:ce:fa:0b:9e:e0:2e:ef:84:6d:48:fc:bc:b9:f4:1f: 6d:dd:11:54:bb:95:ec:c2:8e:16:e5:c6:aa:45:ba:41:d8:f0: cf:d4:e3:34:a1:53:d7:5a:97:f6:c3:93:82:50:b9:7c:25:5e: 82:69:ad:22:88:24:f6:bf:9d:1b:4f:e4:3e:bc:d0:ca:fa:9b: 61:36:09:71:b4:bb:b6:8e:de:2e:17:10:9b:04:bb:29:12:d6: f6:c9:e4:cd:0f:ba:d5:95:44:5c:b5:63:dc:4b:2b:d8:af:e4: 1e:c6:2d:2c:ca:fe:14:c6:29:60:2b:75:51:49:20:41:da:30: 0a:a0:ac:22:fe:ae:7f:f5:b3:9e:95:2b:f6:ee:71:1f:e2:16: 37:e8:8f:49:71:f4:97:5a:8e:f0:24:13:1b:cf:c7:2c:e1:52: d4:4a:b4:7d:8b:cc:47:67:a0:14:c0:1b:9a:39:39:16:d5:9d: 89:6f:52:d3:7b:24:4d:03:18:2b:e0:2e:ac:4f:74:ec:da:d9: a3:d4:21:f1:6d:55:6e:26:ca:24:61:f1:76:29:cc:f4:30:f9: 63:e1:0f:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/kUsZxpazmaKUV4hOx19RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjYwNjEzMDYwMDMwWhcNMjYwNjE0MDYwMDMwWjAzMTEwLwYDVQQD EygwOWMxODMxMWQ1ZDYzYzYzNjhlNmJhOTRiMThjZmUxYjEzYTliNjMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsogPWt0QOHjdCOjlJQzpGXwM/en2 y2S/uTw+hG8Nkuf8TEJ1c9tpFxzFVGGaG8PmqZRNSoTGJyX3lpTIVFFbV9tLNusu 1JulN1vsQE2HCNsgOeYHNQWy+ZqzZbpyhUwb1G9Agj0gewVTx+c3dVyLF4Y07r4Y 0Q9/YnUb8fuJd7GSOOMb1Gpfd+TeAHfBouBgoh4SCx2ONyFam2rb8YjphBepdy0v zMSOx/It33r9mx7mSdFfqZY+NIoyNg6eJ7WW4JPJdWLxlCHarqCGk7RgZPXpdw5d dXO0yofuapz0QtHf5LRHMcz3l3xairE/6bO1PvkBxRlDr9JmNRk8z7W/5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnBgxHV1jxjaOa6lLGM/hsTqbYzMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeONAFyvI Uzv3AxGhUyVnsvXgtIII7VQSCLWWOevM3cZjvboSF8B4zvoLnuAu74RtSPy8ufQf bd0RVLuV7MKOFuXGqkW6Qdjwz9TjNKFT11qX9sOTglC5fCVegmmtIogk9r+dG0/k PrzQyvqbYTYJcbS7to7eLhcQmwS7KRLW9snkzQ+61ZVEXLVj3Esr2K/kHsYtLMr+ FMYpYCt1UUkgQdowCqCsIv6uf/WznpUr9u5xH+IWN+iPSXH0l1qO8CQTG8/HLOFS 1Eq0fYvMR2egFMAbmjk5FtWdiW9S03skTQMYK+AurE907NrZo9Qh8W1VbibKJGHx dinM9DD5Y+EPew== -----END CERTIFICATE-----Generated at Sat Jun 13 13:34:35 2026 by rpki-client