$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft File: tIUv-6fVfFqK-7bqW-r33-wMFFo.mft (raw, json) Hash identifier: pdIyNIpLuMt9uSG2prwGxDdQXN94dWlgx0Qcqr0WYXE= Subject key identifier: 60:E6:A6:46:F2:AD:0E:A0:A4:DE:3B:A5:DD:5B:FC:7A:3E:35:BA:8F Authority key identifier: B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A Certificate issuer: /CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Certificate serial: 019EC06D48DA85CCE62407F84F88C5A0D483 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft Manifest number: 1970 Signing time: Sat 13 Jun 2026 10:00:47 +0000 Manifest this update: Sat 13 Jun 2026 10:00:47 +0000 Manifest next update: Sun 14 Jun 2026 10:00:47 +0000 Files and hashes: 1: 0VZp4QWne5bvAgKwv7SjoOEfGHs.roa (hash: jYh91mIzIriMnUPh9dL8jbBMf/TyJtraSuS+inHNoWM=) 2: 0pS0ka-H_pjf8zmsDhi1S6g_SD0.roa (hash: 3pwjPiGqhzZ7Y/680vy9pG+yzhMOL9IwvcISv966MT0=) 3: 5gizdFY-AQlhbCdYV0MHkXmuq7M.roa (hash: k9r1XdI4/Lx+2gwOSiva8ziRNB2yu8viuLXNYvO5Vys=) 4: 8HZ9HwPcvCjV2P3D1Xns45l-b7g.roa (hash: DvNeLlKBHFprmUWgVpmbGaSEgyoFZqbsKOxc6r1Ij8M=) 5: 8f4-tHMe1_zfMdQiJbY1PQ5lT3c.roa (hash: 1EfLr/LiMTpt9+tNTY1NQrpFVMSuEtCowZrWCkArzsw=) 6: 8lHTKcd0GYAhajj68n6yCoBLBmg.roa (hash: /WULm6fdsfbYX9Ht5hhngSNry2Eyx0hFZ+HW4F+/kU4=) 7: J3Nb9V1J66BnIsJ0KbxFX94VKXY.roa (hash: wcLCauUWs3bEGu09x4ivSvD/ChTk37avzRoy7sqTCsg=) 8: OZz5Z73RCocTg0hscsirqJpi9Vg.roa (hash: vWpk+fzrrJttr02xG3C/WBrhT9TCYx+ekEsOWrAU8P4=) 9: pAF8GSze9ehTbgJAIF3FBa54cNk.roa (hash: PvFwSg+H0WDB7gVfETtfHniBE9Eh+MMRXqrqan++8pg=) 10: qrK8l-uIuryQmH_-AqhZga8WNz8.roa (hash: eI1rOqGrZ+k2KHlXxvPdF7xmA3oDCvTfj+3Q37y0Fi8=) 11: tIUv-6fVfFqK-7bqW-r33-wMFFo.crl (hash: 8PWxNyutXi4j44u3XmUXnn7AZGgrGozh2CWOSaFm9hA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:6d:48:da:85:cc:e6:24:07:f8:4f:88:c5:a0:d4:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4852ffba7d57c5a8afbb6ea5beaf7dfec0c145a Validity Not Before: Jun 13 10:00:47 2026 GMT Not After : Jun 14 10:00:47 2026 GMT Subject: CN=60e6a646f2ad0ea0a4de3ba5dd5bfc7a3e35ba8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:72:ea:b4:6b:34:ba:0e:d8:2d:b6:21:4e:61: 1a:82:d4:d5:11:74:06:6a:ff:f4:a5:53:b6:ce:e0: bb:05:cd:1c:7c:10:a1:21:b1:da:b1:60:10:02:81: fd:2e:da:cc:bd:4a:c6:aa:95:34:2e:55:13:7f:9d: ba:d8:e8:94:91:cb:99:ba:db:1a:d4:dd:77:65:15: 5c:75:83:bb:53:86:69:d4:7b:81:29:f9:2b:7b:ff: 1d:0e:49:1a:11:39:54:4b:e9:8d:00:ab:95:50:08: a3:7a:aa:16:fe:38:17:86:9e:03:f0:b9:c5:50:77: 7d:53:98:c3:6d:06:c8:df:a5:0d:10:ed:68:e8:75: 86:73:de:c2:8d:93:de:ce:6f:45:68:98:b9:34:ab: 92:b3:cf:de:6c:1c:f0:7c:04:d8:36:f9:91:ee:a0: 6b:39:df:f7:e2:b6:fb:37:0b:20:92:93:73:14:5a: 7d:8b:81:9f:f8:56:65:2f:3a:a8:00:55:07:13:23: 82:34:4d:4f:01:4f:96:e0:5c:53:90:74:96:ae:2f: 2e:b0:8b:8d:f6:ec:8e:bb:54:f8:d6:14:99:66:0c: af:13:92:d6:84:95:59:42:c3:64:e2:02:1f:32:27: 10:0a:66:25:de:27:b3:61:e3:e9:7e:df:22:b9:51: bd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E6:A6:46:F2:AD:0E:A0:A4:DE:3B:A5:DD:5B:FC:7A:3E:35:BA:8F X509v3 Authority Key Identifier: keyid:B4:85:2F:FB:A7:D5:7C:5A:8A:FB:B6:EA:5B:EA:F7:DF:EC:0C:14:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIUv-6fVfFqK-7bqW-r33-wMFFo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/e45e30-e7d8-4fb8-90ad-f71038e967a4/1/tIUv-6fVfFqK-7bqW-r33-wMFFo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:f8:18:9b:bd:9e:e8:92:6c:64:1f:f8:71:85:40:16:66:22: 3c:91:2a:00:4a:5c:77:bd:10:31:43:95:48:16:d5:4c:cb:e6: 6d:4f:9b:25:e5:3a:aa:e3:8c:1e:1f:e0:71:32:85:fc:b8:53: fd:8f:5e:79:5d:a9:84:f0:0e:89:0a:49:a3:bc:ba:11:fa:41: a1:87:5a:d7:2c:f4:ef:66:80:13:13:98:91:0a:df:01:3a:1d: fd:84:fb:dc:fe:f0:35:c5:e8:98:0b:cd:62:01:4c:7a:8e:22: 99:90:9a:0b:08:7e:f7:ce:7f:c7:25:54:70:ce:28:a5:8a:67: 8b:ea:b6:18:9b:3e:94:8d:d2:ab:a4:72:71:15:fa:15:9a:01: ac:84:fb:68:65:44:8f:e4:be:95:2b:88:64:5f:78:2c:5f:33: 4a:2d:d7:80:fd:48:f5:86:f7:4a:9f:a8:e9:9e:7c:6b:b6:52: 9b:b7:06:ff:4c:52:e3:1b:cd:36:c8:39:bd:76:93:21:39:62: 51:5c:35:27:d3:42:81:9a:c8:88:2a:bd:a4:12:80:a9:4c:2b: ed:58:4d:15:87:df:0b:eb:ce:3a:f4:9a:42:76:24:6d:3b:43: e6:8b:53:9a:5a:b6:8c:bb:de:a1:e0:26:23:55:1d:a2:06:8e: 0e:15:21:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7AbUjahczmJAf4T4jFoNSDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ODUyZmZiYTdkNTdjNWE4YWZiYjZlYTViZWFmN2RmZWMw YzE0NWEwHhcNMjYwNjEzMTAwMDQ3WhcNMjYwNjE0MTAwMDQ3WjAzMTEwLwYDVQQD Eyg2MGU2YTY0NmYyYWQwZWEwYTRkZTNiYTVkZDViZmM3YTNlMzViYThmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXLqtGs0ug7YLbYhTmEagtTVEXQG av/0pVO2zuC7Bc0cfBChIbHasWAQAoH9LtrMvUrGqpU0LlUTf5262OiUkcuZutsa 1N13ZRVcdYO7U4Zp1HuBKfkre/8dDkkaETlUS+mNAKuVUAijeqoW/jgXhp4D8LnF UHd9U5jDbQbI36UNEO1o6HWGc97CjZPezm9FaJi5NKuSs8/ebBzwfATYNvmR7qBr Od/34rb7NwsgkpNzFFp9i4Gf+FZlLzqoAFUHEyOCNE1PAU+W4FxTkHSWri8usIuN 9uyOu1T41hSZZgyvE5LWhJVZQsNk4gIfMicQCmYl3iezYePpft8iuVG9vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGDmpkbyrQ6gpN47pd1b/Ho+NbqPMB8GA1UdIwQY MBaAFLSFL/un1Xxaivu26lvq99/sDBRaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQt ZjcxMDM4ZTk2N2E0LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC9lNDVlMzAtZTdkOC00ZmI4LTkwYWQtZjcxMDM4ZTk2N2E0 LzEvdElVdi02ZlZmRnFLLTdicVctcjMzLXdNRkZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQvgYm72e 6JJsZB/4cYVAFmYiPJEqAEpcd70QMUOVSBbVTMvmbU+bJeU6quOMHh/gcTKF/LhT /Y9eeV2phPAOiQpJo7y6EfpBoYda1yz072aAExOYkQrfATod/YT73P7wNcXomAvN YgFMeo4imZCaCwh+985/xyVUcM4opYpni+q2GJs+lI3Sq6RycRX6FZoBrIT7aGVE j+S+lSuIZF94LF8zSi3XgP1I9Yb3Sp+o6Z58a7ZSm7cG/0xS4xvNNsg5vXaTITli UVw1J9NCgZrIiCq9pBKAqUwr7VhNFYffC+vOOvSaQnYkbTtD5otTmlq2jLveoeAm I1UdogaODhUhwQ== -----END CERTIFICATE-----Generated at Sat Jun 13 14:58:49 2026 by rpki-client