$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: +xCEuyx6N8qN2frTe+EMsy0G0UMyiB3TrVAIg2w1UjQ= Subject key identifier: 50:03:80:AF:E2:49:2F:D5:49:EA:DA:C4:D4:37:76:44:2E:F9:06:F4 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019EC06D22400D4CDF4C4CDAB23ED633C0F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 1979 Signing time: Sat 13 Jun 2026 10:00:38 +0000 Manifest this update: Sat 13 Jun 2026 10:00:38 +0000 Manifest next update: Sun 14 Jun 2026 10:00:38 +0000 Files and hashes: 1: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: jkTNuCO0CI0BchBrVp0DP1WOnJkV9R+V4yG2rDc9HDY=) 2: 3gBGUy3u0kv0cMFfYhefm1zv6V4.roa (hash: wbVQO0NG95NJdUKsQ+Wjm9lVf3DsbDyNxF0jF2IdjBg=) 3: 6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa (hash: 1JXCVihKxq73Qe1ncqplSKlgiZyg5/rbL6k+wZhdDKo=) 4: 7DBa_6nBybw3J8T8dr7yX7ebiwU.roa (hash: 9lkcVj8pg/THlhFClMP/jc7G+HKyv/jKnpXVV+mQkS4=) 5: 9VcWKWB5puA52wsDDDkNDjxeGR4.roa (hash: GlsIfnVs54CADMaRa3Sk/1oPA7tZtu4TEPhze/G9m8w=) 6: B7nfsbI7vpYat2Veoezdf_TcIy8.roa (hash: ZifWcufC5UurQhjWI81wwKVDTfPl5QEDU7f59ef2yA4=) 7: Daz8bhqhbaAz3OEyLaZDp_txPzA.roa (hash: FM1qUTL0CvrCixQ27I0/1ARdD95NXI7GlqZPBu6d9FA=) 8: KZXfDjuE-PvJiBRVRI6B8WHyooo.roa (hash: OMT2qoqGQOn2tlDcwwNCQQxD6FlT7A94fPogcjgcLoY=) 9: MAbKsaJixjU16-YxviDdUW3E9O0.roa (hash: G7uQcrymoMNiTSNS0GkaRs7zRkNHWrcTl4RG77CdYN0=) 10: RVfXd-D1ecB560CRD5YifVCpd1s.roa (hash: VBLJ7mxpiyU44wmUNd5IC/WX+1HbYUo9OBJtin4d0Sc=) 11: TLi5DNB1nha4h6YESMgyGrCORWo.roa (hash: EUg1KiZtD+nVctjCGIesOCkqRzlFdgvGJVlZhMuO3Jw=) 12: a4e-5HcXuyyRW82YjyXKassrVo8.roa (hash: LjIo0mjkPTCoI0owtR5lNhwGCbcbFzLDlXxT76bUTMg=) 13: gjhjBLir8IRFlK670wG4nH4oaXk.roa (hash: cv4ygh/KOqNvTQ/oTMBYXfBkQ2u91AyKM5PUQ/5gKm8=) 14: j4OaetARNIVx-9EsgUUwBCsDjoA.roa (hash: 4DqJXihPNyacK6qcrUCR2jeCbK8fq/Etn5AHTyGsM5g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 10:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:6d:22:40:0d:4c:df:4c:4c:da:b2:3e:d6:33:c0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jun 13 10:00:38 2026 GMT Not After : Jun 14 10:00:38 2026 GMT Subject: CN=500380afe2492fd549eadac4d43776442ef906f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:dd:b7:f3:39:8a:0f:ee:0b:9d:99:a9:35:8c: 7a:9c:fb:d1:80:59:5b:8f:06:cc:01:9f:31:cb:3e: 8f:69:7c:89:dc:e4:20:97:2a:b3:ab:41:c0:b8:b8: 70:80:99:51:74:9c:df:b6:c5:c2:01:7e:af:56:53: 30:d5:14:a3:5d:1d:d9:0e:96:b6:0d:82:1e:f1:4f: 38:ea:c4:f2:dd:f7:a3:7f:3b:5b:37:22:61:28:a7: 1c:4c:86:f0:bc:32:41:7b:eb:82:b8:9c:56:19:ad: 5c:33:e3:23:17:e7:3b:7f:a7:6d:ee:0c:ad:64:5a: d0:97:81:e3:fd:86:7c:3c:ea:00:1d:bd:59:ce:ee: a1:ad:44:3b:5b:ea:28:1c:3f:05:a2:19:ea:1e:0d: a3:4a:1a:e5:9a:c5:2a:de:ea:a4:5b:1b:72:14:56: 76:b6:af:45:2c:1e:90:0a:c3:cd:38:9e:1c:2c:15: 93:12:45:62:ad:f6:2d:cb:61:17:b0:7b:0f:82:49: 06:66:27:3a:a9:ca:34:30:83:ae:9a:0a:9c:5a:c3: 4d:11:8b:17:b2:58:9e:42:b1:b5:ef:23:00:e0:51: 08:50:87:40:e2:aa:96:88:8f:83:6c:cc:0d:45:65: 59:e8:89:ed:53:02:7a:df:a2:a5:7f:59:57:e0:c6: 12:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:03:80:AF:E2:49:2F:D5:49:EA:DA:C4:D4:37:76:44:2E:F9:06:F4 X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:90:b2:cf:31:ed:7a:6a:d5:0a:b9:42:2a:34:fe:aa:00:2b: f5:a6:2d:7a:d7:a5:f3:21:b4:06:24:17:ad:6c:5e:6d:94:7a: ae:6f:25:e9:d4:39:db:2e:80:c1:b7:9d:64:ef:66:0e:e9:c8: 51:c3:f3:50:e2:be:74:a9:ee:43:2c:17:5f:1f:3c:96:6e:61: f3:f7:0a:88:64:7f:7d:43:59:d9:6f:6b:02:92:ef:f0:76:db: 83:f8:9f:02:30:58:9c:26:89:06:d3:da:ea:8e:38:a4:30:aa: d4:2b:03:eb:07:8a:a9:14:3f:cd:e6:20:82:5c:33:b2:96:b4: 87:62:a3:e7:1c:18:a7:b6:6f:99:5e:87:98:37:f4:1a:3d:12: 7d:90:0a:c8:76:ee:5d:13:1a:b4:29:b7:6c:9c:34:5f:91:31: 19:73:60:c4:0b:56:23:91:0d:95:b9:53:53:b5:78:68:bc:6a: 27:92:95:6a:fb:d4:f2:49:fa:2c:ad:a0:93:f0:a0:94:1a:67: 02:ca:3c:12:b7:7e:2d:5a:99:3f:35:72:1e:c3:e9:f5:ba:03: 1a:c3:0c:61:e7:af:5a:f0:f2:e0:90:33:ad:f4:1f:c9:c3:ea: ca:18:56:c8:9e:dd:05:b1:25:d7:54:35:de:f5:c8:02:0c:a1: 55:aa:b5:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7AbSJADUzfTEzasj7WM8DwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwNjEzMTAwMDM4WhcNMjYwNjE0MTAwMDM4WjAzMTEwLwYDVQQD Eyg1MDAzODBhZmUyNDkyZmQ1NDllYWRhYzRkNDM3NzY0NDJlZjkwNmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuN238zmKD+4LnZmpNYx6nPvRgFlb jwbMAZ8xyz6PaXyJ3OQglyqzq0HAuLhwgJlRdJzftsXCAX6vVlMw1RSjXR3ZDpa2 DYIe8U846sTy3fejfztbNyJhKKccTIbwvDJBe+uCuJxWGa1cM+MjF+c7f6dt7gyt ZFrQl4Hj/YZ8POoAHb1Zzu6hrUQ7W+ooHD8FohnqHg2jShrlmsUq3uqkWxtyFFZ2 tq9FLB6QCsPNOJ4cLBWTEkVirfYty2EXsHsPgkkGZic6qco0MIOumgqcWsNNEYsX slieQrG17yMA4FEIUIdA4qqWiI+DbMwNRWVZ6IntUwJ636Klf1lX4MYSCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFADgK/iSS/VSeraxNQ3dkQu+Qb0MB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJCyzzHt emrVCrlCKjT+qgAr9aYtetel8yG0BiQXrWxebZR6rm8l6dQ52y6AwbedZO9mDunI UcPzUOK+dKnuQywXXx88lm5h8/cKiGR/fUNZ2W9rApLv8Hbbg/ifAjBYnCaJBtPa 6o44pDCq1CsD6weKqRQ/zeYgglwzspa0h2Kj5xwYp7ZvmV6HmDf0Gj0SfZAKyHbu XRMatCm3bJw0X5ExGXNgxAtWI5ENlblTU7V4aLxqJ5KVavvU8kn6LK2gk/CglBpn Aso8Erd+LVqZPzVyHsPp9boDGsMMYeevWvDy4JAzrfQfycPqyhhWyJ7dBbEl11Q1 3vXIAgyhVaq1lQ== -----END CERTIFICATE-----Generated at Sat Jun 13 19:49:17 2026 by rpki-client