$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: R1JYcXe5l0fiN+kHnfWLatDrxTeKKEVG1LN1QT+TrDA= Subject key identifier: F1:49:88:97:9F:FE:E4:4A:D9:DA:CE:A8:17:DB:B4:52:D1:DE:73:E3 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 019EBF5B105ADB2BBD080855834CB51F0E0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 1972 Signing time: Sat 13 Jun 2026 05:01:16 +0000 Manifest this update: Sat 13 Jun 2026 05:01:16 +0000 Manifest next update: Sun 14 Jun 2026 05:01:16 +0000 Files and hashes: 1: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=) 2: 44tbRBm3zSZMoCst6WkxTKufMIE.roa (hash: 5gCjJr0c5JiHRvqLpZ00s+SrgcQffTqmoJaDyLE8c74=) 3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=) 4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=) 5: 66nbrZ2mCYwG3e6ha3Nfy0BJKE0.roa (hash: nivnljP3mO1OIkIFMtZNC7rvfkUDANm7b9o7EEV+vw8=) 6: 9u44haxRix1aXmDblsqAtiOy3ic.roa (hash: r3I5n8f6rdoTo7uI5qExlu1uSbAdj4bGLbRaLfkDE8E=) 7: E0o_FE2T3DZ1D-UezcaaMgIR4Cc.roa (hash: 5MnQxHTjDi2NDKJrwnJ1AAzWp+hIpNaMlweOYJUqXj8=) 8: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=) 9: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=) 10: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=) 11: f0fB3ZCLspEHf4xo9ont5Ruj-yU.roa (hash: s3KQRvgs0uMJaKxlqnyZSS+058EdiVidz4VTBoWLKeU=) 12: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: z92sOz6tRkTRXKHxqit0UmCSpKn4cygNJ5GOsxNuDjU=) 13: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=) 14: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=) 15: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=) 16: yGz8NgbL_uPaqQIt8HfMRIIbhxI.roa (hash: 1r231ZIpUKsAJqSZVFd8j4Zxh9itylhnPaX/Hsb0udk=) 17: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=) 18: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 01:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:bf:5b:10:5a:db:2b:bd:08:08:55:83:4c:b5:1f:0e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Jun 13 05:01:16 2026 GMT Not After : Jun 14 05:01:16 2026 GMT Subject: CN=f14988979ffee44ad9dacea817dbb452d1de73e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:6c:6b:e6:3f:f0:c8:c1:4c:5d:bd:4b:46:68: 91:c8:b2:e4:67:bd:a8:de:c6:84:a7:98:ef:f5:26: 59:fa:97:37:17:c5:72:b9:93:7e:f2:ae:c3:7f:3c: 55:4c:5e:41:f6:74:de:e1:77:c9:10:05:1d:bb:d5: 3b:45:95:77:a9:1c:76:a4:ac:65:40:f2:ef:34:77: cc:41:bd:26:e1:ad:eb:a8:6a:f1:3f:d1:f7:6e:26: 3c:ce:da:c2:93:4f:b4:6d:a9:1b:fb:f1:4d:fe:5c: 3e:e9:16:2e:a1:90:f6:67:c7:b6:4e:73:5c:20:7b: 3a:3a:30:74:7d:5c:42:f3:f3:91:31:ce:6d:77:08: 1f:cd:40:28:af:ff:d3:65:e6:46:98:bf:59:01:82: 0b:4d:0e:4c:d1:3f:23:09:83:cc:63:db:c2:fe:24: 31:d4:26:69:17:6c:5e:35:99:af:34:84:55:bc:d3: 57:8d:1a:50:7a:6d:3c:08:dd:5a:c4:23:3f:c1:7e: d3:fa:cb:31:2a:f2:47:56:3c:30:79:5a:fd:d6:be: c3:90:f2:e2:fd:a1:b4:10:a7:a4:08:6e:48:b2:fc: 57:2b:31:e6:bb:22:63:f1:4e:9f:32:a2:df:50:d7: 9b:e1:db:39:b4:65:ca:b1:69:ff:6c:8d:9b:70:47: bf:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:49:88:97:9F:FE:E4:4A:D9:DA:CE:A8:17:DB:B4:52:D1:DE:73:E3 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:62:78:a0:ce:a7:1f:9d:59:0b:66:28:ac:1d:d0:59:34:ad: 9e:17:59:38:3e:5f:40:d2:db:ad:11:36:b6:6d:81:55:6e:3a: 1c:6c:ab:4f:73:8f:c7:67:8c:11:53:4f:31:19:ef:01:af:eb: b6:5c:d1:9f:1d:21:b9:1f:92:15:b2:e2:b4:c3:a5:63:a4:45: d8:7d:c6:95:c6:bd:ad:b1:bb:6c:a8:c4:c3:f0:fd:86:38:8f: 3e:7b:a4:11:90:64:ec:19:3d:7e:52:03:52:db:ea:8e:d6:a5: c3:3e:d8:73:18:af:d4:20:ac:12:4e:35:34:a3:32:20:97:77: 58:0e:6f:a0:19:3c:96:ac:bc:c5:c0:e1:59:33:43:5e:e2:d0: e6:24:66:ef:bf:86:1f:cc:83:29:6f:2b:c1:17:0b:c0:05:6a: 1a:07:91:02:14:de:6d:9a:96:ff:b0:62:87:4c:bf:34:f8:43: 4e:40:a0:69:3c:27:88:8b:d7:a3:af:87:d7:9a:00:2f:05:7f: 7f:63:7c:e4:62:22:4d:4a:1c:20:c9:f6:a4:8d:80:40:a0:ab: 0c:dd:a1:94:bc:03:1c:77:ae:9b:8c:59:35:ef:9d:c8:25:29: b1:14:a6:9f:c1:5d:f9:7f:2e:39:b8:f8:e5:e3:bf:f7:70:73: 59:a7:fa:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ6/WxBa2yu9CAhVg0y1Hw4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYwNjEzMDUwMTE2WhcNMjYwNjE0MDUwMTE2WjAzMTEwLwYDVQQD EyhmMTQ5ODg5NzlmZmVlNDRhZDlkYWNlYTgxN2RiYjQ1MmQxZGU3M2UzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8mxr5j/wyMFMXb1LRmiRyLLkZ72o 3saEp5jv9SZZ+pc3F8VyuZN+8q7DfzxVTF5B9nTe4XfJEAUdu9U7RZV3qRx2pKxl QPLvNHfMQb0m4a3rqGrxP9H3biY8ztrCk0+0bakb+/FN/lw+6RYuoZD2Z8e2TnNc IHs6OjB0fVxC8/ORMc5tdwgfzUAor//TZeZGmL9ZAYILTQ5M0T8jCYPMY9vC/iQx 1CZpF2xeNZmvNIRVvNNXjRpQem08CN1axCM/wX7T+ssxKvJHVjwweVr91r7DkPLi /aG0EKekCG5IsvxXKzHmuyJj8U6fMqLfUNeb4ds5tGXKsWn/bI2bcEe/mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPFJiJef/uRK2drOqBfbtFLR3nPjMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmJ4oM6n H51ZC2YorB3QWTStnhdZOD5fQNLbrRE2tm2BVW46HGyrT3OPx2eMEVNPMRnvAa/r tlzRnx0huR+SFbLitMOlY6RF2H3Glca9rbG7bKjEw/D9hjiPPnukEZBk7Bk9flID Utvqjtalwz7Ycxiv1CCsEk41NKMyIJd3WA5voBk8lqy8xcDhWTNDXuLQ5iRm77+G H8yDKW8rwRcLwAVqGgeRAhTebZqW/7Bih0y/NPhDTkCgaTwniIvXo6+H15oALwV/ f2N85GIiTUocIMn2pI2AQKCrDN2hlLwDHHeum4xZNe+dyCUpsRSmn8Fd+X8uObj4 5eO/93BzWaf6Yg== -----END CERTIFICATE-----Generated at Sat Jun 13 08:11:33 2026 by rpki-client