$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft File: CY97o0vGVnvTYW1XT3KF3XVW2_0.mft (raw, json) Hash identifier: md4A7a8ln5uUTMZ0PnhPYSCTsLUZSK6HKbNHxV4fx8s= Subject key identifier: 09:3B:4A:F2:37:97:4B:27:0E:6A:7B:BC:EB:B8:65:66:27:1B:5C:4B Authority key identifier: 09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD Certificate issuer: /CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Certificate serial: 019EC0DB9F663625F5F66DE77FF5F12601ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft Manifest number: 0D84 Signing time: Sat 13 Jun 2026 12:01:19 +0000 Manifest this update: Sat 13 Jun 2026 12:01:19 +0000 Manifest next update: Sun 14 Jun 2026 12:01:19 +0000 Files and hashes: 1: CY97o0vGVnvTYW1XT3KF3XVW2_0.crl (hash: p8ISzIL4K341TbT0nZuqufClPOJstyfbeCOKHWg7j4k=) 2: EOj3AgYdcchPeXzFo3MmkUnpC5c.roa (hash: UJxOCXl/zk57bLmMvjQmQo6So76eGqObXBhqM5bOFjU=) 3: IP0aVLnaY0te3-WRrsi7DFaXO_4.roa (hash: Xxny1qG2mRhaeS5oj19RU/vhLPgA+jSoozjn6tTTwWo=) 4: OZaDQ0hXuyPtXw0MMtiK4i0Z5Cc.roa (hash: NUQ/hLaY/s6wtpegscjb37Ii8FsiiXqqFFzr8BzeZgs=) 5: PXUEThXrMGouCYgr_yi3-daiDvE.roa (hash: iv3ZI6ycGYw3gyGWXsZNQzdt8OIK73JOyd7SS9lf5Dk=) 6: StKopN7mKY_G686fwWfLGQIs1ZE.roa (hash: Lt0qVcoh5gF6hn1K+QcayMd775gMjWFzF0XYTOVMzcE=) 7: earkCFjIv2or5fVmfCpyFBzbJ_0.roa (hash: dftgCu9tVXj4WgdmgDTiT0Fq8ps61PTLkvPOyslNpyo=) 8: h5YHyc0MmzGvq4YgXx8Mpbt82CY.roa (hash: hT18pU7cTeKJ68OyFrQNbEbvLKO/d8ePLsbG9hT8IJE=) 9: m2aCEWRSbYINPhfk7dIfOHcCZMQ.roa (hash: zF+FldUbeFBdo73eCEVXfBTgillyEx/Bek9AHg5vsQM=) 10: mMhcTAUsEq-DNycXZbZCJR0srtQ.roa (hash: IfB3ppygA/MuKvduBRn6Oad+w/QpUoS9p6uwhj/GpXM=) 11: vv0I_9PClUpsKdM3Ws5mpj_Dbv0.roa (hash: Adx+Z7kMAGiZBllXqmWexxHoAMFVLGtlGl9lUzeKx9M=) 12: z5VJJncILn8SiX_0PBUpwSIBZR4.roa (hash: Ob/d4htJ7+Y8sve6AbDZ63e9bI8Fjky35VjD4Z3kSis=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 10:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c0:db:9f:66:36:25:f5:f6:6d:e7:7f:f5:f1:26:01:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=098f7ba34bc6567bd3616d574f7285dd7556dbfd Validity Not Before: Jun 13 12:01:19 2026 GMT Not After : Jun 14 12:01:19 2026 GMT Subject: CN=093b4af237974b270e6a7bbcebb86566271b5c4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:f0:4d:1a:21:a4:85:59:94:04:08:09:63:2b: 8c:97:24:6e:7b:a0:34:1c:19:c3:09:c6:a0:ec:07: 8c:1b:38:65:dd:19:a0:6d:d1:19:6c:a3:c3:90:b4: a1:8e:dc:97:e6:9e:85:ec:53:83:75:ad:35:a5:f0: b5:41:3d:69:95:75:58:9b:ab:1e:a2:a6:d6:f3:fe: 32:7a:3f:ed:a2:cc:ae:f7:ea:63:ad:3c:2a:eb:dd: 23:01:02:a7:f4:bf:e3:10:f2:77:31:4d:15:cf:0c: 81:41:05:c6:81:e0:ea:0b:fe:bb:bf:8a:d4:3e:14: 18:31:67:8f:fc:26:4e:2b:11:45:e6:90:24:56:f3: 41:0a:e7:5c:7f:d1:d0:2b:c4:27:1d:00:98:fe:be: 35:73:7e:dc:22:06:9e:84:7c:66:a9:07:5e:a2:93: 86:70:f5:43:9d:56:5a:53:92:32:14:b1:bd:cb:1a: 39:72:c0:25:30:5a:5c:68:bf:ae:8e:bd:4a:bc:c9: 54:36:55:a3:d7:19:44:7f:d8:e1:de:78:df:36:b5: e0:e2:7b:c3:d8:22:51:e8:7f:d1:38:ff:0d:39:9d: 28:e5:b8:00:48:df:38:28:b6:64:69:a4:58:86:b6: f7:a1:09:83:be:ca:e8:50:f1:e0:81:7c:9a:f3:27: 2a:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:3B:4A:F2:37:97:4B:27:0E:6A:7B:BC:EB:B8:65:66:27:1B:5C:4B X509v3 Authority Key Identifier: keyid:09:8F:7B:A3:4B:C6:56:7B:D3:61:6D:57:4F:72:85:DD:75:56:DB:FD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CY97o0vGVnvTYW1XT3KF3XVW2_0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/38c5ac-b7e7-40dd-98d3-e2166ad74e3f/1/CY97o0vGVnvTYW1XT3KF3XVW2_0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ea:ff:49:98:8e:9e:29:68:69:d8:9b:d4:9b:de:d4:a8:41: 8e:7f:ff:f5:ba:e8:5f:70:a6:a7:8e:7b:9d:97:1a:a7:ef:40: bc:42:23:0c:ae:b0:7e:8e:d0:fe:34:1e:33:be:42:81:e9:5e: c2:2a:41:78:ef:a8:53:fe:4a:fc:5e:22:a8:7d:a3:ba:9a:12: 19:f6:48:38:5f:19:ec:e3:cb:05:b6:9f:bb:a5:48:bd:d5:e2: 6f:54:51:99:ba:98:7a:1f:5f:f0:ec:91:82:69:a7:37:7a:cd: 16:06:00:5e:6c:3b:40:07:48:6c:34:c2:ef:8b:17:14:55:b4: d8:a4:30:57:44:29:c5:cc:08:1e:6d:3d:08:dd:97:8a:51:2f: f0:ac:26:ce:c3:b9:07:db:44:59:74:9e:82:3a:d6:5c:96:f4: 94:c2:c4:79:7f:fa:53:81:a9:ba:76:04:90:10:90:21:36:9c: e4:33:0f:4f:cc:c1:e9:4c:b2:64:6f:22:6a:ad:14:2b:9c:06: 1e:36:c9:11:5b:0a:af:9d:3a:88:45:0b:77:d7:ee:58:01:c9: da:a8:b7:f8:77:54:b8:66:6b:dc:d6:0e:64:f5:bf:9f:17:d1: 05:39:f0:c6:e4:70:00:e9:f3:73:d5:e1:9f:d3:53:ac:91:b1: d5:e6:c8:9b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7A259mNiX19m3nf/XxJgHtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5OGY3YmEzNGJjNjU2N2JkMzYxNmQ1NzRmNzI4NWRkNzU1 NmRiZmQwHhcNMjYwNjEzMTIwMTE5WhcNMjYwNjE0MTIwMTE5WjAzMTEwLwYDVQQD EygwOTNiNGFmMjM3OTc0YjI3MGU2YTdiYmNlYmI4NjU2NjI3MWI1YzRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/BNGiGkhVmUBAgJYyuMlyRue6A0 HBnDCcag7AeMGzhl3RmgbdEZbKPDkLShjtyX5p6F7FODda01pfC1QT1plXVYm6se oqbW8/4yej/tosyu9+pjrTwq690jAQKn9L/jEPJ3MU0VzwyBQQXGgeDqC/67v4rU PhQYMWeP/CZOKxFF5pAkVvNBCudcf9HQK8QnHQCY/r41c37cIgaehHxmqQdeopOG cPVDnVZaU5IyFLG9yxo5csAlMFpcaL+ujr1KvMlUNlWj1xlEf9jh3njfNrXg4nvD 2CJR6H/ROP8NOZ0o5bgASN84KLZkaaRYhrb3oQmDvsroUPHggXya8ycqfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAk7SvI3l0snDmp7vOu4ZWYnG1xLMB8GA1UdIwQY MBaAFAmPe6NLxlZ702FtV09yhd11Vtv9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMt ZTIxNjZhZDc0ZTNmLzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kOC8zOGM1YWMtYjdlNy00MGRkLTk4ZDMtZTIxNjZhZDc0ZTNm LzEvQ1k5N28wdkdWbnZUWVcxWFQzS0YzWFZXMl8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeOr/SZiO niloadib1Jve1KhBjn//9broX3Cmp457nZcap+9AvEIjDK6wfo7Q/jQeM75Cgele wipBeO+oU/5K/F4iqH2jupoSGfZIOF8Z7OPLBbafu6VIvdXib1RRmbqYeh9f8OyR gmmnN3rNFgYAXmw7QAdIbDTC74sXFFW02KQwV0QpxcwIHm09CN2XilEv8KwmzsO5 B9tEWXSegjrWXJb0lMLEeX/6U4GpunYEkBCQITac5DMPT8zB6UyyZG8iaq0UK5wG HjbJEVsKr506iEULd9fuWAHJ2qi3+HdUuGZr3NYOZPW/nxfRBTnwxuRwAOnzc9Xh n9NTrJGx1ebImw== -----END CERTIFICATE-----Generated at Sat Jun 13 19:58:09 2026 by rpki-client