$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: CPX6VtINYiszH5gJUVgmEuwquxaoS560F0URu33cGXg= Subject key identifier: F2:16:A5:E0:B9:C7:ED:CD:CD:55:14:5C:AB:8D:23:C9:61:41:1E:7D Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 019EC2250080D00EFB04E4B7FF21FCFF3EE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 1995 Signing time: Sat 13 Jun 2026 18:01:05 +0000 Manifest this update: Sat 13 Jun 2026 18:01:05 +0000 Manifest next update: Sun 14 Jun 2026 18:01:05 +0000 Files and hashes: 1: 1nFCKi1R1uWAqKJnbMUD9y_3pno.roa (hash: 5C4IbhqcH3E0EkSlqxD//f0/kRfbI7bdALbkI7++DS0=) 2: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (hash: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU=) 3: 54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (hash: 27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=) 4: BtE_Prg_QTilEMkESiUbs4oIDmA.roa (hash: SFNeqY+UDzZLqbIx3LsR2g+sDJ1BvW0wdb9XdlLKZ0k=) 5: C-Qps28bGJ9viEITk81kKk0b0dA.roa (hash: YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=) 6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: XzkZaj6cgFZpwUcYi+OMw4FTEkkhPxgaACyBpoTblug=) 7: CpwjRHd-dlM6HLWtJRLo65vz3sE.roa (hash: ipcBkj7y8N+DKJBxCvsI7Zk0obHeYg4amjAZYyQnzfU=) 8: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (hash: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y=) 9: N92xQsEO51IYJTropYtUnPwrxYw.roa (hash: OD9x3CEUatyOJn0kuCTo48nFtTt2hN6K3SmAMkKjRTU=) 10: SH8o9XaYeY75kSYDFek1xvvvpes.roa (hash: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q=) 11: aUr1ysL81CfqAdniFre4gi94E8A.roa (hash: eONrhGiDVZtdhnOMqJ+egC5boW8zK4VYWv9jkDyNOI4=) 12: eu0CoO4MQ8ynKFtapNpQqOzhd5U.roa (hash: CE6Pwn13O7Jm2klRaAsz6obokQcz3Q5vJ5OCjk+3oLA=) 13: jG2gqQaKxjCZUGN5RVY6YoSjnLY.roa (hash: hmBFQU8ZDCZ0uTqJBMHGXXuDV4olTPedHjkCYLm+KBA=) 14: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (hash: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c2:25:00:80:d0:0e:fb:04:e4:b7:ff:21:fc:ff:3e:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Jun 13 18:01:05 2026 GMT Not After : Jun 14 18:01:05 2026 GMT Subject: CN=f216a5e0b9c7edcdcd55145cab8d23c961411e7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:88:6d:6d:e2:7f:93:00:7c:94:b4:a2:ce:bc: 4d:e7:66:a6:21:bf:95:be:f7:28:71:50:57:e3:78: 71:be:9b:6d:be:ce:cd:82:fc:eb:5f:84:03:db:39: 2d:ed:fb:45:39:59:7c:69:55:04:d1:a2:ae:3e:7f: f8:63:29:19:53:6d:5a:61:39:75:5d:d8:e5:d0:e6: af:6a:75:ee:b5:9e:8a:04:45:66:93:a1:88:6c:5d: 5d:27:b7:11:23:c1:0b:b3:f9:07:46:c7:dd:89:70: dd:5e:57:83:68:28:ff:94:4e:59:7f:34:49:77:e8: 13:76:7d:ea:78:87:92:28:0d:dc:5f:ec:d6:71:e6: 92:e3:f7:d0:64:04:08:9a:55:63:df:7c:9f:3a:a9: 9a:44:5d:ae:1b:17:bd:d7:41:98:e2:60:54:97:7f: 34:04:cd:63:80:0b:cd:80:13:e7:07:7e:e3:36:0c: 09:fa:02:5a:ca:93:aa:f0:8c:10:85:50:eb:a7:71: 74:db:2a:f5:15:2d:ef:fb:a5:cf:51:5b:37:95:7a: 14:2a:5d:21:11:99:e6:25:ab:61:7f:c9:74:a2:40: 36:06:1e:fd:85:aa:af:0d:83:51:70:a5:5c:39:70: 9e:85:0f:00:a3:40:7d:a8:60:22:3d:8f:b7:1d:d1: 1a:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:16:A5:E0:B9:C7:ED:CD:CD:55:14:5C:AB:8D:23:C9:61:41:1E:7D X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a9:19:5d:55:68:4e:57:8d:92:25:09:bb:a4:11:d1:d9:a9: ca:6d:9c:31:6c:18:ad:9f:40:d5:f9:ca:96:77:98:b3:aa:65: 02:11:a6:b2:9d:6d:c7:64:a7:8e:61:64:8f:21:ee:d6:1e:f1: b7:3c:32:30:09:86:70:e0:cc:1f:85:a5:31:9b:0b:c8:fc:db: 81:73:fb:e2:2d:3e:8b:cd:8a:8c:f1:f8:4d:03:d7:cd:60:be: 9d:38:52:79:f1:aa:c5:5c:84:56:35:d2:30:32:83:6a:bd:95: ac:29:70:78:6c:87:80:f9:37:e3:4e:46:cc:fd:c4:31:10:47: 1c:53:60:f6:27:e5:b0:87:ab:45:14:7d:24:4b:96:93:10:34: bf:c6:62:14:da:3d:ec:12:3f:ff:f7:64:f9:83:2c:1b:4e:3f: 35:e0:69:29:37:54:f1:00:9f:02:31:ed:aa:21:e2:1c:82:54: d6:00:d0:f4:c9:be:0d:bc:a0:4c:6f:59:86:19:ba:02:d8:78: 4c:d9:74:3d:2c:dd:93:d5:1a:62:c4:27:ab:0a:c2:e4:a0:d2: 3c:00:a2:14:17:89:84:01:e2:df:ab:40:cb:a9:7d:4f:7e:8e: 17:64:d7:5f:97:c6:53:69:b0:a5:6a:7d:2f:2f:d6:f8:e6:32: 64:ba:69:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7CJQCA0A77BOS3/yH8/z7gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYwNjEzMTgwMTA1WhcNMjYwNjE0MTgwMTA1WjAzMTEwLwYDVQQD EyhmMjE2YTVlMGI5YzdlZGNkY2Q1NTE0NWNhYjhkMjNjOTYxNDExZTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4htbeJ/kwB8lLSizrxN52amIb+V vvcocVBX43hxvpttvs7NgvzrX4QD2zkt7ftFOVl8aVUE0aKuPn/4YykZU21aYTl1 Xdjl0OavanXutZ6KBEVmk6GIbF1dJ7cRI8ELs/kHRsfdiXDdXleDaCj/lE5ZfzRJ d+gTdn3qeIeSKA3cX+zWceaS4/fQZAQImlVj33yfOqmaRF2uGxe910GY4mBUl380 BM1jgAvNgBPnB37jNgwJ+gJaypOq8IwQhVDrp3F02yr1FS3v+6XPUVs3lXoUKl0h EZnmJathf8l0okA2Bh79haqvDYNRcKVcOXCehQ8Ao0B9qGAiPY+3HdEaRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPIWpeC5x+3NzVUUXKuNI8lhQR59MB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKkZXVVo TleNkiUJu6QR0dmpym2cMWwYrZ9A1fnKlneYs6plAhGmsp1tx2SnjmFkjyHu1h7x tzwyMAmGcODMH4WlMZsLyPzbgXP74i0+i82KjPH4TQPXzWC+nThSefGqxVyEVjXS MDKDar2VrClweGyHgPk3405GzP3EMRBHHFNg9iflsIerRRR9JEuWkxA0v8ZiFNo9 7BI///dk+YMsG04/NeBpKTdU8QCfAjHtqiHiHIJU1gDQ9Mm+DbygTG9Zhhm6Ath4 TNl0PSzdk9UaYsQnqwrC5KDSPACiFBeJhAHi36tAy6l9T36OF2TXX5fGU2mwpWp9 Ly/W+OYyZLppkA== -----END CERTIFICATE-----Generated at Sat Jun 13 22:48:20 2026 by rpki-client