$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: CA+nXl9qcqkSbF5KBC80T5hlvEc37vXre620vBZZy+I= Subject key identifier: 5C:35:7A:4D:FB:FC:80:5D:F8:EE:9D:A7:BE:68:E8:D5:14:66:5D:C0 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019EC111A8AADDFC964D78C6F252850F0E21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0D10 Signing time: Sat 13 Jun 2026 13:00:20 +0000 Manifest this update: Sat 13 Jun 2026 13:00:20 +0000 Manifest next update: Sun 14 Jun 2026 13:00:20 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: It1jKKe/s0GQUc/IrI4CMRsDwemBcibSLLCdJHNXezw=) 9: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 10: aV15c49lSGl3dteQSHc3IvNZ2Yw.roa (hash: idSDFzUORIOI2C3DdmyZjUWIVKrr2rvoia+URiMKZUk=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 14: jdhRRSqw1KV-OBkZuUAJ-tCWDik.roa (hash: PZnlHT69L4VcU/X0HEwE+Wn3yCWoZ+g03Z4fHifOKPg=) 15: ta9QPHmvElN9LQbU3Ml0S8yt9cs.roa (hash: pWwk3bYPZv/2DLVIuX6tB76kOFRVtUjaqBNqlUqnu+g=) 16: wea1j7CCiOwKhbp9xRs9xEsak8o.roa (hash: hckz/qMoMAZzO9HmBfzADkSbkz16uEss9Ro4N3hyVDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c1:11:a8:aa:dd:fc:96:4d:78:c6:f2:52:85:0f:0e:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jun 13 13:00:20 2026 GMT Not After : Jun 14 13:00:20 2026 GMT Subject: CN=5c357a4dfbfc805df8ee9da7be68e8d514665dc0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:78:66:6d:2c:14:9d:10:da:3f:8f:3e:68:4b: 9a:3f:5f:0d:46:9d:39:a5:1c:ea:37:cf:59:1f:f8: a4:31:68:8c:8d:88:d6:d5:de:ec:38:08:d3:07:0a: 87:9a:77:6c:a1:3f:fd:38:1b:ac:09:e5:fc:45:83: 3b:e1:07:51:fb:75:fa:74:aa:38:5b:8e:01:26:17: d1:d4:a0:a1:ff:77:95:8a:01:af:41:83:7a:5d:cb: 07:04:ba:31:62:e1:76:a2:9d:6a:e3:63:de:74:33: 77:c0:0b:d3:34:73:33:2c:c2:bd:da:32:8d:bb:92: db:81:ef:75:ce:75:58:61:4f:ed:ea:36:98:20:bc: 7a:42:ef:cb:9e:c4:72:fd:8e:69:b1:46:4f:56:19: b2:19:89:22:95:6a:48:be:8e:7b:f7:77:49:dd:02: f4:59:ee:82:06:28:cf:f0:11:7b:ef:d8:be:59:9d: 45:92:01:82:64:14:f3:00:fb:db:32:4a:e0:5e:88: 8e:3a:c0:dd:e6:8f:04:50:45:d3:ac:a5:06:d0:4b: e8:80:3e:42:67:62:c3:89:b5:ad:9c:a2:b7:26:ac: 1b:d8:10:86:5c:d0:35:28:06:2e:04:1b:6c:6d:ff: 95:88:06:cb:b2:4d:e1:23:d0:8d:2f:c1:d1:65:bd: 13:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:35:7A:4D:FB:FC:80:5D:F8:EE:9D:A7:BE:68:E8:D5:14:66:5D:C0 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:10:95:fc:42:e5:2c:49:e7:1d:bb:bc:7b:fe:19:fc:eb:1a: 06:bd:c3:47:ae:9b:21:ee:7f:43:ec:6d:d7:69:21:e7:66:c4: 91:5d:74:f2:af:c4:3c:9b:70:dd:01:7c:03:be:25:df:14:6f: f2:f9:ed:2e:27:02:6d:7b:5e:4d:20:09:e8:78:82:78:c7:4c: ca:72:b6:dc:0c:ef:00:24:13:30:95:53:48:c7:73:8f:fc:6e: ab:39:39:77:11:c8:99:40:32:ef:4c:e4:a4:6d:5a:b4:3a:85: 41:9c:21:e0:ba:1b:36:86:a4:04:c2:2e:67:05:97:30:d6:c5: ab:75:29:c4:b7:d7:ad:d0:43:1d:5c:21:c9:25:4d:51:e0:f1: 08:99:98:5e:b4:c6:43:74:54:a8:1a:a2:89:1f:1c:a5:38:49: 1e:f7:d6:68:8e:2b:cd:2a:5b:87:a1:37:33:27:9a:c9:22:65: 54:83:5e:14:b6:be:60:1f:f7:58:f1:95:38:68:a9:c8:ce:cf: 5a:9a:b4:49:fc:2f:7e:06:04:76:3f:df:87:80:69:8c:31:9d: 6b:94:9d:2f:b0:6b:17:ea:d7:1a:3c:70:94:47:99:61:48:30: c4:a4:31:41:28:cc:c6:f7:b5:7f:40:d7:80:18:a4:5d:8c:a5: fe:e3:5a:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7BEaiq3fyWTXjG8lKFDw4hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwNjEzMTMwMDIwWhcNMjYwNjE0MTMwMDIwWjAzMTEwLwYDVQQD Eyg1YzM1N2E0ZGZiZmM4MDVkZjhlZTlkYTdiZTY4ZThkNTE0NjY1ZGMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3hmbSwUnRDaP48+aEuaP18NRp05 pRzqN89ZH/ikMWiMjYjW1d7sOAjTBwqHmndsoT/9OBusCeX8RYM74QdR+3X6dKo4 W44BJhfR1KCh/3eVigGvQYN6XcsHBLoxYuF2op1q42PedDN3wAvTNHMzLMK92jKN u5Lbge91znVYYU/t6jaYILx6Qu/LnsRy/Y5psUZPVhmyGYkilWpIvo5793dJ3QL0 We6CBijP8BF779i+WZ1FkgGCZBTzAPvbMkrgXoiOOsDd5o8EUEXTrKUG0EvogD5C Z2LDibWtnKK3Jqwb2BCGXNA1KAYuBBtsbf+ViAbLsk3hI9CNL8HRZb0T6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFw1ek37/IBd+O6dp75o6NUUZl3AMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANhCV/ELl LEnnHbu8e/4Z/OsaBr3DR66bIe5/Q+xt12kh52bEkV108q/EPJtw3QF8A74l3xRv 8vntLicCbXteTSAJ6HiCeMdMynK23AzvACQTMJVTSMdzj/xuqzk5dxHImUAy70zk pG1atDqFQZwh4LobNoakBMIuZwWXMNbFq3UpxLfXrdBDHVwhySVNUeDxCJmYXrTG Q3RUqBqiiR8cpThJHvfWaI4rzSpbh6E3MyeaySJlVINeFLa+YB/3WPGVOGipyM7P Wpq0SfwvfgYEdj/fh4BpjDGda5SdL7BrF+rXGjxwlEeZYUgwxKQxQSjMxve1f0DX gBikXYyl/uNaVw== -----END CERTIFICATE-----Generated at Sat Jun 13 16:44:25 2026 by rpki-client