$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft File: bf7PoOZpJZXPvqUmYHbo5T79lGE.mft (raw, json) Hash identifier: PZixCBuombA8O3D1YOtIsxeu7rwsW7kSC575a16osTg= Subject key identifier: 91:CD:FD:DE:1A:EE:2D:83:CC:85:A9:23:6A:3C:E6:E8:04:F4:83:1C Authority key identifier: 6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 Certificate issuer: /CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Certificate serial: 019EC1B67D291A81B4EA0F57658EC9D52748 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft Manifest number: 11F8 Signing time: Sat 13 Jun 2026 16:00:22 +0000 Manifest this update: Sat 13 Jun 2026 16:00:22 +0000 Manifest next update: Sun 14 Jun 2026 16:00:22 +0000 Files and hashes: 1: 01O1H3vr-Xg2_Kt_tRxOoSePvYw.roa (hash: DTK4FxlalSIuFNse2BYUOpmcSGMhnqSmE/87aEUEtrg=) 2: 1-EqD6vgoA3IVAsjiLQYVEyyKW0U.roa (hash: Of+IRZAD6r3ftFWFR7yxzKwNLfYZjre35Dmg5UJV5ds=) 3: 3oqgYKPHjP4c1L0WVBDxXqGTNKs.roa (hash: PdT5GAbt00ZEVCyICmg6bHJkYgLa1nkpbJxhAhA4vnk=) 4: HB0FIxc95bfbXI-7nw5kY1VNoMs.roa (hash: 236zwT5kbl7DOv0ChJB+B8PFAcfi388Ks1QJGiJxQlM=) 5: RSEZnKImClpjfvRbvyGXO7YCT30.roa (hash: nbl9nzX5UblCyKX8B1eZxPxYHLEkClkhmOAKVpl4rkY=) 6: TCGXmp-ZcJuoO-eDyOqbUVRKJXI.roa (hash: zb8J86h3WDmjGOxtQQnoZ3rsuxycMmwLx3S1o5snyrE=) 7: XR-EYzoeTJi_gNpw5v85R8iIDCI.roa (hash: hr4Ank/yR0Q5kl1E1WgAYLVhDPaCeCKIZMYB9E/hjDs=) 8: bf7PoOZpJZXPvqUmYHbo5T79lGE.crl (hash: bbK4+irj5XSxKZ2dV1wSvd8hnZZXBkEfkwQ7a7s3OFE=) 9: fv8hSy-qTmyzkAkKRiqf7Cbw4Q8.roa (hash: JVsfqbqPGUHeKikh7Yf/w82XL596L03oNIzuxFbcXEQ=) 10: ngXBDJqFRHqY02oCl22jHBT8QTU.roa (hash: J4yIx0/GQQvuBdXMZZvAxL9Vevspg59Zpn25unHuRA8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 08:43:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c1:b6:7d:29:1a:81:b4:ea:0f:57:65:8e:c9:d5:27:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6dfecfa0e6692595cfbea5266076e8e53efd9461 Validity Not Before: Jun 13 16:00:22 2026 GMT Not After : Jun 14 16:00:22 2026 GMT Subject: CN=91cdfdde1aee2d83cc85a9236a3ce6e804f4831c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:db:27:e1:ee:40:f7:af:d6:06:0a:b0:ff:26: 68:56:12:e5:7f:a2:7d:4c:71:df:54:12:2f:de:98: f5:62:aa:f6:28:32:dc:35:59:6b:3b:7a:52:c4:13: a0:0e:d6:86:e2:4a:42:46:e7:14:8f:78:57:aa:a1: bc:3f:da:f0:18:cf:d3:e6:bb:48:3a:ed:0f:f7:57: 2e:d2:2b:32:b0:b5:f1:ea:c6:7e:d3:6f:fd:08:a0: d4:2a:d1:b0:36:b9:fd:c2:cc:27:aa:8c:13:28:0a: 0c:02:a5:eb:13:a1:48:b2:53:74:82:56:f5:44:69: dc:cf:f1:2b:83:24:9a:16:fe:fa:4b:c2:dc:58:94: 76:38:31:6a:65:ea:74:3c:36:de:3c:b6:a7:85:67: a3:f4:6a:b6:3b:f8:20:ee:66:b2:f7:8f:fb:fa:73: be:80:5b:5e:16:07:13:6b:c4:a6:71:be:c6:9c:66: 47:d1:48:58:f1:0f:ae:cf:9b:6a:e4:fe:9d:ec:1a: 8d:fb:fe:45:23:53:8f:9a:07:52:a4:8b:5d:e3:19: 1c:6d:65:57:86:71:19:cc:e4:ed:a7:83:1b:32:b0: 73:e8:e9:ff:3d:3f:44:f1:66:14:62:e5:5a:d0:0d: ad:84:9a:a9:9e:52:ee:01:25:d0:7b:ef:bc:bb:f9: f3:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:CD:FD:DE:1A:EE:2D:83:CC:85:A9:23:6A:3C:E6:E8:04:F4:83:1C X509v3 Authority Key Identifier: keyid:6D:FE:CF:A0:E6:69:25:95:CF:BE:A5:26:60:76:E8:E5:3E:FD:94:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf7PoOZpJZXPvqUmYHbo5T79lGE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/fcfec7-d6c3-4b40-ba2c-f988d48e51e8/1/bf7PoOZpJZXPvqUmYHbo5T79lGE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:5d:7f:9b:78:97:92:25:81:98:7d:39:28:17:d1:88:7b:5b: ce:20:6f:43:37:65:8a:9f:38:da:85:f3:18:69:8a:b7:08:66: 62:2f:bc:1c:e1:01:6c:a0:2d:06:af:e8:62:1b:ba:68:59:89: 91:1a:fa:9e:fd:9a:08:b9:23:f9:28:c8:04:98:f6:e0:00:fb: eb:6c:28:97:6e:2b:11:c9:b6:e4:57:cc:bc:02:7a:28:61:fd: 76:85:20:63:86:ad:40:8f:fe:09:cd:c7:08:84:a2:cf:dc:e6: 9e:42:56:37:66:84:54:34:38:01:f0:f8:5f:80:22:87:ee:46: 12:39:fb:af:d9:15:f3:01:50:e4:0f:02:52:23:c3:ed:42:d4: a1:b3:6a:89:17:0a:a4:54:a4:dc:d8:f7:83:a8:4f:c4:ee:82: 8b:80:de:a8:b1:e3:13:3c:f5:1a:e6:c9:ba:57:ec:08:34:b9: b9:7a:a4:01:2b:f0:2b:30:c9:44:64:92:33:61:40:4b:b6:16: a4:52:4c:6e:d1:0f:6f:c8:73:80:a6:c3:82:c1:be:70:e2:db: 6a:3a:39:3e:08:8f:23:1d:5f:92:e3:a3:98:9c:36:10:cb:3b: a9:e4:8c:e7:63:a7:2d:38:c2:ed:f8:08:0f:f6:14:d0:97:a4: b9:5b:2c:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7Btn0pGoG06g9XZY7J1SdIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZmVjZmEwZTY2OTI1OTVjZmJlYTUyNjYwNzZlOGU1M2Vm ZDk0NjEwHhcNMjYwNjEzMTYwMDIyWhcNMjYwNjE0MTYwMDIyWjAzMTEwLwYDVQQD Eyg5MWNkZmRkZTFhZWUyZDgzY2M4NWE5MjM2YTNjZTZlODA0ZjQ4MzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Nsn4e5A96/WBgqw/yZoVhLlf6J9 THHfVBIv3pj1Yqr2KDLcNVlrO3pSxBOgDtaG4kpCRucUj3hXqqG8P9rwGM/T5rtI Ou0P91cu0isysLXx6sZ+02/9CKDUKtGwNrn9wswnqowTKAoMAqXrE6FIslN0glb1 RGncz/ErgySaFv76S8LcWJR2ODFqZep0PDbePLanhWej9Gq2O/gg7may94/7+nO+ gFteFgcTa8Smcb7GnGZH0UhY8Q+uz5tq5P6d7BqN+/5FI1OPmgdSpItd4xkcbWVX hnEZzOTtp4MbMrBz6On/PT9E8WYUYuVa0A2thJqpnlLuASXQe++8u/nzewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJHN/d4a7i2DzIWpI2o85ugE9IMcMB8GA1UdIwQY MBaAFG3+z6DmaSWVz76lJmB26OU+/ZRhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMt Zjk4OGQ0OGU1MWU4LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9mY2ZlYzctZDZjMy00YjQwLWJhMmMtZjk4OGQ0OGU1MWU4 LzEvYmY3UG9PWnBKWlhQdnFVbVlIYm81VDc5bEdFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvV1/m3iX kiWBmH05KBfRiHtbziBvQzdlip842oXzGGmKtwhmYi+8HOEBbKAtBq/oYhu6aFmJ kRr6nv2aCLkj+SjIBJj24AD762wol24rEcm25FfMvAJ6KGH9doUgY4atQI/+Cc3H CISiz9zmnkJWN2aEVDQ4AfD4X4Aih+5GEjn7r9kV8wFQ5A8CUiPD7ULUobNqiRcK pFSk3Nj3g6hPxO6Ci4DeqLHjEzz1GubJulfsCDS5uXqkASvwKzDJRGSSM2FAS7YW pFJMbtEPb8hzgKbDgsG+cOLbajo5PgiPIx1fkuOjmJw2EMs7qeSM52OnLTjC7fgI D/YU0JekuVss7A== -----END CERTIFICATE-----Generated at Sat Jun 13 18:42:06 2026 by rpki-client