$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: E6pLod+/7nDJWROYcPl7ZlmYkI6rijikTUlTXwKP/IQ= Subject key identifier: 48:36:8B:78:16:9D:64:A9:90:F5:21:27:E2:04:97:92:2E:32:76:CE Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 019EC2C9F86B73B9E69669D6DB146ABE5B29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 172A Signing time: Sat 13 Jun 2026 21:01:16 +0000 Manifest this update: Sat 13 Jun 2026 21:01:16 +0000 Manifest next update: Sun 14 Jun 2026 21:01:16 +0000 Files and hashes: 1: 6XbZ2xpI7l6Fwo5nUGJ8LcI12BM.roa (hash: oIH5kZRy4QQWIkNsi+TOmhTdqOjqPl4X4VEu5ZY7rrc=) 2: 6yY85OHD-46vFhP-wtPZWs3MeCY.roa (hash: hOno4SiXgMirUzFVpAXsEoPlI4QIn/ikV8WWQvXsoXg=) 3: 8McrGRfEqcovWnRSpklEmiBGADA.roa (hash: xszqUKxiKaCx1G5C+PDbNWuR86U3w6LgZy01FF25iiY=) 4: BooqKG4SsYSQxh6PGW72NBqbtuw.roa (hash: TU0xZxrNhYVeehRBPFf+LnBXvIDYoAVW0L6Hmfayq5M=) 5: Dib_4B7-59g2qlFon4U52XelorA.roa (hash: 7rKsJnSr5QX2uVe31jye987BgbcYNd7z/lfjZmUFdDY=) 6: J2-fb4bt2CtctBmzmfC8H8k0-Zo.roa (hash: PhWWvX6X2tLUSE0WxzAfwrSrZ7vyehY98guTk5gmtdI=) 7: Td85PzLGixLgYgdBT3GS17rfwTQ.roa (hash: ZtLYgrcf2o9oO80ckMCQ8oe+MvEY9qGa8/wSqJ2K4VY=) 8: bpUtIFcpj0wFmx0CClP1L0TgIfY.roa (hash: JpwXWXow0nu1gKjNId4RQPrmV9a8gFVj5DrvmpBJ7Ac=) 9: dkSZC1vcgEsyqm56yAJmonI1P1E.roa (hash: Wn8sFewfyDAMaX3VNG1l/GCgIijws7/FwmZlH3//5Vk=) 10: eH8mEFUxJaD15bIkdrb0eoEm43Q.roa (hash: iVNXmnAd/Aq9qGpFjFCXba0ETiSTvXsmOGBSWpVw4y4=) 11: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: DP0O/JUMpLpSfoZeDAFeLBsUirol3V7P4lXFmPD6evA=) 12: vJiRTEd6tTiZDm_JR7rLwIox0zw.roa (hash: IYF63rRulzFNBpbGnH/dDmLviCvKmUvwCJNoi515Gao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c2:c9:f8:6b:73:b9:e6:96:69:d6:db:14:6a:be:5b:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Jun 13 21:01:16 2026 GMT Not After : Jun 14 21:01:16 2026 GMT Subject: CN=48368b78169d64a990f52127e20497922e3276ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:cb:83:09:07:77:e5:f1:f2:96:b1:ba:ea:b4: dd:1d:52:94:cb:59:70:11:15:85:df:d6:15:1c:9a: 82:9b:d8:b8:86:3b:be:7d:f0:20:aa:dd:a3:a1:ef: fb:7c:c3:68:d8:60:02:76:c2:d1:ef:4f:de:74:b8: 70:74:2e:04:7a:8e:de:eb:0a:9c:48:8e:7c:92:5e: 92:ba:6d:ff:16:25:a2:f6:bc:62:c6:04:f2:6c:c1: 77:06:4d:4b:39:57:b5:a8:c4:a0:93:6f:35:01:59: 68:20:21:1c:8b:8c:33:4b:e2:da:e1:62:2e:16:7e: fe:b0:84:99:be:2a:04:7f:d8:1b:61:bf:7a:8c:3b: a8:36:eb:bf:58:8e:78:7a:f8:82:7b:09:05:e6:f2: 79:a2:4d:c4:e2:79:f1:bd:0f:e0:f4:d9:7a:af:f1: ce:0c:71:23:01:5b:1c:d3:36:6c:72:dd:dd:d3:f4: 91:26:ef:dd:8b:04:bf:9c:33:5e:5c:c0:7b:a2:e4: fb:e1:35:bb:9a:d4:54:a7:bd:a1:c4:d8:e8:05:56: 98:42:d8:95:17:46:40:fb:9c:18:c4:66:72:6a:cf: 2a:d4:43:eb:41:e8:e9:4b:28:f5:b2:51:2a:e5:26: d1:da:ab:74:72:f4:48:50:93:ec:63:af:61:60:2a: be:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:36:8B:78:16:9D:64:A9:90:F5:21:27:E2:04:97:92:2E:32:76:CE X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:2b:37:a3:a2:a2:58:bb:c2:2c:10:6a:12:70:55:ec:b2:cc: 06:9c:99:be:2b:41:41:ba:37:ba:c1:05:cf:04:fa:07:ec:73: 4c:ee:e9:52:7e:fc:63:4c:f7:1d:98:ab:88:c4:b3:e4:31:3d: 89:57:01:28:f4:16:1a:09:aa:08:e6:c6:47:1a:ef:2f:a1:4c: 50:ae:c8:d8:f2:d1:3d:8f:3a:4d:ee:db:62:a7:c2:56:a6:be: c2:32:df:ad:c0:87:ae:02:d7:1d:b6:ad:1e:fa:31:fc:4c:8a: 71:07:f7:d6:55:94:77:95:d4:9e:aa:74:c8:a0:27:f9:82:50: 03:aa:2e:2a:11:6c:7f:0b:e4:f2:64:03:a6:4f:3a:e8:d3:71: 74:b1:7e:2e:b7:c5:51:7c:37:30:3d:1f:6d:9b:8b:74:2a:49: da:08:6f:14:1e:c4:22:1c:21:0f:d4:a6:ae:5a:7e:39:b2:9c: af:77:74:4f:e7:7e:82:2d:40:61:2a:0f:90:8d:01:94:9a:b6: cf:92:d0:8d:f3:3f:2b:6d:ae:ec:4c:63:33:5e:c4:81:b8:c1: 3f:54:8a:15:54:5b:08:e7:d5:01:00:e8:ee:44:32:bc:55:7f: 66:0f:30:f7:4d:65:00:46:a1:65:31:a0:1f:3d:0e:77:f4:b9: 8f:57:c7:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7Cyfhrc7nmlmnW2xRqvlspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwNjEzMjEwMTE2WhcNMjYwNjE0MjEwMTE2WjAzMTEwLwYDVQQD Eyg0ODM2OGI3ODE2OWQ2NGE5OTBmNTIxMjdlMjA0OTc5MjJlMzI3NmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcuDCQd35fHylrG66rTdHVKUy1lw ERWF39YVHJqCm9i4hju+ffAgqt2joe/7fMNo2GACdsLR70/edLhwdC4Eeo7e6wqc SI58kl6Sum3/FiWi9rxixgTybMF3Bk1LOVe1qMSgk281AVloICEci4wzS+La4WIu Fn7+sISZvioEf9gbYb96jDuoNuu/WI54eviCewkF5vJ5ok3E4nnxvQ/g9Nl6r/HO DHEjAVsc0zZsct3d0/SRJu/diwS/nDNeXMB7ouT74TW7mtRUp72hxNjoBVaYQtiV F0ZA+5wYxGZyas8q1EPrQejpSyj1slEq5SbR2qt0cvRIUJPsY69hYCq++wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEg2i3gWnWSpkPUhJ+IEl5IuMnbOMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKis3o6Ki WLvCLBBqEnBV7LLMBpyZvitBQbo3usEFzwT6B+xzTO7pUn78Y0z3HZiriMSz5DE9 iVcBKPQWGgmqCObGRxrvL6FMUK7I2PLRPY86Te7bYqfCVqa+wjLfrcCHrgLXHbat Hvox/EyKcQf31lWUd5XUnqp0yKAn+YJQA6ouKhFsfwvk8mQDpk866NNxdLF+LrfF UXw3MD0fbZuLdCpJ2ghvFB7EIhwhD9Smrlp+ObKcr3d0T+d+gi1AYSoPkI0BlJq2 z5LQjfM/K22u7ExjM17EgbjBP1SKFVRbCOfVAQDo7kQyvFV/Zg8w901lAEahZTGg Hz0Od/S5j1fHZA== -----END CERTIFICATE-----Generated at Sat Jun 13 22:56:52 2026 by rpki-client