$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json) Hash identifier: OitzN2+6vOewQ/ky2bUcwz82An/O1p3izxwdwu29P9Y= Subject key identifier: E0:2A:59:27:90:CE:50:0F:D6:6A:91:44:D7:EE:8B:BA:0E:EE:0E:00 Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 019EC25BB8E1E6D3EA6273CB09E63F350245 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft Manifest number: 1963 Signing time: Sat 13 Jun 2026 19:00:51 +0000 Manifest this update: Sat 13 Jun 2026 19:00:51 +0000 Manifest next update: Sun 14 Jun 2026 19:00:51 +0000 Files and hashes: 1: 2uP2P6fTf1qo4PWRRqgeE7TTacE.roa (hash: 9eSLYCb2FWzNsHTSZC1SEnCMNPegGVcyv6j21qK1mw8=) 2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=) 3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=) 4: AogunF2vY6jwFQqloSaO1hbzpk8.roa (hash: it2LBzN2gPXG+ZsVF9U3YkMRcRGbDQsz+oO4JZZUzeg=) 5: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=) 6: Qi3PbQnrdw7q8NtmLcDOyzuEuok.roa (hash: Ene2M6hdbbKNY0YIKXvUxR9PygRHkyqGW28j+nRBH9E=) 7: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: Y4xt/+jr2d8l/Pl887x5yukf+oOlfcg4ot1OMTvq/k4=) 8: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=) 9: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=) 10: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 14 Jun 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9e:c2:5b:b8:e1:e6:d3:ea:62:73:cb:09:e6:3f:35:02:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Jun 13 19:00:51 2026 GMT Not After : Jun 14 19:00:51 2026 GMT Subject: CN=e02a592790ce500fd66a9144d7ee8bba0eee0e00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:0f:ae:d3:db:19:3b:15:41:49:78:62:b6:4c: a6:f9:a6:50:4d:a6:bd:a6:47:94:e0:8a:bb:7a:92: 00:f2:1f:fc:5b:84:c6:91:5e:db:a1:0c:7d:09:ce: cf:99:a8:c7:c2:50:40:f0:d8:4c:49:fb:5d:6e:59: 71:ad:7f:f6:b5:3f:f1:5b:11:90:c9:1e:20:af:be: 5f:df:27:55:12:4b:8f:4d:55:88:16:94:88:72:06: a9:67:43:76:a2:aa:c6:78:0e:5a:49:6f:07:68:c1: 85:36:f7:da:08:f8:b0:f0:a0:60:30:22:84:3e:69: e9:a7:5f:88:51:21:8c:b6:37:68:14:b0:94:9b:8b: 79:3a:cc:bb:ab:70:98:d5:6b:c7:55:14:f9:65:e4: c6:bd:57:3b:3b:6f:1c:66:13:98:77:0e:48:24:f8: 53:a6:b9:19:00:ec:db:fe:9e:cd:76:eb:91:89:30: c3:1b:8d:bc:31:7b:54:fc:00:d2:fb:3a:4c:3c:3c: be:b8:10:2c:11:92:1f:a9:a6:2b:4c:ba:64:d7:c7: 30:9c:87:1f:d7:27:84:17:8a:3c:63:0c:5e:42:51: 0c:d4:f2:23:99:b8:f4:9e:c0:7e:c5:4c:87:84:cd: a5:0e:ed:26:af:74:ed:be:ad:b3:f2:29:8f:d5:a5: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:2A:59:27:90:CE:50:0F:D6:6A:91:44:D7:EE:8B:BA:0E:EE:0E:00 X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a1:30:72:33:b5:e8:ce:02:a1:22:e4:e6:60:5c:b2:99:af: 55:f5:75:dd:eb:6f:be:8b:23:21:66:72:49:89:34:d5:60:37: 3e:88:22:5e:63:af:cb:12:a6:d0:3b:d3:60:7e:6a:36:4b:d3: 5c:b0:59:d5:06:d2:29:78:64:d1:9b:02:c2:ce:a6:4c:db:de: a5:30:12:45:f5:18:d8:3e:34:b5:9e:4c:60:c1:f2:f2:ad:e5: 03:4b:b9:50:0f:39:83:44:49:ac:80:58:33:03:c4:4d:e5:57: 5f:4f:9c:ad:8a:c8:43:3f:00:62:9a:19:ce:fd:84:92:71:f0: 01:21:26:42:bc:65:44:66:29:2b:1e:c8:59:7d:08:ff:40:cd: d0:8b:6c:34:ca:dc:d1:46:e1:9c:92:c9:2f:56:49:28:9d:22: 35:70:34:ba:e4:b9:32:8f:05:b2:87:34:05:00:09:50:85:e4: fd:89:70:20:37:84:9c:ee:3c:03:5c:1a:15:3c:78:6a:90:d9: 57:ab:32:84:96:61:20:66:e4:d0:eb:02:cb:9f:c3:6a:c4:bd: 63:e9:3d:ba:0b:04:e2:e3:e2:f3:d3:ec:56:6c:5e:bc:76:95: ea:c2:82:95:81:11:d2:8c:2e:91:67:d3:31:d0:65:2b:a1:e0: f7:f3:43:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ7CW7jh5tPqYnPLCeY/NQJFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjYwNjEzMTkwMDUxWhcNMjYwNjE0MTkwMDUxWjAzMTEwLwYDVQQD EyhlMDJhNTkyNzkwY2U1MDBmZDY2YTkxNDRkN2VlOGJiYTBlZWUwZTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoA+u09sZOxVBSXhitkym+aZQTaa9 pkeU4Iq7epIA8h/8W4TGkV7boQx9Cc7PmajHwlBA8NhMSftdbllxrX/2tT/xWxGQ yR4gr75f3ydVEkuPTVWIFpSIcgapZ0N2oqrGeA5aSW8HaMGFNvfaCPiw8KBgMCKE Pmnpp1+IUSGMtjdoFLCUm4t5Osy7q3CY1WvHVRT5ZeTGvVc7O28cZhOYdw5IJPhT prkZAOzb/p7NduuRiTDDG428MXtU/ADS+zpMPDy+uBAsEZIfqaYrTLpk18cwnIcf 1yeEF4o8YwxeQlEM1PIjmbj0nsB+xUyHhM2lDu0mr3Ttvq2z8imP1aVzeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOAqWSeQzlAP1mqRRNfui7oO7g4AMB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6EwcjO1 6M4CoSLk5mBcspmvVfV13etvvosjIWZySYk01WA3PogiXmOvyxKm0DvTYH5qNkvT XLBZ1QbSKXhk0ZsCws6mTNvepTASRfUY2D40tZ5MYMHy8q3lA0u5UA85g0RJrIBY MwPETeVXX0+crYrIQz8AYpoZzv2EknHwASEmQrxlRGYpKx7IWX0I/0DN0ItsNMrc 0UbhnJLJL1ZJKJ0iNXA0uuS5Mo8Fsoc0BQAJUIXk/YlwIDeEnO48A1waFTx4apDZ V6syhJZhIGbk0OsCy5/DasS9Y+k9ugsE4uPi89PsVmxevHaV6sKClYER0owukWfT MdBlK6Hg9/NDJw== -----END CERTIFICATE-----Generated at Sun Jun 14 00:05:05 2026 by rpki-client