$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json) Hash identifier: nVSNPoPGPBX0kwieB6N01Ou1vVmsV7xoGka/ObI9gSc= Subject key identifier: 1D:06:74:D1:6C:3B:DE:67:07:9D:F7:FF:EF:86:F1:A3:E0:E6:DA:C9 Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 019FA9E2A15ED02CC9FE32D13FA38E245A31 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft Manifest number: 13CC Signing time: Tue 28 Jul 2026 18:00:29 +0000 Manifest this update: Tue 28 Jul 2026 18:00:29 +0000 Manifest next update: Wed 29 Jul 2026 18:00:29 +0000 Files and hashes: 1: 1GxQmUTb97UmZv7pfW11O7jdoKQ.roa (hash: FmC4+AN9e0K9c8X4YT0jW6rSPs+y4UOdKxP9qZCnFuc=) 2: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=) 3: BxKZgBdEOXm741z70o-b-8aaZ1U.roa (hash: 9rDM/H8P5h5tG13SRwkUwohyZWN/9GQOe+B0Xl1+fUU=) 4: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=) 5: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=) 6: ZpqqEj-OtTqHMeec7OuBtT0rl_E.roa (hash: 4anR5lz+iPBfqZgtXZg/nhMp2EG3l7fsaSGpS3G04V8=) 7: aMzR14uquK9xRLMlgVieiQnpsL8.roa (hash: LnMZCy9Vc3AkrK23NCsUcwd16nNnZncQK2bQfZFfX7Y=) 8: dYbDdMuBsyQvL7kdUhtnVt9Qq4Q.roa (hash: Uc1pM7+13084KA3rRz3NbQmC1rtfcHSF9LSKdQS99oU=) 9: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: FjWQ2oaDMViQSya+ymP8jtNATzB7CnRBleLBifDBkkE=) 10: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=) 11: gbf_kkJkJHVfWvhpOZp44zXkSi4.roa (hash: L7TAKQTj5DgzgInyo2Z2o+5W5kIP6WxJWd/ULoNrui4=) 12: izn0gTPOQgQruf6Plz077lbyDvQ.roa (hash: SL5lQV0cHnhG5e9HsORKQLS+k85jrcJmLKm8DFk0UWk=) 13: ltuqnV7zy2DnQsucRbj8arC5CQM.roa (hash: LNO3fd1HW9TV8pQ7/uQgUjVDHYwtyIfoP4cwyPVsgsw=) 14: mBXHe8xwrq_f8wh9M3ZXaWdq8f8.roa (hash: dI8S3nju8gYg5btIsxEkeYY9kQycBzwf9pyizszOFek=) 15: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=) 16: q--OuP_rfB_qdy_7f_RIgPMsU7I.roa (hash: J5d2AOEi0HNsiyJ+nB39gHaVUpXKMLDnfhR+GSmUgHE=) 17: r2wp15RalYZ-BpL4xsNnngK0594.roa (hash: NNjjTsbzbTB3BJf0ScAIqlbHnQQtN/B+x9X2kssrtLQ=) 18: tiWoclLyoubi_eH2eBTEmg_nRPQ.roa (hash: v7vNaiqbe+aP8/SaLVbx8mliFyA9s414yzNmBa2a+SI=) 19: uuy6ECeKU5zPxhagn8FIr283yKQ.roa (hash: OOKXwwUyMmEuY99QE9mTnSKY0ij2Tkkt4XqvRj4K6hc=) 20: vLafL0GwWDvLzC-WXo-ujU2mMjU.roa (hash: WZJnUmwzRASxvhXsgI51USxfQop8j6bDAzzdqadBvsM=) 21: xfzSJZkuJaEFMZbSPNrdm-vtVgk.roa (hash: 03aH6k3XO2w/avcqYf5rOTHSew6NN0Bs9faZ8hBNn0U=) 22: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e2:a1:5e:d0:2c:c9:fe:32:d1:3f:a3:8e:24:5a:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Jul 28 18:00:29 2026 GMT Not After : Jul 29 18:00:29 2026 GMT Subject: CN=1d0674d16c3bde67079df7ffef86f1a3e0e6dac9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fb:e2:8a:ce:c3:b0:26:b2:a3:47:f1:2f:c1: 68:1f:d2:0a:bf:c3:1b:ce:19:4c:bd:62:86:9f:20: 90:d7:c4:c3:c5:74:6f:27:c3:75:09:86:a3:38:d9: cb:2f:e0:80:a4:67:c1:4f:3e:28:53:00:70:d2:87: 15:19:c4:c5:67:b9:aa:78:da:11:75:f3:df:e0:09: 8f:76:e8:03:82:55:cb:e4:61:29:32:b9:2a:db:61: 2d:ce:88:71:4a:e9:4a:29:5e:22:49:db:4f:ea:1e: 5a:a7:90:c4:4c:e6:0a:76:92:22:18:e9:f0:89:91: 85:d2:88:e8:38:81:64:e7:0f:9e:f6:bc:e1:78:b6: fc:c7:f8:49:41:37:4c:8b:e7:fc:72:bd:0a:e3:a0: 41:01:49:76:35:e6:d0:31:90:bd:da:8c:aa:21:88: de:b3:98:38:ce:b9:12:48:33:17:20:44:1c:a2:14: 41:a3:aa:55:02:60:60:0e:65:d4:f6:cd:21:b7:1b: 54:3e:6d:ce:ec:47:02:57:c1:ec:57:76:86:0e:a6: 38:94:ba:a1:e2:c9:07:68:53:18:d3:5f:00:35:e4: f0:7a:5a:78:3f:b5:15:86:e4:59:6b:4d:51:bd:c3: 58:a6:d0:d0:01:d5:f1:ca:b3:4e:67:a2:bf:cd:ca: 48:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:06:74:D1:6C:3B:DE:67:07:9D:F7:FF:EF:86:F1:A3:E0:E6:DA:C9 X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:1a:31:8c:5e:13:dd:c8:d5:dd:a2:45:a3:9b:10:fc:d7:26: c2:5c:a2:da:56:72:cd:0c:c2:72:01:09:e3:e1:b6:c6:52:46: 04:b9:b2:93:ed:fd:31:95:e3:86:2d:9b:9d:49:e0:f8:bf:08: 4b:f5:38:2c:e7:aa:ad:51:b3:eb:bb:75:b0:bb:c5:f2:17:2f: c5:fe:4d:5a:f2:b3:24:d8:28:30:1e:50:a0:e3:73:53:58:10: 80:db:aa:ef:7b:4b:fb:bb:15:db:ce:e9:33:1c:bf:23:c4:1f: 53:63:7f:95:71:d7:84:ef:76:7f:cb:1e:1a:a2:52:ae:ff:ce: e9:84:f0:48:bf:91:a7:2b:79:bc:19:2b:70:70:67:74:77:18: 26:ac:9a:b8:f0:b1:96:cd:04:f9:f1:d5:6b:85:8e:93:d5:bd: b1:1c:47:11:2f:43:86:2b:ae:92:3a:1e:52:64:75:bb:f2:29: 86:8e:48:92:93:d8:50:95:f7:09:de:f1:53:c4:c7:d8:2e:b8: 8f:ff:59:89:cd:be:48:dd:02:9a:f5:b6:b3:e8:0d:b0:c7:78: 8e:6b:97:ef:53:de:fa:56:03:ce:70:04:7a:51:43:38:22:d2: 05:81:b3:a6:39:ec:27:cd:0f:35:0a:42:a3:7f:5b:20:2d:06: ba:c2:ca:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4qFe0CzJ/jLRP6OOJFoxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjYwNzI4MTgwMDI5WhcNMjYwNzI5MTgwMDI5WjAzMTEwLwYDVQQD EygxZDA2NzRkMTZjM2JkZTY3MDc5ZGY3ZmZlZjg2ZjFhM2UwZTZkYWM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfviis7DsCayo0fxL8FoH9IKv8Mb zhlMvWKGnyCQ18TDxXRvJ8N1CYajONnLL+CApGfBTz4oUwBw0ocVGcTFZ7mqeNoR dfPf4AmPdugDglXL5GEpMrkq22EtzohxSulKKV4iSdtP6h5ap5DETOYKdpIiGOnw iZGF0ojoOIFk5w+e9rzheLb8x/hJQTdMi+f8cr0K46BBAUl2NebQMZC92oyqIYje s5g4zrkSSDMXIEQcohRBo6pVAmBgDmXU9s0htxtUPm3O7EcCV8HsV3aGDqY4lLqh 4skHaFMY018ANeTwelp4P7UVhuRZa01RvcNYptDQAdXxyrNOZ6K/zcpIzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB0GdNFsO95nB533/++G8aPg5trJMB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiBoxjF4T 3cjV3aJFo5sQ/Ncmwlyi2lZyzQzCcgEJ4+G2xlJGBLmyk+39MZXjhi2bnUng+L8I S/U4LOeqrVGz67t1sLvF8hcvxf5NWvKzJNgoMB5QoONzU1gQgNuq73tL+7sV287p Mxy/I8QfU2N/lXHXhO92f8seGqJSrv/O6YTwSL+Rpyt5vBkrcHBndHcYJqyauPCx ls0E+fHVa4WOk9W9sRxHES9DhiuukjoeUmR1u/Ipho5IkpPYUJX3Cd7xU8TH2C64 j/9Zic2+SN0CmvW2s+gNsMd4jmuX71Pe+lYDznAEelFDOCLSBYGzpjnsJ80PNQpC o39bIC0GusLKRQ== -----END CERTIFICATE-----Generated at Tue Jul 28 21:09:52 2026 by rpki-client