$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft File: cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json) Hash identifier: +iE9l2fbj6Mhc4GhAEuuKuj68V5gzZcFU8fq3zGMTn4= Subject key identifier: 85:BE:C0:6E:75:08:12:0C:93:55:E4:D8:97:F2:D6:43:3D:A1:59:E2 Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 019FAABEBC05AE25D7949A590DB2F6CC3453 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft Manifest number: 13C7 Signing time: Tue 28 Jul 2026 22:00:54 +0000 Manifest this update: Tue 28 Jul 2026 22:00:54 +0000 Manifest next update: Wed 29 Jul 2026 22:00:54 +0000 Files and hashes: 1: 0Mybj4rFQlGdxvZ7NznWNMzZNF4.roa (hash: izLvly3jkC64Eb5EtBveae4jjwGSamPNz65JeNhANXc=) 2: 0T_njveGDBox8dRnm6ptBU24SOE.roa (hash: MTvLZVcAf3FK4lXDgQihNVIFOil0UjLczM3XYj+vPwc=) 3: 5QtZG_mV7VV1GRdeZq86Esaesz8.roa (hash: vwP9tY7Rv5/nW7y1Pg9d56cYqktNpXr8MdjZ8jXw0F4=) 4: BWSIfeORL3ZaF98YJdEW_lwKSoo.roa (hash: O2KdoHsDXYMUXXkiHb3Ti5/HWYkXf5itDU8BQXurMDo=) 5: BtY0OBP0uQZ8ccZDlkB_sW7BFyI.roa (hash: MatuP8UvVCNnEECQrXyprVUsunKbuSnNaBS+qyGICQo=) 6: Eeyhf0b9XCDkQlMfbJyK_Q5CmTE.roa (hash: rKSKo81rt1XZZrMHSvr6OgELBhtpxtwAQKcwMR52ATY=) 7: HfFxGJLVfgStnjkbuHPm0NlbD20.roa (hash: OTTBrtAbVcSgQpN0MQDDsHGVJuiE+QV/cGYKWbjIEu4=) 8: Q6wq2o9V_bMuXNVekullESKSczY.roa (hash: 1IRZKxlgzm+cRZFtDXNnbQzz695RIK0eg3cfYVgpQ1M=) 9: YHr6sMN1EVbEwUde6FetuHcueOA.roa (hash: 0BAOQ2lWNPhsH0gX4p/TlQYVZnjFg2uh0FOWf3CJEt0=) 10: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: 0QHcM3LCduDkb/jRKwQa4DZel1hO7hCNT5HKUAuy278=) 11: cr0AR-w_JWFamVAtdgkvTMTy1Qo.roa (hash: eKAgKSzUAMEtrHDrT7mnQsSII8a/h3K+YCAIf+FAWy8=) 12: d00ZvtrFum9P2Yp0ubsN6hUhmyM.roa (hash: 2Me5/G1Q2JvdBpJ4pZYv7LNj99NEpOku37A513+s49s=) 13: d50ryNf7AouleyVkV0KoPCj3Vbs.roa (hash: 8cb301Zu+uM5+wsIG5dakaifCIJcNQE2p9LiFv/55dU=) 14: kuVGI1y4gjiz_-PZpcJ849FqFQ4.roa (hash: d+w8h3JoJhRWDuiafvQSd3RpIsJGs63LA6BMAbp5OFE=) 15: lZXBlaKtZuKTRVGIHqkhtPj9ne0.roa (hash: lL23XPdoymmAZ3GXgclE1EG24FJ5Lgbdb1NVgE1L8hQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:be:bc:05:ae:25:d7:94:9a:59:0d:b2:f6:cc:34:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Jul 28 22:00:54 2026 GMT Not After : Jul 29 22:00:54 2026 GMT Subject: CN=85bec06e7508120c9355e4d897f2d6433da159e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b7:f3:b2:67:00:e5:c9:d0:17:15:24:a2:e9: a4:fb:d1:a3:ed:63:57:6b:aa:1d:f2:1e:dd:e0:39: 8a:1b:f2:89:89:66:b1:4b:40:9d:18:4e:f5:c4:b9: 29:22:4e:c7:82:61:1b:ec:63:24:3f:c2:49:39:09: 72:ef:0b:52:19:c9:68:df:47:4e:78:3a:e1:09:54: 9c:70:f7:5f:33:6a:0e:6a:2e:53:69:fc:7b:44:bf: d2:8d:be:eb:79:95:9e:fb:67:88:62:de:38:b7:0e: 03:d3:78:6a:f1:3e:9d:24:46:01:5b:bb:29:9e:66: c7:20:25:c1:7f:f5:8a:c8:a7:7b:ea:62:b1:bb:45: 06:e0:49:7e:2b:a0:9f:f6:c4:56:a6:33:35:49:b4: df:e8:dd:d6:14:f6:2f:db:a0:4b:ff:05:72:b9:0f: 8c:c5:72:24:b7:10:f0:f8:7c:87:09:c7:f6:3d:cb: f8:29:25:cd:63:61:c7:6d:f8:1d:06:88:12:45:66: 6b:ba:0b:d6:45:24:8e:ca:87:a2:74:e7:8d:26:f9: 86:29:dd:db:b9:78:f6:32:f7:23:ba:50:0b:8f:59: 99:e2:96:b7:7e:d9:b0:3f:2f:2a:c3:b6:33:66:d9: 2e:31:07:6a:85:44:1a:52:71:19:0f:fa:5b:1f:52: 57:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BE:C0:6E:75:08:12:0C:93:55:E4:D8:97:F2:D6:43:3D:A1:59:E2 X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:8d:22:04:fb:18:e5:7a:4d:af:33:98:9c:09:40:37:a3:89: 58:d9:1e:c2:3c:72:48:2f:4f:7b:4b:b9:cb:96:3a:23:74:ee: cb:ea:31:53:e9:94:09:90:85:80:35:9a:69:7a:b5:84:13:4a: 62:ca:c5:9c:e1:96:1b:6e:b0:ef:42:2d:9d:51:cf:37:e3:a8: 99:73:4d:33:ea:f6:79:82:56:55:73:13:63:64:43:17:62:3f: 34:e5:f6:45:c5:66:a8:07:92:24:f0:d2:52:0e:59:aa:92:49: 14:06:98:b1:81:65:60:c5:65:14:38:bf:2d:a0:c3:b5:8e:03: f9:5c:71:2e:cc:4a:99:0c:bc:b7:79:d6:a6:96:4e:28:7f:29: 4a:1b:42:25:cc:3a:2b:f0:37:3f:bf:00:7a:61:33:39:bc:11: c3:f5:17:2b:ef:8e:1c:2d:68:49:c1:77:f8:6e:a6:c1:6d:8b: 7d:d6:ae:6e:e9:1a:47:f3:31:9c:a8:99:5d:87:a1:39:67:4e: 6f:a3:c8:30:87:b9:6b:a6:48:c4:62:bb:b8:03:1f:1e:41:ce: 66:f1:64:ac:c9:8e:e6:63:d0:39:45:64:69:79:f1:f5:b2:b2: ce:39:ef:25:94:09:2c:a5:d4:12:47:b2:52:95:7d:4c:d8:c5: 75:6f:82:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qvrwFriXXlJpZDbL2zDRTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjYwNzI4MjIwMDU0WhcNMjYwNzI5MjIwMDU0WjAzMTEwLwYDVQQD Eyg4NWJlYzA2ZTc1MDgxMjBjOTM1NWU0ZDg5N2YyZDY0MzNkYTE1OWUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7fzsmcA5cnQFxUkoumk+9Gj7WNX a6od8h7d4DmKG/KJiWaxS0CdGE71xLkpIk7HgmEb7GMkP8JJOQly7wtSGclo30dO eDrhCVSccPdfM2oOai5Tafx7RL/Sjb7reZWe+2eIYt44tw4D03hq8T6dJEYBW7sp nmbHICXBf/WKyKd76mKxu0UG4El+K6Cf9sRWpjM1SbTf6N3WFPYv26BL/wVyuQ+M xXIktxDw+HyHCcf2Pcv4KSXNY2HHbfgdBogSRWZrugvWRSSOyoeidOeNJvmGKd3b uXj2MvcjulALj1mZ4pa3ftmwPy8qw7YzZtkuMQdqhUQaUnEZD/pbH1JXQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIW+wG51CBIMk1Xk2Jfy1kM9oVniMB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxo0iBPsY 5XpNrzOYnAlAN6OJWNkewjxySC9Pe0u5y5Y6I3Tuy+oxU+mUCZCFgDWaaXq1hBNK YsrFnOGWG26w70ItnVHPN+OomXNNM+r2eYJWVXMTY2RDF2I/NOX2RcVmqAeSJPDS Ug5ZqpJJFAaYsYFlYMVlFDi/LaDDtY4D+VxxLsxKmQy8t3nWppZOKH8pShtCJcw6 K/A3P78AemEzObwRw/UXK++OHC1oScF3+G6mwW2LfdaubukaR/MxnKiZXYehOWdO b6PIMIe5a6ZIxGK7uAMfHkHOZvFkrMmO5mPQOUVkaXnx9bKyzjnvJZQJLKXUEkey UpV9TNjFdW+CYw== -----END CERTIFICATE-----Generated at Wed Jul 29 03:18:13 2026 by rpki-client