$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: f5geTdrJijGGXbD//RjxeTZUyVDFTXmLIinur+HX9Fs= Subject key identifier: DF:78:62:13:F3:FC:1A:3E:41:D8:4D:38:DB:16:29:42:C0:3A:EB:14 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019FA93DBCAEB08D9525257D55F0E0CE9B16 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 1238 Signing time: Tue 28 Jul 2026 15:00:23 +0000 Manifest this update: Tue 28 Jul 2026 15:00:23 +0000 Manifest next update: Wed 29 Jul 2026 15:00:23 +0000 Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=) 2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=) 3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=) 4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=) 5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=) 6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=) 7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=) 8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: Bn6xfmfcT+BRkdTdP1Har1aNis/kpXHCFTwihGDWTeI=) 9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=) 10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=) 11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=) 12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=) 13: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=) 14: ryuLKef_IroC7PFQdKy3-YDqSJA.roa (hash: RsW64+NIzEg1i7l38AMRGxCtDbntws+JXmRcjIu9krk=) 15: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=) 16: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=) 17: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=) 18: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=) 19: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=) 20: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 15:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3d:bc:ae:b0:8d:95:25:25:7d:55:f0:e0:ce:9b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jul 28 15:00:23 2026 GMT Not After : Jul 29 15:00:23 2026 GMT Subject: CN=df786213f3fc1a3e41d84d38db162942c03aeb14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:7a:5b:b7:1f:28:c1:a5:2b:6a:5b:8e:e8:01: 22:c1:24:d2:4c:47:c0:1f:3d:7e:5a:24:47:d6:fd: 77:ba:6c:06:ca:f1:97:fc:c9:27:ff:07:d9:4a:1d: 03:6b:b2:9b:23:62:54:d0:fd:9c:a0:b8:a5:5a:1c: b7:e4:1f:4c:fe:63:74:d9:0f:40:f6:70:8e:05:37: 4b:ba:a5:e7:0a:2b:cd:96:71:92:86:36:fd:aa:d1: 29:51:8f:a8:a8:8e:77:72:5e:39:c2:59:00:12:12: 6a:02:cf:44:7f:d9:f1:f5:8d:3d:d3:af:bd:eb:5f: af:08:4b:35:c3:2b:de:71:fc:eb:d0:5c:d0:6e:fe: d7:96:03:01:14:d8:42:7f:50:23:65:52:0a:94:11: 31:46:5c:6f:a9:f7:11:55:70:a9:2f:26:88:d3:3f: 51:6f:86:b0:ad:46:c3:43:70:9e:94:69:5e:21:71: c7:1f:44:b1:3d:88:36:90:23:77:5e:c3:a4:b7:53: bd:40:fe:3b:61:dc:95:ab:51:84:90:e1:c8:46:23: 84:75:6f:3c:7b:58:4d:c4:b7:b7:e2:42:b6:a3:6c: 06:5d:70:78:79:86:f7:92:b5:e9:88:65:a1:11:7d: 14:24:df:7a:a2:9c:57:ea:c9:30:ca:bf:95:f8:4f: 21:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:78:62:13:F3:FC:1A:3E:41:D8:4D:38:DB:16:29:42:C0:3A:EB:14 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:37:6a:3a:1b:48:38:64:a7:e8:dd:24:33:e8:d6:b4:50:e4: 73:19:5e:cb:fb:47:7f:9e:5e:6d:52:b9:ee:4e:a6:29:71:07: 00:a8:48:29:74:28:60:1a:4d:3c:0f:2c:9a:30:7a:b1:1b:ac: 5c:87:2a:b9:92:1e:8b:fc:c0:92:25:ba:78:a4:3c:03:3b:51: b7:5f:c6:2d:cd:c6:fb:58:6d:74:00:8b:5e:8a:a9:35:25:98: 2d:19:23:d1:fd:58:17:b8:ab:7f:ae:e5:9f:89:df:99:a6:64: 3c:78:ef:82:af:2c:e0:80:ef:05:21:8c:86:2e:5c:3c:eb:54: 0a:0a:b6:c1:64:d4:79:a7:c6:f1:93:8e:32:88:32:09:e4:3a: de:aa:64:dc:9b:14:87:ab:ea:e3:ef:b2:a6:87:18:85:fc:a9: 4e:7f:14:12:63:72:2e:83:85:aa:ca:3b:5f:38:ee:69:1a:02: 67:85:4d:4a:47:04:c7:5e:04:78:6d:5c:21:4d:8b:d3:08:7a: 2c:74:b6:38:d2:90:17:ec:a7:95:ac:95:b7:cf:97:ef:50:20: 95:7f:45:bc:d8:b6:f1:a9:6c:dd:23:c5:38:f0:65:dc:1f:ba: 64:08:b7:7e:2c:5a:27:32:eb:6d:5b:58:b1:b3:a0:65:ba:6c: d5:a8:df:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPbyusI2VJSV9VfDgzpsWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwNzI4MTUwMDIzWhcNMjYwNzI5MTUwMDIzWjAzMTEwLwYDVQQD EyhkZjc4NjIxM2YzZmMxYTNlNDFkODRkMzhkYjE2Mjk0MmMwM2FlYjE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/Hpbtx8owaUraluO6AEiwSTSTEfA Hz1+WiRH1v13umwGyvGX/Mkn/wfZSh0Da7KbI2JU0P2coLilWhy35B9M/mN02Q9A 9nCOBTdLuqXnCivNlnGShjb9qtEpUY+oqI53cl45wlkAEhJqAs9Ef9nx9Y0906+9 61+vCEs1wyvecfzr0FzQbv7XlgMBFNhCf1AjZVIKlBExRlxvqfcRVXCpLyaI0z9R b4awrUbDQ3CelGleIXHHH0SxPYg2kCN3XsOkt1O9QP47YdyVq1GEkOHIRiOEdW88 e1hNxLe34kK2o2wGXXB4eYb3krXpiGWhEX0UJN96opxX6skwyr+V+E8h8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN94YhPz/Bo+QdhNONsWKULAOusUMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjdqOhtI OGSn6N0kM+jWtFDkcxley/tHf55ebVK57k6mKXEHAKhIKXQoYBpNPA8smjB6sRus XIcquZIei/zAkiW6eKQ8AztRt1/GLc3G+1htdACLXoqpNSWYLRkj0f1YF7irf67l n4nfmaZkPHjvgq8s4IDvBSGMhi5cPOtUCgq2wWTUeafG8ZOOMogyCeQ63qpk3JsU h6vq4++ypocYhfypTn8UEmNyLoOFqso7XzjuaRoCZ4VNSkcEx14EeG1cIU2L0wh6 LHS2ONKQF+ynlayVt8+X71AglX9FvNi28als3SPFOPBl3B+6ZAi3fixaJzLrbVtY sbOgZbps1ajfvA== -----END CERTIFICATE-----Generated at Wed Jul 29 01:13:40 2026 by rpki-client