$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json) Hash identifier: KVh3pYGo/LLNaSLp0Jp2/i2NdnO9eoi7IUbt08H5CEA= Subject key identifier: 6A:E4:E9:11:F5:CC:C6:B3:0B:69:6F:A4:55:5E:DA:6F:6F:27:1E:EC Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019FA93E00B2907DE96A6724EE0683BD2A06 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft Manifest number: 19E8 Signing time: Tue 28 Jul 2026 15:00:40 +0000 Manifest this update: Tue 28 Jul 2026 15:00:40 +0000 Manifest next update: Wed 29 Jul 2026 15:00:40 +0000 Files and hashes: 1: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=) 2: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=) 3: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=) 4: FQSV18p_T_droUZh08zoIA9Ax8A.roa (hash: znhD3qntwxP0GJzV41Y9fLTZXvTyllhrzmb59F4/qY4=) 5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=) 6: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=) 7: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=) 8: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=) 9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: RHYtVwOdfUgj7vQE38bHudp3jSZ3pGr2hXCoqwKM380=) 10: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=) 11: xGGCf6Hil4Mo0C8TJDJWoZKOtQY.roa (hash: OSJabINQbvYIP/JxqMQjPh9E61hQf/o/MtFixqbU+Rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3e:00:b2:90:7d:e9:6a:67:24:ee:06:83:bd:2a:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Jul 28 15:00:40 2026 GMT Not After : Jul 29 15:00:40 2026 GMT Subject: CN=6ae4e911f5ccc6b30b696fa4555eda6f6f271eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2b:37:cb:2d:7d:07:a8:d2:d8:b5:97:1c:33: 02:8b:34:48:76:a3:9d:46:f6:4a:f3:a8:53:ce:6a: 63:21:7f:70:df:a5:7c:38:4f:77:b7:40:84:b3:c8: 2c:d9:68:a3:65:ee:7f:93:4f:3b:41:3a:c8:e2:9a: 1e:dc:b6:ff:7e:8f:eb:c8:94:15:05:22:e7:da:dc: 9d:d4:37:03:7b:cc:e5:4f:e2:c4:0c:a1:72:6f:bb: a6:dd:df:6f:38:8a:0b:00:f9:fc:e6:a4:08:84:d4: 33:26:30:f9:b2:08:d8:20:18:04:7c:b6:3d:1f:c6: fc:14:86:76:55:f4:ff:08:87:a4:dd:9b:bc:12:ff: 07:df:f9:95:8e:f7:c6:5c:9f:c2:b3:8f:5d:b2:7b: 68:26:56:3f:f1:7f:38:fd:36:22:05:20:d1:da:f7: 88:2d:2f:ff:d0:04:70:35:a1:67:42:9f:b4:87:89: ad:21:ca:ba:28:71:53:6b:6f:d0:cc:f7:e5:94:cc: ca:50:db:47:7b:f1:03:48:1d:8a:de:76:50:9c:df: 29:68:52:4e:d7:74:6b:ff:55:e3:4d:ad:f4:87:cf: 9a:0e:65:72:c2:f3:0d:aa:97:93:16:03:55:59:30: 72:9e:cc:24:00:81:f7:3b:8b:6d:28:d8:7b:3c:18: 57:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E4:E9:11:F5:CC:C6:B3:0B:69:6F:A4:55:5E:DA:6F:6F:27:1E:EC X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:24:e5:03:28:66:51:7d:c6:5b:37:43:3d:5a:bb:c6:17:a9: dc:aa:94:a1:3c:43:5f:4b:39:e4:19:b0:65:d4:9a:c2:75:4c: 0c:8c:47:2b:29:b7:2f:50:4b:2b:9d:00:22:a6:6e:74:1d:a3: 96:de:6c:ff:d9:4b:41:30:19:1e:e5:c3:2b:cc:0e:8a:60:e6: c2:39:4a:8c:82:96:3f:15:bf:b1:98:3a:1e:b5:ea:ad:5d:b8: 66:84:fa:4f:f2:13:1c:74:a4:1f:0d:ea:83:cc:5b:59:af:ee: 59:9c:30:17:33:83:6b:31:28:93:11:0e:e4:9d:44:eb:ce:0e: b2:af:5f:e7:ec:95:62:90:ac:63:5b:b2:5b:4d:b9:69:23:01: 0b:a3:09:a7:f2:ca:90:00:39:11:5b:0e:94:82:64:51:63:53: 61:6d:b8:79:20:6c:d3:b7:4f:69:81:25:44:78:39:ab:2c:d9: 97:43:ff:40:3c:f7:09:34:94:37:03:f6:84:a1:24:be:05:f2: 23:cb:27:e4:29:39:ce:f2:78:bd:ba:c4:c4:f1:e8:e7:d2:0f: 4f:b7:59:32:aa:27:ba:cd:f8:7f:41:27:81:b0:ea:50:a8:00: 49:5c:ea:20:98:0b:78:13:48:cc:48:78:8a:86:89:56:fb:d6: 84:2a:7a:e9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPgCykH3pamck7gaDvSoGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwNzI4MTUwMDQwWhcNMjYwNzI5MTUwMDQwWjAzMTEwLwYDVQQD Eyg2YWU0ZTkxMWY1Y2NjNmIzMGI2OTZmYTQ1NTVlZGE2ZjZmMjcxZWVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSs3yy19B6jS2LWXHDMCizRIdqOd RvZK86hTzmpjIX9w36V8OE93t0CEs8gs2WijZe5/k087QTrI4poe3Lb/fo/ryJQV BSLn2tyd1DcDe8zlT+LEDKFyb7um3d9vOIoLAPn85qQIhNQzJjD5sgjYIBgEfLY9 H8b8FIZ2VfT/CIek3Zu8Ev8H3/mVjvfGXJ/Cs49dsntoJlY/8X84/TYiBSDR2veI LS//0ARwNaFnQp+0h4mtIcq6KHFTa2/QzPfllMzKUNtHe/EDSB2K3nZQnN8paFJO 13Rr/1XjTa30h8+aDmVywvMNqpeTFgNVWTBynswkAIH3O4ttKNh7PBhXewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrk6RH1zMazC2lvpFVe2m9vJx7sMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkyTlAyhm UX3GWzdDPVq7xhep3KqUoTxDX0s55BmwZdSawnVMDIxHKym3L1BLK50AIqZudB2j lt5s/9lLQTAZHuXDK8wOimDmwjlKjIKWPxW/sZg6HrXqrV24ZoT6T/ITHHSkHw3q g8xbWa/uWZwwFzODazEokxEO5J1E684Osq9f5+yVYpCsY1uyW025aSMBC6MJp/LK kAA5EVsOlIJkUWNTYW24eSBs07dPaYElRHg5qyzZl0P/QDz3CTSUNwP2hKEkvgXy I8sn5Ck5zvJ4vbrExPHo59IPT7dZMqonus34f0EngbDqUKgASVzqIJgLeBNIzEh4 ioaJVvvWhCp66Q== -----END CERTIFICATE-----Generated at Tue Jul 28 21:56:55 2026 by rpki-client