$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: /Y48Q/Ootmv3KAJ8X7/+4Ick0vIRg78lVUP8sHO3vv4= Subject key identifier: 4A:3C:1A:3C:E8:DC:D1:A0:53:A0:62:23:EA:50:A9:0A:9D:5F:05:D9 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019FA97561F3F1B517C84A67486A77A1ACC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 1A2E Signing time: Tue 28 Jul 2026 16:01:09 +0000 Manifest this update: Tue 28 Jul 2026 16:01:09 +0000 Manifest next update: Wed 29 Jul 2026 16:01:09 +0000 Files and hashes: 1: 1-Dw7363-gcZT5BcZS3h3DULOLy8.roa (hash: ycAjWS2LKG3rf+AnuA7L1QjlHbaxU1ClqDSIOlIjNCE=) 2: BiYRVVML9NNTA_8LHQsEIyn-udM.roa (hash: MQi6PP1rzRM1KN1VV4mGhoaMI5G3SPq1bp7SEkx+KmA=) 3: Nc3Qv6HWCUL0coHdhzehCvqorjQ.roa (hash: 1cr7/XMm8bJJ1VGTZJBo+emXZtefD8zXujejZu9BwnE=) 4: RiJbycN_HnEaFdxBy-0QqogHp9w.roa (hash: HrWeheuaH2PNBF70Yz5xTkWSf+oor2QnLluzhSuwnU8=) 5: SzfEY1Nq1aMd-z8NdZsJh4rkHLE.roa (hash: +j3Mg1YpvNctOKMzdM7wBvBFuUBEVAhKLDjbpjHSOx8=) 6: VPQt47Xnz82JpZu2--PpS6TpQSE.roa (hash: /z4TE//g7cZ6wLmxy4l6fCA7OUMKDasI818H1kAMzhg=) 7: cd86fuGEpcvGitdJ6j4qmONtrs4.roa (hash: OyWo2jddiuk9oXVabZhwBWcG9HobQGDOXj6VfpvDkjo=) 8: deTEkBZi5H7AIejV16ysjHwAbxY.roa (hash: l0JbGg+HLxrf5Ag/2z2pTojVken0ajBmDjhItX+Hm3I=) 9: hPDJ7bwWMVeeA66R-Nm66UMAI3I.roa (hash: S6FoRCGZ+2A7ou0QqZgDgmiPo527/Z9rU6I1qlBMQXY=) 10: oKVovXTv2aNAyZu9y-AHgX6RbJ8.roa (hash: UsgdfjEOvyD+5ioDpDRHljoPckkLzWdsqZQnU51Gug0=) 11: ocHryKy0JCZoZXuWFydbiaPAXvA.roa (hash: VJkfS4R1R0/kVOkQFygl/eqzEOXMlTWCdbkGDaHwbCQ=) 12: pGPZirCKZzbNWc11cAMZui5y53g.roa (hash: x16id1SP+uWE4b9i/PFLiuYNReYseV++lthZDwFfk5U=) 13: pKSlP4qI-iIWoFFAgY7hZYUI5lE.roa (hash: fJiLeKrrQ0jkNTOG3gU1SfB8kCZt5PRpsv9OHklxoM8=) 14: qltZRt6yv2xmd-YFzKK4-T95t70.roa (hash: ouYg4rusjDVFIksWY2y+Jv/jtKdXu+HEE/CHgFLthz4=) 15: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: 88y6sSRFdfj/X6x/fZHONzUMen5gGffcoT2xOBw+SN0=) 16: sQ8qQg5RChJp9JsfMBZ7VZwT8WE.roa (hash: obNWII8S7VxaHifOdhDpl8/q/V3M1i4VuliV8Z+MBow=) 17: wGWwo0E6K55d816ADtVpaqGsYoE.roa (hash: Qv1Am1EocmBUM6XTSjIqfN+fr9y61yBhGrH08ROvpPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:75:61:f3:f1:b5:17:c8:4a:67:48:6a:77:a1:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Jul 28 16:01:09 2026 GMT Not After : Jul 29 16:01:09 2026 GMT Subject: CN=4a3c1a3ce8dcd1a053a06223ea50a90a9d5f05d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:34:30:ac:f4:20:29:6e:a8:3d:5b:58:1a:4b: 35:37:0b:1e:83:93:e7:9b:d3:77:eb:ab:47:80:a4: 77:2f:c0:ef:a4:a8:18:98:b0:bb:55:0f:31:45:2b: f4:08:ef:cc:c1:f9:a5:66:31:96:ff:cc:1b:24:8f: 51:92:77:f6:72:67:32:86:94:c0:48:7c:6c:3e:f8: 33:22:61:da:93:65:02:08:cc:7a:10:c1:4c:b8:3d: 60:b7:14:92:7b:15:50:c0:0e:0a:ca:76:d7:4c:35: 16:67:b5:47:98:01:42:14:63:91:72:d7:cc:ec:2c: 26:37:35:13:0b:6d:2c:76:61:f2:a4:ce:0a:47:74: cb:e0:f9:48:23:19:b8:d1:21:92:cd:f8:f5:10:94: 5e:52:1e:0c:e2:e3:3a:83:86:7b:9e:70:5b:66:4a: 63:4c:99:5e:c5:e5:f9:d5:d8:71:36:dc:26:9d:23: ca:74:3a:cc:8d:09:62:17:9b:b3:31:02:cb:e4:1a: 01:dd:5a:7f:20:dd:5a:4b:cd:80:93:4d:c4:30:2b: 01:69:35:bd:f4:3f:23:a9:d3:27:77:c0:85:63:0d: a8:83:58:45:5b:d5:fa:35:5a:ee:04:56:ca:3d:2c: 57:77:03:39:36:ec:dd:4a:a1:b9:f6:5b:cb:6c:8a: ea:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:3C:1A:3C:E8:DC:D1:A0:53:A0:62:23:EA:50:A9:0A:9D:5F:05:D9 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a4:f5:fa:c4:5e:ef:46:6a:43:81:84:14:13:72:b3:91:b4: 7a:37:ff:a7:d5:4c:04:18:08:72:dd:fa:ee:ef:63:13:41:75: 95:28:54:26:4c:52:41:29:92:61:46:0c:a5:f2:47:8b:b9:c3: 37:ff:ef:f8:ee:cb:5a:b5:65:55:fc:5c:16:1f:17:5f:b4:aa: 8b:2f:a5:64:50:0e:33:e1:f5:70:69:70:b2:d7:0a:01:44:8e: 87:91:66:bf:8b:00:6d:82:9b:56:85:08:38:12:5d:87:e3:ad: 9c:00:ff:f4:85:3f:36:5f:2e:9f:29:47:e6:b6:14:aa:14:bf: 43:33:f3:22:10:5b:45:54:7d:55:11:18:19:05:5b:ee:b9:64: cc:a3:f3:a5:66:0f:37:a9:32:ee:69:26:e5:2f:89:bd:9d:7b: fe:93:f5:de:eb:60:31:6c:b4:30:26:1b:60:bc:bb:34:a8:77: c8:90:55:f5:bc:d5:80:04:6e:85:10:ab:d5:ec:ea:6b:fe:48: 93:93:b5:10:00:23:72:08:3f:f1:cb:04:56:24:2e:2a:fd:e0: 0f:13:a1:68:5c:9a:f7:44:58:42:1c:16:0b:a4:54:2c:e5:8f: 06:be:25:d5:c2:b4:c3:2f:a8:28:5c:92:48:b0:f3:91:e6:8a: cf:0a:b1:b0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pdWHz8bUXyEpnSGp3oazAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwNzI4MTYwMTA5WhcNMjYwNzI5MTYwMTA5WjAzMTEwLwYDVQQD Eyg0YTNjMWEzY2U4ZGNkMWEwNTNhMDYyMjNlYTUwYTkwYTlkNWYwNWQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljQwrPQgKW6oPVtYGks1Nwseg5Pn m9N366tHgKR3L8DvpKgYmLC7VQ8xRSv0CO/MwfmlZjGW/8wbJI9Rknf2cmcyhpTA SHxsPvgzImHak2UCCMx6EMFMuD1gtxSSexVQwA4KynbXTDUWZ7VHmAFCFGORctfM 7CwmNzUTC20sdmHypM4KR3TL4PlIIxm40SGSzfj1EJReUh4M4uM6g4Z7nnBbZkpj TJlexeX51dhxNtwmnSPKdDrMjQliF5uzMQLL5BoB3Vp/IN1aS82Ak03EMCsBaTW9 9D8jqdMnd8CFYw2og1hFW9X6NVruBFbKPSxXdwM5NuzdSqG59lvLbIrqnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEo8Gjzo3NGgU6BiI+pQqQqdXwXZMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6T1+sRe 70ZqQ4GEFBNys5G0ejf/p9VMBBgIct367u9jE0F1lShUJkxSQSmSYUYMpfJHi7nD N//v+O7LWrVlVfxcFh8XX7Sqiy+lZFAOM+H1cGlwstcKAUSOh5Fmv4sAbYKbVoUI OBJdh+OtnAD/9IU/Nl8unylH5rYUqhS/QzPzIhBbRVR9VREYGQVb7rlkzKPzpWYP N6ky7mkm5S+JvZ17/pP13utgMWy0MCYbYLy7NKh3yJBV9bzVgARuhRCr1ezqa/5I k5O1EAAjcgg/8csEViQuKv3gDxOhaFya90RYQhwWC6RULOWPBr4l1cK0wy+oKFyS SLDzkeaKzwqxsA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:32:52 2026 by rpki-client