$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft File: 520NqzR6OOK4e1oiovfJ4hwYybw.mft (raw, json) Hash identifier: JXCaAY2dLpInNWqoyglJgkvW/BVEWBzlaEryzBdCldk= Subject key identifier: 70:E4:EC:AF:44:CA:26:82:E3:8F:BA:2F:FE:46:4F:1B:CB:43:33:22 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019FAAF51700E57D0FE840239214FFD6FE61 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft Manifest number: 14C1 Signing time: Tue 28 Jul 2026 23:00:16 +0000 Manifest this update: Tue 28 Jul 2026 23:00:16 +0000 Manifest next update: Wed 29 Jul 2026 23:00:16 +0000 Files and hashes: 1: 1dfOhFGT4Rz19mHWVabW0kWxTss.roa (hash: Rjg1gNguWYpEwGKvfk1H+hd0eMsqKT2A4N+C2/8Q+uQ=) 2: 520NqzR6OOK4e1oiovfJ4hwYybw.crl (hash: KG/QAHRfTnA//YSPivYX9mD4YNcUF7YL+KmJjL2dPA8=) 3: 7EPxlfzuNdNfziGNw3Hj7EoZj1Q.roa (hash: fYUfx118C/cw672kHDWSH3DD1Ik9WuMEeaQ/qAV9tYE=) 4: 9EzrkfCb3685-QENXXhTIl2uZz4.roa (hash: 4o0MB77YQKRQiZHQrZxR1nkb/HsRFN1Kq0iR4K53WZA=) 5: DVIKLwP8b0UVJE_X0Zz4hLCMFmU.roa (hash: 2ROrixfhF0UtgJihhtThPaEztRX+VVHt8WTM1ZfZQ1o=) 6: Fn3txwFOnsHfJqp3dmOvAMcvgHc.roa (hash: 0tFPd6mFP89u9IcgrQmVyEuYoDxe9S4zwwRr4qndNks=) 7: RqZv9lI-beWajs98dICrEK2DwUM.roa (hash: z0DWSEDfb+oWc/lkT9R9ehjWWb2y0A0CPcHglnAYRf8=) 8: Ud0XI3ub85_CL2l55YZW3cXrctA.roa (hash: 2gMJyy7om8/uY1IqvCz0ubvDeUV63nAu6cUom48+3U0=) 9: ao5k8aMHz2Rr-UFohnKN0Vsy0ts.roa (hash: qeXz8tDdKItxGK8qtWsvUAbM0Ooz+MmMiDN8cvBIyTQ=) 10: bbXWGNkALy-ajnXnVwsq6VcslC8.roa (hash: lOmBCerqz+GglurufDI5e+15DQVwzjxcTvAfkACkLYE=) 11: jTMEUhkl6sKPDlW6gGgXZsH4VwQ.roa (hash: bLe2Zk8IquF+7aI/fXPQxZklmLIeFhH3W5DkdYCydQA=) 12: r-NoE_XHTABnwPRM9GdFHoEeHJo.roa (hash: qsD5Rt9CKRxXFQG5JSeN7cqv7sQvsG2HbFGsWmdhdi8=) 13: rIIpXZCn7E3HgJjpCaYYUR4k6ZI.roa (hash: Vvylnj2QqF4AFfq4GCTBxANmDk4TfXB5W5GNlTLI/Qw=) 14: rp3l1DRMo7bxNlcekPEumkx_Cu4.roa (hash: cvH000yVT30CU4NGwC5k2pFAaWGJcYLG4wfqKOyLWIU=) 15: s9E0mrs6RE5G3diI6qJ2dNaQlCY.roa (hash: ALHEFczsxrK3P9zm6czuHQOWsz9Vxib3j6fIwRLXdsA=) 16: smuPovOHBHHaIAv32qcc0ZyhNkQ.roa (hash: HcQ/8p3eoCWjnnKfMtVzm8focRBIq46dCnVV7vdjMxQ=) 17: v94LL-qGGgahldRNvzQc-ZVS3KI.roa (hash: a3YAXYAGQiNiI/eRCe9RKvTaP1hHvgR2d27wk4bq6Cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:f5:17:00:e5:7d:0f:e8:40:23:92:14:ff:d6:fe:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jul 28 23:00:16 2026 GMT Not After : Jul 29 23:00:16 2026 GMT Subject: CN=70e4ecaf44ca2682e38fba2ffe464f1bcb433322 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:df:40:67:db:18:a5:59:c5:e1:f2:c3:20:90: 6f:10:ec:10:37:50:c9:74:a3:86:38:65:01:71:2e: b9:d7:0d:0b:6f:82:f9:16:34:eb:bf:be:6c:1b:f4: e4:85:70:9c:eb:a5:47:59:35:86:a2:63:61:ba:63: b4:f1:34:2a:5e:2e:11:b4:d3:f4:b9:42:47:ea:9b: 62:c4:33:c6:b0:de:76:18:32:8d:a3:09:7a:e2:67: 7d:63:24:6d:18:1a:44:06:34:6b:ae:4e:53:80:af: 7a:9c:29:67:20:5d:95:2f:43:65:73:30:33:d8:18: 9a:e8:aa:28:e1:1b:35:5c:d5:00:af:5c:57:d9:49: 65:f8:61:43:9d:de:2a:41:dd:f5:e1:75:38:d2:37: 2a:32:7f:d0:3c:08:7b:7c:1e:c2:ea:12:94:b5:5b: 5b:a3:02:7e:56:fc:81:56:11:ba:b2:a6:fe:0b:d2: e0:ef:d0:d0:38:5a:24:6e:4d:cf:a7:8f:67:29:4c: 2f:20:a6:d9:b1:c7:87:25:14:07:d3:65:ed:f0:58: c9:1e:2d:a4:52:f9:e6:72:b5:c8:a2:e3:73:71:b2: 75:8f:aa:06:4e:70:d5:1b:35:9a:91:1a:2a:b3:8a: 78:ca:32:95:43:b9:5f:35:84:1a:87:01:a5:b7:de: b2:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:E4:EC:AF:44:CA:26:82:E3:8F:BA:2F:FE:46:4F:1B:CB:43:33:22 X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:0e:24:69:48:3f:04:78:9e:a5:c2:d5:f4:02:fe:81:be:e7: e1:5a:f2:5b:40:6d:6b:53:c6:de:9a:61:28:6b:68:c4:ed:d4: 8e:20:f2:6d:47:02:c8:0b:e1:d8:05:24:8d:5c:c7:e8:6b:98: 02:1b:ed:68:36:63:5a:d5:0c:3f:66:07:a4:81:b5:81:8a:23: b2:85:89:ab:a3:97:12:cb:a0:8d:f1:ef:70:8b:d6:f9:22:e6: a2:42:61:2d:b7:c0:2e:df:cf:06:1a:2b:76:41:81:41:c7:3d: 27:1a:35:5a:f7:38:c5:15:1b:24:28:31:24:5b:eb:02:01:a9: 66:45:c8:82:65:8a:94:a0:9c:f4:d0:3b:2b:ab:94:5a:ca:71: 77:4f:27:56:39:33:be:9a:6f:a1:4f:8b:fe:5b:89:b0:29:75: c4:04:bb:09:a0:cc:aa:4d:93:28:84:4a:0a:f9:99:4b:e1:e3: 42:51:83:45:73:ef:7b:6c:fa:09:7d:7d:6e:92:61:14:8c:73: df:0b:5a:8e:fc:f5:58:fc:6b:53:02:6c:d7:f6:51:0d:74:9b: 41:9a:db:ea:cd:e9:bd:ea:94:63:c1:6c:ca:92:4f:1b:b6:63: f6:bf:df:f5:ec:c6:42:13:a8:02:d1:00:28:e8:5d:a5:42:18: 3b:5e:bc:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+q9RcA5X0P6EAjkhT/1v5hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwNzI4MjMwMDE2WhcNMjYwNzI5MjMwMDE2WjAzMTEwLwYDVQQD Eyg3MGU0ZWNhZjQ0Y2EyNjgyZTM4ZmJhMmZmZTQ2NGYxYmNiNDMzMzIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxN9AZ9sYpVnF4fLDIJBvEOwQN1DJ dKOGOGUBcS651w0Lb4L5FjTrv75sG/TkhXCc66VHWTWGomNhumO08TQqXi4RtNP0 uUJH6ptixDPGsN52GDKNowl64md9YyRtGBpEBjRrrk5TgK96nClnIF2VL0NlczAz 2Bia6Koo4Rs1XNUAr1xX2Ull+GFDnd4qQd314XU40jcqMn/QPAh7fB7C6hKUtVtb owJ+VvyBVhG6sqb+C9Lg79DQOFokbk3Pp49nKUwvIKbZsceHJRQH02Xt8FjJHi2k UvnmcrXIouNzcbJ1j6oGTnDVGzWakRoqs4p4yjKVQ7lfNYQahwGlt96y7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDk7K9EyiaC44+6L/5GTxvLQzMiMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqg4kaUg/ BHiepcLV9AL+gb7n4VryW0Bta1PG3pphKGtoxO3UjiDybUcCyAvh2AUkjVzH6GuY AhvtaDZjWtUMP2YHpIG1gYojsoWJq6OXEsugjfHvcIvW+SLmokJhLbfALt/PBhor dkGBQcc9Jxo1Wvc4xRUbJCgxJFvrAgGpZkXIgmWKlKCc9NA7K6uUWspxd08nVjkz vppvoU+L/luJsCl1xAS7CaDMqk2TKIRKCvmZS+HjQlGDRXPve2z6CX19bpJhFIxz 3wtajvz1WPxrUwJs1/ZRDXSbQZrb6s3pveqUY8FsypJPG7Zj9r/f9ezGQhOoAtEA KOhdpUIYO168EQ== -----END CERTIFICATE-----Generated at Wed Jul 29 04:48:15 2026 by rpki-client