$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: 0lII8fOpZMQ0vWzx2H0PudAmIByWn56lo6K2fkl4Fyw= Subject key identifier: 65:C2:32:F9:D6:41:15:9E:57:A2:E4:85:E6:4A:21:D5:15:55:2E:F8 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019FA9E2EF7F7593E3D01100BF772E6CB432 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 06E3 Signing time: Tue 28 Jul 2026 18:00:49 +0000 Manifest this update: Tue 28 Jul 2026 18:00:49 +0000 Manifest next update: Wed 29 Jul 2026 18:00:49 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: ND1exhoJU2jRHctZ7w86CiB5DAxsKpyxjE/wv+DxQLc=) 2: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=) 3: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=) 4: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=) 5: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=) 6: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=) 7: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (hash: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=) 8: fro6TGls5A_k6d-cTWMJbP0QioE.roa (hash: 9eBljoV7C7Gpp7fNoutyzWwHkUabzavd+/jPQySZ6NQ=) 9: i0m0APQnzZzJyvphl4KkBXW_Ryo.roa (hash: CjwHIj9Cl0AJLk1K/3uk0D4To9cvJODmOb3ct/kJmsM=) 10: o5v2otthTxI9MaotpF4RXsxny8c.roa (hash: 8Fkmii+rqIIBVQH5OTZvGOuhbJRNm26073tjiOdkjrw=) 11: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=) 12: ufJWMAdllEMmIPcuF9xb-uLZ_Ug.roa (hash: WQKwVoqUwSPAOPq2m2hpOUE0h89BiOqZqr9Z2GNDF64=) 13: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e2:ef:7f:75:93:e3:d0:11:00:bf:77:2e:6c:b4:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Jul 28 18:00:49 2026 GMT Not After : Jul 29 18:00:49 2026 GMT Subject: CN=65c232f9d641159e57a2e485e64a21d515552ef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:be:81:fa:a4:d6:50:95:8a:01:5c:63:80:69: 4e:7c:93:52:97:26:0e:7a:e7:95:52:54:6f:44:97: 90:2b:89:89:98:c9:bf:c0:7b:de:d4:0c:78:5c:4e: bd:e0:39:2a:ef:f3:e4:c4:f8:df:d7:3a:05:75:d8: 78:e4:d8:a7:20:50:06:86:be:50:4d:5f:1b:73:a3: bc:34:bf:89:20:3e:c8:87:e0:35:ad:b7:a6:3f:c1: 2a:69:89:d9:61:85:08:27:41:c0:b2:bc:02:5d:b2: 50:c5:78:95:13:03:e1:52:5a:d0:1d:5a:b9:2b:34: 0f:96:ce:6e:38:89:36:d3:87:88:68:37:5a:41:1a: 02:61:2d:98:25:ac:f3:a7:1d:9f:7b:c0:61:42:87: bb:ae:4c:e8:8e:34:14:79:a6:62:73:f4:29:b5:d3: 4a:7b:1c:c6:b8:d7:8f:b2:94:f3:d0:41:7a:d3:62: 9d:5e:3c:98:6b:7e:18:2f:b8:5c:ee:d0:d6:ec:18: d0:76:5d:4e:ad:25:c1:0c:0b:e5:d8:fb:4a:f4:0b: 5e:86:53:5f:62:66:86:4e:88:03:0e:f6:15:f1:c7: 53:68:1a:94:65:55:66:5e:7a:fb:a5:b4:55:43:32: 3b:48:9f:fc:e4:57:94:e9:9e:3c:0f:b0:04:29:10: 7f:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:C2:32:F9:D6:41:15:9E:57:A2:E4:85:E6:4A:21:D5:15:55:2E:F8 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:d0:3c:50:72:b1:5d:59:37:0d:eb:cd:e8:6a:2c:0e:0e:da: 87:34:4b:a1:3f:0b:02:a2:26:67:31:cb:56:cf:75:53:10:55: a5:c1:0b:d2:88:69:a6:62:9a:29:c4:8f:1e:8b:0b:9f:0c:c8: f8:b7:ba:29:b8:c8:db:82:22:fb:11:31:2d:94:18:37:1c:a1: 16:d2:e0:24:c8:16:ff:b3:f1:1a:e4:14:1f:11:6a:67:50:ee: d4:25:d9:65:4b:a6:d2:f3:a7:0a:a9:72:79:63:b7:81:3c:cd: f7:48:52:2a:6f:0b:c5:11:0f:5c:9c:6d:d2:0d:95:ef:66:42: 0e:93:12:eb:ae:64:cb:fc:a7:92:71:6a:34:95:bc:b7:13:02: 3c:e3:9d:d6:d7:2d:a2:3e:6d:0a:18:a6:49:c2:91:a3:a6:b9: b5:29:31:1c:09:4c:16:c5:03:d0:ba:13:ff:cf:98:93:62:29: 2a:d2:19:73:0c:0b:9b:9e:c4:47:51:bb:90:06:87:3e:d5:b0: b0:2e:bb:e4:35:ab:ec:80:bc:a5:da:fd:df:eb:a2:d1:e6:11: 97:72:a5:83:a1:15:f5:77:23:d3:71:98:bb:e6:7c:d4:15:6f: b8:6e:75:93:ac:3f:58:3f:1f:1d:3a:1f:77:1e:c7:fe:f1:15: 9c:bb:d8:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4u9/dZPj0BEAv3cubLQyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwNzI4MTgwMDQ5WhcNMjYwNzI5MTgwMDQ5WjAzMTEwLwYDVQQD Eyg2NWMyMzJmOWQ2NDExNTllNTdhMmU0ODVlNjRhMjFkNTE1NTUyZWY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9b6B+qTWUJWKAVxjgGlOfJNSlyYO eueVUlRvRJeQK4mJmMm/wHve1Ax4XE694Dkq7/PkxPjf1zoFddh45NinIFAGhr5Q TV8bc6O8NL+JID7Ih+A1rbemP8EqaYnZYYUIJ0HAsrwCXbJQxXiVEwPhUlrQHVq5 KzQPls5uOIk204eIaDdaQRoCYS2YJazzpx2fe8BhQoe7rkzojjQUeaZic/QptdNK exzGuNePspTz0EF602KdXjyYa34YL7hc7tDW7BjQdl1OrSXBDAvl2PtK9AtehlNf YmaGTogDDvYV8cdTaBqUZVVmXnr7pbRVQzI7SJ/85FeU6Z48D7AEKRB/BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGXCMvnWQRWeV6LkheZKIdUVVS74MB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACtA8UHKx XVk3DevN6GosDg7ahzRLoT8LAqImZzHLVs91UxBVpcEL0ohppmKaKcSPHosLnwzI +Le6KbjI24Ii+xExLZQYNxyhFtLgJMgW/7PxGuQUHxFqZ1Du1CXZZUum0vOnCqly eWO3gTzN90hSKm8LxREPXJxt0g2V72ZCDpMS665ky/ynknFqNJW8txMCPOOd1tct oj5tChimScKRo6a5tSkxHAlMFsUD0LoT/8+Yk2IpKtIZcwwLm57ER1G7kAaHPtWw sC675DWr7IC8pdr93+ui0eYRl3Klg6EV9Xcj03GYu+Z81BVvuG51k6w/WD8fHTof dx7H/vEVnLvYkw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:43:25 2026 by rpki-client