$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: Dj+IHX/LXMRMVB7th7uRB4KgFcNXy0e/zJKSNipuWw0= Subject key identifier: D6:B0:B2:74:A5:28:A6:82:29:FF:AD:76:D5:69:24:D1:90:52:80:E1 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019FABD1711FA85873B196E39961D7A2AD21 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 06E4 Signing time: Wed 29 Jul 2026 03:00:57 +0000 Manifest this update: Wed 29 Jul 2026 03:00:57 +0000 Manifest next update: Thu 30 Jul 2026 03:00:57 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: K6FnxeugqGLrZjY4HEt0fjiMjyUZQSeRvQoX2aN/Dys=) 2: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=) 3: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=) 4: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=) 5: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=) 6: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=) 7: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (hash: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=) 8: fro6TGls5A_k6d-cTWMJbP0QioE.roa (hash: 9eBljoV7C7Gpp7fNoutyzWwHkUabzavd+/jPQySZ6NQ=) 9: i0m0APQnzZzJyvphl4KkBXW_Ryo.roa (hash: CjwHIj9Cl0AJLk1K/3uk0D4To9cvJODmOb3ct/kJmsM=) 10: o5v2otthTxI9MaotpF4RXsxny8c.roa (hash: 8Fkmii+rqIIBVQH5OTZvGOuhbJRNm26073tjiOdkjrw=) 11: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=) 12: ufJWMAdllEMmIPcuF9xb-uLZ_Ug.roa (hash: WQKwVoqUwSPAOPq2m2hpOUE0h89BiOqZqr9Z2GNDF64=) 13: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 03:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:d1:71:1f:a8:58:73:b1:96:e3:99:61:d7:a2:ad:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Jul 29 03:00:57 2026 GMT Not After : Jul 30 03:00:57 2026 GMT Subject: CN=d6b0b274a528a68229ffad76d56924d1905280e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8c:68:8e:9a:1a:5d:33:53:9e:06:ff:0c:47: 31:20:ee:02:5c:22:92:1b:92:a8:b4:a3:ad:e0:f4: 19:8a:5d:b0:d4:11:c6:ca:3e:99:00:5c:c0:07:19: dc:dc:20:f1:4b:d6:b2:36:75:07:8e:b8:32:18:1c: 02:ac:32:05:d2:ee:46:ba:1f:d3:4e:36:87:45:4a: 69:c1:e3:de:d0:b1:00:9f:c5:9f:6d:15:10:9a:01: ab:d5:b0:65:ff:c3:f1:52:27:89:43:ec:bc:2e:db: 09:e6:16:3e:34:b2:9d:16:08:98:65:8f:57:e1:eb: 90:ea:59:9c:2a:a8:82:c3:25:ad:92:0b:6a:11:04: 58:20:01:7f:d5:6f:5d:10:37:84:bf:82:84:2f:f3: 86:06:53:7d:05:3c:37:1e:cd:8d:f2:d0:54:07:84: 45:ad:65:46:c5:1c:d7:c0:d1:84:fc:30:d6:e7:d7: ff:b7:ad:2b:6e:1d:24:c1:18:66:2c:39:54:8e:45: 17:c2:cc:e3:71:0e:c6:b3:3c:32:24:dd:3f:5a:e2: 65:8b:60:88:3d:2a:16:64:1d:fe:50:71:90:f0:1f: 9e:c2:cb:8e:14:77:02:67:8f:50:2e:3c:b2:cc:a7: fc:a7:c1:22:02:30:3e:70:e4:3f:d1:5c:e9:f8:93: 5d:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B0:B2:74:A5:28:A6:82:29:FF:AD:76:D5:69:24:D1:90:52:80:E1 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:cf:93:d2:98:92:22:b8:1a:96:97:76:6a:09:97:70:6c:98: 9d:fc:bc:13:f5:bd:f3:ca:28:12:aa:6e:1e:1a:b3:04:2f:5b: ca:ca:1c:fb:fc:4c:48:2a:26:67:bc:c6:d6:fa:5e:d2:39:b0: f1:df:67:cc:c7:9c:a6:3e:ab:e5:c3:8b:f1:21:8d:57:69:e9: 2a:1d:5a:b9:c7:9a:94:f4:88:43:00:f2:70:a6:14:cd:50:24: 04:1b:92:0b:0f:43:25:f4:e4:e1:1a:f2:25:07:d2:d2:fe:0d: 44:44:70:a8:5c:10:54:23:f8:e9:79:36:d1:dd:71:63:5a:81: 2d:97:5f:59:db:42:6e:54:cb:86:1a:b2:d5:51:95:d1:fa:c7: 5e:77:08:3a:cb:f5:1c:4f:4c:83:ce:fd:a5:b3:c6:43:5d:9e: c6:34:f5:fe:a3:82:a9:f5:6d:97:41:6f:f3:7d:0b:80:85:a5: 7d:b6:5a:75:78:23:74:0f:f7:fa:3f:96:8f:8b:d5:36:17:e3: 51:fd:60:9a:fd:14:15:76:e8:c4:55:25:b3:f6:b1:3c:a4:5b: 02:58:32:7d:e9:92:5d:bf:25:0c:9f:1c:23:82:af:6d:6b:c6: 38:0f:ce:56:d2:2c:63:b0:11:25:0b:26:36:8c:11:bc:61:91: 02:f2:b1:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+r0XEfqFhzsZbjmWHXoq0hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwNzI5MDMwMDU3WhcNMjYwNzMwMDMwMDU3WjAzMTEwLwYDVQQD EyhkNmIwYjI3NGE1MjhhNjgyMjlmZmFkNzZkNTY5MjRkMTkwNTI4MGUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYxojpoaXTNTngb/DEcxIO4CXCKS G5KotKOt4PQZil2w1BHGyj6ZAFzABxnc3CDxS9ayNnUHjrgyGBwCrDIF0u5Guh/T TjaHRUppwePe0LEAn8WfbRUQmgGr1bBl/8PxUieJQ+y8LtsJ5hY+NLKdFgiYZY9X 4euQ6lmcKqiCwyWtkgtqEQRYIAF/1W9dEDeEv4KEL/OGBlN9BTw3Hs2N8tBUB4RF rWVGxRzXwNGE/DDW59f/t60rbh0kwRhmLDlUjkUXwszjcQ7GszwyJN0/WuJli2CI PSoWZB3+UHGQ8B+ewsuOFHcCZ49QLjyyzKf8p8EiAjA+cOQ/0Vzp+JNd2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNawsnSlKKaCKf+tdtVpJNGQUoDhMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnc+T0piS Irgalpd2agmXcGyYnfy8E/W988ooEqpuHhqzBC9bysoc+/xMSComZ7zG1vpe0jmw 8d9nzMecpj6r5cOL8SGNV2npKh1aucealPSIQwDycKYUzVAkBBuSCw9DJfTk4Rry JQfS0v4NRERwqFwQVCP46Xk20d1xY1qBLZdfWdtCblTLhhqy1VGV0frHXncIOsv1 HE9Mg879pbPGQ12exjT1/qOCqfVtl0Fv830LgIWlfbZadXgjdA/3+j+Wj4vVNhfj Uf1gmv0UFXboxFUls/axPKRbAlgyfemSXb8lDJ8cI4KvbWvGOA/OVtIsY7ARJQsm NowRvGGRAvKxag== -----END CERTIFICATE-----Generated at Wed Jul 29 11:43:29 2026 by rpki-client