$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: jKie3P+k1UJr8TZbNuumTXPIEV0JvFfbuOedh80/Aqc= Subject key identifier: E1:B3:75:3D:F9:32:31:5C:CB:A2:02:88:17:3D:B2:DF:16:77:E9:7C Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019FAA50E97AF9CF7BAA4F4C5A3968A1DDA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 13A4 Signing time: Tue 28 Jul 2026 20:00:56 +0000 Manifest this update: Tue 28 Jul 2026 20:00:56 +0000 Manifest next update: Wed 29 Jul 2026 20:00:56 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: 8GqgyuBEGgaxxoSISnrib6CW3Mc.roa (hash: bEjUXEX5Pqm/nOdrF3XYPCSr/Iq3FxwuCHubprCAlnQ=) 3: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 4: IT-G9anfftKLn-JNHdB3nhqaHRg.roa (hash: 8S5tnd+3z64Mysha0HCn0KENKA3IjsNdvVfiIIaQQlM=) 5: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 6: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 7: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 8: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 9: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 10: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 11: mQVVU0yW21pC8IYFai3gUt7H-pE.roa (hash: H5zFgqItky5UWDxQkcovYBDjwRGeK4Gj998+PN5ijik=) 12: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: ZBVhsIFhqnZxdSlYgeMSrn6Ux2PAiJbV/yEr/QOhodA=) 13: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) 14: uCc138TA6I8oKDd9GfZ4DDo3vbk.roa (hash: 9QywaX+xNWWX8/eIoZHqrPbZhEsxSCi5Zlf0wOs/po0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:50:e9:7a:f9:cf:7b:aa:4f:4c:5a:39:68:a1:dd:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jul 28 20:00:56 2026 GMT Not After : Jul 29 20:00:56 2026 GMT Subject: CN=e1b3753df932315ccba20288173db2df1677e97c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:87:c2:2b:81:7a:9b:e3:97:7a:a4:4f:78:c5: 6b:4e:4b:db:f6:96:8a:94:27:df:3f:8d:e7:86:a2: e3:e0:f4:a0:cd:b6:00:07:67:c1:5b:05:5a:93:a6: 23:3f:0a:a8:bc:b9:de:fd:b7:0a:61:ce:e2:f6:f3: f3:1d:c7:cc:1a:02:50:b7:10:d4:65:98:e4:00:2a: a7:73:c8:01:fc:81:c6:62:16:b8:21:9d:f3:ed:bd: df:6f:41:58:6e:49:14:e1:22:5c:e7:85:e3:04:21: 54:83:8f:22:5c:c0:56:3f:f9:2a:86:bb:23:9a:03: 20:76:d6:81:7f:bb:36:1c:33:73:11:bf:4c:1f:f2: 3a:0e:61:37:69:38:00:dc:9e:87:86:1d:0d:b6:45: 41:0b:42:e7:39:6e:5f:2d:fe:25:2a:28:e7:d1:4a: 85:6b:d4:89:16:1e:f6:e6:c2:52:41:73:7a:2c:75: 72:31:b5:57:22:8d:f2:64:c2:55:13:b1:86:6e:f4: 08:68:28:a2:c9:0c:60:3c:c5:c7:db:fd:68:48:bf: 87:f4:35:b5:6c:aa:68:ae:05:6e:bc:ef:77:12:eb: ee:c9:8d:e0:a6:6e:23:0c:11:d5:28:de:7e:6d:30: 59:4b:c1:22:bf:44:d5:4b:64:34:e3:f7:a3:57:0d: 12:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:B3:75:3D:F9:32:31:5C:CB:A2:02:88:17:3D:B2:DF:16:77:E9:7C X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4b:3e:fc:a2:0f:88:a9:33:2d:9d:80:61:88:0e:69:fc:84: f4:89:92:29:3e:8f:ec:3a:70:db:0b:88:17:96:f2:d5:ea:77: f2:bc:0d:e7:51:87:ab:9f:8f:b0:ba:a3:4f:a3:08:64:ea:8f: a7:ee:de:71:a3:16:0a:1c:2b:d9:03:51:3c:52:4e:da:a9:26: 58:f9:1a:c9:85:05:e1:7d:f1:fd:f9:fc:7e:79:11:97:85:76: 5f:2a:d5:51:c1:fd:0e:7d:a8:5e:0f:99:cc:66:55:1d:74:47: 4b:55:3f:8d:40:24:0a:fd:36:b4:9a:b8:61:3a:9e:81:b1:3f: 14:47:07:38:94:0d:e2:e7:79:84:f5:a4:3b:31:cc:17:71:87: 4b:84:19:a5:10:dc:41:4b:f3:7d:98:12:9f:eb:b0:2a:d4:f7: 88:16:61:9d:a8:48:43:59:f2:b8:bb:67:2b:7f:6b:92:02:9a: 65:8a:12:e5:47:91:32:20:ec:88:d1:0b:e1:14:15:ee:e0:59: c3:c4:39:90:2c:65:e3:c5:cb:19:cb:06:87:0d:aa:62:68:3b: 92:30:59:f8:12:f3:48:33:38:23:46:84:f4:39:a3:1b:fe:9a: 2b:78:9f:0d:db:1c:76:ac:56:92:96:d2:9d:0c:ae:6e:f0:ed: bb:be:34:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qUOl6+c97qk9MWjlood2gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwNzI4MjAwMDU2WhcNMjYwNzI5MjAwMDU2WjAzMTEwLwYDVQQD EyhlMWIzNzUzZGY5MzIzMTVjY2JhMjAyODgxNzNkYjJkZjE2NzdlOTdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7ofCK4F6m+OXeqRPeMVrTkvb9paK lCffP43nhqLj4PSgzbYAB2fBWwVak6YjPwqovLne/bcKYc7i9vPzHcfMGgJQtxDU ZZjkACqnc8gB/IHGYha4IZ3z7b3fb0FYbkkU4SJc54XjBCFUg48iXMBWP/kqhrsj mgMgdtaBf7s2HDNzEb9MH/I6DmE3aTgA3J6Hhh0NtkVBC0LnOW5fLf4lKijn0UqF a9SJFh725sJSQXN6LHVyMbVXIo3yZMJVE7GGbvQIaCiiyQxgPMXH2/1oSL+H9DW1 bKporgVuvO93EuvuyY3gpm4jDBHVKN5+bTBZS8Eiv0TVS2Q04/ejVw0S3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGzdT35MjFcy6ICiBc9st8Wd+l8MB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUs+/KIP iKkzLZ2AYYgOafyE9ImSKT6P7Dpw2wuIF5by1ep38rwN51GHq5+PsLqjT6MIZOqP p+7ecaMWChwr2QNRPFJO2qkmWPkayYUF4X3x/fn8fnkRl4V2XyrVUcH9Dn2oXg+Z zGZVHXRHS1U/jUAkCv02tJq4YTqegbE/FEcHOJQN4ud5hPWkOzHMF3GHS4QZpRDc QUvzfZgSn+uwKtT3iBZhnahIQ1nyuLtnK39rkgKaZYoS5UeRMiDsiNEL4RQV7uBZ w8Q5kCxl48XLGcsGhw2qYmg7kjBZ+BLzSDM4I0aE9DmjG/6aK3ifDdscdqxWkpbS nQyubvDtu740UQ== -----END CERTIFICATE-----Generated at Wed Jul 29 00:45:37 2026 by rpki-client