$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: R/M2FI8r6Elcv2boatrPSVlGixwU+dczRNr7cpeP4xM= Subject key identifier: BD:4E:91:F4:B7:01:9D:E5:77:E3:2C:30:46:2D:4A:91:F9:0F:C7:D8 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019FA8624D5C2A847D600EBB5E01B26E5146 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 13A3 Signing time: Tue 28 Jul 2026 11:00:42 +0000 Manifest this update: Tue 28 Jul 2026 11:00:42 +0000 Manifest next update: Wed 29 Jul 2026 11:00:42 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: 8GqgyuBEGgaxxoSISnrib6CW3Mc.roa (hash: bEjUXEX5Pqm/nOdrF3XYPCSr/Iq3FxwuCHubprCAlnQ=) 3: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 4: IT-G9anfftKLn-JNHdB3nhqaHRg.roa (hash: 8S5tnd+3z64Mysha0HCn0KENKA3IjsNdvVfiIIaQQlM=) 5: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 6: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 7: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 8: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 9: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 10: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 11: mQVVU0yW21pC8IYFai3gUt7H-pE.roa (hash: H5zFgqItky5UWDxQkcovYBDjwRGeK4Gj998+PN5ijik=) 12: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: +Mptce4chUjKzFRgfW+/hK4sHL1prZRbpiUW2sTBFB0=) 13: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) 14: uCc138TA6I8oKDd9GfZ4DDo3vbk.roa (hash: 9QywaX+xNWWX8/eIoZHqrPbZhEsxSCi5Zlf0wOs/po0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 11:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:62:4d:5c:2a:84:7d:60:0e:bb:5e:01:b2:6e:51:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jul 28 11:00:42 2026 GMT Not After : Jul 29 11:00:42 2026 GMT Subject: CN=bd4e91f4b7019de577e32c30462d4a91f90fc7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6a:97:74:f2:6e:c6:76:a1:7e:cf:13:6f:ae: 07:af:26:ca:8a:4f:28:e7:16:cc:32:ce:82:1b:24: b4:2a:2c:e2:8f:03:18:09:ef:2d:75:5b:e0:4f:da: 5c:07:42:93:06:60:b9:e0:23:ac:a6:3e:26:b7:2c: bf:41:e5:a1:ee:57:af:9e:70:0c:2a:c3:13:fd:17: 8c:ce:9e:5d:60:ce:81:27:49:61:20:44:c7:a7:02: 5e:08:b2:8e:9b:f5:3e:e1:9c:99:ab:df:e8:cb:31: 6c:ae:92:3b:b5:3e:f2:24:5b:89:82:84:7b:ce:5f: 5b:6d:b9:1e:4a:69:31:ec:26:e9:65:e7:2e:24:02: 05:c4:75:e8:02:45:c8:e6:ba:e7:10:ba:28:4a:e5: d6:75:b1:a3:a9:75:f4:9c:89:10:0b:56:52:68:1f: 45:9b:a1:ba:cd:9b:bb:a3:ec:88:96:55:a6:46:0a: b6:c8:ae:43:14:02:48:38:1c:02:88:53:f7:00:eb: 74:5b:52:05:5c:ac:ca:92:5d:a1:e0:cb:58:fc:77: fe:95:00:e7:46:cb:a4:a2:f6:c0:46:90:bc:96:84: f0:91:0c:a8:cf:70:aa:82:d2:c4:56:17:a8:6e:a8: ee:06:0d:46:c8:73:c4:31:af:10:5b:b2:0a:17:35: 73:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4E:91:F4:B7:01:9D:E5:77:E3:2C:30:46:2D:4A:91:F9:0F:C7:D8 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:9e:9d:b6:e8:c6:3a:ca:ed:1a:0b:06:0f:55:eb:5f:4e:14: 5d:c9:3b:05:ef:23:d5:8a:57:f8:fa:3a:eb:7c:53:b0:d9:e5: 97:e8:4c:0a:17:ce:7e:bb:d9:be:33:fc:f5:6c:c0:56:54:15: 9f:a8:46:95:94:ce:f7:c4:38:ea:aa:63:b9:98:e2:94:5a:2a: 99:8c:0b:ed:57:26:e3:10:4d:d5:89:c9:3c:89:50:d4:28:47: 59:c2:86:ce:20:71:5e:c9:34:67:b6:a7:08:da:9e:ca:53:c7: b2:60:60:20:59:29:5a:8a:1a:28:7b:d5:35:d2:00:b9:c6:da: 81:a8:1e:a0:43:07:e1:cf:7b:a7:0a:20:1b:54:ba:54:48:ed: af:d5:eb:b6:36:34:a1:e0:f9:10:b1:92:4d:cc:9f:11:52:d5: 59:ca:33:58:99:17:bd:1d:64:e6:8c:91:aa:eb:28:81:b8:ab: 0c:a1:32:05:42:e7:72:4d:09:40:55:9e:63:cd:ae:c1:59:34: 28:ff:ae:d5:69:37:05:88:9e:f4:6d:d7:62:27:52:11:e2:63: ab:a7:ad:85:79:32:7f:f9:fd:81:8d:65:e6:c5:25:ca:c1:00: fc:6f:a5:93:37:25:d5:e4:48:3e:30:66:1f:ff:26:ae:00:78: 3c:5b:1f:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oYk1cKoR9YA67XgGyblFGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwNzI4MTEwMDQyWhcNMjYwNzI5MTEwMDQyWjAzMTEwLwYDVQQD EyhiZDRlOTFmNGI3MDE5ZGU1NzdlMzJjMzA0NjJkNGE5MWY5MGZjN2Q4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomqXdPJuxnahfs8Tb64HrybKik8o 5xbMMs6CGyS0KizijwMYCe8tdVvgT9pcB0KTBmC54COspj4mtyy/QeWh7levnnAM KsMT/ReMzp5dYM6BJ0lhIETHpwJeCLKOm/U+4ZyZq9/oyzFsrpI7tT7yJFuJgoR7 zl9bbbkeSmkx7CbpZecuJAIFxHXoAkXI5rrnELooSuXWdbGjqXX0nIkQC1ZSaB9F m6G6zZu7o+yIllWmRgq2yK5DFAJIOBwCiFP3AOt0W1IFXKzKkl2h4MtY/Hf+lQDn RsukovbARpC8loTwkQyoz3CqgtLEVheobqjuBg1GyHPEMa8QW7IKFzVzmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1OkfS3AZ3ld+MsMEYtSpH5D8fYMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbJ6dtujG OsrtGgsGD1XrX04UXck7Be8j1YpX+Po663xTsNnll+hMChfOfrvZvjP89WzAVlQV n6hGlZTO98Q46qpjuZjilFoqmYwL7Vcm4xBN1YnJPIlQ1ChHWcKGziBxXsk0Z7an CNqeylPHsmBgIFkpWooaKHvVNdIAucbagageoEMH4c97pwogG1S6VEjtr9XrtjY0 oeD5ELGSTcyfEVLVWcozWJkXvR1k5oyRqusogbirDKEyBULnck0JQFWeY82uwVk0 KP+u1Wk3BYie9G3XYidSEeJjq6ethXkyf/n9gY1l5sUlysEA/G+lkzcl1eRIPjBm H/8mrgB4PFsfmg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:32:01 2026 by rpki-client