$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: PQkVow97QlrWHWNBKWgryIurI6G7+ZWn5CRpOL3e3Xw= Subject key identifier: 22:DB:C0:81:04:8E:C2:19:9E:4B:D7:38:35:11:43:0D:DB:90:87:FE Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 019FAA87A0B21FDBF39875053AFDD5953827 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 1892 Signing time: Tue 28 Jul 2026 21:00:42 +0000 Manifest this update: Tue 28 Jul 2026 21:00:42 +0000 Manifest next update: Wed 29 Jul 2026 21:00:42 +0000 Files and hashes: 1: 1-YByaiMeGaD1s6w4s77GCgHnrXY.roa (hash: S1szHNMiYggU2bXWCJ0y5Z9O0Xe6ogWq7kcI9RRHPZA=) 2: CPZG4XxfF0vIUqKLlml-DnAhI78.roa (hash: yghX+xOCfCSz2UxV0M4ErScOYQQ+0s+V03bXtP9h8Jg=) 3: ItbVNmV7D7Xz58HIXd8OUA10ZIk.roa (hash: 60qPs4eG3CJz9Jr0RllpZz1JwhEoHqZ3z8/Wkwni7OI=) 4: J0cgNdbp82xwSAhTcid--cSnvw8.roa (hash: NnNH2xB6swJJVG31LQ5vR+z5/IV/mvlmseViZQ49RZ0=) 5: N1eNUoekf98MkfeCq0d0_JdTGoc.roa (hash: nz2HilLDytUZJAVqDqHSq82uJ9Gp52F9hu+UGahbmAM=) 6: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: NE4FqVCpr/QwlZ5a/yNoG6oYMVIgylUhvXpvwD7lwug=) 7: YIodQuf58n6NPD3S4ZwYWU4G05Q.roa (hash: hAnlQcSr3iSrVyOVrTtnTihoMBTYOjvFhdRAdMoSe+c=) 8: fg2QbP6_NHroFLcB4VqlEsdsL78.asa (hash: c+f7ud2GD/XnZWo7d+BVUUMg4a2Tuu0iakas2CyyTF0=) 9: htEsk8is-3HwvISfO35xc7PdVM0.roa (hash: uHKztBgJ/wsTm8pbbSDKTc7meGtHJJGVbbj9VG266W0=) 10: j3hTOTMf81Nkcr0TsIH3WU1Dvd4.roa (hash: QfmXcXNN1Wd563NtKkGqTEqV9zXIuZBoL2/KRKrrmGo=) 11: r1wL1w6v-FmiJM6wTPegvCqzZVs.roa (hash: PHGHhjoRjtnu5vlNwMrqr/W1vzuZLgPWKcRcTuuiLy4=) 12: rbHMZH-yOzDb95f5uZ_DwfVDX-g.roa (hash: hyrGoGmheB3UHC4U69Q9VZBQns7Aig366oUvSyshDX8=) 13: uBecXrloW4prw2ylSn0_Ivng2VY.roa (hash: yFhPh9rE6yKyFP6xCMVODHQKX7tLrcXL5wGXXwvK1tU=) 14: vvun3eikZcpW6UjAhYfVCVsm-AI.roa (hash: U39ycL4LLB92O8NzJ38ORyHzqu/08gaa/sDm7/jkQGw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 21:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:87:a0:b2:1f:db:f3:98:75:05:3a:fd:d5:95:38:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Jul 28 21:00:42 2026 GMT Not After : Jul 29 21:00:42 2026 GMT Subject: CN=22dbc081048ec2199e4bd7383511430ddb9087fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:20:15:cd:2b:5b:f2:f5:52:d7:bc:26:9b:a2: 4e:79:fe:89:e9:37:50:ec:e8:f7:6e:13:82:2e:3f: 71:e8:93:11:8c:b5:63:95:0c:7d:60:b2:0e:e8:b7: f8:6a:94:03:48:45:77:ef:be:64:a1:56:bf:54:df: fb:73:92:61:08:0c:5c:76:4a:a5:8c:03:08:10:ad: 19:df:ed:9a:03:52:c1:a0:1c:ff:9a:e4:b8:2a:5d: 00:47:c4:22:9e:3d:61:85:ab:b9:6d:d1:f1:01:a0: 22:90:a7:b4:1f:fc:bf:2a:e4:cd:af:a6:4b:73:81: ef:e6:e6:8e:86:69:66:33:a5:bc:3a:93:8a:2e:96: 78:12:43:73:e8:bb:f1:bb:c5:21:87:63:a5:d3:82: e3:04:22:51:67:cc:cf:17:88:40:69:ce:5d:e4:a9: 8b:1e:e8:61:cb:a1:4b:1e:23:b7:95:3d:2a:ce:78: 7d:a3:34:fa:46:16:1a:e6:3f:c3:d9:7c:ce:80:3f: 3f:06:28:52:36:86:b0:5b:4f:d1:60:26:5e:a7:d1: 35:9b:50:f2:7e:28:54:26:5d:f6:80:48:0c:5d:11: dd:4d:c4:7c:b5:b4:f9:2e:e7:74:ab:42:d9:61:a3: c7:df:83:3a:29:98:5b:e0:45:74:07:29:64:4c:01: d4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:DB:C0:81:04:8E:C2:19:9E:4B:D7:38:35:11:43:0D:DB:90:87:FE X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:1b:2a:cc:64:f3:f5:60:64:fc:f7:5a:3e:85:0b:9c:4a:ae: a3:32:8b:87:3c:72:65:a3:3e:4b:c6:81:69:68:31:03:85:2e: bb:b1:58:95:05:e3:53:db:33:14:26:47:1e:96:87:21:6a:71: c0:0f:b7:b0:3f:ad:7d:5a:9a:5b:3e:cd:3b:11:61:bd:ee:55: d0:31:44:d8:bb:cd:50:b9:1f:64:76:d5:83:e1:33:f0:68:27: 94:99:16:5e:cb:39:c2:63:bf:f5:f4:d2:15:f2:b8:64:31:9e: 74:d3:a5:63:3c:58:8d:99:09:f7:92:ca:55:fa:62:a5:b8:1c: 41:e1:c7:98:b2:ac:59:80:71:84:a5:09:5c:dd:7f:47:78:46: 0a:ab:67:f7:e3:4a:db:8e:98:3c:ee:08:2b:95:37:24:80:ee: e5:eb:48:86:d7:c3:43:b1:ab:31:33:fd:53:ef:04:02:f0:42: ad:de:c8:db:96:39:27:d5:25:14:27:b1:98:98:c4:bf:93:2c: b2:f3:bf:0c:8b:86:b6:30:af:56:cd:10:6c:f1:13:06:8d:ad: 02:11:a9:5e:cb:7f:1c:ee:78:f4:00:14:b9:8c:15:0d:20:e9: a1:90:0d:dd:c1:f2:48:5d:10:a0:73:a1:40:72:48:d7:d2:26: 5d:7a:f6:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qh6CyH9vzmHUFOv3VlTgnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjYwNzI4MjEwMDQyWhcNMjYwNzI5MjEwMDQyWjAzMTEwLwYDVQQD EygyMmRiYzA4MTA0OGVjMjE5OWU0YmQ3MzgzNTExNDMwZGRiOTA4N2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyAVzStb8vVS17wmm6JOef6J6TdQ 7Oj3bhOCLj9x6JMRjLVjlQx9YLIO6Lf4apQDSEV3775koVa/VN/7c5JhCAxcdkql jAMIEK0Z3+2aA1LBoBz/muS4Kl0AR8Qinj1hhau5bdHxAaAikKe0H/y/KuTNr6ZL c4Hv5uaOhmlmM6W8OpOKLpZ4EkNz6Lvxu8Uhh2Ol04LjBCJRZ8zPF4hAac5d5KmL Huhhy6FLHiO3lT0qznh9ozT6RhYa5j/D2XzOgD8/BihSNoawW0/RYCZep9E1m1Dy fihUJl32gEgMXRHdTcR8tbT5Lud0q0LZYaPH34M6KZhb4EV0BylkTAHUXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLbwIEEjsIZnkvXODURQw3bkIf+MB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQxsqzGTz 9WBk/PdaPoULnEquozKLhzxyZaM+S8aBaWgxA4Uuu7FYlQXjU9szFCZHHpaHIWpx wA+3sD+tfVqaWz7NOxFhve5V0DFE2LvNULkfZHbVg+Ez8GgnlJkWXss5wmO/9fTS FfK4ZDGedNOlYzxYjZkJ95LKVfpipbgcQeHHmLKsWYBxhKUJXN1/R3hGCqtn9+NK 246YPO4IK5U3JIDu5etIhtfDQ7GrMTP9U+8EAvBCrd7I25Y5J9UlFCexmJjEv5Ms svO/DIuGtjCvVs0QbPETBo2tAhGpXst/HO549AAUuYwVDSDpoZAN3cHySF0QoHOh QHJI19ImXXr25g== -----END CERTIFICATE-----Generated at Wed Jul 29 02:21:48 2026 by rpki-client