$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json) Hash identifier: 8dz9hf4XiRn697I1NgXsMASv7kOUUiIVWxWk0etnC5s= Subject key identifier: CB:4D:C9:4F:C9:89:BC:7E:74:CF:9F:DB:B6:56:3E:2C:FD:DA:9F:05 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 019FA9AC182A64A7C4F5BFC0AEC44911CCEB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft Manifest number: 17CF Signing time: Tue 28 Jul 2026 17:00:55 +0000 Manifest this update: Tue 28 Jul 2026 17:00:55 +0000 Manifest next update: Wed 29 Jul 2026 17:00:55 +0000 Files and hashes: 1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=) 2: 2DVYJPCuOw7VG2htfdUNo_7kInE.asa (hash: LbgnkRdoQKLKe2iLxngixqfur+lgcj/sW3CZzzMeq2s=) 3: 7awGjvnOLuwHkizQWxmHuCLrtgg.asa (hash: jqxpdDzSYJL8J3lEotC6QolKhYdmA+CZjUvOtdm8fnc=) 4: 8MsLByo1h3OaBnfebYLNr5wUi7s.asa (hash: h8QJVB/q5RH0fYSkRlU6osV1v40WFA8xPDLPZUIF8W0=) 5: 8mjr1R6ZAxArqKrEVDuBknfRZCo.asa (hash: FyvDAOsK5ouRGQZfWInC0JEkh1RQHwIIfD9INW6d7FI=) 6: CQHinzbv6o94wyhsd8omqmTillg.roa (hash: YzWIhoEeIcHtjYrxUYU4G48aFXp4bwAmAKzACW84/QY=) 7: Ec_R_gx9uuWxENMcCsXqUjmf9FA.asa (hash: nSaTw/6ML8HPaeks9+U68v5/iYEKqqf/eJmppOSw45Y=) 8: HBV4KMTbTlGAl9QeIl0o9qHJ3JE.asa (hash: DH9DU6Hcd9jUW1bMh4Wxl6jSVLHN13SF+Z2URPs6X9w=) 9: JY8nDcX1pyy9gv3UYeCVu3Ts2a8.asa (hash: okNoGeT6tcWHbtS0EjoQ1qLQX683zgYAC3N15VDPgf4=) 10: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=) 11: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=) 12: bKMnasx78X1SjuZ69VG_6DO0hLE.asa (hash: Qq7T6I3DGZbcJ7ZwLKkK8uk9JE+JhLf5qJxgDpORjto=) 13: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=) 14: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=) 15: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: 8tERsal+/8Q/XoLGe4HxNQy+MwLXGyMgNiEqA7k9LVw=) 16: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=) 17: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=) 18: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ac:18:2a:64:a7:c4:f5:bf:c0:ae:c4:49:11:cc:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Jul 28 17:00:55 2026 GMT Not After : Jul 29 17:00:55 2026 GMT Subject: CN=cb4dc94fc989bc7e74cf9fdbb6563e2cfdda9f05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6c:af:c6:6e:ea:38:b4:2c:62:21:80:c0:30: 12:da:b1:1d:0f:a2:ac:b4:49:ea:ce:4c:08:7a:95: 30:9b:71:ff:23:52:0a:77:e4:83:df:13:04:31:12: da:c9:3e:b6:90:0e:6d:1e:f4:97:84:8c:eb:ca:ec: fc:33:9c:8c:87:65:54:d3:f5:87:de:20:ce:5d:8a: 5d:35:4f:0b:9e:57:5c:50:97:f1:c7:25:04:3c:a9: 34:c2:f9:17:2c:a7:d1:22:0a:64:1e:5d:02:b7:f9: ec:69:c5:5f:42:f9:be:16:5e:81:40:6e:87:96:4f: 55:e6:f4:6d:2b:8b:96:14:9e:cc:ac:5e:0f:20:bd: f9:5d:cd:87:3a:fa:b9:87:c8:b9:b4:1d:73:a8:7f: f0:26:55:eb:fe:c3:61:3a:25:0a:3d:e4:61:2e:a9: 68:7e:92:5f:75:13:3b:04:74:b2:07:ab:7a:c8:08: 2c:0d:95:b5:54:99:34:0e:66:df:08:cd:61:93:4c: 39:15:76:4f:0d:f4:f9:92:3b:7c:82:3c:79:6a:3e: 40:20:98:35:83:f0:1d:54:bb:53:f3:c4:a8:6c:5c: 00:33:cf:55:c8:42:98:18:01:44:40:cf:25:b8:da: 42:bb:80:d8:bb:e5:77:30:ce:77:d2:f1:77:3b:b5: 90:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:4D:C9:4F:C9:89:BC:7E:74:CF:9F:DB:B6:56:3E:2C:FD:DA:9F:05 X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:cc:57:d8:d7:06:74:0c:87:d0:01:28:95:82:63:bc:0b:69: 39:d3:9e:c5:92:45:b6:05:8d:67:7b:b7:6b:66:37:ff:fb:14: 18:1a:c6:ae:62:26:6c:d3:5c:8d:1b:38:e1:18:83:78:75:cd: 24:b3:c0:14:9f:c6:39:fd:68:b9:75:e4:97:ba:ee:ef:2f:34: a1:e1:1f:a5:8b:d4:ce:1d:98:57:17:28:e3:eb:c6:b0:3e:d2: b6:95:9e:cd:4c:c5:c9:a9:e6:30:7d:03:27:4a:88:44:2f:e0: fa:1c:da:f3:ea:11:ee:9c:32:58:2b:91:fb:8b:cd:38:ae:4d: 54:2e:cf:0f:ec:cd:1c:7a:b4:92:e3:a6:b9:1a:85:d6:6a:2c: 4e:76:88:c9:98:35:74:d1:14:58:02:63:38:77:28:99:a9:f5: 02:a6:f9:d4:bb:f0:74:02:c5:37:17:78:94:f6:80:7f:36:4b: 6d:2c:16:97:a4:4e:6c:76:7e:32:7e:a1:58:1b:87:09:aa:ea: 58:59:b6:33:42:fd:29:85:ba:c4:8f:2b:ea:7e:ed:ff:38:40: 99:f4:4b:82:af:33:9c:13:eb:5b:1c:15:60:bc:7b:b9:00:f8: 4e:f7:c1:c8:6f:ce:df:03:53:87:fb:25:5a:61:f9:c2:57:28: 0e:ab:d9:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+prBgqZKfE9b/ArsRJEczrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYwNzI4MTcwMDU1WhcNMjYwNzI5MTcwMDU1WjAzMTEwLwYDVQQD EyhjYjRkYzk0ZmM5ODliYzdlNzRjZjlmZGJiNjU2M2UyY2ZkZGE5ZjA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWyvxm7qOLQsYiGAwDAS2rEdD6Ks tEnqzkwIepUwm3H/I1IKd+SD3xMEMRLayT62kA5tHvSXhIzryuz8M5yMh2VU0/WH 3iDOXYpdNU8LnldcUJfxxyUEPKk0wvkXLKfRIgpkHl0Ct/nsacVfQvm+Fl6BQG6H lk9V5vRtK4uWFJ7MrF4PIL35Xc2HOvq5h8i5tB1zqH/wJlXr/sNhOiUKPeRhLqlo fpJfdRM7BHSyB6t6yAgsDZW1VJk0DmbfCM1hk0w5FXZPDfT5kjt8gjx5aj5AIJg1 g/AdVLtT88SobFwAM89VyEKYGAFEQM8luNpCu4DYu+V3MM530vF3O7WQrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMtNyU/Jibx+dM+f27ZWPiz92p8FMB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhsxX2NcG dAyH0AEolYJjvAtpOdOexZJFtgWNZ3u3a2Y3//sUGBrGrmImbNNcjRs44RiDeHXN JLPAFJ/GOf1ouXXkl7ru7y80oeEfpYvUzh2YVxco4+vGsD7StpWezUzFyanmMH0D J0qIRC/g+hza8+oR7pwyWCuR+4vNOK5NVC7PD+zNHHq0kuOmuRqF1mosTnaIyZg1 dNEUWAJjOHcoman1Aqb51LvwdALFNxd4lPaAfzZLbSwWl6RObHZ+Mn6hWBuHCarq WFm2M0L9KYW6xI8r6n7t/zhAmfRLgq8znBPrWxwVYLx7uQD4TvfByG/O3wNTh/sl WmH5wlcoDqvZ1w== -----END CERTIFICATE-----Generated at Tue Jul 28 19:49:40 2026 by rpki-client