$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: bpUmJK90zU3B5oM52sNZjuR2aWmS0S8HdcxhMAecr8Y= Subject key identifier: 51:FF:EB:B5:87:8B:CA:F8:82:F9:C3:4A:43:90:53:41:53:2E:5F:5A Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019FA9750E73AA907706ECAC85BAB5F12D66 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 13E1 Signing time: Tue 28 Jul 2026 16:00:48 +0000 Manifest this update: Tue 28 Jul 2026 16:00:48 +0000 Manifest next update: Wed 29 Jul 2026 16:00:48 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: UaWC52VxbVN4lMQhDaqh5RSc5aQCK+9c4OSSTVsGZN0=) 2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=) 3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=) 4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=) 5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=) 6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=) 7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=) 8: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=) 9: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=) 10: iglmx-ya_CBijqxO6oqYah-MgJk.roa (hash: nW9fmQ0ZJGvfNsh2tiuvFsmSbRN+a3nAUodyjJH9UYE=) 11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=) 12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=) 13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=) 14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=) 15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:75:0e:73:aa:90:77:06:ec:ac:85:ba:b5:f1:2d:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Jul 28 16:00:48 2026 GMT Not After : Jul 29 16:00:48 2026 GMT Subject: CN=51ffebb5878bcaf882f9c34a43905341532e5f5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f3:7d:02:ed:e4:79:9f:fd:b0:9e:d3:49:ca: 52:7f:dd:3e:f4:b1:14:47:82:ac:0d:9e:f8:42:71: d0:57:de:19:5c:ff:4a:f1:e3:96:52:9c:0e:e4:8d: 84:bc:cf:ef:e3:ad:95:44:2e:ee:e4:ae:1c:99:e5: d7:86:a3:13:84:04:e1:5d:49:ed:15:27:28:30:fe: ea:5a:e7:d1:ea:74:cb:ec:19:29:b5:d7:52:b7:55: 88:40:ab:b9:03:76:82:cd:25:1d:61:3b:f7:90:de: 8b:35:02:de:fa:a9:d0:90:2e:4f:f0:72:b2:83:9d: 77:7c:6e:df:d7:ff:79:77:7b:8c:99:66:7d:b9:e6: ae:42:2f:19:8b:0c:92:ed:8b:4b:80:ae:ec:a9:7f: 04:e5:75:d4:8e:81:51:5c:82:dc:f8:a6:77:b4:e9: 40:5b:13:9f:dd:49:c2:5d:02:c3:47:ef:c3:89:92: 03:0f:0a:a6:c6:cb:2a:62:97:be:59:c6:56:29:23: d8:3e:8c:0d:65:cd:b8:3e:d3:65:38:ac:6a:4f:c0: b5:a9:53:c6:5e:bc:c7:9d:3f:0b:3b:67:32:41:b4: 0e:39:15:15:83:41:00:06:3a:23:0d:32:1e:ed:3a: e9:0a:cc:26:7d:e6:34:4c:e1:72:18:ce:d2:0a:c8: b4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:FF:EB:B5:87:8B:CA:F8:82:F9:C3:4A:43:90:53:41:53:2E:5F:5A X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4a:b8:d3:9a:8d:1b:c6:45:08:d6:85:28:8f:1a:39:52:f6: ce:c2:08:af:bc:ee:38:54:ee:2b:e1:2c:96:78:c8:35:63:f5: 5d:1d:c0:e8:1d:b9:76:04:67:b7:bb:6c:e5:6f:7b:56:a1:9c: 18:90:e8:74:d9:06:a7:68:46:52:ab:dd:fd:e1:b8:78:73:36: a7:6e:6d:04:9f:ff:cc:17:91:0b:0d:b9:1c:ab:ed:41:3e:58: 29:e0:72:81:53:83:23:bd:fa:be:1e:4a:e2:53:78:54:d5:a8: ad:77:a9:fc:f5:10:4f:4d:54:c9:ce:8a:d7:c8:da:2b:46:6f: b5:75:b7:c5:94:d5:69:38:fa:41:b3:c1:a9:18:b9:15:ae:88: 5f:5a:04:87:bc:61:6a:48:5a:c9:40:53:7a:70:3a:1f:ca:eb: f8:56:37:2d:6e:3c:43:0f:e0:d9:7c:32:34:0d:53:37:d9:b4: aa:e2:23:e7:f8:0f:92:64:18:27:b3:40:05:3d:1b:a2:1e:2e: a9:78:de:35:17:d3:ef:2e:6c:be:ec:59:4e:2d:4f:cf:c2:3c: e9:9d:07:c3:47:7d:f3:13:73:ee:f6:be:e1:54:2d:e4:79:56: 2f:2f:ca:b2:31:30:2c:1d:ab:73:bb:fd:b0:0c:c0:be:89:3c: 41:3c:f9:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pdQ5zqpB3Buyshbq18S1mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwNzI4MTYwMDQ4WhcNMjYwNzI5MTYwMDQ4WjAzMTEwLwYDVQQD Eyg1MWZmZWJiNTg3OGJjYWY4ODJmOWMzNGE0MzkwNTM0MTUzMmU1ZjVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvN9Au3keZ/9sJ7TScpSf90+9LEU R4KsDZ74QnHQV94ZXP9K8eOWUpwO5I2EvM/v462VRC7u5K4cmeXXhqMThAThXUnt FScoMP7qWufR6nTL7BkptddSt1WIQKu5A3aCzSUdYTv3kN6LNQLe+qnQkC5P8HKy g513fG7f1/95d3uMmWZ9ueauQi8ZiwyS7YtLgK7sqX8E5XXUjoFRXILc+KZ3tOlA WxOf3UnCXQLDR+/DiZIDDwqmxssqYpe+WcZWKSPYPowNZc24PtNlOKxqT8C1qVPG XrzHnT8LO2cyQbQOORUVg0EABjojDTIe7TrpCswmfeY0TOFyGM7SCsi0eQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFH/67WHi8r4gvnDSkOQU0FTLl9aMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0q405qN G8ZFCNaFKI8aOVL2zsIIr7zuOFTuK+EslnjINWP1XR3A6B25dgRnt7ts5W97VqGc GJDodNkGp2hGUqvd/eG4eHM2p25tBJ//zBeRCw25HKvtQT5YKeBygVODI736vh5K 4lN4VNWorXep/PUQT01Uyc6K18jaK0ZvtXW3xZTVaTj6QbPBqRi5Fa6IX1oEh7xh akhayUBTenA6H8rr+FY3LW48Qw/g2XwyNA1TN9m0quIj5/gPkmQYJ7NABT0boh4u qXjeNRfT7y5svuxZTi1Pz8I86Z0Hw0d98xNz7va+4VQt5HlWLy/KsjEwLB2rc7v9 sAzAvok8QTz5Jg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:39:25 2026 by rpki-client