$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft File: v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json) Hash identifier: IZAach6LUxKiLizClrZJjatO4c2WH/WDZ83FEL2uFSw= Subject key identifier: 8C:EC:95:EB:D6:27:B1:CD:70:A4:B6:D1:93:B4:07:B9:7F:8E:EE:0A Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019FA7F4EE29EA5FB26F248226EB4F355774 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft Manifest number: 16D5 Signing time: Tue 28 Jul 2026 09:01:14 +0000 Manifest this update: Tue 28 Jul 2026 09:01:14 +0000 Manifest next update: Wed 29 Jul 2026 09:01:14 +0000 Files and hashes: 1: 0OCOakcDI9m6fmr8VzZ-9Hd4VgU.roa (hash: cTnCK/Fe0k+kOxPdh3z5AeFWC42FsqaaV1sppIVkCH8=) 2: 0kXS2WjCCmGHS0asFcjHjq0ESdA.roa (hash: NcRJslp6Cst9ywqKbBrXM4eKGnOe3QAwekOYiXZ066c=) 3: 0xTXzw65S6SAKbF2ypbnQR8flBY.roa (hash: KPGmo03a7ngvQ5hpXQozCZzOmDre3xu+doPSkJFQPEI=) 4: 2j9VUbHTcDA1b90rifQ58Inn2f8.roa (hash: Lgs88tbxXG61dcN+ofeHaAXMJYWju9945L7ezP0hATg=) 5: 35-RC4YDZpErq0qZEtlrtSl4SMw.roa (hash: FOYizqXKHMLapyQGMwFyEz9qVvs69XW13Uh469YQNIU=) 6: 4sHcg46CKKDvMyDChpwWDh0Egl4.roa (hash: w75qFMjuUV9F/cJXn+EoOEYDQsrts8ozrq3p5+rPA14=) 7: 81eHHbv2rPJYI93isZ476W6B7zM.roa (hash: rilqDOE3ousOR3KDCOC0oQFrfowQVUhBVFfyKLTOWP8=) 8: DNKVTDfCdlLHW9MrVOz_V6C3F8g.roa (hash: uasjkvXg+88xW1j9weGfc4+Lwe8xp4HgPIRySLA8dcs=) 9: EfB0MxJFEM8P-mBHWzWP2g-vuRg.roa (hash: 5I3dde4Z0pGqorT+Es4EH70Wh9X5Be4WVxahJvSkgLw=) 10: JFQGAOGdlBoIozV3Kg-vDWtfVao.roa (hash: Z1+P9csIB0WjKmg8chhTuD4xrRsrTBYnir8esGAQC6M=) 11: K2kXXUMGcaKa7rD6RGsaKEmV9Wg.roa (hash: 4AJJT3KGPCqJR4OBHfMLmZzKwbu+xSqi/JOf68BFrzw=) 12: LmmhI1Z3bNWasqW3KYfLikF4t-g.roa (hash: uSBHG/9Uy3S7auLYGJFCjkn17D9/u94iRRv7BQ0qdiA=) 13: MdUIZIJ4fMdMmnWpGakpfnXUhu8.roa (hash: 0v7DpVyOb9ZenfEj+uZlG8WAK7SkWOmPeuDGZI04ctc=) 14: PY9DCNlwLD7ejVBXpUKsZjzW_qs.roa (hash: WsUPkIgFvWT/RRRySu92Di42VU11w6gI/VSIsfWKIOw=) 15: SPffAYS64U7u27GBmdl07WWErQg.roa (hash: vr6LcPLMe9RSzc82PbDWlTuc7hI9MZj2/NAkezEnd3I=) 16: WZWGYo1-x5iiMmTQB8f7pscBQ5Q.roa (hash: IhIWhgnItgwnoOUYHAHgKAbDJ1m2IH1w4DFw6ZTXRMU=) 17: ZI-MShlThOM7MmKhvKsXH3X5V7o.roa (hash: c+aesfiAR4qnVM9MuqdOghCy4EQQegO3MHfJlwBvics=) 18: e-D3VZHxEnpb_XDj-m8FygPLC-s.roa (hash: WK2WT9RvaBwGkJpwbeKYdSX5XZW7KaarQn4kK4Tt/3Q=) 19: f3fqu4tTHl2vcBZdGXPsMyAjKYU.roa (hash: YnhL3R6TQw9jOlB6ezNd4A83xIKsm64Z7pwt9aESzIw=) 20: fjse87W44P51UOVIGX0DCsEjxWY.roa (hash: D/rrQpS+2FkVVqoE2nZZbtPj0yMnQI478zTpRsOTiWY=) 21: gWgAGHArAQssrrGXIRyn4VHTFXU.roa (hash: B6SPcVHep6hBRDtoMqsctR3R17FHDgKNs8lCIVE2720=) 22: h8D1gq051tBYJNb_Y4nlpSpaChc.roa (hash: 1sY2UtAw3qppMv1YMtACKA33nss4PyBDyZbo40TbUgc=) 23: hX8tn5PQD1Q3xnN4zBUDg2Tf8lM.roa (hash: 026nSWMHgQU56Hi3MyG9cbKQuQzStIRUijp25hynlD4=) 24: l39dZZ0P_zEgIWjx5h_nh-V8Wzo.roa (hash: M6ukkIyDO7550O9ZOGR/gd5QK+nifak36YjiL0bGzAE=) 25: n9hfxlzMrKjl_ez1Jru0AUxKJqo.roa (hash: wMMEhDIFHLMDz45INJ2mEHVBm4ljHgWChRaMaS+Z7dk=) 26: pP2Eqoq22dtdkWjab3oZAROYYF4.roa (hash: da24Wj5a2cpI62MpsJZPfy8BAzcyJwxfNfWbY87N+KQ=) 27: qzMo16nmO71L2QshypR-MMDDoCo.roa (hash: l9OxB1GKfb3RigjCep1J7ekawkvlh+mNfXTsSVv2Rdo=) 28: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: uTd5w78gKFkRDd3SfKue12AbvbPYuICb7Mv9Iu0/nOc=) 29: vkMFwtq4YF4EVCLGJI8W54e9cDU.roa (hash: fYkoWxoHIoRzoqnLvhuQiUpyD9UJxfV83j77hWPTRPw=) 30: wlK8DH6vvBCSGiPEt6TQ8ln7xrI.roa (hash: 95bSqsPZ8Qh5qUbW4eyvVKJiv3x2zL+UElIQsl4lr1A=) 31: yvCCpk4_0puwnurWWSMz-GRqa9g.roa (hash: plmFtmIHnJ65gF4go6f2ImnNM5YPATO4+CT4TY1gN5c=) 32: zSbJ_zmLsvnYD4Tj3NdHFOYhGs0.roa (hash: DJQ4yfm4mN/el8pVTO9ZIBKqMkmNeH54/xwSWHyykMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 09:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:f4:ee:29:ea:5f:b2:6f:24:82:26:eb:4f:35:57:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jul 28 09:01:14 2026 GMT Not After : Jul 29 09:01:14 2026 GMT Subject: CN=8cec95ebd627b1cd70a4b6d193b407b97f8eee0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:73:32:e9:3a:e7:82:61:76:57:23:db:20:88: d8:49:e6:e5:ea:16:f2:e3:0f:25:7c:58:be:96:59: 7b:ec:aa:43:81:22:86:8e:e8:fd:b4:e8:a7:bc:07: 6c:67:f9:f6:fe:b8:e8:6c:77:8a:ef:14:72:7f:44: fe:1b:ac:be:09:b9:0f:36:74:82:eb:f7:5f:65:82: df:60:0d:cf:68:c0:68:c9:fb:6d:f9:c6:7d:68:b7: b6:1a:7b:be:9e:e2:e3:7e:a4:65:81:49:9f:ce:5d: 5e:31:a2:6d:ad:3a:01:9b:3c:7a:df:f2:66:06:14: 18:12:23:6d:ac:99:0b:e0:b8:de:b5:30:18:ef:61: c8:64:d5:bd:bc:7a:b4:36:04:0a:c0:02:a3:a2:74: 07:ea:07:0b:02:0c:fa:9b:74:be:63:51:42:b3:12: bb:65:af:bd:04:e0:13:06:a4:2a:25:e9:b4:ec:3f: 75:22:7e:8d:26:c5:9a:b6:d4:92:37:01:ab:6b:fa: 51:95:3a:1d:1e:e9:94:66:83:d1:4d:ac:c5:89:af: 24:72:1e:06:9c:b2:a1:9e:b2:94:8a:5e:00:06:f1: 34:28:8f:5d:48:c3:e0:c1:ca:68:a3:d1:73:4e:91: 6a:d5:8d:de:4b:be:75:72:c9:e0:31:c9:bd:3d:7f: d0:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:EC:95:EB:D6:27:B1:CD:70:A4:B6:D1:93:B4:07:B9:7F:8E:EE:0A X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:bf:28:59:17:a3:72:8e:a3:b9:03:85:1d:25:fb:34:f7:1a: 3e:7f:f0:98:4a:49:ee:4e:49:e0:ab:0e:18:a0:51:77:06:cf: d6:21:f7:d7:68:d5:cd:89:b6:88:fc:2d:5d:95:21:d3:6e:65: 49:45:2a:27:5c:44:17:a8:0d:07:6a:a6:1d:9c:ee:dd:73:9e: 83:ee:ba:b0:15:9d:10:43:2e:92:6a:34:9e:75:c1:64:1d:42: 40:44:f6:13:e1:a7:f5:17:66:4c:9d:e3:f1:90:36:d7:7c:59: aa:fc:e1:7e:02:3f:cf:02:9a:3f:79:58:60:cd:31:e3:91:49: 92:6a:d0:a1:7a:7d:70:7a:ac:e0:3e:ee:e7:02:9c:ee:94:62: 6e:f7:ad:56:a7:22:4f:3b:83:36:57:5f:43:43:46:62:fe:59: f6:40:11:96:f1:93:8f:04:f0:ef:8d:bd:21:18:fb:18:d3:80: 2e:25:5b:2e:0f:77:f2:dd:17:e6:b8:46:e1:6a:f6:fe:f0:ea: b1:45:9f:6f:6a:32:4e:17:db:04:93:83:a8:fd:62:5b:c1:bd: 01:6c:17:e8:72:d4:3a:63:f6:ad:b1:8c:41:1c:b7:55:9f:64: 79:a6:dd:bc:74:19:b1:0f:8e:bd:88:80:59:51:7f:27:05:df: 48:fd:4f:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+n9O4p6l+ybySCJutPNVd0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwNzI4MDkwMTE0WhcNMjYwNzI5MDkwMTE0WjAzMTEwLwYDVQQD Eyg4Y2VjOTVlYmQ2MjdiMWNkNzBhNGI2ZDE5M2I0MDdiOTdmOGVlZTBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznMy6TrngmF2VyPbIIjYSebl6hby 4w8lfFi+lll77KpDgSKGjuj9tOinvAdsZ/n2/rjobHeK7xRyf0T+G6y+CbkPNnSC 6/dfZYLfYA3PaMBoyftt+cZ9aLe2Gnu+nuLjfqRlgUmfzl1eMaJtrToBmzx63/Jm BhQYEiNtrJkL4LjetTAY72HIZNW9vHq0NgQKwAKjonQH6gcLAgz6m3S+Y1FCsxK7 Za+9BOATBqQqJem07D91In6NJsWattSSNwGra/pRlTodHumUZoPRTazFia8kch4G nLKhnrKUil4ABvE0KI9dSMPgwcpoo9FzTpFq1Y3eS751csngMcm9PX/QEQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIzslevWJ7HNcKS20ZO0B7l/ju4KMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdL8oWRej co6juQOFHSX7NPcaPn/wmEpJ7k5J4KsOGKBRdwbP1iH312jVzYm2iPwtXZUh025l SUUqJ1xEF6gNB2qmHZzu3XOeg+66sBWdEEMukmo0nnXBZB1CQET2E+Gn9RdmTJ3j 8ZA213xZqvzhfgI/zwKaP3lYYM0x45FJkmrQoXp9cHqs4D7u5wKc7pRibvetVqci TzuDNldfQ0NGYv5Z9kARlvGTjwTw7429IRj7GNOALiVbLg938t0X5rhG4Wr2/vDq sUWfb2oyThfbBJODqP1iW8G9AWwX6HLUOmP2rbGMQRy3VZ9keabdvHQZsQ+OvYiA WVF/JwXfSP1PIA== -----END CERTIFICATE-----Generated at Tue Jul 28 15:46:59 2026 by rpki-client