$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft File: aNoQi85PtWVWJGsxVyb19jRYXvE.mft (raw, json) Hash identifier: OhFJueJqhA7gGdLRbKYG1lsornm2HYGa+SjNqKnNWtc= Subject key identifier: CD:CA:BB:94:30:C4:3A:B3:73:96:00:F3:75:2D:A2:98:D4:95:49:35 Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1 Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1 Certificate serial: 019FA899B7659BBC71C5FB76B035A76A8BED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft Manifest number: 4C Signing time: Tue 28 Jul 2026 12:01:13 +0000 Manifest this update: Tue 28 Jul 2026 12:01:13 +0000 Manifest next update: Wed 29 Jul 2026 12:01:13 +0000 Files and hashes: 1: 3g5N4ACt53RDfqdl2Qm2kLw7iuM.roa (hash: JfcuHdPpD93vUy2ajbM4MDyRl9hTtYlGFm++NhJ4v9Q=) 2: 4rKV389CcVb18TkAtAQohjFpet4.roa (hash: bshrb45TXCLz1UeSJOO4z6EZmV9tqPYGJlGzReterCU=) 3: EU5pDQStNaoFQyco-4amRP1_FgA.roa (hash: hTHdQn7G2Zgz/0VPSb7q82WZIakSz6CsJwivy9Eitjw=) 4: HdF1Etsw4pdlSu1K8vrei4yVmKw.roa (hash: uoyjLiPTlTI461zU8sJL8PSon9F9MLbPvGcIZXxD+zQ=) 5: LYy3q2HCwTVaEOOy8i76zpWQDQQ.roa (hash: 3gssksK0WKZ1ji7D3njPjIYsZOKLwjh79PXg9K+4kD8=) 6: UbbfXlDt5ItqVkt47qCE7Q-cWa4.roa (hash: 2N6GN/Syp2xg8awpUyCZ72kT72P3AjcfpXuKHfUafHk=) 7: V7Gy_xsnTYpW1R8jKT-H-yvfeY0.roa (hash: t4KBOdzw1W/nTMlVzOh3vHraukfR4inEsZhCZK2WaVE=) 8: Y6vuMNkzIPJWRuJg5TuMbsi1FcM.roa (hash: 3aMZ5jo10sNTG4r9ibdunWoGNfpF0gSMyVHFFSZbv+I=) 9: aNoQi85PtWVWJGsxVyb19jRYXvE.crl (hash: Fz/RQW+oVgGYaAV/WO/liGMd/gXbvbZ6fLGPR5T4EjE=) 10: foSOnmt17u33gfnRPRG4pNSpMq0.roa (hash: k4fSYwEDaC1MgqKDcu6ALBH1gOuaBBhjlNg8kfhU3RQ=) 11: ib5YzLoYXKZK-R3OCwLsvHBhnXY.roa (hash: IT/E+lCIfVXMpHU9raxW9uwfjlZ+Cij+nDKpT3TnewQ=) 12: oe-pRqcbnH3vKHurAZrBu43iDHo.roa (hash: /UnsYCcH9zJIeaXYRWlLI3q/VXRUYL/1eKK/V/miCRM=) 13: tW89lp5YxoMGwhuGz5wy8-1b7tA.roa (hash: 3iDgHelXEotGhsC69Iuc1srSTIuH+BgeoUU2gRFP8bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:99:b7:65:9b:bc:71:c5:fb:76:b0:35:a7:6a:8b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1 Validity Not Before: Jul 28 12:01:13 2026 GMT Not After : Jul 29 12:01:13 2026 GMT Subject: CN=cdcabb9430c43ab3739600f3752da298d4954935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:a3:e9:2d:36:ae:7a:74:8b:92:3b:b0:fe: 12:52:15:08:e2:88:24:98:64:18:bc:b5:b2:65:74: bc:5e:e2:fe:06:46:8e:16:26:79:cc:cd:db:38:0e: 96:40:f8:5d:72:5a:17:ce:66:a1:65:8b:bf:4d:ac: ae:d1:e4:f6:25:38:d3:3a:85:97:a4:a4:c6:a8:f3: 65:80:07:af:4a:c9:d4:f1:13:bb:3c:3e:0f:88:f0: fd:d7:cc:b8:97:c5:27:d3:b5:76:a1:fe:c6:74:f9: 54:05:6a:eb:38:d3:7f:a0:0a:1e:53:9b:2f:fa:6e: df:ec:17:ad:c4:8b:5b:37:c2:84:be:f6:0f:0d:e5: c5:61:d2:a0:85:f9:10:f1:fb:92:0c:55:52:26:2a: 4f:20:d3:d1:9d:43:f3:51:77:b8:06:b7:92:8b:04: 76:71:fc:88:ee:20:67:1c:20:a1:f1:74:d3:5d:c1: a7:00:26:50:e4:7d:c5:23:eb:d7:fa:07:f2:64:ff: f3:f9:6f:e9:1d:e5:37:a2:34:57:39:3f:63:34:b2: ff:07:d7:01:f3:ba:00:e9:b1:d3:f9:f3:55:50:3e: 18:8b:ce:b9:1a:31:60:32:92:ff:30:fd:13:f0:51: 11:24:ef:df:3f:d3:c5:48:27:03:63:90:ac:d6:3c: 82:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:CA:BB:94:30:C4:3A:B3:73:96:00:F3:75:2D:A2:98:D4:95:49:35 X509v3 Authority Key Identifier: keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f8:4e:11:66:e2:d9:78:7d:78:1f:bb:b6:23:1c:e4:94:35: f7:48:52:6c:b8:61:9f:d6:6c:e3:57:86:da:9c:fa:ca:90:c4: f9:09:74:90:1b:ce:21:bc:42:b8:e9:96:a5:34:e1:18:1c:83: ec:00:5e:2a:9c:e6:28:2a:0d:a3:1e:a1:76:41:35:df:36:95: da:f1:ae:c3:07:a8:e9:e3:f0:09:5d:f8:fa:d4:23:eb:f5:78: 7f:8b:05:b7:de:2f:26:67:3f:35:2d:e7:15:fe:66:5e:6e:20: 1e:94:d9:3b:06:91:f4:7d:1b:a6:d7:f8:43:02:dc:f4:10:21: cf:f7:20:be:9d:87:09:68:84:1d:e5:f4:c3:76:13:8b:b3:6d: 74:7e:7d:5b:b5:4b:52:9e:8d:a3:a7:61:1b:6e:db:51:51:48: 5c:0a:e3:ae:19:1f:1c:25:7e:44:7c:0b:7c:5b:85:d5:b8:c8: b7:39:5b:0a:01:34:84:22:8a:92:8b:68:48:db:27:e8:95:b7: 39:68:2b:ae:0b:f5:5b:df:0d:91:c8:d6:77:03:d7:4b:13:c5: 77:5f:4e:f1:9e:63:9a:98:81:7e:1f:b3:33:5f:2a:a5:49:8b: 70:e7:ee:f6:bc:7e:18:e5:f8:5f:e5:23:a6:5a:57:d7:a4:cd: 25:c1:60:64 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+ombdlm7xxxft2sDWnaovtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGExMDhiY2U0ZmI1NjU1NjI0NmIzMTU3MjZmNWY2MzQ1 ODVlZjEwHhcNMjYwNzI4MTIwMTEzWhcNMjYwNzI5MTIwMTEzWjAzMTEwLwYDVQQD EyhjZGNhYmI5NDMwYzQzYWIzNzM5NjAwZjM3NTJkYTI5OGQ0OTU0OTM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxbGj6S02rnp0i5I7sP4SUhUI4ogk mGQYvLWyZXS8XuL+BkaOFiZ5zM3bOA6WQPhdcloXzmahZYu/Tayu0eT2JTjTOoWX pKTGqPNlgAevSsnU8RO7PD4PiPD918y4l8Un07V2of7GdPlUBWrrONN/oAoeU5sv +m7f7BetxItbN8KEvvYPDeXFYdKghfkQ8fuSDFVSJipPINPRnUPzUXe4BreSiwR2 cfyI7iBnHCCh8XTTXcGnACZQ5H3FI+vX+gfyZP/z+W/pHeU3ojRXOT9jNLL/B9cB 87oA6bHT+fNVUD4Yi865GjFgMpL/MP0T8FERJO/fP9PFSCcDY5Cs1jyC4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3Ku5QwxDqzc5YA83UtopjUlUk1MB8GA1UdIwQY MBaAFGjaEIvOT7VlViRrMVcm9fY0WF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACPhOEWbi 2Xh9eB+7tiMc5JQ190hSbLhhn9Zs41eG2pz6ypDE+Ql0kBvOIbxCuOmWpTThGByD 7ABeKpzmKCoNox6hdkE13zaV2vGuwweo6ePwCV34+tQj6/V4f4sFt94vJmc/NS3n Ff5mXm4gHpTZOwaR9H0bptf4QwLc9BAhz/cgvp2HCWiEHeX0w3YTi7NtdH59W7VL Up6No6dhG27bUVFIXArjrhkfHCV+RHwLfFuF1bjItzlbCgE0hCKKkotoSNsn6JW3 OWgrrgv1W98NkcjWdwPXSxPFd19O8Z5jmpiBfh+zM18qpUmLcOfu9rx+GOX4X+Uj plpX16TNJcFgZA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:23:24 2026 by rpki-client