$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: MO+RD9Ue0qtPNbKx7f6qw4E3YBqApGZVlwAXrQfSo18= Subject key identifier: 58:79:6B:12:B8:57:FA:0D:34:6D:66:49:1E:17:E6:4E:35:3E:9C:E2 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019FA7874C236C6FF79E3967CCBE7E0E8550 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 1AD8 Signing time: Tue 28 Jul 2026 07:01:29 +0000 Manifest this update: Tue 28 Jul 2026 07:01:29 +0000 Manifest next update: Wed 29 Jul 2026 07:01:29 +0000 Files and hashes: 1: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (hash: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84=) 2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: ggGpI97CdOZveBy6TPibZWCF+g8WwGSJcOqEt1q49b0=) 3: 1xKMTxjcAyTOqPTp48dbyl1IVKs.roa (hash: USplCCSviit7LuwikiCrStcHpPZhldNMRmJaNU4sZJs=) 4: 2WrIc3-SP4DwQkwPJgua1bGNJ8U.roa (hash: 1n+jxmJd5F9eDLk5zWmpaiLv++ZbzD7Fd2FD1jx9EQI=) 5: 2tySjVTQSHiULWpIIHxe3UTXyKc.roa (hash: 11efIhc4jliYz5b7ccbbcBy+lueobimG/f4ImBFKSr4=) 6: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (hash: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE=) 7: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (hash: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE=) 8: 8s9uSzf6TvkzP7AMAwk-J-bBoaI.roa (hash: HhHYyz7/gaXYnl+eOQvtBscobpbKRyobYY7K5LG1gFs=) 9: CW-qcI1ohMNZFrtxwKP6h3IuUsY.roa (hash: Q0m3SYkmGKp057as4cDbrXW6Plo1d3nxk1JPEsbDaPY=) 10: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (hash: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE=) 11: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (hash: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk=) 12: hjwqR_BvVV3igv-VRSRakB0C0gY.roa (hash: dGn15gWRk4S5nvTCswCYk4PnSEMzXrTWJmJ53SFUgxE=) 13: iyfIsG_zCzXslesxdnK347yeiF4.roa (hash: tDXmuusqCyRHX/DQh8nnAapHWqFHXmFSmh6Yr5JKuq0=) 14: lITdQxhmX_QJLHCdZAw823-rxIE.roa (hash: LD1BnadL45zxeXJQFcYTUwoYEdwQD3yyFtEI21xm/MU=) 15: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (hash: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s=) 16: wQvwuyTtVhloyL12ClFe1Tmx_YM.asa (hash: 7C5CFFl7eP926O+5F2qKTmqq4J0LTe8XElvBDea1xIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 07:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:87:4c:23:6c:6f:f7:9e:39:67:cc:be:7e:0e:85:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Jul 28 07:01:29 2026 GMT Not After : Jul 29 07:01:29 2026 GMT Subject: CN=58796b12b857fa0d346d66491e17e64e353e9ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:52:92:13:1c:2a:5f:4b:68:44:71:31:ad:75: 39:fa:65:f3:5b:8a:3d:ae:c9:e2:6d:27:0c:11:0a: 80:91:ee:ee:3a:77:bf:9b:40:9d:c0:eb:f9:ca:57: 26:b5:83:26:0f:02:16:27:c0:db:9b:38:55:d6:56: 16:6d:63:79:5a:72:98:9e:e0:f7:68:14:b3:35:a2: 79:f5:a6:b2:b7:6a:b6:dd:8e:33:98:a9:fb:01:a7: 4b:7c:c3:94:a0:c9:7f:89:cd:d7:1e:7d:e4:a1:6b: 59:48:83:5f:93:42:6b:b6:17:08:51:44:02:a7:c4: 76:64:14:a8:75:9a:93:98:ea:98:57:47:2b:76:61: aa:73:cf:db:b3:b4:77:ed:39:2e:99:3a:ce:24:98: 29:3e:78:cc:b7:1e:16:26:0b:18:0f:85:55:17:83: 1e:75:85:fe:3c:0e:46:a5:3d:a4:ef:93:8b:51:78: f5:70:ad:c0:5f:2b:14:e6:cb:b3:48:36:9b:1b:c8: fb:b4:ae:aa:48:5d:85:27:d3:ec:f5:cd:be:5e:72: f7:b9:77:47:4b:98:7e:65:0a:95:c7:28:f6:cd:e9: b9:1f:6e:ad:f3:41:58:6a:23:35:90:8e:36:c3:d2: 2c:46:b0:fe:cc:05:80:a1:4c:d8:04:3b:bb:6e:8c: 29:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:79:6B:12:B8:57:FA:0D:34:6D:66:49:1E:17:E6:4E:35:3E:9C:E2 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:14:e3:f5:75:70:89:ed:1a:7b:9a:0f:24:ef:92:42:f2:74: f0:72:aa:45:b9:e5:a0:02:35:e4:0e:98:04:14:7e:d6:83:d4: b7:56:ad:09:f0:5c:ce:3b:c8:1e:55:9c:85:e7:f3:8c:c1:47: b7:af:d1:2a:0c:56:9d:0c:f7:ce:b3:16:8c:48:0e:8b:fe:09: 75:c1:d2:fe:e2:05:06:5f:f9:d8:b4:e3:9a:5f:d3:3c:9c:7a: dc:b4:64:f8:b8:a8:b8:fa:45:82:4c:ed:cf:d4:14:52:4b:25: bd:c3:f5:69:7d:8c:48:3c:a6:70:0e:3c:a7:b5:9b:f7:df:c2: 6d:89:ab:d0:b7:83:ea:a0:1f:86:ae:6e:45:af:b5:2a:3f:a2: 16:ea:5d:b0:bf:77:b2:e9:62:0b:df:dd:fa:0e:16:dd:bf:55: 62:b2:e5:fe:29:ff:eb:a0:a4:2d:e7:31:82:14:dc:60:64:95: d0:54:ac:09:13:25:79:a5:6d:fc:17:81:07:91:ec:3f:9e:a9: 9f:f4:99:de:5e:cd:d5:70:89:9f:2c:ed:68:d7:5d:c0:80:a0: c9:2a:00:7e:59:2e:5d:bc:7c:63:8f:36:40:64:49:8e:b6:7b: 3b:e5:59:20:67:07:2d:33:40:9f:40:28:2d:c7:2d:b6:a8:5c: 2a:c4:2f:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+nh0wjbG/3njlnzL5+DoVQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwNzI4MDcwMTI5WhcNMjYwNzI5MDcwMTI5WjAzMTEwLwYDVQQD Eyg1ODc5NmIxMmI4NTdmYTBkMzQ2ZDY2NDkxZTE3ZTY0ZTM1M2U5Y2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1KSExwqX0toRHExrXU5+mXzW4o9 rsnibScMEQqAke7uOne/m0CdwOv5ylcmtYMmDwIWJ8DbmzhV1lYWbWN5WnKYnuD3 aBSzNaJ59aayt2q23Y4zmKn7AadLfMOUoMl/ic3XHn3koWtZSINfk0JrthcIUUQC p8R2ZBSodZqTmOqYV0crdmGqc8/bs7R37TkumTrOJJgpPnjMtx4WJgsYD4VVF4Me dYX+PA5GpT2k75OLUXj1cK3AXysU5suzSDabG8j7tK6qSF2FJ9Ps9c2+XnL3uXdH S5h+ZQqVxyj2zem5H26t80FYaiM1kI42w9IsRrD+zAWAoUzYBDu7bowpGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFh5axK4V/oNNG1mSR4X5k41PpziMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxTj9XVw ie0ae5oPJO+SQvJ08HKqRbnloAI15A6YBBR+1oPUt1atCfBczjvIHlWchefzjMFH t6/RKgxWnQz3zrMWjEgOi/4JdcHS/uIFBl/52LTjml/TPJx63LRk+LiouPpFgkzt z9QUUkslvcP1aX2MSDymcA48p7Wb99/CbYmr0LeD6qAfhq5uRa+1Kj+iFupdsL93 suliC9/d+g4W3b9VYrLl/in/66CkLecxghTcYGSV0FSsCRMleaVt/BeBB5HsP56p n/SZ3l7N1XCJnyztaNddwICgySoAflkuXbx8Y482QGRJjrZ7O+VZIGcHLTNAn0Ao LccttqhcKsQvSA== -----END CERTIFICATE-----Generated at Tue Jul 28 15:47:08 2026 by rpki-client