$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft File: ag4WzCqLkctIP0UegTtniul1grA.mft (raw, json) Hash identifier: IYQWhLk4WTAGsEg24pC3cSmqAy9RxDVgNjmcXRwIE1A= Subject key identifier: E8:B1:49:A2:7C:B7:3A:6D:6E:18:6A:3B:E3:20:BE:3A:FE:BE:27:1E Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0 Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0 Certificate serial: 019FA898FB68710E231D82E48DA6E1FF02A2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft Manifest number: 4C Signing time: Tue 28 Jul 2026 12:00:25 +0000 Manifest this update: Tue 28 Jul 2026 12:00:25 +0000 Manifest next update: Wed 29 Jul 2026 12:00:25 +0000 Files and hashes: 1: 1-L9_xn5XwFHg99yogQ5P-JRQJno.roa (hash: saknG4EeimO2uKEX00r/busJjcraxx17Sa52KQHrOss=) 2: 1IO7D2ixQ-lvyHRtaxSutQuJrdk.roa (hash: w8VZiMHzBrWoJWSQi1dFm3cARenc5HNcqj8t4FMaUvc=) 3: 82--YWEKcMvIJETSOTv0fBdL6CM.roa (hash: txaVMOY8ninC/G6RFe/UwHhOENX0T290iWUIMYkdnmk=) 4: CZ_Zb2Aq89SafghWM0E4713VX70.roa (hash: HeGm7Ab0oXBCA+8D5xtUkFSt/G3Ij7tbRDAtEbpDGr0=) 5: D5_G8DCmM_3b5irrbtVaGAGf_cc.roa (hash: BVXdof9XgxwNSFTMs9cYrt8qNsJcVYYSZufUMkC5DG4=) 6: MHRGHVH_9ryY5YWmrqyOo25Yw-w.roa (hash: p0ZTTiOVdQ6jigzVZJJBkL+3fqMDD1xA2wHogGA9TUQ=) 7: P9YT4wpleippbcH7ySs9yJhewoc.roa (hash: cSxqBMShQEu5xdePejl0TQuouUbtuQWYRC9Of5i3nxw=) 8: PehZN3iXx53NNUUfpGjKtEgbtG0.roa (hash: ZF5FCAasCGxv9d43oiaKd2A5u46kRGpM48JeEUZzsOY=) 9: QcJ1_3me8VKJVSwljpvJ4RRo4bI.roa (hash: oLE/UmjEKWdlluphq/E4JLOUzru3Xt/qp1y2xi32ZuM=) 10: RoQDt4PjdwW0SoiiPvyTsxSfuY8.roa (hash: 1mJogWLp+9JQPWumTmYBS2/tf+nhYhyUXRjcoUUswLw=) 11: RvNLAe_RSP56uzDHYQxY7j2RYDA.roa (hash: 138Cifhmc2WWQk/qLf2plQLxN1qV8R840l4XB+Ds6Qg=) 12: SOdgrNHWpRExOJRc-f9cfWJ4cms.roa (hash: k5GQQCFGnAJdQAMjkz3mMLNhKN0O4TfU790kcOAiuaM=) 13: UqImUVHBq3p8NTSpUZrZaZqeIO0.roa (hash: b0cbtwxFDLQWZmYSn/tfFyO/bdt5kbBtbbVLEmIteZY=) 14: V4QNov5aUVl0kjPoDbGXWUTFf3c.roa (hash: RWwYnwshC1K5yWsQ6bl0FWPq+jSiHD0KLQ+6u/grLQo=) 15: ZXMBfEzRQgZ6XQqYEpUztP_oHuk.roa (hash: CES/AfhEQn2U94y88HLeLxHi0QZ8IQSspRKZIOPxVHU=) 16: ag4WzCqLkctIP0UegTtniul1grA.crl (hash: f68YWl821jYO7e63tVwwiK5zmduCxReYb9WvC4QvFxU=) 17: hr6KKW3gkx0Rqd2xi4SSwYOvYAo.roa (hash: AW1B3GU+CHp2dLnlTMaUnh9So+6olkFuGvAvVFpBybo=) 18: nYlDDvhL9ZKod4FxRoAJN8wFPy8.roa (hash: kUW/q0E+5ap6XJqy3o0pzyvq0pN9N7639FqeoHqln7w=) 19: vTCE3_WjlZWEHiUifn-Z3rZn-3g.roa (hash: k0eIUOFWrIqLB7Ha+lzX5IKld1csxUVRrPdDqLcQHmQ=) 20: yde-3lSgZiRr0HU1KS1x7njAoeA.roa (hash: eSGD7O7kwdqNPAeSE2PmhfFGu0OTxONTMV1cXFqWo/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:98:fb:68:71:0e:23:1d:82:e4:8d:a6:e1:ff:02:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0 Validity Not Before: Jul 28 12:00:25 2026 GMT Not After : Jul 29 12:00:25 2026 GMT Subject: CN=e8b149a27cb73a6d6e186a3be320be3afebe271e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ff:65:da:ff:e4:d4:1e:b7:1b:c8:f8:21:22: 95:7f:76:39:ea:a9:1e:86:c3:65:06:a9:98:ce:c2: 97:74:d2:0c:a4:0e:b1:32:ba:af:c6:45:c7:2b:b9: f4:cd:dd:6c:a9:99:53:4a:f7:83:e5:c1:6f:d5:d3: 21:bc:a1:e2:ab:c9:5e:eb:8d:5a:6d:5e:6c:1f:06: ab:b4:21:07:7b:a3:d3:e8:0f:1d:b7:32:72:24:fc: 2c:ac:ab:21:02:a5:bb:f8:03:a3:1e:2a:0f:ff:65: 6a:62:d8:4a:8f:57:31:bd:5c:65:37:d4:50:43:24: 4a:89:25:b5:38:a2:da:64:65:07:27:0c:d5:e2:84: 77:ca:0f:15:67:8e:08:cf:d0:4d:cc:3f:4e:cf:63: 7e:cb:44:6c:da:59:b5:a7:59:58:9c:30:2c:b1:d9: a6:4b:74:11:a1:f7:3e:e6:f5:05:de:15:07:c5:80: 64:cd:ce:04:db:a8:05:5a:0c:1a:f0:e4:99:fe:6e: 06:a5:94:71:e7:87:9b:8f:67:44:97:45:ee:f9:0c: 5c:74:d1:6f:9b:01:03:9a:72:19:a9:29:4e:47:6c: 98:76:e3:51:08:0d:3e:f5:bf:18:83:dc:17:c1:9f: 4e:eb:8b:c7:80:6b:14:22:3d:3a:5e:d1:7d:f9:85: cb:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:B1:49:A2:7C:B7:3A:6D:6E:18:6A:3B:E3:20:BE:3A:FE:BE:27:1E X509v3 Authority Key Identifier: keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ba:96:c7:b0:a7:df:11:74:24:ac:64:84:32:48:5d:52:ca: f7:42:25:88:98:92:30:5c:01:70:99:ad:17:96:e0:a7:ac:10: ad:23:f6:e7:9f:2e:c8:90:a3:f4:12:88:b6:3c:69:bc:20:ae: ee:22:c2:f5:1b:b5:07:47:e9:80:d7:8e:69:bf:bf:85:82:44: e4:25:a1:a3:29:3a:a7:3d:87:f8:7d:eb:98:43:3c:92:5b:11: 28:95:5d:0e:3c:10:f0:a6:96:fb:82:63:d1:8a:f8:92:cf:e7: a4:43:7e:63:03:dd:07:cf:a2:60:74:c9:88:c2:f2:a1:97:fe: 19:06:c8:47:4e:54:b6:98:90:fe:bc:22:ea:6b:c1:b2:eb:c6: 2b:22:30:83:69:1a:4b:8a:ee:19:3a:08:21:e2:b5:bd:85:06: 16:7b:1b:3b:24:cc:76:23:a1:0e:eb:9c:bc:aa:26:3a:cd:57: f4:f4:88:98:37:ce:56:09:dd:bc:48:e9:a7:1b:94:25:71:ae: 45:9f:48:93:d3:e4:d6:ed:54:21:0b:d6:d6:f0:5a:8e:7e:d2: ed:9a:df:d6:37:cb:7f:50:80:0c:41:c1:d7:b2:08:15:84:e5: 5f:e1:43:d9:30:2d:88:23:00:3f:dc:32:36:fc:34:4a:9a:dc: 3d:ca:06:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+omPtocQ4jHYLkjabh/wKiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMGUxNmNjMmE4YjkxY2I0ODNmNDUxZTgxM2I2NzhhZTk3 NTgyYjAwHhcNMjYwNzI4MTIwMDI1WhcNMjYwNzI5MTIwMDI1WjAzMTEwLwYDVQQD EyhlOGIxNDlhMjdjYjczYTZkNmUxODZhM2JlMzIwYmUzYWZlYmUyNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf9l2v/k1B63G8j4ISKVf3Y56qke hsNlBqmYzsKXdNIMpA6xMrqvxkXHK7n0zd1sqZlTSveD5cFv1dMhvKHiq8le641a bV5sHwartCEHe6PT6A8dtzJyJPwsrKshAqW7+AOjHioP/2VqYthKj1cxvVxlN9RQ QyRKiSW1OKLaZGUHJwzV4oR3yg8VZ44Iz9BNzD9Oz2N+y0Rs2lm1p1lYnDAssdmm S3QRofc+5vUF3hUHxYBkzc4E26gFWgwa8OSZ/m4GpZRx54ebj2dEl0Xu+QxcdNFv mwEDmnIZqSlOR2yYduNRCA0+9b8Yg9wXwZ9O64vHgGsUIj06XtF9+YXLewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOixSaJ8tzptbhhqO+Mgvjr+viceMB8GA1UdIwQY MBaAFGoOFswqi5HLSD9FHoE7Z4rpdYKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7qWx7Cn 3xF0JKxkhDJIXVLK90IliJiSMFwBcJmtF5bgp6wQrSP2558uyJCj9BKItjxpvCCu 7iLC9Ru1B0fpgNeOab+/hYJE5CWhoyk6pz2H+H3rmEM8klsRKJVdDjwQ8KaW+4Jj 0Yr4ks/npEN+YwPdB8+iYHTJiMLyoZf+GQbIR05UtpiQ/rwi6mvBsuvGKyIwg2ka S4ruGToIIeK1vYUGFnsbOyTMdiOhDuucvKomOs1X9PSImDfOVgndvEjppxuUJXGu RZ9Ik9Pk1u1UIQvW1vBajn7S7Zrf1jfLf1CADEHB17IIFYTlX+FD2TAtiCMAP9wy Nvw0SprcPcoGNw== -----END CERTIFICATE-----Generated at Tue Jul 28 15:37:32 2026 by rpki-client