$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft File: nzEukpe8HSfr60dt6g7hXddWVC0.mft (raw, json) Hash identifier: EopDGbRAEvhj/PoNLvSTqoukmhtS4t7pBlZHwzWhP+o= Subject key identifier: 77:7C:3F:5F:76:91:F6:05:31:38:04:6E:E4:D7:F7:B4:DF:D9:17:DF Authority key identifier: 9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D Certificate issuer: /CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Certificate serial: 019FA93E1F5675CA8C0694C50F02F07E9243 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft Manifest number: 1086 Signing time: Tue 28 Jul 2026 15:00:48 +0000 Manifest this update: Tue 28 Jul 2026 15:00:48 +0000 Manifest next update: Wed 29 Jul 2026 15:00:48 +0000 Files and hashes: 1: 6mhv5UsNi48e2qDq3ejV1I51Uj4.roa (hash: DnBbdic7iw6ZxNpBPBJIWL6I3IXFvu/CiDUrM9wqPfY=) 2: 8nl0gvlvhLDwWgZwpZKGJtxc53o.roa (hash: bE4muHTPZggIWIYsSa057x00nvD31ff/lldCGfrmJUk=) 3: FRBPGcKRaduxhDywGhDdLvxwwjI.roa (hash: O6Kegk5UFFFJcpqkyEamLX0oM3JHqmMVK2Q15/ps70I=) 4: GPrNUgOp-yFfntRAITK46bjxYx8.roa (hash: tp3Wm0E6OeEViiyRYXktB8FqE/SyfwJ6JfvXOHg6tpE=) 5: JpjcVvpsRev2p10C3LQaIJ0kCAk.roa (hash: olGjGjOs+cbpB3gRjJy05Z6fBuTN4aPpcrK5updhkf8=) 6: MEHkcgqEJz7YFYdGUGWIvg3-cls.roa (hash: 1BYxRX72gkHZBwUAz+wy4Xb3C0tFku26Sl04kGiXOpw=) 7: dVmg3H_69aE6cwaIlYTR97afdPo.roa (hash: v2VeuqkOmpBJccmre5Q6qbQ+dA2g4wiozwXSU3h9sz8=) 8: n4oTLcY3Eost-Qe_enzL-hN3M14.roa (hash: yYjQpvvj0XOqhxeCs5tu9OzNnpM3sE241OTnw9VzGk0=) 9: nujuYw_3IDNNnf568BByX_04-sU.roa (hash: 60QrFQNmOREasWgP2EhaDowHIVvxXUEGB1moqh/EpGc=) 10: nzEukpe8HSfr60dt6g7hXddWVC0.crl (hash: GUspepNamuO8gdKK/rPGWSirT6OMKOIP9Px5yMBpfKM=) 11: unsDtmwuVq6UnIoMMfgu4SomBNI.roa (hash: 42NQRABPwAdQZ7WOYRrg/k8mIJxEsdJlQLE5DRl74k0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3e:1f:56:75:ca:8c:06:94:c5:0f:02:f0:7e:92:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9f312e9297bc1d27ebeb476dea0ee15dd756542d Validity Not Before: Jul 28 15:00:48 2026 GMT Not After : Jul 29 15:00:48 2026 GMT Subject: CN=777c3f5f7691f6053138046ee4d7f7b4dfd917df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ae:dc:d0:01:3e:78:2c:5a:b4:1f:e6:77:dc: 22:6a:47:d8:f4:0b:aa:6f:47:a1:60:c4:e7:78:40: df:8d:43:86:b0:ef:ae:28:59:c1:11:c9:ec:8d:c7: 64:74:d7:79:e5:42:8d:3e:e5:35:26:1a:5d:1d:51: 81:19:4a:79:f8:86:0c:31:72:15:96:2d:ac:c7:e6: 4d:4d:67:b2:64:f7:51:fd:cd:ab:84:21:9c:43:30: b8:7c:f9:2f:9b:69:1c:6e:70:cb:ac:75:5b:af:ca: 5b:0f:e1:92:d1:db:2f:01:8a:49:99:6b:c3:f3:92: ae:14:9d:32:bb:5b:39:b8:2b:8a:3b:68:7b:0a:be: 59:a5:f0:af:66:8e:29:5c:bd:55:04:ea:8b:5e:9d: 5a:74:34:75:bf:79:6d:cc:62:c3:59:66:ed:a2:23: d8:57:14:92:f2:71:2d:d0:69:ed:4f:05:43:af:ec: 8b:65:10:4c:ae:bf:c3:e3:0c:c5:86:1e:d8:e4:da: c7:42:b6:2f:95:c6:9f:db:2e:01:04:8b:04:c4:d7: d7:66:f3:45:92:9f:6a:9b:70:3b:1b:72:29:c4:f4: b0:a2:7e:ea:92:5b:c9:01:26:4c:30:0b:ef:13:97: 46:01:2f:cc:ee:37:c6:29:63:bb:ee:75:fc:fd:d0: 08:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:7C:3F:5F:76:91:F6:05:31:38:04:6E:E4:D7:F7:B4:DF:D9:17:DF X509v3 Authority Key Identifier: keyid:9F:31:2E:92:97:BC:1D:27:EB:EB:47:6D:EA:0E:E1:5D:D7:56:54:2D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nzEukpe8HSfr60dt6g7hXddWVC0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/dd5a28-df9d-4627-809d-bd5d3f00fbb2/1/nzEukpe8HSfr60dt6g7hXddWVC0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:14:b1:fd:c8:87:15:3a:ff:0c:b1:6e:d2:3c:d7:2c:f3:52: f6:1e:da:3b:bb:bf:ff:63:36:d8:d3:39:f7:43:80:a0:87:68: 57:e7:56:ee:14:87:aa:3c:e1:b3:2d:ca:42:f5:42:a1:75:cc: b6:1c:20:0c:29:d3:cc:fe:9d:5c:8f:4b:67:01:7a:42:17:3d: 5e:95:ef:9a:65:40:a0:37:25:78:3f:a8:65:5d:e0:b9:f5:38: db:48:34:8b:fa:6c:ef:cf:3d:aa:6c:84:cb:c6:e2:f1:04:85: 6a:a8:a9:d4:e0:1b:46:4e:8d:12:8e:83:a7:63:77:05:c5:35: 22:de:8c:85:dd:fb:d8:94:d8:5b:ca:28:71:eb:9e:1e:f5:07: 76:47:f9:cd:a8:c9:a5:65:b7:35:ff:00:e5:56:ec:2d:85:19: 00:4f:2b:91:ae:42:4f:89:8c:0f:c1:2f:83:a2:1b:e7:c7:ba: 7b:2f:bb:25:2e:b0:7e:b6:ae:e3:87:ff:4b:97:59:f7:b3:c1: d6:46:ac:dc:a0:72:88:3d:3f:9e:d7:f0:da:6f:7c:1f:57:ac: ad:ab:83:0f:61:b9:39:ed:fb:f1:d5:0e:7f:ce:ec:65:64:22: 18:7e:9c:ff:6d:2b:e9:79:b0:c0:50:9a:50:2d:c8:a1:b0:c2: bd:da:0d:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPh9WdcqMBpTFDwLwfpJDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlmMzEyZTkyOTdiYzFkMjdlYmViNDc2ZGVhMGVlMTVkZDc1 NjU0MmQwHhcNMjYwNzI4MTUwMDQ4WhcNMjYwNzI5MTUwMDQ4WjAzMTEwLwYDVQQD Eyg3NzdjM2Y1Zjc2OTFmNjA1MzEzODA0NmVlNGQ3ZjdiNGRmZDkxN2RmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArq7c0AE+eCxatB/md9wiakfY9Auq b0ehYMTneEDfjUOGsO+uKFnBEcnsjcdkdNd55UKNPuU1JhpdHVGBGUp5+IYMMXIV li2sx+ZNTWeyZPdR/c2rhCGcQzC4fPkvm2kcbnDLrHVbr8pbD+GS0dsvAYpJmWvD 85KuFJ0yu1s5uCuKO2h7Cr5ZpfCvZo4pXL1VBOqLXp1adDR1v3ltzGLDWWbtoiPY VxSS8nEt0GntTwVDr+yLZRBMrr/D4wzFhh7Y5NrHQrYvlcaf2y4BBIsExNfXZvNF kp9qm3A7G3IpxPSwon7qklvJASZMMAvvE5dGAS/M7jfGKWO77nX8/dAIiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHd8P192kfYFMTgEbuTX97Tf2RffMB8GA1UdIwQY MBaAFJ8xLpKXvB0n6+tHbeoO4V3XVlQtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQt YmQ1ZDNmMDBmYmIyLzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZS9kZDVhMjgtZGY5ZC00NjI3LTgwOWQtYmQ1ZDNmMDBmYmIy LzEvbnpFdWtwZThIU2ZyNjBkdDZnN2hYZGRXVkMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkBSx/ciH FTr/DLFu0jzXLPNS9h7aO7u//2M22NM590OAoIdoV+dW7hSHqjzhsy3KQvVCoXXM thwgDCnTzP6dXI9LZwF6Qhc9XpXvmmVAoDcleD+oZV3gufU420g0i/ps7889qmyE y8bi8QSFaqip1OAbRk6NEo6Dp2N3BcU1It6Mhd372JTYW8ooceueHvUHdkf5zajJ pWW3Nf8A5VbsLYUZAE8rka5CT4mMD8Evg6Ib58e6ey+7JS6wfrau44f/S5dZ97PB 1kas3KByiD0/ntfw2m98H1esrauDD2G5Oe378dUOf87sZWQiGH6c/20r6XmwwFCa UC3IobDCvdoNog== -----END CERTIFICATE-----Generated at Tue Jul 28 19:29:01 2026 by rpki-client