$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json) Hash identifier: JYspzvrehjzNdSYS1BggbPRnWuGjSTJyx1SinZv0h9A= Subject key identifier: F8:BC:5E:43:D6:42:2A:AE:0D:E2:E0:C4:5B:01:00:D7:24:FE:1E:09 Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019FA8625424A5AF8129D0927831881BFCA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft Manifest number: 11F2 Signing time: Tue 28 Jul 2026 11:00:44 +0000 Manifest this update: Tue 28 Jul 2026 11:00:44 +0000 Manifest next update: Wed 29 Jul 2026 11:00:44 +0000 Files and hashes: 1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=) 2: 9UWbCEXqjRhjC5AwqWBCIFK_AT4.asa (hash: UFf7/mopkwyI/qLLTDxzlcrPF+4ju/94DUIEHv1Zj3E=) 3: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: vT/E9y02EO7yAciowpZolYTKsVmxdM447UIiRXUM/24=) 4: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=) 5: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=) 6: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=) 7: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=) 8: TpSktW1NAsZq923aUoE53pMX0hw.roa (hash: ljs6mrp9Kdtic0OnoNEza6FCINLSHSxZypr5fLwF++Q=) 9: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=) 10: egQEbfnW1MXHUAUDIXi9mc2fB-c.roa (hash: 1BkfZIfCGpyU9bVzsVuHecgL4efqavb1+AuIHnc1Rt8=) 11: jFHWQVied9oZQfm4vhIvSC4eiV0.roa (hash: dr0KfgCKcAC1kV4SsWObX5dDQnEh0pKNGg0bXRatP4I=) 12: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=) 13: w1zIh0CnKegnO0T7ra_SO9YilV8.roa (hash: KzpnZqdHE55q0MkGU3Ic0fB1a+0zqfLi5dqRW/lkoPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 07:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:62:54:24:a5:af:81:29:d0:92:78:31:88:1b:fc:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Jul 28 11:00:44 2026 GMT Not After : Jul 29 11:00:44 2026 GMT Subject: CN=f8bc5e43d6422aae0de2e0c45b0100d724fe1e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e5:05:88:ef:93:64:b3:61:cd:da:58:bf:36: 2f:02:29:69:b6:a2:88:32:b5:ca:02:97:7b:61:90: 7b:cd:09:99:da:97:3e:49:76:5a:5c:44:a3:c7:1d: 96:9b:2a:26:aa:68:ef:c9:d2:d3:62:26:d1:7d:6e: 59:e9:1f:cc:b7:df:e2:b3:c9:fa:9a:30:3c:b1:7c: 32:aa:49:4e:fa:8a:e5:1e:f8:d3:36:da:8a:cf:6d: ed:c0:83:69:a1:2c:37:75:17:4c:07:56:e6:04:d4: da:74:dc:7e:04:16:f3:96:7c:cd:d8:c8:66:5c:f0: 8e:2f:60:a9:01:e2:1c:18:b9:74:72:7b:04:bc:e1: b1:26:14:1a:ca:e6:74:6b:25:55:1e:6b:53:49:f6: 2f:87:dc:be:05:00:69:a8:53:0e:05:9f:5a:8c:dd: 4f:39:44:d5:52:4b:8c:2c:e2:95:78:6b:c4:7e:6f: ad:1a:59:7a:ef:5e:a4:65:c8:e8:51:0e:77:2d:57: ed:a1:dd:d9:95:c1:55:40:e1:5c:f8:05:f0:53:58: 5a:4d:c6:1d:32:ec:b3:79:f2:f3:f8:d2:b0:b4:c6: e1:8b:b6:d7:60:8e:3c:d2:fa:c0:45:fa:c2:06:77: 5b:fa:bf:45:45:2b:e3:14:5f:21:44:a2:e2:d9:42: c4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BC:5E:43:D6:42:2A:AE:0D:E2:E0:C4:5B:01:00:D7:24:FE:1E:09 X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:3d:06:21:38:63:1a:36:63:94:16:ef:01:48:34:e3:ba:2e: c3:cf:1f:49:e0:0b:25:db:81:50:40:d3:a8:4b:5b:4f:23:6d: 3e:16:14:40:31:67:4c:05:61:10:12:68:62:63:d9:20:57:24: 53:48:06:4e:91:42:f3:4b:db:ea:fd:a7:38:06:3f:05:9b:53: 07:5d:bb:4a:11:79:cf:3f:65:55:df:65:19:87:ce:b1:75:f2: 31:fe:94:8a:c5:83:bd:57:ee:6d:49:1b:69:8d:24:56:ed:8b: 92:8a:35:5c:0d:14:3e:29:33:6c:a0:53:b8:67:0d:ba:bb:13: c3:3d:19:36:5c:03:58:23:1e:d2:74:82:d7:3d:3f:cb:f8:37: 05:92:75:d4:12:54:87:dc:a0:0c:42:e9:e1:8b:8c:9d:1c:60: 90:b9:f7:8f:b3:77:19:af:5d:68:9a:f9:b1:7e:d2:fb:4f:4a: c7:9b:e2:06:76:c7:bd:bc:ab:1f:a8:55:b6:e7:33:c2:2b:5e: 77:be:ae:8d:55:34:ed:b4:20:99:b2:43:35:8b:a5:8e:db:35: 11:b7:ea:68:f6:31:66:df:9d:7d:d7:88:d5:fe:8f:54:1e:36: ba:e2:3d:9e:1b:8a:bb:3e:50:75:64:c4:cd:c7:19:21:43:23: d6:f1:d4:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oYlQkpa+BKdCSeDGIG/ykMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwNzI4MTEwMDQ0WhcNMjYwNzI5MTEwMDQ0WjAzMTEwLwYDVQQD EyhmOGJjNWU0M2Q2NDIyYWFlMGRlMmUwYzQ1YjAxMDBkNzI0ZmUxZTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOUFiO+TZLNhzdpYvzYvAilptqKI MrXKApd7YZB7zQmZ2pc+SXZaXESjxx2WmyomqmjvydLTYibRfW5Z6R/Mt9/is8n6 mjA8sXwyqklO+orlHvjTNtqKz23twINpoSw3dRdMB1bmBNTadNx+BBbzlnzN2Mhm XPCOL2CpAeIcGLl0cnsEvOGxJhQayuZ0ayVVHmtTSfYvh9y+BQBpqFMOBZ9ajN1P OUTVUkuMLOKVeGvEfm+tGll6716kZcjoUQ53LVftod3ZlcFVQOFc+AXwU1haTcYd MuyzefLz+NKwtMbhi7bXYI480vrARfrCBndb+r9FRSvjFF8hRKLi2ULEdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPi8XkPWQiquDeLgxFsBANck/h4JMB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADz0GIThj GjZjlBbvAUg047ouw88fSeALJduBUEDTqEtbTyNtPhYUQDFnTAVhEBJoYmPZIFck U0gGTpFC80vb6v2nOAY/BZtTB127ShF5zz9lVd9lGYfOsXXyMf6UisWDvVfubUkb aY0kVu2Lkoo1XA0UPikzbKBTuGcNursTwz0ZNlwDWCMe0nSC1z0/y/g3BZJ11BJU h9ygDELp4YuMnRxgkLn3j7N3Ga9daJr5sX7S+09Kx5viBnbHvbyrH6hVtuczwite d76ujVU07bQgmbJDNYuljts1EbfqaPYxZt+dfdeI1f6PVB42uuI9nhuKuz5QdWTE zccZIUMj1vHUpg== -----END CERTIFICATE-----Generated at Tue Jul 28 14:46:44 2026 by rpki-client