$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: W3TM6dADMwUlBWgHWkI+1gJKkt9PoM0dGvvT58T/slY= Subject key identifier: B1:C4:1A:9D:E5:C0:F0:EE:49:0C:EE:AF:DC:8C:99:BD:4A:9F:85:89 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019FA9AC0A096A628DCFE18ED4901FF10D01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 19DA Signing time: Tue 28 Jul 2026 17:00:51 +0000 Manifest this update: Tue 28 Jul 2026 17:00:51 +0000 Manifest next update: Wed 29 Jul 2026 17:00:51 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: Wn0c/1ZEw+xlc29ol5E5rP2nd+efHYBz92LJz+UtzRY=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ac:0a:09:6a:62:8d:cf:e1:8e:d4:90:1f:f1:0d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Jul 28 17:00:51 2026 GMT Not After : Jul 29 17:00:51 2026 GMT Subject: CN=b1c41a9de5c0f0ee490ceeafdc8c99bd4a9f8589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:08:f4:d5:bf:ca:3d:39:6d:4a:73:b1:31:e0: 9f:19:f1:34:57:bc:2f:f5:40:90:ff:c2:61:fe:a2: 39:e4:bc:fd:dd:35:25:66:4e:09:f2:18:2a:69:9c: 52:ac:70:4b:5c:07:6d:f0:26:f1:19:d1:87:0e:20: fe:3a:71:c4:2d:02:d2:87:1e:fa:b2:a4:29:7d:20: 59:30:db:7c:60:1f:eb:91:86:56:0f:a4:b1:ac:72: f6:a7:79:e6:fd:84:94:98:82:ce:c8:9d:a1:8b:ac: eb:1d:3e:af:05:38:85:fb:3b:cd:de:bb:7e:d7:80: ec:93:60:7d:19:3c:ff:e7:96:85:0d:a4:22:d7:13: 8f:f1:65:79:1f:50:e1:1d:54:ab:b2:7d:26:4b:d4: 5f:1b:82:23:6f:74:b7:33:63:57:45:56:e7:c2:a8: ab:7e:4b:1f:4b:72:2d:98:73:8b:4a:02:3e:e6:46: 13:f8:90:25:37:56:c6:14:31:1c:fd:07:12:41:03: 09:6b:f6:ba:cd:a1:b2:7b:d0:0e:3d:41:a5:82:96: b7:ca:17:fe:f3:73:98:0c:26:69:c8:5a:f7:17:98: 92:b1:95:1f:bd:d2:7b:7d:51:76:02:a4:ed:b1:62: e4:c0:be:84:34:b0:09:af:ea:b4:64:e5:b2:23:46: 72:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:C4:1A:9D:E5:C0:F0:EE:49:0C:EE:AF:DC:8C:99:BD:4A:9F:85:89 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:0a:a6:88:42:14:94:2f:42:1b:67:2e:57:89:c1:e2:95:2a: 01:3e:b0:1f:5e:4a:e5:fb:4c:f9:63:2e:9b:07:fa:d7:e3:d2: b5:cc:6f:5c:ea:1b:21:a7:eb:33:62:e1:11:64:ee:fe:9e:dd: b4:70:bd:77:25:16:41:3a:23:46:3c:2a:9f:64:6c:65:42:a6: 31:f2:29:81:18:fc:de:24:7d:a3:00:53:ef:de:16:bb:f3:65: 8f:5f:80:1b:77:43:94:28:4f:a5:aa:26:96:f8:06:28:b5:22: cb:c0:4d:f1:85:51:7f:0b:31:16:02:3b:0d:fc:a3:2b:82:26: 8b:8e:7d:4f:6f:77:e6:9b:7a:50:98:3e:dc:a0:c7:43:6b:90: 16:8e:16:ce:38:c5:f6:03:7c:b5:a4:5a:c5:78:2d:5c:ac:2f: 13:99:86:5e:91:84:ae:3b:2b:3a:88:cd:c4:f8:f3:f9:bc:2e: 7f:a5:2e:78:5b:52:d0:7d:f6:86:c6:17:aa:f9:1c:18:1c:98: e6:11:d1:4b:3f:19:42:df:d7:46:96:8c:b4:94:5c:05:12:a9: a7:b8:66:71:2a:12:70:41:ce:79:93:28:16:37:d8:e9:88:97: 44:35:6d:00:ce:7a:00:37:94:19:8d:2c:00:ed:8a:b8:c5:95: 12:06:f6:7a -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ+prAoJamKNz+GO1JAf8Q0BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwNzI4MTcwMDUxWhcNMjYwNzI5MTcwMDUxWjAzMTEwLwYDVQQD EyhiMWM0MWE5ZGU1YzBmMGVlNDkwY2VlYWZkYzhjOTliZDRhOWY4NTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQj01b/KPTltSnOxMeCfGfE0V7wv 9UCQ/8Jh/qI55Lz93TUlZk4J8hgqaZxSrHBLXAdt8CbxGdGHDiD+OnHELQLShx76 sqQpfSBZMNt8YB/rkYZWD6SxrHL2p3nm/YSUmILOyJ2hi6zrHT6vBTiF+zvN3rt+ 14Dsk2B9GTz/55aFDaQi1xOP8WV5H1DhHVSrsn0mS9RfG4Ijb3S3M2NXRVbnwqir fksfS3ItmHOLSgI+5kYT+JAlN1bGFDEc/QcSQQMJa/a6zaGye9AOPUGlgpa3yhf+ 83OYDCZpyFr3F5iSsZUfvdJ7fVF2AqTtsWLkwL6ENLAJr+q0ZOWyI0Zy9QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFLHEGp3lwPDuSQzur9yMmb1Kn4WJMB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkwqm iEIUlC9CG2cuV4nB4pUqAT6wH15K5ftM+WMumwf61+PStcxvXOobIafrM2LhEWTu /p7dtHC9dyUWQTojRjwqn2RsZUKmMfIpgRj83iR9owBT794Wu/Nlj1+AG3dDlChP paomlvgGKLUiy8BN8YVRfwsxFgI7DfyjK4Imi459T2935pt6UJg+3KDHQ2uQFo4W zjjF9gN8taRaxXgtXKwvE5mGXpGErjsrOojNxPjz+bwuf6UueFtS0H32hsYXqvkc GByY5hHRSz8ZQt/XRpaMtJRcBRKpp7hmcSoScEHOeZMoFjfY6YiXRDVtAM56ADeU GY0sAO2KuMWVEgb2eg== -----END CERTIFICATE-----Generated at Tue Jul 28 19:53:50 2026 by rpki-client