$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft File: mGihmSu4A33egdDIzcBpX87hfCc.mft (raw, json) Hash identifier: Z/Fpf2jWbp6Bg44VZCoxm4vtWoQwYBuOVXjgtoEqP9w= Subject key identifier: EB:12:3B:75:A5:B3:65:B0:BD:24:0C:47:4E:6B:21:1E:97:63:6E:6F Authority key identifier: 98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 Certificate issuer: /CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Certificate serial: 019FA8997273C07A8093280EE63EEC91B38C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft Manifest number: 13DA Signing time: Tue 28 Jul 2026 12:00:56 +0000 Manifest this update: Tue 28 Jul 2026 12:00:56 +0000 Manifest next update: Wed 29 Jul 2026 12:00:56 +0000 Files and hashes: 1: 6sDEpQA35ftQgC9cRb2aUxRe15M.roa (hash: 9RYUADj24edFkxjz1HOYfztJjRAg3gUE9hiqhdU7LFs=) 2: 9sMrMi9sFO8KgSN1cLbi-u3lvM8.roa (hash: r9Mi0ISmgqXc4MQRndutfvzx3+gJmpftorBgBM19zMU=) 3: CV4kyEyPMrqs-gw6w-zTvMjGT5Q.roa (hash: GvwQBFKWqGnALtG2pY9jEuPw2EDgNLgRgYwwOKULAJQ=) 4: RKC_1mqLXMIDbGkqZMEJrCSWeCo.roa (hash: PPGCCrSEwXx1Rr+8w142QOXo4ncdDGVM4h0k0e7qrm8=) 5: U6vQ_9-xOxVrenXa0_Xg04rZfLY.roa (hash: OQhVM9/l+WAA3TDjGzNDJCTikubrDwOffydjFZn+MFs=) 6: UUD9roNkskiwye2tqwssSFEocBY.roa (hash: uz8OsG4t9MjUUcUflz9xYFC0CJuPcU2Ss0OyzWUNNtw=) 7: W4qxGEOnhck0eA0os9nmiLaPXEU.roa (hash: QlC0nvvSkC3Gr5lT9KAlzmA+mhP9wXRsj529IDFwxxk=) 8: YyEjnHRlckr_V27zZG0mJ7mtsUY.roa (hash: TMaxyAx06Cm6JWuqxguyXAjdJbsUvcCD71I5rrjSBnE=) 9: hxArBBPEsBmh6lA8LmpqsGC-O9Y.roa (hash: p7tJPFgjfUUpJQH1SrbPDkojOBWipCAp1Q6lO2Sk15g=) 10: iIxvWcwl88BImtN8o1GvbtwFtug.roa (hash: a5Q+4dXfu6wDxBWXxjzSYqzWruw5vPQbQWVRYFB3/0Q=) 11: ix0KuQhI-fe5sCE43gDf8AwDdMk.roa (hash: r5gzLIcFMc4LYxDWUcBWNYQE4pYOB805yyOcqZ4Ft0k=) 12: mGihmSu4A33egdDIzcBpX87hfCc.crl (hash: aGDc/UQGs2YtF8afXTSH9HqXfB/IW/2YYKc0q/ECEzQ=) 13: sf51NOhxVRdedJBM3Z0cnGoghkQ.roa (hash: LN9NTe23NXKUtbp6+7QIyRE2B1TaB0xN6+rtM8kCrNA=) 14: ttggVWDiefPyqveIlfoGKCWaja4.roa (hash: NvSwdx11u/EHh453rM9xZTJvAWhbuq2a/Hj0lXbHfsQ=) 15: vTt98DamUvECWEMoSR5lw_z_oe4.roa (hash: xsmG4HMvRTP949NLqKrEta8cDRTk+o+O5AMMpfIwVNc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:99:72:73:c0:7a:80:93:28:0e:e6:3e:ec:91:b3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9868a1992bb8037dde81d0c8cdc0695fcee17c27 Validity Not Before: Jul 28 12:00:56 2026 GMT Not After : Jul 29 12:00:56 2026 GMT Subject: CN=eb123b75a5b365b0bd240c474e6b211e97636e6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b9:17:fd:c6:d7:fe:97:7f:8a:a7:70:6f:2d: 1e:ae:e5:c6:05:d8:53:15:f1:45:81:f9:c9:45:4d: 27:02:e8:30:96:9d:cc:75:79:2f:1c:f8:83:f4:3e: ff:f0:57:78:82:e0:06:a0:ac:3f:f0:57:cb:57:8a: d8:67:3b:12:5a:44:92:2f:3a:d9:14:04:94:2a:c5: c7:3c:31:13:07:ed:97:5f:23:6b:01:de:54:24:65: ef:00:ad:d2:93:ea:df:d6:aa:fd:97:8f:09:86:fc: 7c:ba:2c:83:94:6f:2c:44:43:7c:66:3b:54:21:c4: 74:ba:b2:b8:14:ae:cb:fa:89:38:c8:c8:ea:f8:ff: 3d:1a:4b:59:c3:d0:1d:68:5b:3f:bb:35:a6:ed:20: 6b:9b:4b:f0:28:6a:15:72:a7:6a:b0:1f:8d:5e:2a: c0:e6:62:6b:5a:df:33:28:bb:71:0c:b9:a7:c8:0a: 27:84:68:e3:27:ed:2d:da:d6:0f:94:46:74:c0:de: ac:5a:e0:16:00:a8:34:bd:e8:be:17:fe:0a:88:66: 4d:ce:99:6c:30:f6:1e:72:21:19:bf:c4:c8:61:42: 29:73:3d:69:d9:e9:da:46:e6:c7:61:06:05:eb:64: e6:c8:0b:39:46:72:a7:36:18:8c:1d:0c:e2:1b:3c: e9:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:12:3B:75:A5:B3:65:B0:BD:24:0C:47:4E:6B:21:1E:97:63:6E:6F X509v3 Authority Key Identifier: keyid:98:68:A1:99:2B:B8:03:7D:DE:81:D0:C8:CD:C0:69:5F:CE:E1:7C:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGihmSu4A33egdDIzcBpX87hfCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/6b22e6-352f-4e88-827b-d78d5631d7f6/1/mGihmSu4A33egdDIzcBpX87hfCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:4a:ac:d5:1c:c2:6b:66:2b:71:1d:cc:30:c7:20:f4:34:b0: d1:54:38:3a:fd:05:ce:ec:00:5b:94:ab:63:1a:a8:4f:d8:05: 29:72:4a:99:7e:20:46:e6:8a:6e:45:19:b5:87:b8:99:45:61: 83:3e:85:8c:d1:35:72:06:f4:2e:c3:9b:39:bc:e6:31:d0:57: 2f:f9:f2:0c:92:a4:a3:94:70:71:0a:4b:6a:27:f6:80:ee:ca: 90:c3:37:b1:6d:25:cf:c0:d7:8d:3b:5e:8b:fb:a4:83:3e:14: c8:3a:9d:67:55:f7:78:7d:27:cf:32:76:97:35:80:d9:4a:ac: 58:f1:b2:73:14:da:0a:5f:03:7a:49:b8:2f:2f:f0:58:6a:ef: 29:bd:c9:56:b7:17:96:27:22:99:b5:8a:ec:4d:9e:7c:3d:bd: fa:6b:1f:f7:93:b1:33:71:06:49:54:6d:10:32:b2:a7:5e:12: 26:a6:29:5c:ea:73:a3:a0:11:ea:3b:60:7c:ba:50:da:37:e0: 79:84:c8:3d:30:46:30:a3:52:9d:46:07:f4:f2:26:40:29:7a: f1:cf:ff:66:95:92:2b:93:e6:ce:e6:f6:e4:ea:d0:79:e9:c3: 43:9f:24:7d:f8:59:9b:77:66:b2:a8:96:b9:9b:ad:d8:38:d4: c3:2d:7a:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+omXJzwHqAkygO5j7skbOMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk4NjhhMTk5MmJiODAzN2RkZTgxZDBjOGNkYzA2OTVmY2Vl MTdjMjcwHhcNMjYwNzI4MTIwMDU2WhcNMjYwNzI5MTIwMDU2WjAzMTEwLwYDVQQD EyhlYjEyM2I3NWE1YjM2NWIwYmQyNDBjNDc0ZTZiMjExZTk3NjM2ZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7kX/cbX/pd/iqdwby0eruXGBdhT FfFFgfnJRU0nAugwlp3MdXkvHPiD9D7/8Fd4guAGoKw/8FfLV4rYZzsSWkSSLzrZ FASUKsXHPDETB+2XXyNrAd5UJGXvAK3Sk+rf1qr9l48Jhvx8uiyDlG8sREN8ZjtU IcR0urK4FK7L+ok4yMjq+P89GktZw9AdaFs/uzWm7SBrm0vwKGoVcqdqsB+NXirA 5mJrWt8zKLtxDLmnyAonhGjjJ+0t2tYPlEZ0wN6sWuAWAKg0vei+F/4KiGZNzpls MPYeciEZv8TIYUIpcz1p2enaRubHYQYF62TmyAs5RnKnNhiMHQziGzzpIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOsSO3Wls2WwvSQMR05rIR6XY25vMB8GA1UdIwQY MBaAFJhooZkruAN93oHQyM3AaV/O4XwnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2It ZDc4ZDU2MzFkN2Y2LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC82YjIyZTYtMzUyZi00ZTg4LTgyN2ItZDc4ZDU2MzFkN2Y2 LzEvbUdpaG1TdTRBMzNlZ2RESXpjQnBYODdoZkNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEqs1RzC a2YrcR3MMMcg9DSw0VQ4Ov0FzuwAW5SrYxqoT9gFKXJKmX4gRuaKbkUZtYe4mUVh gz6FjNE1cgb0LsObObzmMdBXL/nyDJKko5RwcQpLaif2gO7KkMM3sW0lz8DXjTte i/ukgz4UyDqdZ1X3eH0nzzJ2lzWA2UqsWPGycxTaCl8Dekm4Ly/wWGrvKb3JVrcX licimbWK7E2efD29+msf95OxM3EGSVRtEDKyp14SJqYpXOpzo6AR6jtgfLpQ2jfg eYTIPTBGMKNSnUYH9PImQCl68c//ZpWSK5Pmzub25OrQeenDQ58kffhZm3dmsqiW uZut2DjUwy16MQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:28:33 2026 by rpki-client