$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: G5rw4UBZX7rJU+A+yzUw6F/hRnPZG6pIbnGrvrJ6CPM= Subject key identifier: BE:48:49:B4:82:61:C5:FF:59:0D:A5:3C:A8:8E:D7:AD:2D:7F:4A:E6 Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 019FA82BF298EF98BFFE98F03B86EE4D623E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 0878 Signing time: Tue 28 Jul 2026 10:01:20 +0000 Manifest this update: Tue 28 Jul 2026 10:01:20 +0000 Manifest next update: Wed 29 Jul 2026 10:01:20 +0000 Files and hashes: 1: 3O71K1jq21K-s1uKNpoLxwxfjs4.roa (hash: 9K3ZJvCfhWt1RrhHN5T33vgZGrICVU040sK1K6zYTsw=) 2: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (hash: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI=) 3: PIJcLY46PYSHoDgSOZxEPuH417I.roa (hash: srTkWvbqzoKRLCgdMr4N/amg9swAtdMCENwqQ8aPPow=) 4: Q7kbnNNnbSsZFlsov6ILXxHCTdM.roa (hash: VhgI6TuEjkaCFM/zUTKmnIt5ZWs9IQY5K9aBKoHxwD8=) 5: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (hash: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI=) 6: WyQhrcQcI54FWZmH__lrHoE3FWU.roa (hash: 1vjfP6Nqw8yzFBCOkKdm5HoQUw0v3VTrGmhqLtnS2VE=) 7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: AcTimfokbE9Svtyori+A1YkZsHEJ7lH6ytW3dG8IJ+s=) 8: gU8hFrAdmGCPNYOjTnvshD8WKTw.roa (hash: aIL6rAim8v0vCsXPaXDt9dqDXZOi08bdb924MpXBpn8=) 9: l1MJKpxpJrooh4yYg2GeABzuRlk.roa (hash: auDKOkr78/mYWOPaTVOBS3ng5JPSWspfHkibCydvr1k=) 10: rDDIhE0qYfgop087nvS_8O3QtQQ.roa (hash: GNcKt07HGLjSb7pRK/gwNbmbWxAvVfknp/F4+LGsKVg=) 11: uQMfLgCocO-cV1Dq7f8ShCaJ1pI.roa (hash: f2D0zf6gxtDdlo1Fb2b+kXB8Dad/xNYHEZ1SOFzPCFU=) 12: xQbVNLrkghSR1KoodNn_gRkFImc.roa (hash: pt58nZViNxpnnxA6XeQ7GFV7JLxJTNDbZQ9f75iTc5I=) 13: xe57pNkOwTWSUGNF8UIEoEduU54.roa (hash: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:2b:f2:98:ef:98:bf:fe:98:f0:3b:86:ee:4d:62:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Jul 28 10:01:20 2026 GMT Not After : Jul 29 10:01:20 2026 GMT Subject: CN=be4849b48261c5ff590da53ca88ed7ad2d7f4ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:20:fa:94:1c:6e:81:3d:b7:46:29:77:61:6d: a7:a3:d2:26:80:98:7c:f1:26:87:a0:b4:b7:74:d4: 5e:6f:67:b7:01:72:f8:ea:16:90:05:f6:67:54:42: 06:19:0e:88:2d:9a:69:1b:88:71:2e:f7:eb:b6:1b: 43:f9:f1:b9:d6:90:bc:9d:88:89:f4:99:ec:e1:d7: 1e:ce:f1:95:31:12:bb:ed:18:38:c1:7d:ab:4d:01: ca:cb:56:3e:9f:dc:2d:2f:2f:55:70:1f:8e:03:ec: d3:f4:09:2a:0b:a7:65:0b:f1:3f:cc:a2:20:a5:66: 05:f9:d4:18:42:b6:3a:d8:90:0e:e4:2d:ba:1f:f2: 4f:27:f0:f3:be:01:40:17:fd:8e:3d:c5:df:dd:b3: 2b:dd:6e:4c:36:09:9c:6f:be:74:80:ed:ed:55:0e: f0:30:c0:8a:63:a0:60:14:83:a0:b3:47:6b:97:e0: d5:b2:7f:cc:b5:13:53:a6:4d:4a:e5:db:ad:b1:a0: 1e:d8:f4:5b:43:7f:0a:16:96:2d:d9:11:e2:5e:92: 02:e7:19:84:65:90:c9:d7:1a:a8:f6:36:d7:d9:db: 00:b1:e2:2e:75:c7:d3:1e:83:f7:90:b3:98:02:fd: ca:2d:20:f1:29:95:48:07:20:cc:49:d3:28:54:a7: 12:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:48:49:B4:82:61:C5:FF:59:0D:A5:3C:A8:8E:D7:AD:2D:7F:4A:E6 X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:3b:d5:82:83:89:d8:ca:d1:0e:3c:28:36:29:cb:47:48:60: 5f:23:e9:b6:07:3d:3b:33:12:be:c5:fc:f2:cd:af:3a:db:2a: 1e:03:78:b4:6c:b0:f7:57:5c:8b:d2:7a:74:6d:af:0e:04:ec: 57:12:0b:8d:92:4f:f0:71:3f:8f:3f:90:f2:ce:c3:87:f4:69: 8a:f4:9a:f8:35:bd:e3:16:0e:da:64:f4:f5:67:1a:d5:9b:72: 9d:47:ce:83:77:d1:af:4c:bb:5f:62:67:3c:bd:45:31:d0:66: 59:99:7c:fb:dd:60:42:f7:58:d0:6a:0b:49:a6:14:68:41:ef: c8:2f:ac:38:77:65:f8:b6:e6:53:0c:5c:17:21:dd:79:bc:f5: 3a:5f:f5:6a:4e:5a:2d:3f:6d:55:42:67:f3:7e:39:24:92:ad: 1c:29:79:3b:f1:9a:9b:7e:f6:f8:21:d6:f5:55:b2:29:1f:3d: 14:39:0a:8c:7c:4a:8c:59:61:9a:57:19:b1:5e:4b:8e:30:31: 77:67:80:d2:34:42:ee:0f:c5:f9:f5:d2:55:51:61:fd:b1:0d: 2c:a6:48:cf:6d:42:ae:0c:8d:5d:a6:4c:d0:69:4d:43:e8:25: 71:57:e5:56:96:ea:6c:55:d2:ad:e6:1d:30:e2:d0:b6:10:66: 8e:aa:3c:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oK/KY75i//pjwO4buTWI+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwNzI4MTAwMTIwWhcNMjYwNzI5MTAwMTIwWjAzMTEwLwYDVQQD EyhiZTQ4NDliNDgyNjFjNWZmNTkwZGE1M2NhODhlZDdhZDJkN2Y0YWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyCD6lBxugT23Ril3YW2no9ImgJh8 8SaHoLS3dNReb2e3AXL46haQBfZnVEIGGQ6ILZppG4hxLvfrthtD+fG51pC8nYiJ 9Jns4dcezvGVMRK77Rg4wX2rTQHKy1Y+n9wtLy9VcB+OA+zT9AkqC6dlC/E/zKIg pWYF+dQYQrY62JAO5C26H/JPJ/DzvgFAF/2OPcXf3bMr3W5MNgmcb750gO3tVQ7w MMCKY6BgFIOgs0drl+DVsn/MtRNTpk1K5dutsaAe2PRbQ38KFpYt2RHiXpIC5xmE ZZDJ1xqo9jbX2dsAseIudcfTHoP3kLOYAv3KLSDxKZVIByDMSdMoVKcS6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL5ISbSCYcX/WQ2lPKiO160tf0rmMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYzvVgoOJ 2MrRDjwoNinLR0hgXyPptgc9OzMSvsX88s2vOtsqHgN4tGyw91dci9J6dG2vDgTs VxILjZJP8HE/jz+Q8s7Dh/RpivSa+DW94xYO2mT09Wca1ZtynUfOg3fRr0y7X2Jn PL1FMdBmWZl8+91gQvdY0GoLSaYUaEHvyC+sOHdl+LbmUwxcFyHdebz1Ol/1ak5a LT9tVUJn8345JJKtHCl5O/Gam372+CHW9VWyKR89FDkKjHxKjFlhmlcZsV5LjjAx d2eA0jRC7g/F+fXSVVFh/bENLKZIz21CrgyNXaZM0GlNQ+glcVflVpbqbFXSreYd MOLQthBmjqo81w== -----END CERTIFICATE-----Generated at Tue Jul 28 19:31:11 2026 by rpki-client