$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft File: jNgCUSzLdFsqG48xVxTr45OVQD4.mft (raw, json) Hash identifier: FoHNbJNrta7Oo/esDPucdbtB/pgO9m2n680wgPjRsHQ= Subject key identifier: 75:E7:51:1A:5E:EB:1A:4F:82:53:FB:5E:66:BD:B0:80:A3:7E:17:57 Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e Certificate serial: 019FA9AC433D9DC764EF0899D3DC7906BE0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft Manifest number: 015A Signing time: Tue 28 Jul 2026 17:01:06 +0000 Manifest this update: Tue 28 Jul 2026 17:01:06 +0000 Manifest next update: Wed 29 Jul 2026 17:01:06 +0000 Files and hashes: 1: 19UOCWKK4FAiGbvGJG5kxsDMJ_8.roa (hash: w6SS0Lj91tIg6RJx2kbnjFRnAKrUr5Bp3JesWHPQF7U=) 2: 7dS3f87b8rClIQfQDt7ZrLOCFN0.roa (hash: jtFM+HhYEhIeATKc9POq4FW4Qi1yjd0neVJZ42IO2dk=) 3: EOYuq-N-rljnSKK6-AdsiYeEJ4E.roa (hash: 0ClAECfZy+07C6UFRDS3kRbp9F1kRxfmXvcjT8j5d7Q=) 4: FOFTEst8oF0q0X3OdQgxLZ9oed8.roa (hash: g3Bb+RZcj9ZCWcwsCCB0Hz+Q7AkmMt0+i5iC3617N+w=) 5: NueNRL5wm4cxcYHE_E2Q4bYmOjA.roa (hash: TfRkOz0goqzjaEodDhFwiei8/n8mFcYT40hAji7gK7Q=) 6: RJ_8MLiQcEMQljmCDmVnOOnfQyY.roa (hash: qITG72dsAnXhR2+Wt6OI6k5v+TEp09wmHQrA/LqWJPc=) 7: ZZ4HmXsncRW4Duwlwd9BhGfdvNU.roa (hash: AltMyFS1s/HAyVQ82EJUVtjUQ8FL/MMkrFmI+rDpQvg=) 8: hYM7beFU-i68zuT-E-AP85h8fdI.roa (hash: Q6rivTFhzgG3KkdlD6+HA7Kyl4SyGQidk6P1eN7a4CU=) 9: hp01qqaG6ojwTceGwUYjwpMc_FA.roa (hash: +EoDWRDS7zIW8lYYUpVakjrqTS94dDcew7HVE2+smMs=) 10: jNgCUSzLdFsqG48xVxTr45OVQD4.crl (hash: NAjVGc5OwI+Q0TzkGlMNGiRo7GecbKyMMEDbIkOch04=) 11: qbinC6Bue2GJIuNLnptWJaA-Dds.roa (hash: 6HXvSYL8Dx9Ja4sY1cHp96tpfM1YjHJq65VRixXzZSc=) 12: yTtSJ-72gvZbFezzjuP8atI2Y74.roa (hash: wldJRvptVpmVW5JI0I+zGNq+GzlHt2h7rIbCYaZ8Fsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ac:43:3d:9d:c7:64:ef:08:99:d3:dc:79:06:be:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e Validity Not Before: Jul 28 17:01:06 2026 GMT Not After : Jul 29 17:01:06 2026 GMT Subject: CN=75e7511a5eeb1a4f8253fb5e66bdb080a37e1757 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:fd:94:a7:f1:71:9a:6d:0c:07:2a:de:d5:fb: 8f:f0:67:f4:58:83:a5:f5:11:ec:d5:e4:da:17:49: 77:c5:ac:d3:5a:4c:19:c6:91:a3:32:33:c9:9f:d3: 07:38:92:ea:15:87:31:c3:03:60:61:73:87:b7:6f: a1:a9:89:61:99:e1:ce:5f:72:5c:3a:88:7a:58:9d: d5:12:d5:ba:ac:a2:ba:a7:11:84:26:cb:39:41:29: e5:df:58:e9:e2:90:fc:5e:d0:04:3a:e0:33:7a:16: 66:99:15:23:8a:36:34:aa:86:39:16:fb:0d:f6:00: 95:a1:c8:35:91:8f:e8:67:b4:aa:e0:09:db:6e:1b: ff:44:e3:32:2e:b4:4e:7d:a9:18:fe:6c:d0:1c:bc: 7a:ab:47:c3:95:50:f5:3c:de:9e:33:c5:16:86:4b: ce:13:8b:2f:4b:d7:46:e4:ab:4c:0d:03:0d:68:13: 31:32:09:46:5b:48:89:f6:f8:b8:e2:d2:4c:75:ce: 86:81:4c:78:61:8f:db:3a:16:36:2f:47:ff:58:e7: c6:a3:e8:b5:1c:5c:dd:59:21:60:bf:b2:31:d9:5a: 98:d1:d1:ed:3e:c0:0b:a0:ce:df:dc:07:6d:ac:fa: e2:c9:81:49:29:e2:98:8b:b3:30:09:dd:82:c2:8b: 25:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E7:51:1A:5E:EB:1A:4F:82:53:FB:5E:66:BD:B0:80:A3:7E:17:57 X509v3 Authority Key Identifier: keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:52:76:8a:5a:f8:fb:16:a7:42:20:cb:1e:3e:e4:15:c3:40: f0:20:e1:9b:bb:0a:cf:94:8c:1d:87:17:fa:22:0a:e7:eb:ea: e0:54:a8:2b:b8:5f:e6:19:6f:bf:95:11:91:9a:9e:f8:50:3f: 78:aa:df:97:80:2b:17:9c:fe:17:2e:8d:66:ef:be:06:6f:eb: 9a:e7:bf:99:2b:98:8f:0c:bd:d7:91:68:fc:fc:57:d8:a2:61: 8e:52:bf:3d:9e:d5:02:b3:55:ba:22:1d:17:d8:a8:d7:1b:4d: ea:13:62:09:e0:38:9c:87:1c:47:26:f1:2b:db:3d:8a:15:33: 40:23:e0:dc:70:89:fa:6d:e5:43:23:17:5c:50:2b:4c:1a:a7: 85:ba:f5:75:b6:e4:13:86:b5:cc:60:b8:6d:ed:03:e2:85:59: 32:30:83:00:6a:db:04:43:02:a0:e6:8f:a1:87:85:4f:cf:e6: ff:d9:01:6c:d0:c7:87:d6:f8:2a:1c:ce:4f:4f:df:57:ee:fb: 1a:82:94:d4:9d:db:48:17:51:4f:66:40:cd:ef:2d:db:ab:38: e7:a0:69:54:2f:52:91:d0:8e:0b:c4:3e:b2:cc:1d:c3:d7:e7: f4:30:a6:04:11:5e:4a:77:fe:95:39:df:19:42:4b:75:e4:25: f2:7d:4a:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+prEM9ncdk7wiZ09x5Br4MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDgwMjUxMmNjYjc0NWIyYTFiOGYzMTU3MTRlYmUzOTM5 NTQwM2UwHhcNMjYwNzI4MTcwMTA2WhcNMjYwNzI5MTcwMTA2WjAzMTEwLwYDVQQD Eyg3NWU3NTExYTVlZWIxYTRmODI1M2ZiNWU2NmJkYjA4MGEzN2UxNzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9v2Up/Fxmm0MByre1fuP8Gf0WIOl 9RHs1eTaF0l3xazTWkwZxpGjMjPJn9MHOJLqFYcxwwNgYXOHt2+hqYlhmeHOX3Jc Ooh6WJ3VEtW6rKK6pxGEJss5QSnl31jp4pD8XtAEOuAzehZmmRUjijY0qoY5FvsN 9gCVocg1kY/oZ7Sq4Anbbhv/ROMyLrROfakY/mzQHLx6q0fDlVD1PN6eM8UWhkvO E4svS9dG5KtMDQMNaBMxMglGW0iJ9vi44tJMdc6GgUx4YY/bOhY2L0f/WOfGo+i1 HFzdWSFgv7Ix2VqY0dHtPsALoM7f3AdtrPriyYFJKeKYi7MwCd2CwoslNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHXnURpe6xpPglP7Xma9sICjfhdXMB8GA1UdIwQY MBaAFIzYAlEsy3RbKhuPMVcU6+OTlUA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmIt MzhlMDY4NTM2ZTZiLzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmItMzhlMDY4NTM2ZTZi LzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1J2ilr4 +xanQiDLHj7kFcNA8CDhm7sKz5SMHYcX+iIK5+vq4FSoK7hf5hlvv5URkZqe+FA/ eKrfl4ArF5z+Fy6NZu++Bm/rmue/mSuYjwy915Fo/PxX2KJhjlK/PZ7VArNVuiId F9io1xtN6hNiCeA4nIccRybxK9s9ihUzQCPg3HCJ+m3lQyMXXFArTBqnhbr1dbbk E4a1zGC4be0D4oVZMjCDAGrbBEMCoOaPoYeFT8/m/9kBbNDHh9b4KhzOT0/fV+77 GoKU1J3bSBdRT2ZAze8t26s456BpVC9SkdCOC8Q+sswdw9fn9DCmBBFeSnf+lTnf GUJLdeQl8n1KdA== -----END CERTIFICATE-----Generated at Tue Jul 28 23:09:02 2026 by rpki-client