$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: Otqzr2v8oiNltxFqwe/9C/mEl2gV/8V3jK/NNIwy2d0= Subject key identifier: 59:24:E9:61:F5:4C:55:E5:5E:BA:81:B1:EC:D9:79:68:47:B3:3A:42 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019FAA1A90212F3820725A4BEB9316529EE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 16B2 Signing time: Tue 28 Jul 2026 19:01:35 +0000 Manifest this update: Tue 28 Jul 2026 19:01:35 +0000 Manifest next update: Wed 29 Jul 2026 19:01:35 +0000 Files and hashes: 1: 0inTqtkV7aRdA0poVknUSc5weqM.roa (hash: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8=) 2: 6TbA_Za4Eowieja7n7niJ7Rt1gs.roa (hash: scQ2AMr4c5KWoojUsMClo/2J+rhonxe/8Y7reFR2/oA=) 3: F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa (hash: jxUQ0KKcc1cvSdaRZ9vh81k1iQSpuyreVGWce3iIfz4=) 4: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (hash: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw=) 5: KOWxSmH0_bapiUsF2I5NvMk2mAE.roa (hash: qlla291EA5iael/7BwH1F/97Ya9GRn26shYvkPQjZ4Q=) 6: OYUqnwa8yQK0vig2w6Um7A1Wcg4.roa (hash: vSXWDq1SS7TbMrb96ytcbFUS3oNQ6vxE3t+U54lGeWc=) 7: _qefhBTX4GrLHAKY0SuGouHYv88.roa (hash: ZZ2WFS7hoXoz7ExsxVHk1ghS6uAk+/8jwy793fgoALQ=) 8: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (hash: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc=) 9: cYegkqTDRQkQYBG0QAGLC43ERoE.roa (hash: Jj0rGclcjFrkbXAtvfPBQZbVxQ41VQry0fjFc8pn/lw=) 10: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (hash: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM=) 11: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: 4ARL+rYYsyz5JuUJ8WsbDclgM+9aVi8LeywGq7kM9f0=) 12: roVhJvLE3W-3AVNXrvbfZb_XPPo.roa (hash: 6LQ91r1uUm0MXEXzntSjw9cSGp9nmQGmFVNHFHmb1Zw=) 13: thPKVIAn4Mtb5x7VAf0Ti0_MWKQ.roa (hash: U0wPlIAv75ZKpiMwZqpBCEwATCl9LCbwg1gs4MzHORI=) 14: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (hash: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:1a:90:21:2f:38:20:72:5a:4b:eb:93:16:52:9e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jul 28 19:01:35 2026 GMT Not After : Jul 29 19:01:35 2026 GMT Subject: CN=5924e961f54c55e55eba81b1ecd9796847b33a42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:8c:7f:56:0b:43:95:73:fb:bd:20:2a:3d:0d: a7:09:4f:1a:70:f4:50:05:01:1a:49:fb:04:77:d3: 63:23:31:0b:1d:54:d6:a1:4c:55:46:26:b4:5b:38: c6:39:4d:43:f9:c1:4c:b6:a3:a6:b2:ab:f4:17:2d: 62:0c:1a:2d:b1:45:48:a0:17:e0:0b:f5:08:5e:dc: 54:02:6d:8d:0c:46:1e:c2:da:9b:b1:13:cd:ba:06: de:ac:b6:28:47:8b:98:85:53:0e:a7:12:9d:7a:22: c6:ce:b2:53:30:51:3e:02:43:8f:9f:58:77:6b:14: ec:67:90:76:61:1c:23:44:c4:b3:59:e7:f0:ba:5e: 45:2c:46:dc:f1:ee:3b:eb:0d:17:96:8a:28:ef:58: d1:77:78:34:68:3d:1e:ee:d0:2b:29:01:bf:2d:3e: a5:0b:44:58:7e:4a:28:8e:8e:8a:27:51:4a:86:cf: 84:87:ef:8b:76:13:71:c8:04:c5:ae:c3:5b:5c:73: eb:87:93:79:22:b0:23:f3:3b:88:52:9d:ba:ba:c7: 03:69:39:dd:90:f5:4c:b7:2a:cc:ae:a7:25:cd:ca: 08:69:20:6a:cf:37:4a:ee:14:8b:d3:4f:90:b2:4e: 1a:0a:cb:97:fb:79:8c:95:8a:a6:7b:f9:12:54:c4: a0:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:24:E9:61:F5:4C:55:E5:5E:BA:81:B1:EC:D9:79:68:47:B3:3A:42 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:fc:dc:3e:f4:c2:52:d3:cc:ff:12:98:6d:cf:d0:f0:22:8e: da:41:05:e1:51:a3:c5:0b:fd:91:51:be:e8:e1:9e:d1:47:c4: 8e:ee:10:30:90:1b:0d:7d:fe:fc:93:18:88:0f:aa:bb:60:9e: b0:2a:3c:af:77:13:5b:76:2b:92:e9:e9:18:5f:ec:73:fe:6c: cd:a1:47:67:a7:46:f6:3c:44:79:20:e4:9e:77:2f:fe:5e:73: a2:34:5f:3e:c8:72:c1:07:84:d0:22:f5:35:5f:fa:0e:15:b7: 70:60:4c:3d:b2:49:4a:5d:5d:3f:13:86:1b:aa:64:7a:38:8e: c7:34:7e:c8:30:3a:c6:df:75:8c:48:5c:59:55:ed:54:94:65: db:33:29:3b:e1:8d:bc:2d:11:9d:4c:d8:40:d0:c6:f8:1c:a0: 91:70:ba:02:eb:f8:24:69:12:46:ad:c1:91:08:18:b2:a1:60: d1:2e:0f:5b:d6:16:71:88:4e:f8:52:77:cd:fc:1d:05:ef:b7: 15:1c:cf:d0:fc:e6:46:3b:e9:fd:be:c3:ab:a4:49:cb:df:a8: be:c8:e7:b1:5b:8f:61:86:c2:44:04:2c:78:b0:49:86:16:36: f0:c7:67:4a:08:f4:6d:3a:54:70:56:5e:59:cc:d6:0d:ec:65: 17:22:78:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qGpAhLzggclpL65MWUp7nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwNzI4MTkwMTM1WhcNMjYwNzI5MTkwMTM1WjAzMTEwLwYDVQQD Eyg1OTI0ZTk2MWY1NGM1NWU1NWViYTgxYjFlY2Q5Nzk2ODQ3YjMzYTQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4x/VgtDlXP7vSAqPQ2nCU8acPRQ BQEaSfsEd9NjIzELHVTWoUxVRia0WzjGOU1D+cFMtqOmsqv0Fy1iDBotsUVIoBfg C/UIXtxUAm2NDEYewtqbsRPNugberLYoR4uYhVMOpxKdeiLGzrJTMFE+AkOPn1h3 axTsZ5B2YRwjRMSzWefwul5FLEbc8e476w0Xlooo71jRd3g0aD0e7tArKQG/LT6l C0RYfkoojo6KJ1FKhs+Eh++LdhNxyATFrsNbXHPrh5N5IrAj8zuIUp26uscDaTnd kPVMtyrMrqclzcoIaSBqzzdK7hSL00+Qsk4aCsuX+3mMlYqme/kSVMSgeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFkk6WH1TFXlXrqBsezZeWhHszpCMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfzcPvTC UtPM/xKYbc/Q8CKO2kEF4VGjxQv9kVG+6OGe0UfEju4QMJAbDX3+/JMYiA+qu2Ce sCo8r3cTW3YrkunpGF/sc/5szaFHZ6dG9jxEeSDknncv/l5zojRfPshywQeE0CL1 NV/6DhW3cGBMPbJJSl1dPxOGG6pkejiOxzR+yDA6xt91jEhcWVXtVJRl2zMpO+GN vC0RnUzYQNDG+BygkXC6Auv4JGkSRq3BkQgYsqFg0S4PW9YWcYhO+FJ3zfwdBe+3 FRzP0PzmRjvp/b7Dq6RJy9+ovsjnsVuPYYbCRAQseLBJhhY28MdnSgj0bTpUcFZe WczWDexlFyJ44w== -----END CERTIFICATE-----Generated at Tue Jul 28 21:58:33 2026 by rpki-client