$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: jw/7oKxIVxV8yriU9/oZs7A1MyO2HxIKHfHhYNV6VYo= Subject key identifier: 22:AD:EF:4C:FC:04:D6:D1:3A:AC:E7:76:3C:C9:E0:30:8F:52:A3:1E Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019FAA505646912A1883321453860ED7B363 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 11EF Signing time: Tue 28 Jul 2026 20:00:19 +0000 Manifest this update: Tue 28 Jul 2026 20:00:19 +0000 Manifest next update: Wed 29 Jul 2026 20:00:19 +0000 Files and hashes: 1: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=) 2: C4GFPQJi7p8x697vDEqdYSForok.roa (hash: x37lAGnggrFkEEQihLvJsXhXtDeedMO3diP0XULMgKY=) 3: FXRjYZvbpR4kI47t-xbWMZKIpXs.roa (hash: f82R7m8nlKkGC17z2MB1wjV2cD02/YvewqP02lzhH/g=) 4: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=) 5: ZPQxZyBJh2Vw2t_b2vNEAiLh99k.roa (hash: NDs1Vf1mQ8nJ5oBooS0cBClzynoCDC8zG6mfNnpUvhE=) 6: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: ja+Yhq5ExpF9iY/vC33L+n8powGrfOtlXYX/vZc5DFc=) 7: eoCcRd3DQ06osUmaj6wTPXbyx3M.roa (hash: Bag32wKiY/ZwSFfm1YHrZ2XH/ziquJ1Nmz4VoaY0zzY=) 8: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=) 9: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=) 10: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:50:56:46:91:2a:18:83:32:14:53:86:0e:d7:b3:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Jul 28 20:00:19 2026 GMT Not After : Jul 29 20:00:19 2026 GMT Subject: CN=22adef4cfc04d6d13aace7763cc9e0308f52a31e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:91:21:64:0e:dd:dd:9e:b3:4f:6b:ea:7b:36: 4e:82:f0:32:45:89:97:9b:a1:86:47:a9:a7:ff:dc: ec:92:eb:6c:73:24:8e:23:40:ac:72:1f:3b:dd:9f: ca:03:11:24:a5:35:d3:e6:83:f1:cf:5c:21:98:32: 30:b5:44:23:6b:04:c0:8c:c3:f3:44:2a:8e:02:c2: 3d:0a:60:4e:ce:33:af:14:be:99:a2:a1:0b:bf:b0: c7:85:50:55:18:9d:5c:ad:c9:d3:2a:f9:f0:cc:2a: 17:15:be:6e:49:b8:66:69:c8:87:70:37:a3:24:1a: 8c:45:3c:4d:a1:be:2c:87:5a:5c:9e:b9:1f:08:b4: 37:df:65:3a:22:cd:a0:36:fd:b7:7b:e6:3d:6c:db: 32:61:7e:33:b6:bf:5d:94:4d:d2:77:82:25:af:21: f5:a8:55:83:46:80:34:63:95:66:02:fb:29:7d:b4: 82:a6:17:59:ee:99:07:1b:7d:f9:04:6f:64:15:fc: 45:7c:9f:d2:05:1e:d7:00:0e:4f:ea:a8:31:0f:33: 29:a4:9e:dc:7e:fb:0a:4b:99:96:b9:15:73:8b:e4: a9:db:82:1c:ec:f2:41:2d:65:2f:71:e7:61:2d:aa: 7c:a0:8a:9d:8d:ea:2d:d0:ab:13:9a:18:9e:1a:69: 5e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:AD:EF:4C:FC:04:D6:D1:3A:AC:E7:76:3C:C9:E0:30:8F:52:A3:1E X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:16:18:3a:df:e9:11:cd:ae:55:80:f2:b9:9c:76:8a:84:6b: b7:6e:a1:4e:91:bc:3c:29:dc:5a:9c:8a:04:43:8a:ea:92:97: 23:98:92:64:f3:89:f6:cb:43:c1:93:40:d7:f2:7f:5a:c0:31: 1d:27:85:8a:5e:83:8a:f6:ca:64:89:a6:31:88:9e:93:5d:92: c3:27:34:7d:73:ef:be:e5:00:5c:f6:3b:5a:7d:25:98:74:76: 52:28:20:27:89:f1:2c:f1:75:ee:9c:fa:40:f9:26:55:81:d1: 2d:5e:29:37:13:81:51:15:45:a1:16:08:a7:1b:32:7d:9d:c4: ac:67:10:d7:73:a2:8d:21:15:da:79:f5:36:63:1e:97:ab:72: 46:97:d7:15:6e:82:0e:c2:f6:40:fa:39:70:16:af:95:5b:88: c0:f1:bc:64:fe:85:32:02:8f:68:15:71:c6:f3:eb:47:ea:2d: 58:72:33:c3:8f:4a:2b:81:e1:99:08:17:78:65:75:a6:1a:67: 5d:fa:dc:f3:6e:25:e6:14:18:7f:21:ee:35:ef:62:6b:2a:23: 05:d7:1a:60:2d:6f:93:32:61:af:47:16:d3:0e:42:a8:5e:e6: c4:40:af:c5:ce:c4:b2:fe:79:d9:bc:4b:73:42:3b:ad:5f:4d: 41:40:4b:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qUFZGkSoYgzIUU4YO17NjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwNzI4MjAwMDE5WhcNMjYwNzI5MjAwMDE5WjAzMTEwLwYDVQQD EygyMmFkZWY0Y2ZjMDRkNmQxM2FhY2U3NzYzY2M5ZTAzMDhmNTJhMzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pEhZA7d3Z6zT2vqezZOgvAyRYmX m6GGR6mn/9zskutscySOI0Csch873Z/KAxEkpTXT5oPxz1whmDIwtUQjawTAjMPz RCqOAsI9CmBOzjOvFL6ZoqELv7DHhVBVGJ1crcnTKvnwzCoXFb5uSbhmaciHcDej JBqMRTxNob4sh1pcnrkfCLQ332U6Is2gNv23e+Y9bNsyYX4ztr9dlE3Sd4IlryH1 qFWDRoA0Y5VmAvspfbSCphdZ7pkHG335BG9kFfxFfJ/SBR7XAA5P6qgxDzMppJ7c fvsKS5mWuRVzi+Sp24Ic7PJBLWUvcedhLap8oIqdjeot0KsTmhieGmlebQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKt70z8BNbROqzndjzJ4DCPUqMeMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRYYOt/p Ec2uVYDyuZx2ioRrt26hTpG8PCncWpyKBEOK6pKXI5iSZPOJ9stDwZNA1/J/WsAx HSeFil6DivbKZImmMYiek12Swyc0fXPvvuUAXPY7Wn0lmHR2UiggJ4nxLPF17pz6 QPkmVYHRLV4pNxOBURVFoRYIpxsyfZ3ErGcQ13OijSEV2nn1NmMel6tyRpfXFW6C DsL2QPo5cBavlVuIwPG8ZP6FMgKPaBVxxvPrR+otWHIzw49KK4HhmQgXeGV1phpn Xfrc824l5hQYfyHuNe9iayojBdcaYC1vkzJhr0cW0w5CqF7mxECvxc7Esv552bxL c0I7rV9NQUBL2Q== -----END CERTIFICATE-----Generated at Tue Jul 28 23:11:14 2026 by rpki-client