$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: 3XQP+Q+0FizgDc0fHsMYcQKxm+9s9KsgIJJzXThKiZQ= Subject key identifier: 96:7F:B8:40:03:A6:8F:42:C1:D0:A1:61:D3:62:C8:11:D7:97:4A:AA Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 019FAA19E30C4DFE60E758264BD388310A7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 1AD6 Signing time: Tue 28 Jul 2026 19:00:50 +0000 Manifest this update: Tue 28 Jul 2026 19:00:50 +0000 Manifest next update: Wed 29 Jul 2026 19:00:50 +0000 Files and hashes: 1: 0r3kkbCIc2trczoA0tV0PpuHTqk.roa (hash: hYQwD9eKL8aadDbtj9scQfTVqsN0ThTdN4voLWbulpc=) 2: 1-HMehk4Z5593y_16dRGWIQyy-Ng.roa (hash: EurbSdpdbDWY2LP7kxCHMWSabQW2ttzuwZ+l6NbR48o=) 3: 7BOKK6Tl9KRbFdrQtKoSEGrM2ns.roa (hash: 0WZmcRa658Us5LFqpepkQ3ZD0Z3AX8LDSbJ/uzthFek=) 4: CDjWTyoS71DXASo2Nj7eHKZDgBU.roa (hash: 0MjLF8Ccc2qdY2KgDxvd+hMdzbz7ozx3zfAkryxvvg0=) 5: J1bOpzfz9N73oSFlFV1z4QDm-64.roa (hash: h6M5XtZ8RlW37k6FxTv2spT98MJgWMzY1tvdNHQE2Vg=) 6: KVv7_M50V2iyBxYsG_dQpH_S9tQ.roa (hash: RkhZYcx1K+qPGt8mNSXPpba3hYgNZEfnfscSk3pS5x0=) 7: KXN5i1ksyLJ3gWuszNVJ4lkPFkA.roa (hash: yrzgi/xgwBaka39UCK/DNXA3vvLMwfJcozcKOOGIcnk=) 8: KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa (hash: 7kkTNpurW7ovwPOEHHf7JVghG0bKfPeVVb6gJUM+74E=) 9: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=) 10: NRslGXwzqXLsPOGISDrIoXtcmqY.roa (hash: DEaiL5GBQA1ssRMigPA8Fc7/Qa4ewlIX8LGF5gSXnqI=) 11: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=) 12: Xk9NYhdXTr3rd3NYRXydtLgFRbs.roa (hash: 5i33Vv91iUeFK5+uzl8a/uVNcXnYM4QXT7Iz6UOmTNs=) 13: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=) 14: _-CNKE2_7z_kM89zZk_UMMjhAl8.roa (hash: Fyok2cPZyLmptoNn7yS8WruQ3n7BVYZFEv5nHH8YA4g=) 15: _yYeoQViTIjqsYE0h5QCAQRGd04.roa (hash: ZBg3y/n8GjKrQaC1IigA7ZREsnmFDIrXAnas9eg3WXo=) 16: a8icz_iV0I-bqil-bMRlOH1Nr5g.roa (hash: tNDWlSbeDLoMRL90ewXHPXUG9G9kPAmkJbfvaEeyj78=) 17: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: BhmUOR6cH/TdimT4SeuSHK+XFKQTrcW4xsAG8CW1FmI=) 18: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=) 19: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=) 20: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=) 21: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=) 22: x2-UOiQ1JkGjRhg5Y3BKO6HEghI.roa (hash: Sqa+wceVkaOOyPhxXULzb2svO17UJ0RHxLUOfuxIaDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:19:e3:0c:4d:fe:60:e7:58:26:4b:d3:88:31:0a:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Jul 28 19:00:50 2026 GMT Not After : Jul 29 19:00:50 2026 GMT Subject: CN=967fb84003a68f42c1d0a161d362c811d7974aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f7:42:61:86:96:f2:fd:fe:45:bd:f9:70:5c: 78:74:60:a8:d7:56:09:14:24:6a:21:d6:a5:25:89: cb:4b:ac:fc:6f:8f:2e:d1:65:27:54:e2:a2:96:d0: ca:a0:9e:b7:8c:76:cf:c6:cc:6c:c7:d0:8c:e8:f0: 56:1d:1d:8c:b3:e6:af:43:b7:c1:15:53:13:23:68: 30:de:8f:f8:aa:98:fc:06:e0:a7:ff:23:5f:2b:8a: ba:8f:88:68:25:40:cc:37:f6:7b:ab:fc:42:81:50: 20:40:8e:6d:7f:9d:10:4d:86:1a:33:61:32:21:47: 9e:c6:1c:ce:2d:b3:e9:0b:45:05:1b:c0:41:92:8e: 13:6d:7c:a1:ec:b3:3e:e7:55:ba:09:05:83:d5:cc: 2e:b7:41:3f:0d:33:2d:1d:43:7a:10:cf:c0:d2:ec: a5:a5:2a:d7:71:1b:87:f6:58:6b:39:36:d2:ab:78: 6b:35:a5:e7:91:46:cd:f8:b8:94:26:5c:c5:e6:b5: 2d:cf:a5:ab:fa:b0:b7:58:bf:10:0b:11:6a:63:a0: dc:59:37:dc:f7:54:13:14:f5:f3:7c:ae:c0:e5:d0: ce:82:d7:ba:4c:38:4d:94:9b:d7:a1:19:46:7b:d2: 4a:f2:da:41:0b:03:96:a7:23:9a:af:7b:8a:87:30: a1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7F:B8:40:03:A6:8F:42:C1:D0:A1:61:D3:62:C8:11:D7:97:4A:AA X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:1a:b3:32:57:49:1e:b2:98:48:fa:12:12:a5:88:ef:9c:e5: 6b:df:9f:07:bf:df:27:50:e0:72:0a:62:29:73:0b:57:e5:29: 45:b2:38:5f:ef:ab:04:d5:d6:c2:14:cd:2d:6c:f2:62:3f:f5: 4c:0a:6b:db:13:03:52:d9:fa:cd:85:87:8c:69:66:de:48:d1: 3d:ed:a5:e3:e5:37:d5:4c:e9:cb:b8:b6:cf:54:8d:32:70:14: a5:e8:f4:09:1b:f8:ce:74:2a:ce:08:e3:39:7c:9c:c3:d7:41: 1f:47:84:d9:ae:7a:d4:7c:83:bd:7c:d2:d3:62:e3:d8:a6:81: e2:c0:f7:38:32:84:a4:50:0b:03:94:b9:50:f3:94:56:01:70: 68:18:a0:2f:68:e4:a1:a5:46:4d:ca:4b:2d:b8:8a:77:bb:84: c6:09:7f:1f:05:c8:cf:0b:d0:43:11:05:b4:76:d5:71:dc:6f: 76:55:0a:d7:2e:12:87:6f:39:a5:5f:9d:fd:e0:c1:61:ad:17: f8:27:f3:94:e4:e7:7b:c1:52:a7:33:53:bd:36:04:a1:be:48: 95:2e:11:dd:4b:9b:1f:17:75:69:ff:2e:5c:59:46:97:0a:69: 91:6b:b4:be:0c:19:51:b8:04:e5:d0:44:f0:e5:93:3f:8e:4b: d5:0c:67:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qGeMMTf5g51gmS9OIMQp7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwNzI4MTkwMDUwWhcNMjYwNzI5MTkwMDUwWjAzMTEwLwYDVQQD Eyg5NjdmYjg0MDAzYTY4ZjQyYzFkMGExNjFkMzYyYzgxMWQ3OTc0YWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPdCYYaW8v3+Rb35cFx4dGCo11YJ FCRqIdalJYnLS6z8b48u0WUnVOKiltDKoJ63jHbPxsxsx9CM6PBWHR2Ms+avQ7fB FVMTI2gw3o/4qpj8BuCn/yNfK4q6j4hoJUDMN/Z7q/xCgVAgQI5tf50QTYYaM2Ey IUeexhzOLbPpC0UFG8BBko4TbXyh7LM+51W6CQWD1cwut0E/DTMtHUN6EM/A0uyl pSrXcRuH9lhrOTbSq3hrNaXnkUbN+LiUJlzF5rUtz6Wr+rC3WL8QCxFqY6DcWTfc 91QTFPXzfK7A5dDOgte6TDhNlJvXoRlGe9JK8tpBCwOWpyOar3uKhzChtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJZ/uEADpo9CwdChYdNiyBHXl0qqMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATxqzMldJ HrKYSPoSEqWI75zla9+fB7/fJ1DgcgpiKXMLV+UpRbI4X++rBNXWwhTNLWzyYj/1 TApr2xMDUtn6zYWHjGlm3kjRPe2l4+U31Uzpy7i2z1SNMnAUpej0CRv4znQqzgjj OXycw9dBH0eE2a561HyDvXzS02Lj2KaB4sD3ODKEpFALA5S5UPOUVgFwaBigL2jk oaVGTcpLLbiKd7uExgl/HwXIzwvQQxEFtHbVcdxvdlUK1y4Sh285pV+d/eDBYa0X +CfzlOTne8FSpzNTvTYEob5IlS4R3UubHxd1af8uXFlGlwppkWu0vgwZUbgE5dBE 8OWTP45L1QxnOA== -----END CERTIFICATE-----Generated at Tue Jul 28 20:38:40 2026 by rpki-client