$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft File: L2pDTEtdI5xObkG35YXI1Y-Jlas.mft (raw, json) Hash identifier: gnGGpHAx4MsB5HmVpt3o8rcIRs0mhM1nfLbK+fByH6s= Subject key identifier: 8F:F6:E3:D8:EA:16:B2:EF:17:5A:A2:BD:08:E3:49:CF:F0:F7:DF:7C Authority key identifier: 2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB Certificate issuer: /CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Certificate serial: 019FADBF517AB67657E1743601E1C75E1DAA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft Manifest number: 17A7 Signing time: Wed 29 Jul 2026 12:00:24 +0000 Manifest this update: Wed 29 Jul 2026 12:00:24 +0000 Manifest next update: Thu 30 Jul 2026 12:00:24 +0000 Files and hashes: 1: 1meLaYKO2Tl3bhYSsOjqpf-iDLo.roa (hash: aO+cgckrFpHbMOnuICmuB1xPZYgfmGDfrFdfNUo8hwg=) 2: 5GG9Ao4ScwCTaqCwAi8GnKy-uIk.roa (hash: BbSg6kfepD5G3rCNp1AAX9gRiwipTBnqXkjrl5sWhEU=) 3: BN0rBq-tNCIxQPqmFjFDV44qYpk.roa (hash: jKAg3bTdZuNi/EJCwdlUsNQtwlFvyoL5tw2t5y9MU1I=) 4: HO2U7d5NcmWKb9JFFOS4xst6Ap0.roa (hash: jIkU93mIxfPKkS6ZV5Em7YZjODmsWtP1r4eJlBEyOBI=) 5: L2pDTEtdI5xObkG35YXI1Y-Jlas.crl (hash: FoXCu0kilj/Exf9b9kknSAUYMKiCiNPqed50XfMBFUE=) 6: MPhp410gGVKP5mkd7p544bUnjxA.roa (hash: QAd6nrSjBEFE5oh4hmKUtP3RiDgmKVq2ERPv15zMcC4=) 7: MVqGstRqvT-YowTHw8TITZTgPGM.roa (hash: ThTvEwZga99xtCX2NPVf5h3chD/MozOOE+zxnQX4tvI=) 8: PWFCC016ViMQwsbajGFaPsVXWpU.roa (hash: XU7EaVjH4kPpzpd1I6Ws6W/k6BLYUdpZHPYkfznROSU=) 9: R5nQRJbnGIfuNPFQmSy5KyUN1Ng.roa (hash: S8J2YibhrFYHi+05w7dwd4Hy2ZPqL9ZfsTP/e0tcqoA=) 10: SR_Oqw4W1f3U3vok1BVIM_3prOQ.roa (hash: xZRfZAtOOEJIXE0XPSwwSTYi/tKeXWXICqEFbpdqCLE=) 11: gu8Xb0EdAj5QQiEbcZUHWSiqy4o.roa (hash: Qu77EoHxyeTpqNbgaiHUpPIuYcauYq9nmWOzOey7QMY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 30 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ad:bf:51:7a:b6:76:57:e1:74:36:01:e1:c7:5e:1d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2f6a434c4b5d239c4e6e41b7e585c8d58f8995ab Validity Not Before: Jul 29 12:00:24 2026 GMT Not After : Jul 30 12:00:24 2026 GMT Subject: CN=8ff6e3d8ea16b2ef175aa2bd08e349cff0f7df7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9f:87:ec:ea:35:eb:52:6f:4c:67:e5:65:81: 13:c5:58:10:ce:d8:ad:4a:51:99:25:ad:6f:d6:5d: 57:19:98:c3:77:54:cc:ad:cf:d1:8b:f8:97:6c:1f: 4c:42:ee:3b:cd:6d:98:42:5a:7b:a9:31:6c:e3:94: e8:33:19:ca:dc:d4:9e:ac:af:6f:5b:82:4d:cc:84: fc:2c:65:62:d5:8f:79:8f:d1:2a:7b:46:57:b2:ad: 4a:44:a8:84:12:b5:4a:52:b1:84:cf:02:28:79:e1: 48:39:65:cb:23:08:8e:bc:af:69:b5:fa:a6:e2:2d: e6:c7:89:62:c5:e7:55:b9:98:9d:90:b9:be:24:ae: 55:d1:ba:57:26:c9:22:3f:69:a5:2c:6d:8b:c8:1d: bb:da:fa:f5:ac:16:58:30:39:18:da:56:75:7d:3b: f2:72:d3:4c:f0:2b:83:eb:23:38:2c:ae:05:65:60: fe:fd:b6:bf:c4:7f:23:47:17:c9:7e:4d:da:4e:f8: 00:24:3e:c4:22:5f:5a:d4:d7:65:6b:46:1c:ec:cc: b9:4d:26:24:b5:4d:7b:8f:45:82:86:69:09:7e:dc: 49:b0:5b:bf:4a:d6:57:47:18:f8:89:54:4d:f6:06: da:08:46:90:c9:6c:89:f7:97:49:52:83:5b:62:52: 6e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F6:E3:D8:EA:16:B2:EF:17:5A:A2:BD:08:E3:49:CF:F0:F7:DF:7C X509v3 Authority Key Identifier: keyid:2F:6A:43:4C:4B:5D:23:9C:4E:6E:41:B7:E5:85:C8:D5:8F:89:95:AB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L2pDTEtdI5xObkG35YXI1Y-Jlas.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/98abe5-bd01-464f-96ab-40b6d67fcd94/1/L2pDTEtdI5xObkG35YXI1Y-Jlas.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:f5:cf:02:c6:c2:e1:5e:43:0e:f4:d5:dd:08:e7:2e:1b:48: 1c:92:19:09:3a:72:9f:fc:55:2e:13:d5:a1:a1:50:28:80:76: 70:ec:b9:18:95:56:5e:51:8d:94:9c:ad:9d:1b:c7:d7:c0:f9: 95:4d:13:30:6b:ae:e1:01:14:7b:22:c6:8a:2f:39:0c:f0:81: 5d:c2:55:c2:92:8c:ba:80:b5:60:1a:3c:18:61:7a:e1:c1:e1: 00:8e:13:14:a9:de:2b:c1:27:e4:2e:50:c2:73:4e:f2:2f:7a: 26:3e:ba:7f:76:31:a7:0d:0c:3e:de:cb:3e:3f:26:02:f6:86: cc:38:88:aa:1b:a1:d0:56:b3:60:0f:a5:1a:c8:a7:aa:ab:5e: e1:06:f0:dc:ed:17:bd:13:a3:a5:3b:84:ed:76:78:a2:6e:06: da:d9:c1:3c:54:99:8b:e3:c4:1f:e1:f9:0a:c8:c2:31:c1:b8: e4:91:65:e9:88:c1:df:b5:ea:3c:94:11:39:1c:5f:74:a7:92: 25:80:53:76:a5:66:1c:6a:11:04:7a:dc:36:3c:7d:0d:b0:0c: 13:4a:63:07:8a:c2:73:d0:80:45:52:fd:52:a4:05:29:7e:3f: a9:26:39:b6:fa:47:32:0c:1c:d0:67:88:43:8b:38:da:64:3c: f4:a1:f4:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+tv1F6tnZX4XQ2AeHHXh2qMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJmNmE0MzRjNGI1ZDIzOWM0ZTZlNDFiN2U1ODVjOGQ1OGY4 OTk1YWIwHhcNMjYwNzI5MTIwMDI0WhcNMjYwNzMwMTIwMDI0WjAzMTEwLwYDVQQD Eyg4ZmY2ZTNkOGVhMTZiMmVmMTc1YWEyYmQwOGUzNDljZmYwZjdkZjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJ+H7Oo161JvTGflZYETxVgQztit SlGZJa1v1l1XGZjDd1TMrc/Ri/iXbB9MQu47zW2YQlp7qTFs45ToMxnK3NSerK9v W4JNzIT8LGVi1Y95j9Eqe0ZXsq1KRKiEErVKUrGEzwIoeeFIOWXLIwiOvK9ptfqm 4i3mx4lixedVuZidkLm+JK5V0bpXJskiP2mlLG2LyB272vr1rBZYMDkY2lZ1fTvy ctNM8CuD6yM4LK4FZWD+/ba/xH8jRxfJfk3aTvgAJD7EIl9a1Ndla0Yc7My5TSYk tU17j0WChmkJftxJsFu/StZXRxj4iVRN9gbaCEaQyWyJ95dJUoNbYlJu6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI/249jqFrLvF1qivQjjSc/w9998MB8GA1UdIwQY MBaAFC9qQ0xLXSOcTm5Bt+WFyNWPiZWrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWIt NDBiNmQ2N2ZjZDk0LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS85OGFiZTUtYmQwMS00NjRmLTk2YWItNDBiNmQ2N2ZjZDk0 LzEvTDJwRFRFdGRJNXhPYmtHMzVZWEkxWS1KbGFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADPXPAsbC 4V5DDvTV3QjnLhtIHJIZCTpyn/xVLhPVoaFQKIB2cOy5GJVWXlGNlJytnRvH18D5 lU0TMGuu4QEUeyLGii85DPCBXcJVwpKMuoC1YBo8GGF64cHhAI4TFKneK8En5C5Q wnNO8i96Jj66f3Yxpw0MPt7LPj8mAvaGzDiIqhuh0FazYA+lGsinqqte4Qbw3O0X vROjpTuE7XZ4om4G2tnBPFSZi+PEH+H5CsjCMcG45JFl6YjB37XqPJQRORxfdKeS JYBTdqVmHGoRBHrcNjx9DbAME0pjB4rCc9CARVL9UqQFKX4/qSY5tvpHMgwc0GeI Q4s42mQ89KH0ow== -----END CERTIFICATE-----Generated at Wed Jul 29 15:00:45 2026 by rpki-client