$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json) Hash identifier: XWpw6l6Ze4aQ1dvFvzc6DUYNu6vE860zjK31ygMlTqY= Subject key identifier: 99:08:AF:84:B0:38:BA:AD:D7:42:20:66:25:51:D8:57:E1:FC:A9:25 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 019FAC3EF57F1F23307D71D542741E017DA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft Manifest number: 19E9 Signing time: Wed 29 Jul 2026 05:00:34 +0000 Manifest this update: Wed 29 Jul 2026 05:00:34 +0000 Manifest next update: Thu 30 Jul 2026 05:00:34 +0000 Files and hashes: 1: 1-QuFrP2FCGdb0e2Ii_z6LaU8br8.roa (hash: rbKcnlSwgT9Djc5Fqvy3u9yC2cYZiJQ7dfTu75ri+mI=) 2: Kn1XIiFvEGGy9jGV0znKGyVVN88.roa (hash: S6dp6R29PAVMF1jsj22PyQ1rploMZXbrpKsVzrPCS0A=) 3: LVf00OwBfRzfAd6G6KBKwIxU48Q.roa (hash: Xvect/bo+Wr+aXHUQYsyRoqwRvv8UXPXPU1oErWXh0o=) 4: c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa (hash: N/tir1ikaaQzeua5SN0NNzW44/svT02GC4QfKmsuXFg=) 5: i_sg361hESOO6WvkWK2Qx1qnr_o.roa (hash: grkv5sxl6QC67Xl6GRfRbX76QTIOE0y5InqEToBe4KU=) 6: jDLgcLSuJX7PNQqFfW9rGKaqs0I.roa (hash: gYuzALxJxQy3dIl1B+tjxYOVPb7F/ttrTik4SzmNvpo=) 7: nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa (hash: QxXL80gZjutBzTVwYv0W0HB8GqSHL6xx5f7Es0Ckqj8=) 8: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: tfkSN01/qP1Yu4hskwUgMRi64ZjoxtyqI3Aupx6lbHQ=) 9: uX2HFPa-1T3UMzqcLHxJG1wYem0.roa (hash: mt3IsY/c70SVPfG6w+VGWzHhy8025Nd/iJv2s56ORTs=) 10: xkw2dJ1kdWsWVrDQa7ecIv1ZfEE.roa (hash: TlO1SGSzKaGyjfYONLThtWXquMMxH3GzgJNd8bMLo1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ac:3e:f5:7f:1f:23:30:7d:71:d5:42:74:1e:01:7d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Jul 29 05:00:34 2026 GMT Not After : Jul 30 05:00:34 2026 GMT Subject: CN=9908af84b038baadd74220662551d857e1fca925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:c1:33:55:47:d4:3a:d1:02:6c:63:3f:51:7f: 17:6d:c9:8d:b3:8c:1d:da:2a:3d:ac:e7:bb:a8:eb: a4:46:a6:19:28:3e:50:8b:41:92:3d:e5:c1:25:66: 6a:85:d2:4e:68:0b:87:90:c1:82:23:61:25:9d:3b: 40:9b:14:84:e8:91:9c:19:6a:b7:e8:be:74:e6:b2: f7:17:ab:4b:c8:47:1f:ab:98:69:81:1e:95:0a:7c: 4d:bb:eb:ad:c2:fe:a7:f8:56:1a:ff:58:b9:0c:30: af:86:1c:44:b4:46:29:95:b9:aa:ba:6d:cb:68:8a: b2:e3:4e:8e:a8:dd:33:13:c8:96:fa:69:8e:89:60: aa:7b:98:cd:13:8d:ea:ae:56:ca:ff:09:27:e3:29: be:2c:e7:23:14:30:07:e4:03:6b:31:7a:dc:c4:68: 13:93:1f:eb:a6:6f:e8:cb:8e:45:cc:ec:b8:01:dc: 88:a9:44:7e:3d:bf:74:70:3f:5e:f5:96:70:1b:e3: 3a:f4:78:7c:6d:92:82:ee:3e:80:bd:d7:d4:93:63: 31:94:f2:e3:1f:db:10:55:df:15:1b:1d:3b:dc:8f: d3:ac:a2:10:f7:23:e1:f8:c1:c9:46:fd:5a:e7:4e: 22:d5:7c:53:59:cd:f8:43:e3:95:ee:31:c3:69:3e: 45:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:08:AF:84:B0:38:BA:AD:D7:42:20:66:25:51:D8:57:E1:FC:A9:25 X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:b9:06:e6:12:97:a3:9b:b3:de:c8:c5:51:24:0c:da:e2:15: 56:de:4f:ba:e1:64:cb:aa:17:36:01:16:38:df:a5:f4:d9:a3: 68:11:5e:04:a4:c5:d2:2a:e0:fb:d1:f1:38:95:27:ec:3e:f3: 0f:46:c0:02:79:a2:94:6f:b4:f4:4d:a7:87:73:52:ea:ef:8a: 52:e3:a9:38:a7:39:4f:60:de:e0:c0:c4:c4:c8:a1:80:4d:b5: e7:0b:a5:54:6b:05:9d:e2:b7:55:6d:36:4a:f9:a4:c8:1e:b8: 6b:36:79:a7:5f:ce:ee:ba:7e:91:b3:83:a1:e7:31:ea:f4:f7: e8:19:23:f1:59:81:66:b0:0f:ac:ed:0d:37:af:79:fb:ac:54: c5:b0:de:c0:ff:00:71:1f:2d:df:dd:59:24:4b:e8:74:9b:03: 7f:c1:93:73:d8:ae:70:2b:63:13:ab:2d:2f:75:de:53:58:31: 6b:bc:90:8c:e4:94:cb:13:26:a1:56:9f:04:25:1d:b9:67:28: b6:f7:f5:17:17:f8:0c:62:9d:3b:0b:b3:c8:88:a0:07:38:d7: 4c:89:0c:e4:0c:52:2f:1e:4c:61:9d:46:62:87:3b:d7:92:c4: 2f:76:29:66:08:16:27:00:77:8f:a3:a4:4b:b7:ae:c1:d2:ff: ea:7b:6f:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+sPvV/HyMwfXHVQnQeAX2oMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjYwNzI5MDUwMDM0WhcNMjYwNzMwMDUwMDM0WjAzMTEwLwYDVQQD Eyg5OTA4YWY4NGIwMzhiYWFkZDc0MjIwNjYyNTUxZDg1N2UxZmNhOTI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cEzVUfUOtECbGM/UX8XbcmNs4wd 2io9rOe7qOukRqYZKD5Qi0GSPeXBJWZqhdJOaAuHkMGCI2ElnTtAmxSE6JGcGWq3 6L505rL3F6tLyEcfq5hpgR6VCnxNu+utwv6n+FYa/1i5DDCvhhxEtEYplbmqum3L aIqy406OqN0zE8iW+mmOiWCqe5jNE43qrlbK/wkn4ym+LOcjFDAH5ANrMXrcxGgT kx/rpm/oy45FzOy4AdyIqUR+Pb90cD9e9ZZwG+M69Hh8bZKC7j6AvdfUk2MxlPLj H9sQVd8VGx073I/TrKIQ9yPh+MHJRv1a504i1XxTWc34Q+OV7jHDaT5FcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJkIr4SwOLqt10IgZiVR2Ffh/KklMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7kG5hKX o5uz3sjFUSQM2uIVVt5PuuFky6oXNgEWON+l9NmjaBFeBKTF0irg+9HxOJUn7D7z D0bAAnmilG+09E2nh3NS6u+KUuOpOKc5T2De4MDExMihgE215wulVGsFneK3VW02 SvmkyB64azZ5p1/O7rp+kbODoecx6vT36Bkj8VmBZrAPrO0NN695+6xUxbDewP8A cR8t391ZJEvodJsDf8GTc9iucCtjE6stL3XeU1gxa7yQjOSUyxMmoVafBCUduWco tvf1Fxf4DGKdOwuzyIigBzjXTIkM5AxSLx5MYZ1GYoc715LEL3YpZggWJwB3j6Ok S7euwdL/6ntvhA== -----END CERTIFICATE-----Generated at Wed Jul 29 09:21:19 2026 by rpki-client