$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: YIM/1IR8NN3QBa6leAdhtR8CBWgMEP70TbxtuyMr0B0= Subject key identifier: 1C:74:6D:A4:8A:0D:22:75:78:E1:3A:0F:CE:91:52:A5:79:4C:13:E7 Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 019FA974BB0BBFC0956F79BAAB3EA0511F56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 19DF Signing time: Tue 28 Jul 2026 16:00:27 +0000 Manifest this update: Tue 28 Jul 2026 16:00:27 +0000 Manifest next update: Wed 29 Jul 2026 16:00:27 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: vIUsrNWY5J36hcfBFNAz5QPDSAYFrhCejMmKylF3jI8=) 2: 6mvUdK2sJwETz4cqi4djiQKdMUQ.roa (hash: buR6ykljG7LAqYhxUka9PO0/x3h8cTppZNDgptnhgrU=) 3: GAkBUkP8O44HfA6UaUDucppg-zQ.roa (hash: H7w0TIFmG05ogbUF44/87E8bKqO7AppZ4RVUKMn1LjM=) 4: TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa (hash: gXAZNWfcjeZpPsYrp9FhwN0x/FJK/I6F7O8+Py5tCqI=) 5: gq-wS1-FKcHhFx26F3VsD_Kp72Y.roa (hash: TF4H2aT6JRXNsprJBLWhkIJdEFblvAAuKU3lRYmbao8=) 6: ksti9Cz-YWGrPG3nUQtWw4iwXW8.roa (hash: QXzCZnDrQ2SXERmOPrfezHiPL5LdEJk0j9fQC6saTKg=) 7: n8m0xVPUJ7sSm50Su5RRDOcBypY.roa (hash: gyRmAMA/LaYNtHFV0LdlYDTpgJV5V6CTCcVfo5PwA40=) 8: vdMRJ5aeJMjPnWdXFF9CeJUbNPU.roa (hash: MD01V65vyHAdTu6f2/Lr5HRyugzVDjKE7/qB7jMnsR4=) 9: zJ9v3e8uiAj7Q1OVSD92Rk2ryOk.roa (hash: 9EEvX12mvolHxSL/Y8mliHI1ROhGnZ9siBUYGBNhM2A=) 10: zkxMCcGoaYzw6MrkLQogXuC04_I.roa (hash: 7Y4R/zBLEg3xanLWgu8jUnFDOXWl73uX33xCHdArZKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:74:bb:0b:bf:c0:95:6f:79:ba:ab:3e:a0:51:1f:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Jul 28 16:00:27 2026 GMT Not After : Jul 29 16:00:27 2026 GMT Subject: CN=1c746da48a0d227578e13a0fce9152a5794c13e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d4:74:d6:85:4a:fe:82:86:e6:32:9f:cb:6e: fd:9e:1d:fd:b8:e6:e4:6c:8f:bf:d4:24:54:33:ec: 13:a1:3e:a7:47:3e:b7:45:5d:09:0f:0d:4b:fc:f3: a0:c3:c2:d9:c0:05:27:be:ca:55:b1:66:cd:d2:ee: 8e:9c:b1:d3:8c:25:27:a0:f0:75:27:d8:27:dd:bf: 00:f7:3e:c2:ca:4c:43:25:83:34:60:eb:ac:a6:4f: 45:c7:8b:88:40:6a:e4:3e:c6:82:49:38:c4:66:9d: 3f:82:06:4d:be:1d:da:78:5a:29:9d:70:fc:60:57: b1:37:a5:db:a2:58:7a:9e:2a:f8:a5:99:d2:81:7b: bb:31:09:ac:f8:ad:58:aa:c5:12:d3:6c:d2:06:4d: 26:bf:dc:8b:5c:ad:62:e6:23:27:4a:ba:ff:54:45: b0:f5:95:c7:46:33:e6:d0:6f:37:d6:fa:29:9d:9d: dc:cb:35:63:3c:8c:61:60:11:3e:95:a1:0a:8c:f7: f8:24:b5:99:53:c7:5e:f0:a8:2f:6d:38:61:28:c1: c3:dc:6f:78:c4:f7:c0:bf:1b:89:ba:fb:dd:c9:0f: 00:69:28:0e:ce:d1:fe:6c:aa:45:2d:8b:e0:2e:49: 10:02:4c:25:ac:c3:1c:92:e2:6b:6a:78:0e:7f:8e: 78:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:74:6D:A4:8A:0D:22:75:78:E1:3A:0F:CE:91:52:A5:79:4C:13:E7 X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:69:73:82:82:6a:99:2b:23:2c:b3:7d:ca:66:be:06:b6:b7: 30:d1:9e:a1:b0:da:cc:fc:94:81:f5:9d:2c:c6:9c:b3:63:2f: e5:36:08:41:8e:7d:76:5a:79:03:b2:95:ec:e4:9f:31:5c:e3: d3:a8:95:5a:48:f4:d6:d2:50:0a:bd:fa:79:af:23:d2:ee:6c: b1:bb:09:fa:b9:8a:5e:95:4e:f7:76:06:4a:7a:7f:a3:7f:e2: a5:d4:e8:e7:53:24:5a:12:2f:71:19:3a:32:6d:0f:14:f7:3e: 6c:13:bf:7b:de:e2:6a:ac:0d:4e:b3:77:a7:e0:17:06:c6:a4: 5a:52:89:43:82:2c:57:01:15:81:8f:19:ca:21:62:cc:86:1a: 29:b0:17:f9:e3:21:46:f6:1c:09:a5:f7:4d:05:cd:27:dc:04: 2d:e4:f2:02:f5:c9:02:80:fa:e7:c8:d1:d0:19:8a:51:a0:89: 44:a8:e3:ab:f0:34:4b:b1:47:3c:99:02:8e:43:4d:a1:4d:1d: e7:74:4b:cc:66:85:27:e1:91:79:b6:81:68:0e:51:4f:c4:15: 91:17:9b:8d:21:4e:a2:33:ab:66:9e:47:2a:9d:18:6b:24:0d: 86:a3:01:73:39:fe:db:fa:97:ab:d7:d6:70:54:f1:3b:9d:96: 66:fd:06:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pdLsLv8CVb3m6qz6gUR9WMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjYwNzI4MTYwMDI3WhcNMjYwNzI5MTYwMDI3WjAzMTEwLwYDVQQD EygxYzc0NmRhNDhhMGQyMjc1NzhlMTNhMGZjZTkxNTJhNTc5NGMxM2U3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNR01oVK/oKG5jKfy279nh39uObk bI+/1CRUM+wToT6nRz63RV0JDw1L/POgw8LZwAUnvspVsWbN0u6OnLHTjCUnoPB1 J9gn3b8A9z7CykxDJYM0YOuspk9Fx4uIQGrkPsaCSTjEZp0/ggZNvh3aeFopnXD8 YFexN6Xbolh6nir4pZnSgXu7MQms+K1YqsUS02zSBk0mv9yLXK1i5iMnSrr/VEWw 9ZXHRjPm0G831vopnZ3cyzVjPIxhYBE+laEKjPf4JLWZU8de8KgvbThhKMHD3G94 xPfAvxuJuvvdyQ8AaSgOztH+bKpFLYvgLkkQAkwlrMMckuJrangOf454jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBx0baSKDSJ1eOE6D86RUqV5TBPnMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU2lzgoJq mSsjLLN9yma+Bra3MNGeobDazPyUgfWdLMacs2Mv5TYIQY59dlp5A7KV7OSfMVzj 06iVWkj01tJQCr36ea8j0u5ssbsJ+rmKXpVO93YGSnp/o3/ipdTo51MkWhIvcRk6 Mm0PFPc+bBO/e97iaqwNTrN3p+AXBsakWlKJQ4IsVwEVgY8ZyiFizIYaKbAX+eMh RvYcCaX3TQXNJ9wELeTyAvXJAoD658jR0BmKUaCJRKjjq/A0S7FHPJkCjkNNoU0d 53RLzGaFJ+GRebaBaA5RT8QVkRebjSFOojOrZp5HKp0YayQNhqMBczn+2/qXq9fW cFTxO52WZv0G3Q== -----END CERTIFICATE-----Generated at Tue Jul 28 18:13:17 2026 by rpki-client