$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: 6BMomcJ2PHRAJN4UJOUiim/WuzZ48krsvMMnmEnAszk= Subject key identifier: B8:50:29:7E:37:F6:71:0B:C5:D0:1A:05:93:0D:32:D8:21:2F:4C:6C Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 019FA7BDB08E5DA1BA371FF59BA48B27994B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 19E2 Signing time: Tue 28 Jul 2026 08:00:53 +0000 Manifest this update: Tue 28 Jul 2026 08:00:53 +0000 Manifest next update: Wed 29 Jul 2026 08:00:53 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: J_a4ymcJIY3L6HOzFARmH41d5es.asa (hash: bpzpa0qKowmOhDsx7cnZXh9EOSP6XWxhHtsK/Z/ggTU=) 6: LfkCmSO1I7GGpJ0of5l-0c5AGBc.asa (hash: UgfWuPDLjqxThrUgxhNFddbI4VXPReh33QeUjBvYjVs=) 7: LuOgAc37LU8V7dGgdj8hy6ymH64.asa (hash: pkN431oI3RFQuibIh8RwZRrzTHAA18y2t6J/hjni00c=) 8: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 9: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 10: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: kOUx9I9GWObJVg4IEZtkAe6m7bKQI8GVvL8Xo/pp8cI=) 11: cIcqaLXZmekavhCmoIAJhBRw3JE.roa (hash: 8QflktthB1MZE1m+SbfCOvT58wwBH/AnF87SL9k5yss=) 12: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 13: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 14: oaZumtYBqB2DBSwMpqnmqOIkGm0.roa (hash: 9YqR7q1fJK+xrhMWwkV3smWMIV3JZ5y1OxTGOkJ6aPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 08:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:bd:b0:8e:5d:a1:ba:37:1f:f5:9b:a4:8b:27:99:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Jul 28 08:00:53 2026 GMT Not After : Jul 29 08:00:53 2026 GMT Subject: CN=b850297e37f6710bc5d01a05930d32d8212f4c6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:6a:3b:18:23:7e:39:b8:c3:a2:02:af:ec:a5: 85:0b:d0:e6:99:d8:04:80:8b:cd:61:cb:76:49:4d: d1:de:43:be:26:1f:b5:23:f9:00:1b:b8:4a:e3:87: f7:86:10:6f:07:62:96:2e:10:81:b5:42:8d:e4:26: ce:42:ff:6e:7f:c3:9c:79:73:80:b6:d5:0f:c0:fa: cd:41:59:c4:33:8a:b1:99:3d:b1:2a:78:3a:27:9f: fb:e5:51:ed:f9:80:c4:48:fc:45:5f:ad:52:7c:d0: f6:25:12:47:cf:56:ab:7b:da:a6:4a:a4:11:39:a9: 62:30:21:af:bd:f5:55:b3:eb:98:03:90:58:1c:80: da:84:37:a7:5c:87:c8:7a:45:03:4d:82:4b:c0:d9: 06:a4:9b:30:29:97:ca:63:54:48:ab:79:b9:fd:92: 5e:3e:2a:34:d9:4a:19:c8:c1:12:15:28:ba:48:16: 72:eb:e8:60:f7:c6:c3:e1:16:f9:88:15:39:4a:a2: c5:47:fd:1b:ae:9b:78:b4:95:22:1c:39:be:97:d5: 24:fb:a7:eb:1e:75:a5:e7:28:18:af:20:9e:98:d7: f9:9e:f3:e6:94:00:47:c7:b0:3e:b8:0b:03:49:33: a2:9c:f4:cb:70:ea:06:10:a1:fd:4b:d5:bd:04:0c: b8:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:50:29:7E:37:F6:71:0B:C5:D0:1A:05:93:0D:32:D8:21:2F:4C:6C X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:29:b3:f6:a2:6b:60:38:cb:b7:d3:d9:26:04:ef:fb:f5:78: 7e:20:5a:73:a0:52:cf:bf:58:2d:dd:da:df:40:55:ed:a9:be: ec:a3:e7:c1:c6:69:bd:87:c2:70:9c:79:7a:ee:c1:e8:3a:b0: a5:d7:66:a6:1c:fe:ac:65:b8:75:f1:33:8b:52:2c:1d:7f:b7: e2:8a:1d:13:e0:f1:a3:30:34:47:a1:80:2b:8a:c2:39:ed:b5: 6d:c0:fa:ec:a2:2d:1f:7c:29:1b:04:fb:63:8f:37:71:97:53: cf:43:71:1e:e2:a1:98:e0:1a:77:9d:60:16:93:7b:4e:b6:7b: dd:bf:df:72:68:78:04:00:9f:e4:86:85:68:61:a4:87:d3:c1: 41:26:e0:cc:db:c9:99:1b:d5:3a:23:e5:26:7d:75:3a:57:16: b1:7a:37:7d:53:9d:49:9e:76:6a:08:19:b4:03:46:c7:40:a7: b7:52:9c:e7:90:be:11:d7:a6:21:e3:a2:30:79:d0:f8:0d:8e: ea:6f:a1:fe:9f:11:a2:d4:79:ae:8f:5e:d1:4e:3a:10:9d:83: d7:4a:9b:5b:8e:f5:8f:77:7c:91:75:5f:46:e8:ed:6a:e6:ae: 98:7c:16:32:69:c8:73:a1:aa:94:51:52:49:2d:ff:ba:dc:df: ba:cd:3d:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+nvbCOXaG6Nx/1m6SLJ5lLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwNzI4MDgwMDUzWhcNMjYwNzI5MDgwMDUzWjAzMTEwLwYDVQQD EyhiODUwMjk3ZTM3ZjY3MTBiYzVkMDFhMDU5MzBkMzJkODIxMmY0YzZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmo7GCN+ObjDogKv7KWFC9DmmdgE gIvNYct2SU3R3kO+Jh+1I/kAG7hK44f3hhBvB2KWLhCBtUKN5CbOQv9uf8OceXOA ttUPwPrNQVnEM4qxmT2xKng6J5/75VHt+YDESPxFX61SfND2JRJHz1are9qmSqQR OaliMCGvvfVVs+uYA5BYHIDahDenXIfIekUDTYJLwNkGpJswKZfKY1RIq3m5/ZJe Pio02UoZyMESFSi6SBZy6+hg98bD4Rb5iBU5SqLFR/0brpt4tJUiHDm+l9Uk+6fr HnWl5ygYryCemNf5nvPmlABHx7A+uAsDSTOinPTLcOoGEKH9S9W9BAy4swIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLhQKX439nELxdAaBZMNMtghL0xsMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUymz9qJr YDjLt9PZJgTv+/V4fiBac6BSz79YLd3a30BV7am+7KPnwcZpvYfCcJx5eu7B6Dqw pddmphz+rGW4dfEzi1IsHX+34oodE+DxozA0R6GAK4rCOe21bcD67KItH3wpGwT7 Y483cZdTz0NxHuKhmOAad51gFpN7TrZ73b/fcmh4BACf5IaFaGGkh9PBQSbgzNvJ mRvVOiPlJn11OlcWsXo3fVOdSZ52aggZtANGx0Cnt1Kc55C+EdemIeOiMHnQ+A2O 6m+h/p8RotR5ro9e0U46EJ2D10qbW471j3d8kXVfRujtauaumHwWMmnIc6GqlFFS SS3/utzfus09wA== -----END CERTIFICATE-----Generated at Tue Jul 28 16:03:12 2026 by rpki-client