$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: ufvXHVCPV4VM6QGVv4UIJacrzH9xUCJhknHchBHPP2k= Subject key identifier: 1B:E8:33:DE:4B:23:23:D5:3C:1E:91:DA:81:BC:6C:47:7F:75:9B:FD Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 019FAABE9F3FED835A60C76383AC42286D48 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 19E3 Signing time: Tue 28 Jul 2026 22:00:46 +0000 Manifest this update: Tue 28 Jul 2026 22:00:46 +0000 Manifest next update: Wed 29 Jul 2026 22:00:46 +0000 Files and hashes: 1: 3Wnyz1QTSGCfnbdCaxBn0wvUFQE.roa (hash: 2t4MdegjvS7rP/iU7Hj7aColKHs5vThbvVnxW3FHn4E=) 2: 7Me5WXJix6bhmJacUAumrmlySgk.roa (hash: YrS81rUpK2c6Zib9l6JvC9RAlucS71SZij2OkYz09Wc=) 3: E_JIFXCdpHTYansz7Uag7XJbSgA.roa (hash: vrXsyINww9wzdu3W3f7WUvYM3ATh6Z+TuuA6xY/MZdM=) 4: ItZWQRkmls0VdU1nZishuLkd2eA.roa (hash: MAZ2gdn6yEjn53jWafviOI61qsnSQITSXZRf/tbFFMA=) 5: Rf1IRr7ln3MYijmbQD8SHel_MDs.roa (hash: +BoNoFKi0FqndtLU0znTacn8SBNepPAZnhdtF4/C/xc=) 6: b05E_Vve2D3HEly9RuClmeKIrnc.roa (hash: jAiLiRN3aJpdKIHHJepD10dCfO/MTNxTxutiEjOu3JM=) 7: hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa (hash: aS2aTaLKTapOqcPpZtmi37UtMDJpwWKs703ZEIp9zRU=) 8: liK1oYSYzTAoS7kAatnii2Wzx_E.roa (hash: gb2CbqJOVrEPYPGiLKPKwSB2WKz26ugg+uzkt83v7JE=) 9: sr7WacAmmZWiXvAsDGzYF2vtdAU.roa (hash: w9eNa2MvhIGo2u1BISjxj71+HEaSC/goxWqp1PF6zLU=) 10: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: O/suVjFcwksBKIFZu9FXBmi8lz5ayvH/zEZDJ8Lm8OQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:be:9f:3f:ed:83:5a:60:c7:63:83:ac:42:28:6d:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Jul 28 22:00:46 2026 GMT Not After : Jul 29 22:00:46 2026 GMT Subject: CN=1be833de4b2323d53c1e91da81bc6c477f759bfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:4f:26:9f:c4:9a:89:d2:91:85:dd:05:74:3f: fd:df:de:6f:34:d7:d1:f8:d4:38:b8:77:04:1b:31: d3:a7:81:af:cd:38:b9:62:56:60:08:1e:c1:2f:9a: d0:4b:4e:1f:22:e5:47:67:1a:09:fd:8c:2d:a4:83: 59:1e:08:5f:13:92:94:f3:75:84:4b:49:02:0d:2a: 10:98:a8:53:e7:21:1b:a4:b1:20:d4:66:4c:99:30: 93:ef:a5:8c:98:eb:a6:8d:32:2a:12:e5:bd:4e:3c: 9b:33:84:ea:7e:f6:b0:67:68:0c:46:95:fd:77:ae: 82:f3:55:c8:52:46:7d:78:67:be:79:d6:e0:13:2f: 24:22:42:74:d5:f6:ba:b9:97:fa:1d:0d:de:cd:16: 28:93:d2:17:29:bb:fb:ea:43:10:48:d5:23:ae:58: a6:c0:5d:15:ff:e9:9e:e9:7a:43:4c:9c:7d:46:90: 61:dc:04:2b:cb:2d:73:75:5d:f8:71:88:69:12:d5: c5:71:78:14:98:b1:fa:12:6a:77:4f:a0:b0:51:43: 85:2b:00:5d:db:24:7a:e0:70:fe:38:ad:79:8a:ab: 46:03:d6:4c:5d:7f:9a:ea:0f:37:01:85:47:50:17: 4c:a4:27:d1:94:b2:4e:b1:32:77:98:f1:00:57:bb: bb:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:E8:33:DE:4B:23:23:D5:3C:1E:91:DA:81:BC:6C:47:7F:75:9B:FD X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:37:0a:47:60:07:4c:59:bc:e6:56:8a:4a:b1:14:fd:77:b4: 52:1d:1c:22:83:3e:5a:f2:6d:0a:d6:0d:6a:6e:31:f2:a9:31: b1:24:46:e1:a9:e3:8a:6b:59:3b:0c:7f:f6:f3:d2:44:4b:94: 0b:8d:c3:45:5f:91:4a:0d:32:1e:88:9f:dc:e0:f2:97:82:98: 81:78:75:fd:8a:6e:fb:84:35:ef:bc:46:b7:73:32:39:2f:08: 01:b7:5d:b8:4f:9a:a7:25:e3:19:b9:3e:49:4d:aa:43:c3:0a: 01:80:87:ec:77:ca:71:72:2d:fa:bb:1c:97:4e:ff:3a:87:d8: c6:5a:b4:fd:67:97:68:7f:3c:69:d7:1a:3e:ff:31:89:cd:1e: f5:e0:49:25:53:a1:18:81:d1:82:a7:af:65:2f:20:3f:23:0e: 18:db:dc:6d:b5:4a:12:c8:e9:8c:3d:22:d0:46:47:a8:fb:6d: be:f2:dc:d0:34:86:35:10:0d:10:4f:ef:8a:4d:ae:94:98:95: 8c:60:7a:77:22:7c:1c:97:af:0e:78:80:a7:d2:86:15:d7:38: 88:dc:dc:c3:d2:f6:84:79:6b:d7:e7:6c:2e:f5:e7:b3:70:33: dd:b8:b3:d6:34:05:ab:91:b3:62:d7:dc:e9:ef:cd:2c:6c:6f: b2:42:7e:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qvp8/7YNaYMdjg6xCKG1IMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYwNzI4MjIwMDQ2WhcNMjYwNzI5MjIwMDQ2WjAzMTEwLwYDVQQD EygxYmU4MzNkZTRiMjMyM2Q1M2MxZTkxZGE4MWJjNmM0NzdmNzU5YmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9U8mn8SaidKRhd0FdD/9395vNNfR +NQ4uHcEGzHTp4GvzTi5YlZgCB7BL5rQS04fIuVHZxoJ/YwtpINZHghfE5KU83WE S0kCDSoQmKhT5yEbpLEg1GZMmTCT76WMmOumjTIqEuW9TjybM4TqfvawZ2gMRpX9 d66C81XIUkZ9eGe+edbgEy8kIkJ01fa6uZf6HQ3ezRYok9IXKbv76kMQSNUjrlim wF0V/+me6XpDTJx9RpBh3AQryy1zdV34cYhpEtXFcXgUmLH6Emp3T6CwUUOFKwBd 2yR64HD+OK15iqtGA9ZMXX+a6g83AYVHUBdMpCfRlLJOsTJ3mPEAV7u7WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvoM95LIyPVPB6R2oG8bEd/dZv9MB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejcKR2AH TFm85laKSrEU/Xe0Uh0cIoM+WvJtCtYNam4x8qkxsSRG4anjimtZOwx/9vPSREuU C43DRV+RSg0yHoif3ODyl4KYgXh1/Ypu+4Q177xGt3MyOS8IAbdduE+apyXjGbk+ SU2qQ8MKAYCH7HfKcXIt+rscl07/OofYxlq0/WeXaH88adcaPv8xic0e9eBJJVOh GIHRgqevZS8gPyMOGNvcbbVKEsjpjD0i0EZHqPttvvLc0DSGNRANEE/vik2ulJiV jGB6dyJ8HJevDniAp9KGFdc4iNzcw9L2hHlr1+dsLvXns3Az3biz1jQFq5GzYtfc 6e/NLGxvskJ+IQ== -----END CERTIFICATE-----Generated at Wed Jul 29 02:28:35 2026 by rpki-client