$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft File: xE24sJg6z5ejJVFSwupZKtrnc1s.mft (raw, json) Hash identifier: fYvTK1TtQfo4wCKr0ucYba+p82k+TW9tw+87Ac5UGgs= Subject key identifier: E8:4E:6B:C8:DD:45:55:51:12:77:90:F0:D3:FE:BD:2F:22:20:62:CE Authority key identifier: C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B Certificate issuer: /CN=c44db8b0983acf97a3255152c2ea592adae7735b Certificate serial: 019FA9ABDF45006C8C44C0B507AA01DC03A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft Manifest number: 1595 Signing time: Tue 28 Jul 2026 17:00:40 +0000 Manifest this update: Tue 28 Jul 2026 17:00:40 +0000 Manifest next update: Wed 29 Jul 2026 17:00:40 +0000 Files and hashes: 1: 1-LSO_JyLG0JIrzuHbqA64Re_gAQ.roa (hash: 5WDg7is6i4G67NPbvdAbr5wSujjhW6eqXhKIZJmd/1M=) 2: 6UB2fd80X8NF3hjgXuy_lEnL14k.roa (hash: FwGNu6vnkuFrpQLSRXI1YDdbNMKa0QpgsCze4fDjYDM=) 3: 7tK-Y_2zDn6v9bsNxgC2WC7pK58.roa (hash: cLZskeRMwGxHkUDQXpA7UBDzbVsdE10cl/owbtiDKLo=) 4: NCpae5NUBzzwFjKHO6HKoQsFaNo.roa (hash: T0hKAilYfTHdTNrgXDqwDch+EpqH3yYGNopfwv8HRVI=) 5: NKrF44Cb48ibyskEc0pmLGMwSbQ.roa (hash: /FUxbrj5UG1STIUqFgYzP0jhCRLEmRamnELFeSKbL1M=) 6: _XQtBPNeW_iuy40orAGtRGhMTSk.roa (hash: LAWDSlOuHdvhK5NcbfNOkabxOshrkg3NCFkUAyd9zsY=) 7: aJedP80vMINu1NAowpUIlCicd7A.roa (hash: xNb3NKZjro39aj2cJlh+Qm4X9UDfgL/pDQnE2wrTJ84=) 8: c0DX6GY3TX9xmWCZpKdJEnw99zA.roa (hash: +8IkCXO7va3zumQ/zB3m5nLEyKPvgB/ye9epdlLzV9o=) 9: lsFM17k2ZtwL3Bozkjk-itU6fX8.roa (hash: PyQz7GTqlUWm5GnNRZLXoq3Y3tepCY9boCvSS0rIfDI=) 10: xE24sJg6z5ejJVFSwupZKtrnc1s.crl (hash: lHdV3o5U6v7nYRuXje5KXokVFRCD7sNH0qv2906rSQU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 17:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ab:df:45:00:6c:8c:44:c0:b5:07:aa:01:dc:03:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c44db8b0983acf97a3255152c2ea592adae7735b Validity Not Before: Jul 28 17:00:40 2026 GMT Not After : Jul 29 17:00:40 2026 GMT Subject: CN=e84e6bc8dd455551127790f0d3febd2f222062ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:65:4c:e2:bd:70:89:f4:e7:d7:b6:f3:f5:c9: 63:29:57:4b:1d:82:29:79:f9:e7:69:36:f7:c0:b6: c0:21:31:1b:82:df:44:f9:90:3b:cb:0d:ca:d9:0a: 07:7a:6d:22:9c:d3:f4:4c:9b:81:59:45:f4:55:0d: 0c:e6:2b:dd:f6:02:bf:c7:e2:61:cf:44:cc:11:8c: b5:f6:d3:bc:2f:15:c5:b0:55:fd:d4:0b:ec:96:96: 23:2d:66:bb:b5:01:29:39:51:92:fe:d9:dc:ed:7f: 7e:05:1d:4d:5c:be:fc:48:19:34:18:37:74:f8:64: bd:92:cf:3d:13:5a:fc:4e:fb:9c:1f:00:5e:d5:e3: 56:62:66:4a:d7:97:0e:8b:df:89:3f:32:b8:72:58: 6c:89:c6:9c:80:16:20:37:aa:bc:ea:a7:99:be:89: da:46:bb:ea:9a:23:e0:e9:dc:23:fd:14:fa:3c:6a: e8:ca:75:50:a3:2a:29:1a:83:b4:7c:bc:f8:f6:fd: 61:66:c7:dc:3b:4f:87:57:fd:74:07:b7:d9:86:35: d2:71:6f:c0:3a:f4:a6:e6:a2:49:0f:f1:b6:c8:18: 9e:56:6f:83:b5:17:a5:5f:96:34:6a:14:98:c8:25: 46:50:c2:92:e4:2e:d2:6a:de:d3:d1:30:ee:de:e4: cb:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:4E:6B:C8:DD:45:55:51:12:77:90:F0:D3:FE:BD:2F:22:20:62:CE X509v3 Authority Key Identifier: keyid:C4:4D:B8:B0:98:3A:CF:97:A3:25:51:52:C2:EA:59:2A:DA:E7:73:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xE24sJg6z5ejJVFSwupZKtrnc1s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/64/437897-af58-4959-8e76-eedd94ec128c/1/xE24sJg6z5ejJVFSwupZKtrnc1s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:f4:17:51:8d:bb:5d:c5:cd:73:f9:12:be:9c:17:53:84:cf: c8:84:9e:6d:47:f5:db:31:cb:21:de:b8:1e:24:8c:6f:59:6a: 6c:52:1c:9c:01:95:94:63:be:03:80:61:02:38:a4:1a:41:be: 93:bc:52:32:8b:f4:ed:70:bf:4a:bf:1d:e4:89:c7:4a:ab:bf: ed:d3:81:8a:43:70:6e:a3:84:0b:23:24:a3:8b:3e:82:b5:3d: 15:7a:4b:48:33:57:94:61:43:93:83:0e:bf:69:40:a0:12:5b: be:13:e1:b5:a2:21:cf:03:f3:c9:b1:64:57:55:02:b3:05:8e: 56:9d:60:4f:26:c7:ce:85:38:1b:4f:39:2d:1f:42:a8:37:32: 28:5a:0d:da:58:d4:ee:01:d4:5c:89:1e:a1:29:c2:50:99:d1: b7:50:96:68:67:4b:c6:28:a9:44:dc:d3:99:e1:e5:b0:92:41: 91:31:de:43:e6:6e:28:db:e0:d6:ac:47:d6:29:d9:22:3a:b2: b2:12:77:ee:48:a9:05:48:21:80:f5:19:a0:51:a0:85:8e:f4: 28:1d:75:96:47:fd:91:37:ba:9e:f3:e0:50:5f:98:77:d5:73: 89:13:43:eb:47:0a:f1:81:19:ea:f4:0c:30:3e:a2:b4:d6:24: 11:2e:9b:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pq99FAGyMRMC1B6oB3AOoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NGRiOGIwOTgzYWNmOTdhMzI1NTE1MmMyZWE1OTJhZGFl NzczNWIwHhcNMjYwNzI4MTcwMDQwWhcNMjYwNzI5MTcwMDQwWjAzMTEwLwYDVQQD EyhlODRlNmJjOGRkNDU1NTUxMTI3NzkwZjBkM2ZlYmQyZjIyMjA2MmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmVM4r1wifTn17bz9cljKVdLHYIp efnnaTb3wLbAITEbgt9E+ZA7yw3K2QoHem0inNP0TJuBWUX0VQ0M5ivd9gK/x+Jh z0TMEYy19tO8LxXFsFX91AvslpYjLWa7tQEpOVGS/tnc7X9+BR1NXL78SBk0GDd0 +GS9ks89E1r8TvucHwBe1eNWYmZK15cOi9+JPzK4clhsicacgBYgN6q86qeZvona RrvqmiPg6dwj/RT6PGroynVQoyopGoO0fLz49v1hZsfcO0+HV/10B7fZhjXScW/A OvSm5qJJD/G2yBieVm+DtRelX5Y0ahSYyCVGUMKS5C7Sat7T0TDu3uTLoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhOa8jdRVVREneQ8NP+vS8iIGLOMB8GA1UdIwQY MBaAFMRNuLCYOs+XoyVRUsLqWSra53NbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYt ZWVkZDk0ZWMxMjhjLzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NC80Mzc4OTctYWY1OC00OTU5LThlNzYtZWVkZDk0ZWMxMjhj LzEveEUyNHNKZzZ6NWVqSlZGU3d1cFpLdHJuYzFzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACvQXUY27 XcXNc/kSvpwXU4TPyISebUf12zHLId64HiSMb1lqbFIcnAGVlGO+A4BhAjikGkG+ k7xSMov07XC/Sr8d5InHSqu/7dOBikNwbqOECyMko4s+grU9FXpLSDNXlGFDk4MO v2lAoBJbvhPhtaIhzwPzybFkV1UCswWOVp1gTybHzoU4G085LR9CqDcyKFoN2ljU 7gHUXIkeoSnCUJnRt1CWaGdLxiipRNzTmeHlsJJBkTHeQ+ZuKNvg1qxH1inZIjqy shJ37kipBUghgPUZoFGghY70KB11lkf9kTe6nvPgUF+Yd9VziRND60cK8YEZ6vQM MD6itNYkES6bMA== -----END CERTIFICATE-----Generated at Wed Jul 29 02:10:28 2026 by rpki-client