$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft File: 1KdSLSfmKuI6RgFD66ZzO3myRHc.mft (raw, json) Hash identifier: ztYpsECBQaH48O9W67UzkBphfeHz/Q+6KLpgYHXaUd8= Subject key identifier: 19:E4:F5:AB:01:F5:51:36:0D:CA:20:18:BD:11:43:CF:43:A6:24:78 Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477 Certificate serial: 019FA9E2E99E14DBF81C6C44E603E557EA8F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft Manifest number: 4F Signing time: Tue 28 Jul 2026 18:00:48 +0000 Manifest this update: Tue 28 Jul 2026 18:00:48 +0000 Manifest next update: Wed 29 Jul 2026 18:00:48 +0000 Files and hashes: 1: 1-N-2fC6tfa1s0LvlFU9jMbLrhuE.roa (hash: RE3o5Zu1XdF9S+04ylutP3QqzKtcsQWMmIT7k6SNN/Y=) 2: 1KdSLSfmKuI6RgFD66ZzO3myRHc.crl (hash: A0gwXZ1n5OprhZBb3ZewDBxM3Mvvoq6t6frJM0XDS5M=) 3: 6kERmgZGL5UqVKqbENAa-FNSgHc.roa (hash: AClJH/YtHZ63QiXgfCJgcjixUw8nfxsUu8O75U0YUJI=) 4: AhMkHazE-91WYq1pzL4rD-YgpOY.roa (hash: N7RR15LWLaA1GWhDaUwnFbFOrZQPw3IJjIesRqmsD5I=) 5: CBhFxYlbZteyN6PZ-Vmyl3AaymU.roa (hash: cEqju8RXsbFDyu/dW9+z6y7ODNyFcVjrj9eawVPTsVE=) 6: FkByO5VyomUSANjFcmnEdvz3Cko.roa (hash: z10lQ6g3SDPSArAHievRO6Z2mqsSExBrr1d205CDUP4=) 7: IJAySIrj88My47LJGVkAc9rZDtY.roa (hash: an1H6uRWsmTvyleV0pswewslnipkuBrqpFXZ8x8RXI4=) 8: K7O0xdV18ha5dPNdq-y0BPQgffc.roa (hash: GEqEkzuoCanIwB018rtlec4WErFm2E3DumXI3txV98E=) 9: SKjJw3_dqVQh5tqn8vnBC1JzJSI.roa (hash: FFebWzZWCHdxw5ZCEnSdY08q5KwfVzoC6UmmM8w/pz4=) 10: TqDntdHJZddaYt_ZyotBF9-hm14.roa (hash: VjSEFTxxCdGkCwFWGpwHDnoo4e0X5kbRBsmPmmTPxWI=) 11: WvAmQJBuWNK-A1dgFB9mFwv86Gk.roa (hash: i6VXTVtK2u+Sa4dxw7J/aRal1n9vO5pWlCr6D3BmpWo=) 12: XhZYqo-93sizkFwJq1Oc8KABtwQ.roa (hash: FFax2+o10DIFWYK/5aiR6THgjmcFiIwVqFNYjJSFM+w=) 13: bPSazfrJEoM_auhnCGJjDI29Zwk.roa (hash: pMTZbr0m442O8974ozmFdKCgEYF3GhKq7mIvRyWA1Yc=) 14: jlnRp7Jr9ytnSH4nVGSVmBf_k6o.roa (hash: 7kRo5njKROlYBvZ0FU20K/hBTNAanIB/DZh3W6WgLMY=) 15: q-BhPuQnM-Q-h6hN62IefM9bmG4.roa (hash: OIcCu5qI8ffXeo2TrrcMk7ECFhZnyqwj4znnE1b0z/Y=) 16: wZMooB7OVcFLzuI4NUrersbqikQ.roa (hash: pEN10g0qlhvjBHq9CVkl9+QR6Ky5ASwHfrEgR03oriI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e2:e9:9e:14:db:f8:1c:6c:44:e6:03:e5:57:ea:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477 Validity Not Before: Jul 28 18:00:48 2026 GMT Not After : Jul 29 18:00:48 2026 GMT Subject: CN=19e4f5ab01f551360dca2018bd1143cf43a62478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fd:de:f5:a7:bf:e8:bb:95:60:2d:92:14:cc: bd:62:a4:b9:22:8e:6d:83:be:5e:37:e1:17:47:1a: 05:9b:46:be:a2:fb:53:cc:3a:e2:b6:3d:e7:61:b3: b5:f8:2a:da:b5:96:de:2a:66:33:ce:a1:da:11:33: 2d:25:98:fe:a4:6a:e1:5e:bf:8f:71:00:b7:30:8b: 0b:af:92:5d:9b:20:e0:9f:12:0c:af:30:bc:f7:f2: 5c:5e:49:aa:db:2b:83:ca:9b:91:c1:68:80:39:22: 22:56:99:7e:ca:3d:d1:48:b7:e1:c1:97:d1:60:77: 48:75:b4:1c:b9:08:9f:b0:eb:20:b7:e1:61:77:07: da:70:df:f6:8d:f9:1f:f2:e3:d5:74:ff:6d:2b:58: a1:5c:fb:6c:2a:eb:84:99:49:52:f0:92:ff:8e:6e: 1c:29:19:a1:d7:24:b9:34:df:a3:25:bb:89:9a:1c: f1:4e:79:5e:a7:71:e1:82:8a:a8:78:50:3a:03:15: e9:2a:cb:4c:6c:c5:56:69:0a:7b:f2:e9:3b:a5:a4: 67:e0:df:a6:c8:54:70:54:d2:9c:50:21:03:cf:a8: 0a:d6:64:7c:6e:5f:aa:db:2d:48:f0:53:a1:b1:41: 2d:67:b0:46:9f:67:65:5f:f7:ea:8b:11:a6:a0:45: 97:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:E4:F5:AB:01:F5:51:36:0D:CA:20:18:BD:11:43:CF:43:A6:24:78 X509v3 Authority Key Identifier: keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b6:1c:24:b1:da:43:2e:5d:17:e7:4d:e5:8e:cb:b8:11:a0: 04:89:4b:31:12:a1:50:60:50:4f:e8:44:0e:e0:cb:e0:61:04: 35:01:34:2a:4e:4e:46:48:ce:3e:f7:11:28:36:f6:8d:a8:75: 3e:93:3a:2d:2c:3a:9d:84:3d:8a:45:e6:2e:dd:28:db:6c:41: 39:f6:7c:0c:ab:9c:04:02:8c:3c:19:72:b8:5a:0c:fd:55:fb: ac:cd:17:26:40:47:eb:b0:21:1a:52:ba:9b:cd:2d:b3:6c:65: 22:3b:a6:27:c4:e9:b7:ae:f6:ba:de:a5:cd:6c:f5:63:ce:4a: 69:e3:e6:30:7d:9c:8c:c2:90:7f:78:fc:83:f3:b1:d7:6a:a8: 4e:76:c3:62:56:12:21:c1:2d:40:7d:ea:c7:90:15:f5:b5:70: 5e:81:bc:57:a2:8e:ff:d9:42:7b:9e:64:29:0c:52:fa:b9:d0: 23:1d:21:2f:a9:97:3d:d1:b0:ee:23:8e:6c:4c:88:7a:ee:64: 12:25:fe:e7:65:7f:8c:7d:3f:78:e5:e1:0c:35:e0:5e:13:b4: 3b:c6:a2:fe:59:68:4b:95:b4:31:0d:e6:c0:1b:f0:04:c7:d2: 4e:28:af:60:9b:86:f3:7b:4a:e9:5f:01:a4:7a:03:19:92:b2: 24:5c:32:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4umeFNv4HGxE5gPlV+qPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YTc1MjJkMjdlNjJhZTIzYTQ2MDE0M2ViYTY3MzNiNzli MjQ0NzcwHhcNMjYwNzI4MTgwMDQ4WhcNMjYwNzI5MTgwMDQ4WjAzMTEwLwYDVQQD EygxOWU0ZjVhYjAxZjU1MTM2MGRjYTIwMThiZDExNDNjZjQzYTYyNDc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsf3e9ae/6LuVYC2SFMy9YqS5Io5t g75eN+EXRxoFm0a+ovtTzDritj3nYbO1+CratZbeKmYzzqHaETMtJZj+pGrhXr+P cQC3MIsLr5JdmyDgnxIMrzC89/JcXkmq2yuDypuRwWiAOSIiVpl+yj3RSLfhwZfR YHdIdbQcuQifsOsgt+FhdwfacN/2jfkf8uPVdP9tK1ihXPtsKuuEmUlS8JL/jm4c KRmh1yS5NN+jJbuJmhzxTnlep3HhgoqoeFA6AxXpKstMbMVWaQp78uk7paRn4N+m yFRwVNKcUCEDz6gK1mR8bl+q2y1I8FOhsUEtZ7BGn2dlX/fqixGmoEWXZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnk9asB9VE2DcogGL0RQ89DpiR4MB8GA1UdIwQY MBaAFNSnUi0n5iriOkYBQ+umczt5skR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7YcJLHa Qy5dF+dN5Y7LuBGgBIlLMRKhUGBQT+hEDuDL4GEENQE0Kk5ORkjOPvcRKDb2jah1 PpM6LSw6nYQ9ikXmLt0o22xBOfZ8DKucBAKMPBlyuFoM/VX7rM0XJkBH67AhGlK6 m80ts2xlIjumJ8Tpt672ut6lzWz1Y85KaePmMH2cjMKQf3j8g/Ox12qoTnbDYlYS IcEtQH3qx5AV9bVwXoG8V6KO/9lCe55kKQxS+rnQIx0hL6mXPdGw7iOObEyIeu5k EiX+52V/jH0/eOXhDDXgXhO0O8ai/lloS5W0MQ3mwBvwBMfSTiivYJuG83tK6V8B pHoDGZKyJFwySQ== -----END CERTIFICATE-----Generated at Tue Jul 28 19:08:02 2026 by rpki-client