$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft File: Ka7sqK_wmbK64FeB3KjdkCfw2is.mft (raw, json) Hash identifier: Z7cEFgQ412emlHZm7hJo0342o9muypIL6LG7AZk3Xgw= Subject key identifier: 8B:3A:66:1E:6D:07:A6:A0:17:83:22:D4:EB:54:C8:1F:B6:28:75:B8 Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b Certificate serial: 019FA89931388F55B27E30E1F9ADE0A3A110 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft Manifest number: 4C Signing time: Tue 28 Jul 2026 12:00:39 +0000 Manifest this update: Tue 28 Jul 2026 12:00:39 +0000 Manifest next update: Wed 29 Jul 2026 12:00:39 +0000 Files and hashes: 1: 1q_wYD9UWOnoJzVrOoUZdi0ptKs.roa (hash: VrKJCQshMNsRpRS3xMtIqZM3UIX0Rv/9TMlKh43+0eE=) 2: 41i4ev5edbKVJwvdRc7UmMCrvCg.roa (hash: m9BCRj3y94R37HOuPnWLtwP7M0mYu2TFW0DGKzHM/Z8=) 3: 50FgNVwdKIXZBSoi9_tx_m369VY.roa (hash: ECrdWmJHCoSD4ehG05AezfCmwTDPcEay5D7cVyccxQw=) 4: 7yrgfzbw8vVRPOjj7HWXtxyf49Q.roa (hash: md2tHitigyecVuWcaFRQgwV0T+xTsDPtPKLbeAD5RVI=) 5: BdOjrY77wFG1RfqnZLrdZFMXaRg.roa (hash: bODeK0rFTfjBKeuHpe99mPxykv44Z0oBibXlE79cC5U=) 6: CMNbNRcCvJYta4I3SR690vGlcIk.roa (hash: UlA+tY+RKmri+LmE5xkXLgOH7gr/Xqc/aktVpD7DYlE=) 7: FLDisamNsDJXm_1lT92yfeRj3fw.roa (hash: WM25J4c59hU5SI4kz6OM2HoWYEmKXTDdKjYCSlG2JzI=) 8: GS38DtcRNFiCDgomRRGuYwhjhtk.roa (hash: vhy5Ct6d/4AD2NqH7XvOO/NEboMBe6M9200o1l76a98=) 9: IDFQmB2_BNbe8TZvBZB6pYkqhGU.roa (hash: dE0Z7qv5NDY7r0/9XxQ9jfsrqbdxqd+FO+WrhOi5Glg=) 10: Jj70oOtEM3MPYlWgVX1aJYN3MXw.roa (hash: xzFEEvPbBuccgBOT1CsatLmHtV69WRilCT0khWKpwtQ=) 11: Jk_N7QSRVi_cTxcu3qy15ogPA68.roa (hash: Rmy9FhhubCl3WFg5IP5VOAwqyczxSE6B2MhGe3ccsM0=) 12: Ka7sqK_wmbK64FeB3KjdkCfw2is.crl (hash: N6D2j65FScHkiBB61fpphRQ+sGSKuHxAQSXjsc9q9gM=) 13: NklB14-VXLI3MM6lJe389quYPZU.roa (hash: D2ILNVHNm82CCp8tZk+B53IKie8TqikfqpmmGRxzs5M=) 14: Nm4xRZFoUQYgfkribm27I-ia0A4.roa (hash: +WfDXeUOKEI8eZzwDRsNxLfNhVA9PG5muieZGc5CPQI=) 15: VOA0hCAmccn3JFjBj1YG73p2_z4.roa (hash: fdiyK2e1RDodBjjbIJyeBT4dY1npNcatRvvQ4NjK3Go=) 16: WFW6qhbNTOwNvMn1wBdtZc0maBc.roa (hash: 4FeYT4PmqlfqsjKx24dhNEkHWmZbQRRBE78LWYeUekw=) 17: ZOUpcJbmawhfKT6X9vbpqXgFbzE.roa (hash: t1IEQIm5R7nnAL2Bg46AN21+xubthTU7oKqD6v54mRI=) 18: _WY29sxvL7eTgbKFEoCzs5DGbWk.roa (hash: 0n3QlO/r3sjWRk/sTTbpZIaERpyILu3lDPLbKxDkXXE=) 19: h-EWcWkmbvgj39jkxm-JcD4jNys.roa (hash: 5gX5iFM/ehmHTHBUKpjDT1zVGwl4cU31igc51yeX2UU=) 20: j4Fd2DjxWr_xPGcMiuUhdZLMc30.roa (hash: KhwmTUHddEmqeMPHDyYX5yKpCm2bT7FKBk70Iu6qVsU=) 21: kA7PdZv1BHY99jFpYu5rnXF5Gpw.roa (hash: cX0Aca9kGYKiN/9m9sBSvjG37vCXXVdWtb4rGx97cf8=) 22: lUlD9gbYsyOLr3r0s3Uaa4KVupU.roa (hash: Bx05tts8mxf//4522K5SFSuxKCitbQyyOHV0CHxYOm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 12:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:99:31:38:8f:55:b2:7e:30:e1:f9:ad:e0:a3:a1:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b Validity Not Before: Jul 28 12:00:39 2026 GMT Not After : Jul 29 12:00:39 2026 GMT Subject: CN=8b3a661e6d07a6a0178322d4eb54c81fb62875b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:0c:6a:36:28:01:61:f1:d6:99:77:3a:44:1c: b9:67:69:f5:22:57:3d:b7:69:1c:6c:47:f2:c3:10: 70:58:a9:d3:3d:47:35:88:bd:25:e0:26:a8:09:96: 1b:2c:5f:12:ba:a5:ab:e4:5d:10:7f:6c:35:0c:1f: b3:5f:f3:96:51:1c:ee:29:7f:af:13:80:a4:e6:2e: a2:6c:e2:50:45:27:56:bc:26:7a:8a:c8:66:51:e5: d8:e7:91:93:dd:02:30:c8:40:4f:d8:fb:38:e1:7f: ef:2f:e8:7c:b0:45:1b:71:d9:d7:18:e3:57:8f:cc: 4b:83:7b:25:9a:4b:72:a1:66:41:4e:7e:2e:9b:50: 84:15:30:4c:b6:7b:7c:0a:0a:fa:05:91:c9:7a:3b: 45:01:b2:1e:f0:1e:1d:69:cb:6e:09:e3:58:25:3e: a2:78:ff:c0:43:e0:35:ff:59:80:63:86:a9:d3:70: 7f:a8:24:4b:83:8f:ad:d6:e3:22:97:b4:0d:7d:cb: ba:66:3f:82:98:ff:0f:4a:10:62:db:7c:f3:18:0f: 98:eb:82:28:41:ec:a7:95:46:e1:33:03:8e:9e:b9: 44:85:96:e9:04:9c:46:e7:57:1c:0e:7c:a2:f2:37: c8:42:f9:08:28:32:6b:13:aa:8c:79:b4:5e:c9:21: 57:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:3A:66:1E:6D:07:A6:A0:17:83:22:D4:EB:54:C8:1F:B6:28:75:B8 X509v3 Authority Key Identifier: keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:74:76:51:54:3c:d4:cb:88:6d:26:3e:2d:4f:a0:62:e4:35: 13:68:73:05:51:f6:8c:0f:cc:87:7b:2e:07:92:54:4b:00:7e: b5:9e:b0:79:9a:14:ea:a7:77:a2:6e:99:9f:94:2e:91:19:32: 06:41:ff:0f:43:f2:a1:17:82:b5:02:c7:83:e6:7e:bc:6f:a7: 8d:af:4e:5a:32:da:f2:f6:83:e7:fa:7a:b1:f0:15:66:50:10: 07:ff:e7:f6:60:42:1b:63:2a:84:e3:31:95:a4:1a:28:2a:09: 4c:5e:2b:e7:1e:4a:67:7b:ff:d8:20:8e:26:a9:27:6f:57:ec: 39:d5:14:99:d9:77:df:82:39:3f:aa:de:f4:65:99:93:d8:42: 0b:f0:5d:09:55:49:ae:91:a7:f1:c5:21:3c:e5:82:83:a6:80: 88:9f:65:55:e5:45:e0:4f:5d:dc:df:e4:28:1f:c5:c8:b3:d9: c6:6e:cc:db:c6:55:d8:71:4c:f7:f3:a7:a6:66:17:9b:dc:fa: 56:a0:5e:c4:87:03:46:5d:e4:d5:50:54:f1:e1:50:9a:ba:79: a5:81:84:8e:9d:79:99:4b:fd:e2:9f:15:91:8d:d8:96:21:14: 32:67:4b:2e:11:d0:87:3e:0a:01:97:72:4e:e7:99:f7:e8:ab: 90:f1:63:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+omTE4j1WyfjDh+a3go6EQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YWVlY2E4YWZmMDk5YjJiYWUwNTc4MWRjYThkZDkwMjdm MGRhMmIwHhcNMjYwNzI4MTIwMDM5WhcNMjYwNzI5MTIwMDM5WjAzMTEwLwYDVQQD Eyg4YjNhNjYxZTZkMDdhNmEwMTc4MzIyZDRlYjU0YzgxZmI2Mjg3NWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wxqNigBYfHWmXc6RBy5Z2n1Ilc9 t2kcbEfywxBwWKnTPUc1iL0l4CaoCZYbLF8SuqWr5F0Qf2w1DB+zX/OWURzuKX+v E4Ck5i6ibOJQRSdWvCZ6ishmUeXY55GT3QIwyEBP2Ps44X/vL+h8sEUbcdnXGONX j8xLg3slmktyoWZBTn4um1CEFTBMtnt8Cgr6BZHJejtFAbIe8B4dactuCeNYJT6i eP/AQ+A1/1mAY4ap03B/qCRLg4+t1uMil7QNfcu6Zj+CmP8PShBi23zzGA+Y64Io QeynlUbhMwOOnrlEhZbpBJxG51ccDnyi8jfIQvkIKDJrE6qMebReySFX/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIs6Zh5tB6agF4Mi1OtUyB+2KHW4MB8GA1UdIwQY MBaAFCmu7Kiv8JmyuuBXgdyo3ZAn8NorMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD3R2UVQ8 1MuIbSY+LU+gYuQ1E2hzBVH2jA/Mh3suB5JUSwB+tZ6weZoU6qd3om6Zn5QukRky BkH/D0PyoReCtQLHg+Z+vG+nja9OWjLa8vaD5/p6sfAVZlAQB//n9mBCG2MqhOMx laQaKCoJTF4r5x5KZ3v/2CCOJqknb1fsOdUUmdl334I5P6re9GWZk9hCC/BdCVVJ rpGn8cUhPOWCg6aAiJ9lVeVF4E9d3N/kKB/FyLPZxm7M28ZV2HFM9/OnpmYXm9z6 VqBexIcDRl3k1VBU8eFQmrp5pYGEjp15mUv94p8VkY3YliEUMmdLLhHQhz4KAZdy TueZ9+irkPFjOw== -----END CERTIFICATE-----Generated at Tue Jul 28 18:12:07 2026 by rpki-client