$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft File: pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft (raw, json) Hash identifier: uhnF2RGQ4dSlwGTwDBFvUWKbBTAXNqoofZZGgbZn82g= Subject key identifier: 65:80:57:A3:83:AF:4C:AC:18:F5:54:0B:64:FA:6B:17:16:81:BB:EA Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2 Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2 Certificate serial: 019FA93E33F9AE6A21E53CB9012F301267D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft Manifest number: 4D Signing time: Tue 28 Jul 2026 15:00:53 +0000 Manifest this update: Tue 28 Jul 2026 15:00:53 +0000 Manifest next update: Wed 29 Jul 2026 15:00:53 +0000 Files and hashes: 1: 8eWn-LZ8SHda6Hq0PZ8MjLvheII.roa (hash: t0Q9JGg0FFkCyUnnAjxlIairjnAp1fGIhWq7kxGfNJg=) 2: Dl8kjWnig9EJLu_V18bsJwWgThI.roa (hash: l/ftiedkdOtevwG6rB8zoiK5YC04kv/8SOqTEc+HzIM=) 3: E2z6-aE0lSQ3PEiEzxW-JiraDEE.roa (hash: KsnALsa02zQjMMj5q5msrnek1tk5/ZfIcaQoMmke+mE=) 4: EFeoepCweNchcY3yfWtwGD_ZuaI.roa (hash: pYKBI/KFA8wkQgixMUY8skRW5VKXK8M6e31dK0HwAis=) 5: G_cJpHD_tLUwCg2RMVO24zq3Grw.roa (hash: xNL/dYNyvvIlOS2j+6Eyo8zzNd4uG3W4GbIaOCiKFl4=) 6: HAt__vrw52VuZkpPDGhyJ1Sqq6U.roa (hash: j9XKjBk7nFDWQWKVzLFTasY9jD5D/3qYwK+3ZpEzpj0=) 7: I4AgYPx6q-AXqCOLfyv2qdwV6wU.roa (hash: 8y1qmodCTXEdWfudBIOg5DrmRpEF6FezAaUs7Ropbsg=) 8: JEVNWQm_Cx4mWqq5f1Vg9xZ9JzQ.roa (hash: suXL0V83sdkLjwTY6BS/4DMQepDMTnnLPjHsyUslYPM=) 9: JpbDWGlEPEX32kqGhGQOeWSYx5Q.roa (hash: JNJaUsPN0pZohEeyDrNgCF5tl5YPCYCRSpC1PRT7kZo=) 10: MlxaAHik4Irhhg2pDV_s_Rvf7bI.roa (hash: 3NA/JBsu3EKmNF330/KjUrrDVxnecTt8Q2GPQT4XUMo=) 11: O1gPaiiuHk3Ynoh8wcqM-XkdraY.roa (hash: suwi7xOa2pEQsq5Ilao9i/obnAr3R24ZSt95W5s3w8g=) 12: QOM15JeN0LuoBWCIcbxrvBihxTo.roa (hash: RgmDFHjBWCEG8nuyIsqAeoRJCFfCkfWjGGmoJpZMo70=) 13: R26ho8RD5wA-FJFM2n4H8lCIMDU.roa (hash: K8bV/6TdZ6xy+XDttrJ2eOGl3w4V8h8EbfrCk8vy/rQ=) 14: SirBpcdRe0m-u_7kALpPCFiPrPs.roa (hash: Z3DSwVfj4GWtECnzKi66mFueac7BJgJGEnZh6Zx4AQg=) 15: UNcrdBCA_IAi--0l3IsFosaU7lY.roa (hash: 8FZC4gbje388SsnaqTJsrZ50Gofq4vRkK1UBtNYlK+4=) 16: X4pU60oDGJrdQI6mIHlAf5rK9qE.roa (hash: pOrJ7LztgT1wu4oDyjOGr9iWSnnOAH4w2AcPvFhqBnA=) 17: Xy2lL2DYT88B5SmizPLux-GXV3Q.roa (hash: Mh0mK933Nfyx6zsgugTVc4TLaFDjax/ayFtH6UHp1oo=) 18: ak2Qp1unBPBGGKshocpx5pL8uig.roa (hash: mOmd1/1RN87KSSOrhLIJgH1FH+upMs+93rOqXUD4go4=) 19: g4bMCR1I2A-6CXSx0W_2l3WKHNg.roa (hash: W5QhjY/Vw7lnM6k8E56FkxoOhrKCflFe48p21g7wGsM=) 20: i5MOqIaSyXP0Wf307JZ-H9fPCU8.roa (hash: WqvJAJL4M1ePBiSqQQISn5kDX+foal+qOH30XzgeJBs=) 21: n5NcxiT9PS0KRcc3R-BBqbuxAco.roa (hash: bz9bpUxzgrZqP4jqMtfZiRv9Qka9ZHViEEqOfmNETJA=) 22: os3bcu3roUzbLBzHQwm9bp3nxZ8.roa (hash: lfz697NMPxlXy6wIBOMRer/mHkvfB1xMD+9SuaGfDyQ=) 23: pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl (hash: 1eoOvh7IMMmR4p1Iw88SneTBdvwzGBcbEUs5HWtqmUU=) 24: wyD5rZUYnotDvDLBTn1HvdDE-sg.roa (hash: LP8H59Ja7nr0y53p7ISvyJuUcJ0QD06m9kkaSrByJHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3e:33:f9:ae:6a:21:e5:3c:b9:01:2f:30:12:67:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2 Validity Not Before: Jul 28 15:00:53 2026 GMT Not After : Jul 29 15:00:53 2026 GMT Subject: CN=658057a383af4cac18f5540b64fa6b171681bbea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:90:74:c4:f8:1b:f5:8b:24:24:4c:89:b5:54: df:c5:c5:1f:c3:7b:33:9a:9e:48:e4:b1:44:17:84: df:91:c9:7d:25:fd:35:fb:30:c3:54:96:bc:a5:38: b3:6b:9e:f9:0e:12:77:8c:74:1e:2e:2f:b3:c9:27: fa:d0:b4:24:fa:60:d9:12:0b:8b:e2:92:6d:1d:e2: a2:ba:c3:40:01:a0:d1:8f:ba:b5:b0:93:91:98:2f: aa:49:e7:37:3a:c0:c1:27:1e:6c:04:f2:95:bf:88: f4:1d:94:8c:8a:e7:12:fc:b5:1e:7c:44:fa:fb:48: e9:62:77:9e:83:e8:12:5e:a3:50:42:66:0f:ea:9d: 13:e9:ff:b8:cb:eb:06:c2:94:a3:e9:32:01:20:48: 96:ef:37:c1:ed:61:df:14:f2:e1:44:52:7e:2d:db: 8c:97:4b:5e:58:4b:0b:5f:b5:8e:70:25:99:97:a4: fd:d9:b2:88:0e:8d:a7:c8:c2:33:e0:4e:c5:42:b2: ce:24:90:c7:cc:81:2b:f5:3b:23:dd:8e:c6:d0:cd: 53:47:68:e1:38:55:8f:e2:86:7b:2c:cc:e9:8b:96: 3a:29:72:10:8f:c6:de:e4:4b:b8:8b:b5:d6:f1:a5: d7:af:5b:a0:10:e2:18:e7:83:b8:06:57:53:36:57: 04:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:80:57:A3:83:AF:4C:AC:18:F5:54:0B:64:FA:6B:17:16:81:BB:EA X509v3 Authority Key Identifier: keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:ba:e0:80:47:10:4b:bb:15:b5:a9:ad:99:42:3a:be:a4:e6: 84:73:6f:f9:72:63:26:8e:74:c1:99:b0:79:88:bd:a2:a3:1b: 6f:89:b3:2d:3e:cd:46:5a:c0:e2:b7:38:d7:50:7b:9b:94:32: 3b:c8:aa:ec:50:33:49:29:a3:6e:7d:1c:d9:3d:f6:7b:a1:e5: 77:95:72:8c:63:58:3c:ac:2e:df:5f:06:4d:62:c8:49:03:3f: 12:0c:7a:37:cf:90:e5:a2:98:b7:4d:4f:dc:32:ce:3c:92:db: 69:5a:10:87:e0:7d:df:80:65:92:71:25:d2:a0:ff:30:b8:9e: 60:db:11:c6:a6:c3:f2:c8:f8:7c:d8:71:6e:69:42:b0:38:b5: 43:a9:a7:1c:96:19:1d:7a:8c:eb:73:0f:7c:56:e9:a9:02:d8: 5e:c0:a9:3c:61:8a:33:2a:e6:0c:31:0a:d8:0d:44:f5:c3:d6: b9:6a:dc:71:cd:29:ed:ce:57:a9:19:7a:c0:5c:75:c8:3d:14: ad:a2:35:db:8a:a6:2c:a6:5a:83:6a:83:ef:2f:3b:85:a8:90: 4b:f6:db:0a:4f:b9:0d:87:c0:ed:2d:a4:91:49:53:b3:8d:87: 2f:19:fb:39:50:e6:23:ca:7d:c3:2d:ed:d2:3e:1a:57:34:c4: 22:3a:3b:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPjP5rmoh5Ty5AS8wEmfSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3 ZDE3ZTIwHhcNMjYwNzI4MTUwMDUzWhcNMjYwNzI5MTUwMDUzWjAzMTEwLwYDVQQD Eyg2NTgwNTdhMzgzYWY0Y2FjMThmNTU0MGI2NGZhNmIxNzE2ODFiYmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJB0xPgb9YskJEyJtVTfxcUfw3sz mp5I5LFEF4Tfkcl9Jf01+zDDVJa8pTiza575DhJ3jHQeLi+zySf60LQk+mDZEguL 4pJtHeKiusNAAaDRj7q1sJORmC+qSec3OsDBJx5sBPKVv4j0HZSMiucS/LUefET6 +0jpYneeg+gSXqNQQmYP6p0T6f+4y+sGwpSj6TIBIEiW7zfB7WHfFPLhRFJ+LduM l0teWEsLX7WOcCWZl6T92bKIDo2nyMIz4E7FQrLOJJDHzIEr9Tsj3Y7G0M1TR2jh OFWP4oZ7LMzpi5Y6KXIQj8be5Eu4i7XW8aXXr1ugEOIY54O4BldTNlcEBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWAV6ODr0ysGPVUC2T6axcWgbvqMB8GA1UdIwQY MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa7rggEcQ S7sVtamtmUI6vqTmhHNv+XJjJo50wZmweYi9oqMbb4mzLT7NRlrA4rc411B7m5Qy O8iq7FAzSSmjbn0c2T32e6Hld5VyjGNYPKwu318GTWLISQM/Egx6N8+Q5aKYt01P 3DLOPJLbaVoQh+B934BlknEl0qD/MLieYNsRxqbD8sj4fNhxbmlCsDi1Q6mnHJYZ HXqM63MPfFbpqQLYXsCpPGGKMyrmDDEK2A1E9cPWuWrccc0p7c5XqRl6wFx1yD0U raI124qmLKZag2qD7y87haiQS/bbCk+5DYfA7S2kkUlTs42HLxn7OVDmI8p9wy3t 0j4aVzTEIjo7hw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:08:04 2026 by rpki-client