$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json) Hash identifier: jVi1sd7qFFJDB92Z30Y6eNUsY/2DS5dakKu+Y3ZfS30= Subject key identifier: 2F:37:35:BB:4E:6D:E5:54:C1:D1:59:5D:46:10:9B:C8:2C:12:CC:57 Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019FA82B4C7C641785F3F0FBC30EC2FF8A67 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft Manifest number: 15C7 Signing time: Tue 28 Jul 2026 10:00:37 +0000 Manifest this update: Tue 28 Jul 2026 10:00:37 +0000 Manifest next update: Wed 29 Jul 2026 10:00:37 +0000 Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: bAvuGCe8mXBdd2By995rA0IwSNJpVhpPzfod1zlR6DA=) 2: 3SoEwaHYmzBhPq3SqrK7-97FxfY.asa (hash: DUPJ+1lMqiRx5QPupK6EYyCTyvEki+rd8cq0JTEqc4k=) 3: 4dRn2JrP2QCTAWF-YiqGTdGG-aY.asa (hash: 5OSvsuPPRn9OvkRvh/NzOUAFS7gn9Nx/H8X3BJxRZYE=) 4: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=) 5: KJiyDl7iQPSHbczb71sauO3rVJk.asa (hash: xzLdynVvAziPI6SDyPFLHYP7bi2ATNLAOqyCRqeT3is=) 6: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=) 7: M8G0hHzNaUEBYlJ18I-LLmZFBKM.asa (hash: 1CwhbIx2C5nHDxmbbu2xhBW2STO+MmyMS7p2LGmo9hk=) 8: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=) 9: T5M14oqasE4RWqdrD07qXbN8eGY.asa (hash: OCqN8M2KvS/h05iREDnHi+l1MPqvKGu7Rk6ZjCf3xcE=) 10: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=) 11: XHeb1AmUfX1kngDYx7cK3_EIu7Q.asa (hash: y1sVzdki0bbI48xSY39Q5D3JsNtDyY7oJ/qahJmputE=) 12: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=) 13: id-lxRpZAXWjSQIYTHcFpR-BOiA.roa (hash: DJLygWwBzeOc6zwCMgS/e3psiWC9iHIdC8QxaCCmABU=) 14: mwjxtKPuHdDhkzcGADt1aiLxCIc.asa (hash: Wy5bjzVJWOG5tUKCM7dwY8G4WJIDxlDcCw2Ld4jrHPw=) 15: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=) 16: vEGsYuYY06TvYutYs-QyPdXXq4Q.roa (hash: UCMk3rT/wVrhtk6MMSMiEAtXXbsHSrVjnWedze014rg=) 17: xVaYIBw7M6bRv3MOmzyAcV4by3I.asa (hash: PgzXvKG2TR216H34m8dFRwASPrUVU9Y5qcUdR1XkLTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:2b:4c:7c:64:17:85:f3:f0:fb:c3:0e:c2:ff:8a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Jul 28 10:00:37 2026 GMT Not After : Jul 29 10:00:37 2026 GMT Subject: CN=2f3735bb4e6de554c1d1595d46109bc82c12cc57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a1:31:8d:ac:a3:64:5d:77:6a:f6:49:6d:95: fb:05:77:41:73:4d:19:4a:20:fe:5f:80:7e:bc:9f: 83:7a:e7:70:6c:e7:48:8e:dd:36:04:18:3a:85:27: 28:8b:95:de:e7:bf:af:1c:df:fc:96:6a:39:54:09: de:aa:2a:4d:81:42:da:f0:f7:ea:4b:ac:63:28:b7: d3:3a:32:d1:c2:0b:b5:84:db:1c:d4:e0:36:f8:ef: d4:72:dd:d8:1d:18:8d:1f:70:58:74:de:6e:9a:f9: 3e:6d:36:45:01:c2:0f:5e:6d:71:8f:3d:bc:cf:e4: 1d:1c:d6:bf:83:90:bf:61:36:88:6c:11:e2:35:88: 7d:71:2b:8b:64:fe:8e:87:3a:fa:53:cc:ab:f7:e8: 61:0e:b3:9a:3e:03:81:78:85:8d:b8:dd:71:96:b1: 00:14:ab:f8:a1:78:7b:f4:90:68:d4:3c:20:84:3d: 47:16:3b:01:10:1c:91:75:85:42:62:4c:f5:c7:59: c4:5b:05:a7:44:db:56:47:1e:e9:03:61:ba:68:b2: be:4f:4e:61:bc:c6:dd:08:89:38:c2:a9:08:72:4c: d4:04:e7:40:f9:be:20:c0:ab:69:85:05:2b:f6:b4: a3:4e:5f:f6:69:92:af:44:b8:94:8d:7b:69:de:c1: 53:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:37:35:BB:4E:6D:E5:54:C1:D1:59:5D:46:10:9B:C8:2C:12:CC:57 X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:0e:d8:7b:ad:a7:83:83:22:df:a4:f0:65:9e:9c:61:71:7a: e3:1d:63:b1:7e:61:d9:90:37:4b:49:38:8c:a2:d7:52:95:2c: d9:26:bb:41:18:aa:d7:b7:30:ed:be:fc:39:a9:fb:f1:fd:7a: b2:ef:7f:0c:78:d5:3d:98:de:20:7f:11:0f:3d:ef:25:39:f0: f0:82:53:67:c9:0a:ab:c1:e4:4c:a2:00:3a:d7:34:1c:a6:91: 06:e4:39:01:e0:69:03:0b:d8:b6:cc:51:00:ad:44:8f:d9:7b: 6f:70:fb:ed:0d:73:f6:dc:a8:92:e2:2c:a8:69:07:df:bc:23: f6:e9:37:b6:b2:32:24:af:df:cf:34:cf:1d:a3:69:46:bf:c4: 0e:5c:97:1b:44:1b:09:d3:2c:21:4a:78:a4:e6:23:84:33:c3: 66:ba:41:b0:95:51:e7:f4:0d:9a:fc:c5:4f:d6:c0:a1:11:9e: aa:ad:74:3a:25:31:a6:63:bc:6b:b5:38:dc:a3:c1:3a:b2:a2: 83:0c:0d:2f:ed:3d:cd:9f:22:8d:6c:71:b7:bd:73:6d:97:56: 7d:95:a3:ac:f7:5e:b2:81:b2:cb:dc:96:26:31:00:7b:7a:c5: 49:76:2b:d7:1c:94:ed:4b:1b:59:9b:99:4b:7a:53:af:33:eb: 5b:28:9a:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oK0x8ZBeF8/D7ww7C/4pnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjYwNzI4MTAwMDM3WhcNMjYwNzI5MTAwMDM3WjAzMTEwLwYDVQQD EygyZjM3MzViYjRlNmRlNTU0YzFkMTU5NWQ0NjEwOWJjODJjMTJjYzU3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaExjayjZF13avZJbZX7BXdBc00Z SiD+X4B+vJ+DeudwbOdIjt02BBg6hScoi5Xe57+vHN/8lmo5VAneqipNgULa8Pfq S6xjKLfTOjLRwgu1hNsc1OA2+O/Uct3YHRiNH3BYdN5umvk+bTZFAcIPXm1xjz28 z+QdHNa/g5C/YTaIbBHiNYh9cSuLZP6Ohzr6U8yr9+hhDrOaPgOBeIWNuN1xlrEA FKv4oXh79JBo1DwghD1HFjsBEByRdYVCYkz1x1nEWwWnRNtWRx7pA2G6aLK+T05h vMbdCIk4wqkIckzUBOdA+b4gwKtphQUr9rSjTl/2aZKvRLiUjXtp3sFTRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC83NbtObeVUwdFZXUYQm8gsEsxXMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAQ7Ye62n g4Mi36TwZZ6cYXF64x1jsX5h2ZA3S0k4jKLXUpUs2Sa7QRiq17cw7b78Oan78f16 su9/DHjVPZjeIH8RDz3vJTnw8IJTZ8kKq8HkTKIAOtc0HKaRBuQ5AeBpAwvYtsxR AK1Ej9l7b3D77Q1z9tyokuIsqGkH37wj9uk3trIyJK/fzzTPHaNpRr/EDlyXG0Qb CdMsIUp4pOYjhDPDZrpBsJVR5/QNmvzFT9bAoRGeqq10OiUxpmO8a7U43KPBOrKi gwwNL+09zZ8ijWxxt71zbZdWfZWjrPdesoGyy9yWJjEAe3rFSXYr1xyU7UsbWZuZ S3pTrzPrWyialg== -----END CERTIFICATE-----Generated at Tue Jul 28 15:52:01 2026 by rpki-client