$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft File: pgzudYLpdZvgFskxqzTZKF0vyLQ.mft (raw, json) Hash identifier: NnT3DV7MroyO1PifExo5XwKC0efzEA/nfqTGqkK+6jg= Subject key identifier: 9D:A6:80:43:EA:E8:7E:20:C1:64:E1:1A:B8:4B:29:A2:84:40:1F:94 Authority key identifier: A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 Certificate issuer: /CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Certificate serial: 019FA93DCC7C40073723DB92632EF49EE056 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft Manifest number: 042D Signing time: Tue 28 Jul 2026 15:00:27 +0000 Manifest this update: Tue 28 Jul 2026 15:00:27 +0000 Manifest next update: Wed 29 Jul 2026 15:00:27 +0000 Files and hashes: 1: 1-QpEsL_AtML3ScLvBXvkFT8qJ80.roa (hash: +pcA6aIuMEkhsfThQ01/KfIXIckOnFaz60ouEEzocyo=) 2: 3fS5dP7sG-xvFMbBP7UUi0eUUSk.roa (hash: pz2rG+hBKqBtyp01TUwFPW7c8W6AKlPJM3L7dBpBCVg=) 3: 5N096s-nFOH4_ZBqCouMJS-TbiU.roa (hash: Hh9HPS5FHpAUp4ixlEmsdD6a/vJqjzSz9yCpNR0cnOs=) 4: CiOsTyFL2d40vTJ0m9LvEDBbyFI.roa (hash: VtrIAitong9umQO4BUpXCYiuBJOk+XfuDXmVgwoHhXU=) 5: Eja0CE3ZxbDf7o-_WJU2Gi-eewc.roa (hash: fP4z0QfDdb5/q/K705XT9QrkxFFgOo2XV/DFWmhk+oA=) 6: WMJW8PYFLwejvXuXLZdPSAFJeBs.roa (hash: K12FYnuwBEd2xhuCex9yO/lOKeYGEYVxhKuR491paWw=) 7: aPo9aKd2phX6IWiBvTkLJP8xZtM.roa (hash: ncpZr6Zu5WNnsN4SU+6F0b3Jkur0FLP5e1Yt6yA8ajA=) 8: cngSEETmst842JVqCMuJdzGT1YQ.roa (hash: +hcoS9Ai/ANXECo9DMi3KQohP9rUHNrlLQnH58O1SI0=) 9: demNlliFBXRCd4_BO7uGvr9OBWs.roa (hash: 3e0uS6Ngag4AQ8UkZJyAtJ3ajUAIc6mhDPE4a8UAS9c=) 10: hRhmaOU4gZ_tvD1FIXmr8g0vgP4.roa (hash: zCLqNFR/17rQqa13pT3OcgSGKUtKcJcNjAIXmiREIUM=) 11: jPK12EYF_F8N9qChJCYpeTggBjM.roa (hash: cyHVL2RzfZB+h/aqJsGsHiAbfgN+RdRCYZxKbcrn16k=) 12: mEFHR3ZO54gTaeeTWU5lmspVd_s.roa (hash: 0w2qL/ViAbe9xLVH17D2YZ/NouaV1VQroh9IMJno9TE=) 13: ot2MZTCpP9nZaT3V6EzfFvrzrkw.roa (hash: TYtFpB5ZnIdcgyHQu349+PWyQhvze7WRX2PQON2Vge0=) 14: pgzudYLpdZvgFskxqzTZKF0vyLQ.crl (hash: mhOauPfl9RG3mhP6gW5Rg136Tsmbh+PmsE7gAW9ORuU=) 15: t2IZILmIlkrYmXptt2wUGw2uQwM.roa (hash: qFiwLdqK/Y7OvzgsKoQ4QT/arrjkDtpZ8/DZq9XFtzw=) 16: wnofk64UVBKP93Op1kPJw8OAZVA.roa (hash: tsj9FpIfOqGKJfVIRwRR/8c5mdUoax0lYr1/5kPg6Rc=) 17: x8XmJx41-rS3oQopw9axsmo7U5o.roa (hash: wJ4AKER/vvm4LzEhdW9wwiO9rdRJ4Gqly2DS/+StjsU=) 18: zn5InVym4Qw5pjaPhyuTeRl9bXQ.roa (hash: 1aIIVljxsESDDdBO8gz+BvW7tts7pQ5Z+DlOMn4Xgvk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3d:cc:7c:40:07:37:23:db:92:63:2e:f4:9e:e0:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a60cee7582e9759be016c931ab34d9285d2fc8b4 Validity Not Before: Jul 28 15:00:27 2026 GMT Not After : Jul 29 15:00:27 2026 GMT Subject: CN=9da68043eae87e20c164e11ab84b29a284401f94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:86:e0:95:39:09:16:60:3c:6b:0e:df:09:b9: 4c:d7:9c:0f:f8:e0:ed:ae:3d:49:e0:af:c7:5c:2d: ce:2d:7f:25:db:27:d3:e0:08:83:7e:6e:0a:b4:b3: be:b0:5c:bf:c3:ad:ce:d3:71:55:54:6b:fa:df:db: 9f:af:6f:b6:a4:9b:d6:0e:bf:38:75:6c:56:33:81: 77:c7:be:64:26:18:bf:11:e6:9a:da:22:47:ab:68: f5:f6:a7:45:b3:69:ce:23:55:12:1f:3f:92:9a:b9: e6:86:de:41:1a:32:7e:63:2b:f5:69:fc:69:b4:7d: 04:e9:49:80:c4:33:68:6c:f5:12:25:a3:14:90:a9: 08:96:13:30:ce:53:b5:b6:52:e7:90:05:e9:28:90: b6:20:78:60:76:b6:5e:a4:42:c7:85:9a:17:97:7a: 9a:3c:20:79:78:61:1e:ee:46:e0:fc:3e:90:b6:dc: 61:62:72:43:0d:63:1a:92:21:85:ca:c1:2b:24:73: d3:50:cd:90:cd:62:a9:e0:e6:76:58:cf:e3:51:26: ea:5a:d9:5f:96:b1:25:6c:8d:0c:34:e9:bb:bf:9f: 9c:f9:f8:e6:f5:c1:ed:cc:1d:73:1d:77:ea:2a:ce: 95:5f:12:65:85:15:9c:ca:05:61:9f:6d:38:a0:27: 02:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:A6:80:43:EA:E8:7E:20:C1:64:E1:1A:B8:4B:29:A2:84:40:1F:94 X509v3 Authority Key Identifier: keyid:A6:0C:EE:75:82:E9:75:9B:E0:16:C9:31:AB:34:D9:28:5D:2F:C8:B4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pgzudYLpdZvgFskxqzTZKF0vyLQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/decad0-26da-4b9a-b1a7-d3b38ce9dc34/1/pgzudYLpdZvgFskxqzTZKF0vyLQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:84:c8:0f:6e:f6:90:f2:25:ec:2f:ad:bf:e7:5d:8e:48:83: 28:59:5c:fe:3b:d1:81:ae:dc:3f:6c:d5:71:4e:f2:6f:5f:ed: 19:5d:c1:e1:42:55:74:f4:3b:55:76:0b:0b:b7:61:69:22:f2: 8f:9b:1d:43:38:cf:da:1f:76:c0:28:ef:71:9e:91:32:65:31: 14:63:d0:df:72:c5:d5:cd:be:9a:cf:98:8e:78:5c:23:5b:88: 6f:dd:d7:a8:18:58:6f:36:7c:3c:41:b4:10:f4:80:90:3b:91: 3c:41:1f:1d:d2:c9:78:62:1d:13:64:9d:49:60:b2:9a:76:57: 6f:69:43:d5:1c:bb:30:ff:60:6c:2d:5c:63:d1:90:15:c7:e2: dc:32:4f:bb:af:ed:3b:08:45:f0:ad:c7:ec:5d:8c:7c:da:f5: 5b:cb:d9:55:34:11:62:2f:6b:bf:14:41:71:37:31:a5:d1:12: 37:f3:3b:22:82:88:94:f8:d4:1d:7a:ee:52:bc:30:11:55:db: 10:bc:3b:3e:b8:f9:b5:4c:41:84:65:60:24:56:d3:92:21:1f: 20:c4:c9:c0:1e:18:ba:48:95:43:c5:4f:71:aa:bd:7d:52:2b: 35:9b:02:ac:28:1c:34:88:e8:50:0a:dd:0e:cb:9b:cf:17:0b: 0e:f8:cb:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPcx8QAc3I9uSYy70nuBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE2MGNlZTc1ODJlOTc1OWJlMDE2YzkzMWFiMzRkOTI4NWQy ZmM4YjQwHhcNMjYwNzI4MTUwMDI3WhcNMjYwNzI5MTUwMDI3WjAzMTEwLwYDVQQD Eyg5ZGE2ODA0M2VhZTg3ZTIwYzE2NGUxMWFiODRiMjlhMjg0NDAxZjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIbglTkJFmA8aw7fCblM15wP+ODt rj1J4K/HXC3OLX8l2yfT4AiDfm4KtLO+sFy/w63O03FVVGv639ufr2+2pJvWDr84 dWxWM4F3x75kJhi/Eeaa2iJHq2j19qdFs2nOI1USHz+Smrnmht5BGjJ+Yyv1afxp tH0E6UmAxDNobPUSJaMUkKkIlhMwzlO1tlLnkAXpKJC2IHhgdrZepELHhZoXl3qa PCB5eGEe7kbg/D6QttxhYnJDDWMakiGFysErJHPTUM2QzWKp4OZ2WM/jUSbqWtlf lrElbI0MNOm7v5+c+fjm9cHtzB1zHXfqKs6VXxJlhRWcygVhn204oCcC+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ2mgEPq6H4gwWThGrhLKaKEQB+UMB8GA1UdIwQY MBaAFKYM7nWC6XWb4BbJMas02ShdL8i0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTct ZDNiMzhjZTlkYzM0LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iOC9kZWNhZDAtMjZkYS00YjlhLWIxYTctZDNiMzhjZTlkYzM0 LzEvcGd6dWRZTHBkWnZnRnNreHF6VFpLRjB2eUxRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJITID272 kPIl7C+tv+ddjkiDKFlc/jvRga7cP2zVcU7yb1/tGV3B4UJVdPQ7VXYLC7dhaSLy j5sdQzjP2h92wCjvcZ6RMmUxFGPQ33LF1c2+ms+YjnhcI1uIb93XqBhYbzZ8PEG0 EPSAkDuRPEEfHdLJeGIdE2SdSWCymnZXb2lD1Ry7MP9gbC1cY9GQFcfi3DJPu6/t OwhF8K3H7F2MfNr1W8vZVTQRYi9rvxRBcTcxpdESN/M7IoKIlPjUHXruUrwwEVXb ELw7Prj5tUxBhGVgJFbTkiEfIMTJwB4YukiVQ8VPcaq9fVIrNZsCrCgcNIjoUArd DsubzxcLDvjLkw== -----END CERTIFICATE-----Generated at Tue Jul 28 23:21:46 2026 by rpki-client