$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: HiYfXVwOGkFOE7zjKxO0d/sFVE/srd5Cn974JrJC2eY= Subject key identifier: 4D:E2:D2:9F:1B:32:66:57:0C:01:9F:9B:80:82:5D:CE:8E:C0:1C:D9 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019FAA50AFED167B4A44446C109F28B115B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 19FE Signing time: Tue 28 Jul 2026 20:00:42 +0000 Manifest this update: Tue 28 Jul 2026 20:00:42 +0000 Manifest next update: Wed 29 Jul 2026 20:00:42 +0000 Files and hashes: 1: 0ld9oICrjkM9PiOBYi7PkCMaP7g.roa (hash: 7pPoPeKMxfAld72vWaWuaU3WiGoLWbNKS8HJfbCj2GY=) 2: 1BFQM936y9WGcLJKwy60Wg2ag-8.roa (hash: NTbQFXMY5QSvW0BgWqBt3HeqiX8tXZPRJi0IS+SKq2s=) 3: DT8TXPB7Zoh4Y9JFFdsSZ2RIgLg.roa (hash: cdCtaCnFbbokb4IxB6SbsLXr+yswcQckTbmvZnS/sJA=) 4: H3d0QP653F6Jo-epVSXBiVH1h6k.roa (hash: B2NZF4jz4UwnLzA3KbDxjNp0EF7Qv4Th+B09WImKi2I=) 5: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: DkS6iJE8j46dDE2iFFzp8w7qh6QoFxR9wrQyxOeTFxQ=) 6: O2mRnCNeDokP5q-PUWLd28D1SG8.roa (hash: XL7s2EUC28zeBKoJlmCFsu+5IjkYrbxfH3a9YMWon60=) 7: XPPuMgWRNY1QAnjWn2LftTc8cH4.roa (hash: LqWi3Xbli/jxxlx74n8O7L6EJtxaJ1UA0GYHmPMDyEU=) 8: ZRr2QwcqGgt_EOiTtMFoE-lkmow.roa (hash: SIg3ToChfd1+8YW/rxSI4oA419Stw5Sb9StcFL22beM=) 9: dY6eqUD4ykA92I5VKqHmYTX3q88.roa (hash: uvlx5CXBvfA8EWdxrFvclZnKJJH1HmhxtH5z6Fa+fBo=) 10: hCjWTJUhp9C-lxxCdRV4Jwzm4mk.roa (hash: ECwHPN5lxdIugX2ttk1L3l/uci2ps9CeCy1VAcBMeQs=) 11: lERL5Mrj2Bt3hRDr7br_N3d-JkE.roa (hash: /A5fyVRtCeR1gSok1lWq8T+wbRAaNz8PoEuYxSfdZSU=) 12: lWQXyxEJYv9OPJsRSSX1CCPbFb8.roa (hash: qyL/Gv6WkVcsE18337JVKs2VK9z6GTYDQ6GMJ2m3/WQ=) 13: whyP5FxoblHoIHhMTAeqWb1jp8w.roa (hash: a7SodNhSARcbHydA3wymHLN4IRqMOWIhBwT2PU/EoPc=) 14: zd2dqaKa6O4wz9TxJzSxhbKbteU.roa (hash: Sv1+bPBughIj/le0hfMKADppbA91Co/u0NeJGW/Uifs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 20:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:50:af:ed:16:7b:4a:44:44:6c:10:9f:28:b1:15:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Jul 28 20:00:42 2026 GMT Not After : Jul 29 20:00:42 2026 GMT Subject: CN=4de2d29f1b3266570c019f9b80825dce8ec01cd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:3f:0e:de:ee:76:ea:41:44:47:7f:37:33:5c: 22:2d:cd:3b:5e:3a:f6:d9:88:50:92:d1:f6:95:24: 52:74:bc:8a:44:de:0b:16:3c:10:30:a4:e7:18:79: 43:30:9a:40:30:58:87:1a:2c:fc:52:d7:e8:f6:8d: ba:77:2e:15:0d:a1:d7:fe:eb:e6:4d:9c:ea:1d:f6: c3:71:95:fd:49:22:17:96:db:a8:b1:03:4c:8c:7d: 45:04:0d:f0:a2:0a:9f:75:79:4d:9d:eb:d0:e6:83: dd:6b:a2:38:c4:d7:21:fa:0b:d7:9f:32:fa:18:9f: 3b:34:46:c9:57:9a:f9:67:c0:e5:e6:42:20:92:1f: 61:ba:5a:73:dd:ad:90:64:50:3d:47:60:a9:72:d0: f2:a1:41:c2:5c:11:09:28:f1:39:ae:95:b3:a4:05: d7:34:ec:0a:85:de:72:2d:27:a0:80:65:54:ba:9c: 55:30:47:c5:37:5d:01:c2:1f:a3:39:fa:3b:ab:1d: b7:f7:d5:a6:5a:f8:07:41:db:d6:21:86:65:8b:84: 07:09:11:fd:29:f7:56:b2:b4:e4:9c:0f:5e:ef:15: 1e:21:f0:bd:e1:89:a1:8a:35:3c:f3:33:20:c3:8d: ce:f8:3d:c3:fc:e4:9d:3e:3d:a6:13:43:9a:b9:12: 8c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:E2:D2:9F:1B:32:66:57:0C:01:9F:9B:80:82:5D:CE:8E:C0:1C:D9 X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:36:a6:b3:26:4f:83:b3:b9:ad:e4:21:99:26:d2:c2:18:3a: 1d:11:1b:39:63:f6:a3:ed:0d:e8:b9:fd:64:45:d0:a4:c8:0f: 31:0c:75:10:2e:e7:8a:09:37:1c:f4:f8:16:27:ad:0c:a8:f1: 67:40:8b:3e:60:40:cd:0f:41:f0:54:08:f1:ae:06:db:24:d6: 36:e5:f0:07:a8:f3:18:f5:da:bb:7a:9e:53:fa:a1:7f:ea:bb: f3:31:8b:52:c5:a5:58:1c:ec:fb:6b:56:7b:78:b1:4b:30:84: 6d:cb:44:d1:52:43:3d:47:56:ec:1e:bd:01:e0:8a:a4:98:58: 2a:9d:64:45:df:7b:2c:6e:07:a8:f3:80:12:8b:b5:ee:f8:54: 90:6f:50:03:41:e7:bc:bd:0c:be:b0:b2:84:b7:55:a9:07:39: 8f:96:61:e2:59:d3:89:53:51:53:1e:a8:52:29:ac:a8:31:2e: 3a:6c:7f:15:d2:a4:e1:93:cc:91:30:d1:4f:9a:82:4f:b7:00: 9e:37:b7:79:65:93:98:bc:46:f2:68:22:f3:02:0d:4f:6c:ed: 13:58:5d:b3:d0:ec:7d:e3:c7:f6:4a:fc:7c:4e:5b:cc:53:8f: cb:e7:a4:77:ab:13:07:45:1a:b0:7b:51:bc:5e:7a:02:c9:bc: 83:48:1a:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qUK/tFntKRERsEJ8osRW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwNzI4MjAwMDQyWhcNMjYwNzI5MjAwMDQyWjAzMTEwLwYDVQQD Eyg0ZGUyZDI5ZjFiMzI2NjU3MGMwMTlmOWI4MDgyNWRjZThlYzAxY2Q5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyD8O3u526kFER383M1wiLc07Xjr2 2YhQktH2lSRSdLyKRN4LFjwQMKTnGHlDMJpAMFiHGiz8Utfo9o26dy4VDaHX/uvm TZzqHfbDcZX9SSIXltuosQNMjH1FBA3wogqfdXlNnevQ5oPda6I4xNch+gvXnzL6 GJ87NEbJV5r5Z8Dl5kIgkh9hulpz3a2QZFA9R2CpctDyoUHCXBEJKPE5rpWzpAXX NOwKhd5yLSeggGVUupxVMEfFN10Bwh+jOfo7qx2399WmWvgHQdvWIYZli4QHCRH9 KfdWsrTknA9e7xUeIfC94YmhijU88zMgw43O+D3D/OSdPj2mE0OauRKMjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE3i0p8bMmZXDAGfm4CCXc6OwBzZMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDamsyZP g7O5reQhmSbSwhg6HREbOWP2o+0N6Ln9ZEXQpMgPMQx1EC7nigk3HPT4FietDKjx Z0CLPmBAzQ9B8FQI8a4G2yTWNuXwB6jzGPXau3qeU/qhf+q78zGLUsWlWBzs+2tW e3ixSzCEbctE0VJDPUdW7B69AeCKpJhYKp1kRd97LG4HqPOAEou17vhUkG9QA0Hn vL0MvrCyhLdVqQc5j5Zh4lnTiVNRUx6oUimsqDEuOmx/FdKk4ZPMkTDRT5qCT7cA nje3eWWTmLxG8mgi8wINT2ztE1hds9DsfePH9kr8fE5bzFOPy+ekd6sTB0UasHtR vF56Asm8g0gaKA== -----END CERTIFICATE-----Generated at Wed Jul 29 01:00:10 2026 by rpki-client