$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft File: dWEnxs1ONdmPCkujYs4nMWSXGUI.mft (raw, json) Hash identifier: Dx9h+sZcVbKpIaETx1H9ga5QBI3q1ZpHS1xrY5oku0s= Subject key identifier: 4E:FF:66:C7:E1:BA:5F:E3:F1:F3:DB:02:28:DA:69:6D:31:E7:E0:82 Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42 Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942 Certificate serial: 019FAA87511B7043B2A8BA82D77865ADC815 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft Manifest number: 4D Signing time: Tue 28 Jul 2026 21:00:22 +0000 Manifest this update: Tue 28 Jul 2026 21:00:22 +0000 Manifest next update: Wed 29 Jul 2026 21:00:22 +0000 Files and hashes: 1: 8h95uNIDYG-Ufog2I8ZoKMaLcsw.roa (hash: hikhXEetfPVBAmxhlFb36D4+i8o25j1BVGOBTUWKg+M=) 2: C3YXK2axKQQL03NOSjgoGxmbHCY.roa (hash: 44/VCgOyO6dDefynF1MFpTO2jMMF5QpDbEm5R3D+USs=) 3: EIkyoQiaHQwFX0yl3QCnz70zobQ.roa (hash: TreOi4k2EXby9E21239vBZMbdO6JXQp6FeGHzvuMLWY=) 4: Ilstpn6LoODw0rzv1fqsnj_9Dh4.roa (hash: Mn8znbmN/J+MxRnhv+qVpqesl4iX9HnxtbZyYlBp8hE=) 5: JpHy1IXUR9emW8WRyQ9wKWFBPHY.roa (hash: C+pLi3vdcWv6cPyXKJcNebdYvfzTWmkMhrsFshVCZ5g=) 6: JuX1_oQdQQlBpU0uPBnvcWB93j8.roa (hash: FZzogSqVxmvRLnflYQZMrGV7lYMhQxxacof5gMp7tHc=) 7: KI_KuOkM0mR_o_lboFwkN-bi1Fk.roa (hash: 14lNz1dQBEYnlCIOUgTsdTghcHSUoRp4iObiy4bcNE8=) 8: QAq5GlfcCx2uicmV2oYykBZI8X0.roa (hash: RYaoRoccHB52OTwDIZC5zlhORRPz3CEswpwYiOVL8sQ=) 9: VzIOsWVyN2BeULByH7QYq4dYbRU.roa (hash: 5im045bps89h9fEb8qZ1ReojgLd/qWfVKk9XBFUXXFk=) 10: YnaVL83EnDyPXsVJYrytnkQg5ug.roa (hash: Fnqs3WN0fegg9CdKzgXczrQTO3HUhiFCAXykCpf5Clk=) 11: ae6vfOe_UB5sL59_YmgnYrMvUjY.roa (hash: UYeEVkIJSbDL/qMMyz7MhtUKRqcR+Ervewhouno445k=) 12: dWEnxs1ONdmPCkujYs4nMWSXGUI.crl (hash: L+BUnzqCgA5UTd5lxpJ5/KQfKCl5kT/IHLFZNHVHArs=) 13: f3cr88yivxk7Bgm731ewrTZYRmE.roa (hash: KBvRmTnbWWNTOespy+pTserzrz+QFhMRF5nah9piKuY=) 14: gzC5cDg-uB1dPX3dGsiEhW7fD00.roa (hash: vQbqEGTq2U/QqR6/EYIM8eMnRGnw756aRoerxRFX+wM=) 15: hRHkkew4RJW-M5MNhUrCKO9r6iI.roa (hash: xmNN9Qa+v5JHw+YLV1UBftvBMTaZmLQDrk6AQl6upks=) 16: hxrlkQurmLyBhkWbdwa67ZbnUzU.roa (hash: uuNXT/oBMFxKXMlVY9upAUC8wrIrJ/ZYSjthqsU91us=) 17: itsbDKOcLvYTL1wL-BLv0v4776c.roa (hash: ZEawOvc7lWqHf5H65rd92h3sAyZZNHxySs4Mwva3K5c=) 18: ktAcfwaispPfbZlu2PcWbivGiDc.roa (hash: ZS64/IqKl++bCkfIjOUrM7ABwkRqytdLrqhBUhYIiLo=) 19: lgcI0p4y-3yd0Er2Lcq9G4NDiZM.roa (hash: qVffLmVLe5PeGI04xzCYu2VBq+NWEXwG8HflD234N+Q=) 20: nwLLLJnWeUevVC1axaBKhwaHn44.roa (hash: 4NEbrk+ehdLN38/5gtivM/dLignUGaWU9EqjJiYFAxw=) 21: nxPePhL8tH3NJQt_EAwpwmwqNH8.roa (hash: 7XrZ+U4ErAZSq+9GdJTbU1fkc22bILilCayfqLewDgc=) 22: oXHroVFqrTFrT4dW-jOwSgxKgcQ.roa (hash: bWjEdLBfsFa6qTx3+Dfw2/yFPlyDQhUFTnCquJm018M=) 23: qw9D3bwHD-pnEIm3zYFhAcY1hDE.roa (hash: wdRWH9AxQCpUQD8h4pLTtws6prvHWse3QWuviHE/f3Q=) 24: sfoaD0gh3QgYHRuTwM6KqFkxOkQ.roa (hash: MG+l0cjg9doHuJsEha9w6usP174LVgs0j+PQfMk+iKk=) 25: si7LSWMuuhPUeaWDlYag_JlVhKs.roa (hash: nyL0gUFvTFAGinP9bvtQz8LACtq13OiZAYvgoeGB/C8=) 26: wgx1sqQMaS-I2L2y6gRiBobGYlg.roa (hash: 7eLb6fN+zf4qJF/TPfiQ9qgt4nim0I4itE886o8X68g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:87:51:1b:70:43:b2:a8:ba:82:d7:78:65:ad:c8:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942 Validity Not Before: Jul 28 21:00:22 2026 GMT Not After : Jul 29 21:00:22 2026 GMT Subject: CN=4eff66c7e1ba5fe3f1f3db0228da696d31e7e082 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:28:5a:4b:e2:60:ea:1e:07:b2:e7:93:f2:56: eb:b1:7d:1f:e4:07:e6:25:8d:76:8b:db:db:b9:73: 69:f7:35:45:a2:a6:75:50:42:00:4e:ef:7e:2f:c6: 49:ce:1f:f1:19:ad:67:1e:47:98:9a:58:f5:54:78: 9a:88:00:8b:bd:b9:61:53:59:a8:5f:c0:80:43:d5: 0d:28:26:50:13:05:af:a8:30:03:48:ae:3c:4e:b5: 00:86:ab:16:e2:03:0c:08:c8:b1:e3:4b:80:76:83: e0:57:6f:5e:fa:e5:16:03:f6:17:2f:47:e4:3b:4d: e7:2f:55:b1:89:b3:9c:d4:2d:53:7c:05:89:9c:22: 32:2a:24:86:9f:3a:57:70:60:4d:9c:c6:f7:95:2e: ab:53:2f:69:59:d5:85:cf:0e:27:14:ba:49:71:9d: 20:58:39:fe:76:c7:f7:c4:f2:6d:a0:68:94:fc:f1: 63:00:b8:ab:39:83:c3:07:fc:a2:bf:ff:4b:d3:60: ee:12:55:30:58:80:a8:73:a9:c1:6f:2a:e5:bb:5d: d4:e5:81:05:33:d9:96:c1:50:38:a8:24:99:bc:c3: a2:a9:ae:d3:12:4c:7b:30:e2:9e:e1:93:86:87:65: 33:e6:29:2a:bc:7c:38:18:23:17:9b:2d:43:11:76: e0:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:FF:66:C7:E1:BA:5F:E3:F1:F3:DB:02:28:DA:69:6D:31:E7:E0:82 X509v3 Authority Key Identifier: keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:bf:e4:d9:79:0a:d6:24:ac:32:3a:61:9f:a8:1a:07:70:f3: 9e:c4:ed:4d:eb:66:c3:30:ab:61:6e:bd:0c:ff:07:3d:aa:6f: 5b:7c:d1:e3:85:ad:c7:09:1d:64:1a:c4:f6:89:d7:0f:8e:8e: c8:37:a3:2c:a6:ee:fa:e3:c4:11:5e:92:ee:c0:fe:c6:52:48: ce:3e:eb:b5:a7:08:f5:db:21:2d:3d:c7:1d:0b:8d:61:67:e9: 99:ba:05:84:fc:58:5d:b4:1b:ad:ca:75:26:ce:ec:51:4e:ec: bd:d9:8e:e9:e8:22:22:14:cc:5b:a3:62:61:21:26:d8:6e:68: 1d:37:ed:5e:71:86:49:e5:76:93:ae:43:54:cc:99:33:c9:f2: 81:2f:33:af:08:f2:c1:c6:cc:0a:70:22:24:6f:69:74:d9:bd: 5f:31:4e:a3:0c:c3:55:f4:07:fc:aa:73:fe:82:f0:62:fe:61: 53:7c:c6:c3:36:ff:18:7c:f2:94:ad:f8:ab:8d:b8:bd:7e:6a: 62:70:44:6e:8f:cb:f6:13:c3:40:b5:e0:bf:ef:7b:d5:18:ce: 77:30:0f:8f:c8:48:40:40:a3:16:96:28:52:ee:1f:f7:b1:84: c8:f9:1f:ee:ce:02:13:7f:b2:53:a0:14:12:19:f4:ad:13:51: c2:ea:14:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qh1EbcEOyqLqC13hlrcgVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NjEyN2M2Y2Q0ZTM1ZDk4ZjBhNGJhMzYyY2UyNzMxNjQ5 NzE5NDIwHhcNMjYwNzI4MjEwMDIyWhcNMjYwNzI5MjEwMDIyWjAzMTEwLwYDVQQD Eyg0ZWZmNjZjN2UxYmE1ZmUzZjFmM2RiMDIyOGRhNjk2ZDMxZTdlMDgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmShaS+Jg6h4HsueT8lbrsX0f5Afm JY12i9vbuXNp9zVFoqZ1UEIATu9+L8ZJzh/xGa1nHkeYmlj1VHiaiACLvblhU1mo X8CAQ9UNKCZQEwWvqDADSK48TrUAhqsW4gMMCMix40uAdoPgV29e+uUWA/YXL0fk O03nL1WxibOc1C1TfAWJnCIyKiSGnzpXcGBNnMb3lS6rUy9pWdWFzw4nFLpJcZ0g WDn+dsf3xPJtoGiU/PFjALirOYPDB/yiv/9L02DuElUwWICoc6nBbyrlu13U5YEF M9mWwVA4qCSZvMOiqa7TEkx7MOKe4ZOGh2Uz5ikqvHw4GCMXmy1DEXbgXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7/Zsfhul/j8fPbAijaaW0x5+CCMB8GA1UdIwQY MBaAFHVhJ8bNTjXZjwpLo2LOJzFklxlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM7/k2XkK 1iSsMjphn6gaB3DznsTtTetmwzCrYW69DP8HPapvW3zR44WtxwkdZBrE9onXD46O yDejLKbu+uPEEV6S7sD+xlJIzj7rtacI9dshLT3HHQuNYWfpmboFhPxYXbQbrcp1 Js7sUU7svdmO6egiIhTMW6NiYSEm2G5oHTftXnGGSeV2k65DVMyZM8nygS8zrwjy wcbMCnAiJG9pdNm9XzFOowzDVfQH/Kpz/oLwYv5hU3zGwzb/GHzylK34q424vX5q YnBEbo/L9hPDQLXgv+971RjOdzAPj8hIQECjFpYoUu4f97GEyPkf7s4CE3+yU6AU Ehn0rRNRwuoU4g== -----END CERTIFICATE-----Generated at Tue Jul 28 22:36:01 2026 by rpki-client