$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: QA3crcr4yDVGXsMviAu/nHKX9S8yS1WXyMcnwkxhjIk= Subject key identifier: 04:70:AB:F6:BD:05:75:99:F2:28:A0:0E:F4:1F:45:61:6D:7F:62:98 Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 019FAB2C5FF63EAD352C1C4ADC076CCEF515 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 15F5 Signing time: Wed 29 Jul 2026 00:00:39 +0000 Manifest this update: Wed 29 Jul 2026 00:00:39 +0000 Manifest next update: Thu 30 Jul 2026 00:00:39 +0000 Files and hashes: 1: 35wDpRsfaq8aq0FjZJRW12A2SwI.roa (hash: S32iSai/D3+xMYiGNdr33Lz5mjsLhdP2ds6sS7Zu5bY=) 2: 4xaEdixeinTNAew5f36B5ogFapc.roa (hash: U+lj7Po2vIYbjteMOk724C6A7iSVfdA9w8Qr+wSn2EY=) 3: 6bp5_uY1eTTE0FRpgy0dJ0tGIWA.roa (hash: JQ6e3y/UZad8zx3alMXWmLY2Cs0ywtM7PcyjG1jGvp0=) 4: 9561YDYiFuwA3cK9_Ao81cqPzyw.roa (hash: sI0N1MtQFC1Bs34l2HPoGh51MHvRDzLlzChm4jYV9bI=) 5: IrFs_aYDL98DrBmqXNeImOXYqVs.roa (hash: /du+UzfxF5Oy69bwitaws2QcGuPpQ2q/PzP+2+rlKmc=) 6: Mpb5tIfxbf_t0TleDipa0dPzQfg.roa (hash: dlPOC3LjslO4GRq7Su9TrpsYGXUfWyZVAl7s4ntuJgI=) 7: SnpB0ExR-bCAJLKknHnesUTaAWU.roa (hash: wlr5EY83KcqFkovq8AptI/Jy70VxHPVKk3n5WEh7t3w=) 8: W-auLweCazJVGZa2RWm9KCu-wKE.roa (hash: KDvTseiWMAdzP9ZuSgmWkkWqgGW79SkpbkY25PFZ98s=) 9: YSP2K25IRGuG9q-MByo9uJoo_cg.roa (hash: Pd46j8HnroPwAsfvmv91RgjQs2qRGo37bfk5Rd39ViM=) 10: ZNVLkE0Hncpo1bsQ8SqkvCmjNMs.roa (hash: ckctwOhfUle+O6fK0mnv5ZMxRNGqbUG5lJdOX3nwnlo=) 11: djAPpFOBLqUtxJOa9UwBPjNac1E.roa (hash: 7Rj31INl1FIcMdN33laOh9K9+J+bHShe/BZUzyt8PUg=) 12: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: X6xjGiftOwphyFSqWBphZY7RqC/aFDvykKA1IjYMEo0=) 13: nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa (hash: lYeXLJKim2pWsORoTqRVNykk1XTHGi948eQwJ6tFxj4=) 14: pnn2LDubyB-s2_PbTNDUNt7JA_8.roa (hash: vW3hxl2FPzWH44KmHJKXNpZV557F5Hczl/NZRDVCKlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:2c:5f:f6:3e:ad:35:2c:1c:4a:dc:07:6c:ce:f5:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Jul 29 00:00:39 2026 GMT Not After : Jul 30 00:00:39 2026 GMT Subject: CN=0470abf6bd057599f228a00ef41f45616d7f6298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:98:65:ef:e5:f6:a1:67:99:82:c0:e3:6b:a6: 68:ae:76:eb:ac:84:bf:7f:90:03:f9:f9:28:50:03: 2d:01:24:1c:8e:81:88:72:cb:de:24:92:33:da:c1: 5f:c8:90:b2:cf:2e:e2:6b:4c:84:19:a7:0c:6f:16: 75:a7:e8:1c:e8:5a:2d:ab:5e:eb:0a:4e:88:ef:a0: b8:b5:ca:9d:98:b6:cf:fd:a5:09:11:36:65:58:c6: 8a:8f:da:c4:61:c3:5d:e5:1c:c4:a7:0f:4d:62:e7: d6:2b:98:c5:98:be:b7:fa:39:0d:ee:4e:c6:7b:bc: a4:26:de:0d:3b:23:55:e9:d1:c4:6f:34:12:38:d2: 88:a8:08:2a:60:8b:ea:a8:a9:54:80:75:e9:f1:1d: 9c:8a:db:58:8f:a7:ba:c7:60:f6:7e:0a:73:76:13: e3:87:29:5c:41:1c:f5:4a:97:68:b5:05:de:d1:e0: ec:de:ec:f4:33:54:6d:49:55:4e:ef:a3:dd:f3:3d: ee:f7:6e:92:8d:5e:5f:30:4e:a1:b7:48:65:d7:d7: 38:ef:98:6d:bc:46:94:63:a3:a8:8c:25:b2:67:34: a4:6a:6a:7f:89:01:fd:5c:6c:2b:f8:89:7d:22:40: 2f:62:ff:7d:b0:72:b1:7b:f0:3e:b0:88:20:82:d3: e5:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:70:AB:F6:BD:05:75:99:F2:28:A0:0E:F4:1F:45:61:6D:7F:62:98 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:d8:56:8b:90:2b:1e:4c:eb:e1:2d:ce:9e:3d:2c:9e:eb:75: ef:35:f0:cf:71:02:3b:26:92:cc:bb:0c:db:b4:93:3f:cc:fb: 43:47:09:82:20:bb:3c:1f:15:be:ba:d6:11:d1:8a:8b:e3:6d: f4:fc:72:84:91:2f:dc:51:6d:da:f2:a0:89:01:b7:ed:97:11: 84:49:f2:49:c8:85:89:22:f2:3a:cd:1f:e9:52:7c:a1:a2:33: f8:6a:96:c7:c3:88:fa:6a:3a:3d:32:b3:7a:1d:0a:55:ff:0b: 51:00:48:35:69:ee:de:a9:a4:a5:0f:b2:f6:93:b3:92:12:70: ae:ac:57:44:4e:85:33:92:c7:fe:a4:11:1b:86:a4:a4:f0:cf: 68:ea:24:2a:6f:55:4a:53:4f:51:67:c4:0f:e0:cd:a9:dc:4d: 9f:4b:b5:d2:c8:c8:bf:91:c3:59:8e:ae:8a:ba:ac:93:1d:7d: 85:a3:26:0a:07:bb:72:dd:8e:45:4b:8f:ca:19:07:90:e7:e5: 54:65:dc:c2:02:06:30:52:e6:4c:84:15:58:2b:e2:1c:47:64: 15:43:62:2c:c3:40:68:a2:84:42:75:28:7d:09:cd:8c:17:07: 06:f9:66:76:4b:b4:8a:2c:05:40:1a:08:1a:47:00:39:f2:1f: ff:f8:f4:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rLF/2Pq01LBxK3AdszvUVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYwNzI5MDAwMDM5WhcNMjYwNzMwMDAwMDM5WjAzMTEwLwYDVQQD EygwNDcwYWJmNmJkMDU3NTk5ZjIyOGEwMGVmNDFmNDU2MTZkN2Y2Mjk4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZhl7+X2oWeZgsDja6ZornbrrIS/ f5AD+fkoUAMtASQcjoGIcsveJJIz2sFfyJCyzy7ia0yEGacMbxZ1p+gc6Fotq17r Ck6I76C4tcqdmLbP/aUJETZlWMaKj9rEYcNd5RzEpw9NYufWK5jFmL63+jkN7k7G e7ykJt4NOyNV6dHEbzQSONKIqAgqYIvqqKlUgHXp8R2cittYj6e6x2D2fgpzdhPj hylcQRz1SpdotQXe0eDs3uz0M1RtSVVO76Pd8z3u926SjV5fME6ht0hl19c475ht vEaUY6OojCWyZzSkamp/iQH9XGwr+Il9IkAvYv99sHKxe/A+sIgggtPlIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFARwq/a9BXWZ8iigDvQfRWFtf2KYMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACNhWi5Ar Hkzr4S3Onj0snut17zXwz3ECOyaSzLsM27STP8z7Q0cJgiC7PB8VvrrWEdGKi+Nt 9PxyhJEv3FFt2vKgiQG37ZcRhEnySciFiSLyOs0f6VJ8oaIz+GqWx8OI+mo6PTKz eh0KVf8LUQBINWnu3qmkpQ+y9pOzkhJwrqxXRE6FM5LH/qQRG4akpPDPaOokKm9V SlNPUWfED+DNqdxNn0u10sjIv5HDWY6uirqskx19haMmCge7ct2ORUuPyhkHkOfl VGXcwgIGMFLmTIQVWCviHEdkFUNiLMNAaKKEQnUofQnNjBcHBvlmdku0iiwFQBoI GkcAOfIf//j0Pw== -----END CERTIFICATE-----Generated at Wed Jul 29 07:18:04 2026 by rpki-client