$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: Fa8hrOvAYcxCvbAOOOb7thj2SorfNlbhD3xVbTB/Afw= Subject key identifier: 53:93:53:CF:3E:51:26:6F:F3:2D:DE:17:E6:DF:E5:AA:CF:14:FA:61 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019FA93E06164F079A754C77C4BD72577E70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 19F7 Signing time: Tue 28 Jul 2026 15:00:41 +0000 Manifest this update: Tue 28 Jul 2026 15:00:41 +0000 Manifest next update: Wed 29 Jul 2026 15:00:41 +0000 Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=) 2: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=) 3: FpZLKm-2HuyBs9RMbUcbmbopMuU.roa (hash: 3TSsOddEtljGL8cZUDm9jJjfR573z1TKNPv7WQMwWsE=) 4: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=) 5: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=) 6: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=) 7: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: Wl0BixzqM166NmpIGTr9i3ZAZJgkwaXcZSwJ2V9O2OI=) 8: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=) 9: dKLrGCnnWV06iolZrHx2nh4vWJg.roa (hash: IGn7SudG+KQQ8pkrK3hPDPOgmXUuAfTQAKdCH2IyL6I=) 10: mEhn-x7tkmLGeYlMpZdP2RjzVPY.roa (hash: YARnW3hK0MAvwIlgDRpM5wiqLHphA51kgJTHfm2NanQ=) 11: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=) 12: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=) 13: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=) 14: xo5ef4fORQSrFnpripZPBF58N8I.roa (hash: aCdvWOjY4qGUoKbWAQNLbpPN1m3wpKJ6hfeG6RHAKCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:3e:06:16:4f:07:9a:75:4c:77:c4:bd:72:57:7e:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Jul 28 15:00:41 2026 GMT Not After : Jul 29 15:00:41 2026 GMT Subject: CN=539353cf3e51266ff32dde17e6dfe5aacf14fa61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:b8:33:9b:7a:db:ba:86:8b:61:e4:db:88: 56:6b:c3:c9:09:21:d1:4d:fc:66:9f:bc:97:42:d2: 7a:64:8d:1c:7b:af:15:8a:d8:c3:ec:76:c6:c0:7b: eb:22:05:06:6f:5b:92:27:ed:78:a4:24:85:54:1d: ba:8c:f1:93:9c:5b:23:62:b4:d3:dd:50:42:5c:bb: a0:83:3c:35:2f:c4:8a:45:66:f6:2f:c8:52:87:7f: c7:44:93:ee:07:32:8e:8f:67:25:e3:56:47:69:54: 99:bc:e7:b8:ed:77:97:63:61:8e:0f:e0:83:be:37: 93:04:ba:bd:f0:9d:52:57:63:f8:5c:51:3a:06:a2: ab:f8:f4:fd:a3:27:ff:bb:d7:62:8c:5e:88:a5:8d: 3b:2d:57:e6:31:f3:0c:0b:ed:f9:e8:61:cc:0b:43: f2:78:5f:54:a0:c1:9c:05:67:52:d4:95:7d:0e:e5: f0:9c:4a:6f:d9:74:92:c7:7c:21:6c:4f:6e:97:e6: c1:69:c3:f7:95:cd:ac:8d:6a:90:f2:69:fd:12:28: 92:75:44:60:78:94:42:8d:80:bb:95:c4:54:b5:8f: b4:34:19:0f:a0:9f:47:5e:49:12:14:fd:29:63:85: 2c:32:49:fa:0a:6c:d4:aa:e9:c2:7a:97:d0:f5:e3: e9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:93:53:CF:3E:51:26:6F:F3:2D:DE:17:E6:DF:E5:AA:CF:14:FA:61 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:9c:5f:a9:eb:0e:64:be:a2:4c:d1:1b:41:fd:79:7c:09:54: b5:ee:d0:81:72:12:93:6b:96:7f:f0:7e:75:f8:8b:0d:e9:dd: 3c:f9:4b:d7:a9:3a:58:b0:26:90:85:9e:21:8e:58:09:cf:e1: 29:17:a0:18:64:0e:6c:85:b4:33:ea:ac:cf:66:1f:2d:e3:7f: dd:be:0e:bd:f1:81:a5:f6:d7:1c:a4:7b:dc:50:9f:4d:9b:9a: a9:8b:bf:b8:62:ec:c9:a1:d4:a2:86:d7:ed:2b:24:91:b4:aa: 86:f8:c0:16:50:c1:df:17:59:94:23:f5:7a:8f:75:6b:76:19: 77:33:43:9e:70:39:6e:3d:8f:b7:ab:b6:15:1b:06:14:9f:89: f1:11:72:40:2b:06:48:1d:1d:ad:fc:bd:09:ec:5a:3d:5d:48: 43:75:45:39:4c:f2:6b:03:74:a8:01:59:77:83:d0:82:9d:64: 32:e4:b4:7b:0d:63:14:e5:64:e8:79:de:c4:76:b9:02:65:57: 26:81:93:65:4c:09:b8:b4:fc:d1:f5:29:33:12:41:c1:29:4a: d1:53:4d:9c:c5:0f:a2:f5:15:54:de:a6:9d:cd:6c:f2:e0:68: e5:ad:fa:22:f4:2d:3c:a4:fc:56:56:c6:2a:71:de:3b:ad:a2: fd:ed:66:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pPgYWTweadUx3xL1yV35wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwNzI4MTUwMDQxWhcNMjYwNzI5MTUwMDQxWjAzMTEwLwYDVQQD Eyg1MzkzNTNjZjNlNTEyNjZmZjMyZGRlMTdlNmRmZTVhYWNmMTRmYTYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e+4M5t627qGi2Hk24hWa8PJCSHR Tfxmn7yXQtJ6ZI0ce68VitjD7HbGwHvrIgUGb1uSJ+14pCSFVB26jPGTnFsjYrTT 3VBCXLuggzw1L8SKRWb2L8hSh3/HRJPuBzKOj2cl41ZHaVSZvOe47XeXY2GOD+CD vjeTBLq98J1SV2P4XFE6BqKr+PT9oyf/u9dijF6IpY07LVfmMfMMC+356GHMC0Py eF9UoMGcBWdS1JV9DuXwnEpv2XSSx3whbE9ul+bBacP3lc2sjWqQ8mn9EiiSdURg eJRCjYC7lcRUtY+0NBkPoJ9HXkkSFP0pY4UsMkn6CmzUqunCepfQ9ePpxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOTU88+USZv8y3eF+bf5arPFPphMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5xfqesO ZL6iTNEbQf15fAlUte7QgXISk2uWf/B+dfiLDendPPlL16k6WLAmkIWeIY5YCc/h KRegGGQObIW0M+qsz2YfLeN/3b4OvfGBpfbXHKR73FCfTZuaqYu/uGLsyaHUoobX 7SskkbSqhvjAFlDB3xdZlCP1eo91a3YZdzNDnnA5bj2Pt6u2FRsGFJ+J8RFyQCsG SB0drfy9CexaPV1IQ3VFOUzyawN0qAFZd4PQgp1kMuS0ew1jFOVk6HnexHa5AmVX JoGTZUwJuLT80fUpMxJBwSlK0VNNnMUPovUVVN6mnc1s8uBo5a36IvQtPKT8VlbG KnHeO62i/e1mEw== -----END CERTIFICATE-----Generated at Tue Jul 28 17:11:40 2026 by rpki-client