$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft File: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft (raw, json) Hash identifier: n56hAsAkphqwMIGGFjRM9VsrzJQWSXHw+rEQZEMUOEc= Subject key identifier: 6F:82:64:45:7C:C4:FD:BF:93:3B:53:C4:19:83:45:66:06:BF:A6:C2 Authority key identifier: D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE Certificate issuer: /CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Certificate serial: 019FAA1A80276F92C9F5023D43F2BF6A7204 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft Manifest number: 05D7 Signing time: Tue 28 Jul 2026 19:01:31 +0000 Manifest this update: Tue 28 Jul 2026 19:01:31 +0000 Manifest next update: Wed 29 Jul 2026 19:01:31 +0000 Files and hashes: 1: 1-lGH1nu7CvzHWYEiuO1j3MNSzJY.roa (hash: 9/b6BBId/Kn5DB9SmUCWKxBwcAQLvltddZcgBj268UQ=) 2: 2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl (hash: pV3Xs08yIP51giBtGJdkPXH8rme7a8qxnWebYcZHCAY=) 3: 4hkkLe2dcq377WzDqzkSvMCtsco.roa (hash: z6R8cUSnmMVlMDW9YnWwZZPf73zricPf+TEJ86PN7Ko=) 4: 4vxZx7uBqQQ6FyEF2MVBFY1WSaQ.roa (hash: yT8MYmQtVQnTBHZPhbP/WPtpcUBRa3XEcKCSlPgpz98=) 5: 9ed_wxS0x_wpYBRFeH-l8YdRWNM.roa (hash: jNePWbSP/ME9Zww65sdc9Y1eDpMErr9UpTGbyN1tHuM=) 6: AfpxLvj3BiyLwMcA6kKVrdFgW6Y.roa (hash: KKSEdsLLrws/RATwLIqwcq742JLEElRzqndIEau2IyI=) 7: Kj2mVBpZK5i3xSiOOVydeQMB-K4.roa (hash: 3BF9uGhA0G3sb3UpfLCU/KTehTModommlZcD+YYnZKQ=) 8: QxbU9vvhcA75ENS1lZHkpNyfErk.roa (hash: yv8oGh8GGZWvW+9jiR8h6piajHrkuA5egN2MppGfk+w=) 9: SIVhfOqz4_ZwZRIWPrAs9TLD0QI.roa (hash: kRtJ8SNMjyDbUxu98aNT/p/eOM2tAQZf30u+RPiQ1f8=) 10: Vs-VbGsXqggDO3OQJAz7ljIJCBM.roa (hash: 0/YnvO1iRna/5MI8gBnTd4qBir5DLarEENTjj5s3VEU=) 11: _msrPFl7j-h-scWfwUUyG5vmI0Q.roa (hash: C0U0oHsxASzeTthWbTeZAy4SqW+0azDdamHmVesAW1U=) 12: gA8K0uCGARt0iMHybj1fl0_l9iM.roa (hash: oF5vhF0FQd0hgOhUSqj7/e1FPt2MEHPpP+wGYckBTNY=) 13: koXw3LvEwrzn9qCWrcZnQPR8iMs.roa (hash: gNqdDH2AralOcsOhDuMpE5EfKzaR6A0T5YWUJwlNSmY=) 14: l8TSNwU2prw2gsntuaJ9QdkRHKw.roa (hash: gb+3/D4Y4zC34TYQcD7+qVWbJgAtu0xBM1r/dmFP8pw=) 15: nmunvZ8NjUAQxyXLc7q3E6asADA.roa (hash: bcuDcNnBDq7F5VI75bQ3a3MYz4yXIjZXvHo8ZRs1H3g=) 16: qbUtGSmF4OJDy4q4dlRGp4OciDs.roa (hash: VVCFN7s9B67WrTXffUSFAE1mRjFGjdVcuJGLxmq/AY8=) 17: tUYOdiUxF4HxrSVOg847WMoBqws.roa (hash: N6nWp89HDr0pIhLLPi1oB+mkzKMLsBnFNGgdLRBYN30=) 18: tevOSAyMp-1DHWOc8A6PPAJZLUs.roa (hash: /4F2MJ2YCwSX6I/W4Ebbet4QyTAZ6jd4w/oq57g4Qcw=) 19: xOtKmGFOQ0Si4ry-DnEnpbMZzfw.roa (hash: uloNgiaPX4XD2hk6wXEnVMKHkzySU+UwLh3IKRIIyAY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:1a:80:27:6f:92:c9:f5:02:3d:43:f2:bf:6a:72:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8d3ca2c231afdf3b0355c77a7cbb226f81b74de Validity Not Before: Jul 28 19:01:31 2026 GMT Not After : Jul 29 19:01:31 2026 GMT Subject: CN=6f8264457cc4fdbf933b53c41983456606bfa6c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:06:8c:6b:e9:bb:6e:32:b9:16:d9:7f:e8:0a: fc:5f:ee:d6:3d:5b:fa:78:3b:ea:c2:1d:05:8b:f5: 3c:ac:4b:82:34:b8:27:cf:39:62:10:70:16:1f:af: c9:c4:2a:52:07:dc:55:76:e6:f7:99:c5:9a:80:b0: a2:b6:ed:24:f2:76:07:ad:bb:d0:42:b4:99:9c:05: 26:23:dd:44:cc:27:ce:7d:07:81:1b:9d:80:7d:9a: bb:d9:ac:33:3b:50:bf:ee:f8:d7:2a:86:53:19:a1: a0:82:44:df:41:90:db:3c:a1:eb:5c:b1:52:2f:dc: 12:af:48:ee:8f:1b:63:3b:0b:5a:b5:f4:04:25:5b: 9a:eb:a3:eb:13:9b:48:1b:ff:97:ae:f3:6e:83:b9: dd:b9:81:25:79:45:e4:08:34:9c:6c:a7:f3:9d:58: b4:8c:60:fa:41:6a:f2:0c:9f:b7:e1:9f:13:2b:6c: 36:75:f6:d7:3c:ed:d4:82:75:47:38:14:67:0f:96: b0:50:d0:7b:49:32:7a:0b:7a:5d:de:65:7b:28:f6: c2:f1:7c:fd:46:36:cd:18:e1:26:42:a7:f5:aa:68: 1d:f0:6c:32:26:93:18:75:cf:77:39:0a:5f:62:58: c2:4c:f1:c4:7f:8d:87:ff:50:63:ef:31:5e:0d:b7: 0a:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:82:64:45:7C:C4:FD:BF:93:3B:53:C4:19:83:45:66:06:BF:A6:C2 X509v3 Authority Key Identifier: keyid:D8:D3:CA:2C:23:1A:FD:F3:B0:35:5C:77:A7:CB:B2:26:F8:1B:74:DE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NPKLCMa_fOwNVx3p8uyJvgbdN4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/3c076b-aea1-4a33-a9e9-99128bf6a841/1/2NPKLCMa_fOwNVx3p8uyJvgbdN4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:88:e5:43:0e:d8:8b:7d:31:2e:4b:28:9c:ca:fa:e5:1a:b6: 69:29:45:58:c7:3d:2c:4a:e8:54:5d:48:0e:a8:f8:9d:f7:b5: a4:44:4d:cb:c5:6e:d9:cd:4e:ad:cf:31:eb:96:10:45:70:f4: 7c:d9:c7:33:1f:37:ac:8f:94:3a:ae:63:e0:a0:9e:af:9a:ea: 55:42:13:66:df:c7:1d:29:14:c2:54:9f:e7:79:a3:3f:a2:55: 23:b1:0a:5f:5a:15:0b:c1:62:92:02:c2:a2:48:10:1f:d1:99: f1:f8:2c:7b:14:7e:55:41:61:65:6b:e8:3c:c7:f1:09:99:52: 2c:f5:2d:48:9c:0d:ad:15:95:92:e6:28:70:bf:48:0a:a4:ef: 11:2e:56:a6:10:26:8c:85:44:d7:a9:4a:e2:d4:78:d0:f1:e7: 9b:9c:6b:77:0f:65:01:22:b7:0e:60:d0:b0:55:0f:a0:a7:68: 97:c0:48:66:50:aa:cf:ce:38:f4:4b:a7:2d:fb:51:bb:37:78: 58:87:4c:8c:68:34:72:79:8e:0d:09:e8:9a:a1:07:d8:51:30: 7c:f7:c0:62:68:dd:30:39:a1:e7:69:5b:4d:77:b5:39:d5:70: 8f:4e:76:ea:bc:db:03:ca:c4:3c:96:0a:fc:37:0d:5e:10:80: 1d:51:10:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qGoAnb5LJ9QI9Q/K/anIEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4ZDNjYTJjMjMxYWZkZjNiMDM1NWM3N2E3Y2JiMjI2Zjgx Yjc0ZGUwHhcNMjYwNzI4MTkwMTMxWhcNMjYwNzI5MTkwMTMxWjAzMTEwLwYDVQQD Eyg2ZjgyNjQ0NTdjYzRmZGJmOTMzYjUzYzQxOTgzNDU2NjA2YmZhNmMyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAaMa+m7bjK5Ftl/6Ar8X+7WPVv6 eDvqwh0Fi/U8rEuCNLgnzzliEHAWH6/JxCpSB9xVdub3mcWagLCitu0k8nYHrbvQ QrSZnAUmI91EzCfOfQeBG52AfZq72awzO1C/7vjXKoZTGaGggkTfQZDbPKHrXLFS L9wSr0jujxtjOwtatfQEJVua66PrE5tIG/+XrvNug7nduYEleUXkCDScbKfznVi0 jGD6QWryDJ+34Z8TK2w2dfbXPO3UgnVHOBRnD5awUNB7STJ6C3pd3mV7KPbC8Xz9 RjbNGOEmQqf1qmgd8GwyJpMYdc93OQpfYljCTPHEf42H/1Bj7zFeDbcKgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+CZEV8xP2/kztTxBmDRWYGv6bCMB8GA1UdIwQY MBaAFNjTyiwjGv3zsDVcd6fLsib4G3TeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTkt OTkxMjhiZjZhODQxLzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS8zYzA3NmItYWVhMS00YTMzLWE5ZTktOTkxMjhiZjZhODQx LzEvMk5QS0xDTWFfZk93TlZ4M3A4dXlKdmdiZE40LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH4jlQw7Y i30xLksonMr65Rq2aSlFWMc9LEroVF1IDqj4nfe1pERNy8Vu2c1Orc8x65YQRXD0 fNnHMx83rI+UOq5j4KCer5rqVUITZt/HHSkUwlSf53mjP6JVI7EKX1oVC8FikgLC okgQH9GZ8fgsexR+VUFhZWvoPMfxCZlSLPUtSJwNrRWVkuYocL9ICqTvES5WphAm jIVE16lK4tR40PHnm5xrdw9lASK3DmDQsFUPoKdol8BIZlCqz8449EunLftRuzd4 WIdMjGg0cnmODQnomqEH2FEwfPfAYmjdMDmh52lbTXe1OdVwj0526rzbA8rEPJYK /DcNXhCAHVEQ8A== -----END CERTIFICATE-----Generated at Tue Jul 28 22:26:41 2026 by rpki-client