$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: Q+FJw8Bw0ZoV5sAVXy2/CpvPJMaT1sudXGNTMw4RWzU= Subject key identifier: CC:F2:D5:B1:72:C0:1F:B6:13:08:C9:CD:C3:05:9E:98:D2:E6:3A:6D Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019FA97524BA6A4F63E0E484309F42D1FB11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 19D9 Signing time: Tue 28 Jul 2026 16:00:54 +0000 Manifest this update: Tue 28 Jul 2026 16:00:54 +0000 Manifest next update: Wed 29 Jul 2026 16:00:54 +0000 Files and hashes: 1: 5CLXXKkA4JcsyDrUBBM3fxn2kdc.roa (hash: gFWbYqwKSpr3zQtON6eHRCE0iX3y63ZJZklzBNANHsM=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: JJ4wEKZg+XePlnAqfrF/SJhQ5yGvfR1jzhjd0MvShwM=) 3: DXIDJwT32OV423k4TIWwn2iDwyg.roa (hash: 1DgbvkANX93phDSb+AyRjq7ZFAZDrX3G2DhrbhrdrCY=) 4: Ex4sydFNNb9e9IlWuLzuPazLU44.roa (hash: tuvV0h/eTCcgOOevaItUPifNfonAkWlBsMN+IAbF80I=) 5: F0q3v2kkeTya7vdhm0lzFl3wBAA.roa (hash: BpkEUnq+/w6BrSZ1bTiqPBmMOt7WaZgSwy12/ipsBqo=) 6: GU71SIKDNqtDYi7P5ZGVJfaZ9Ng.roa (hash: 7ZQhqryE0L0rNOAz1gL32gj8EsSrO0yhlKkyCkXl4cc=) 7: PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa (hash: 5xE+UcziQ9DiquZ2A/57aqh1sjUE876lnNSATCS1lTI=) 8: TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa (hash: gEbc+tVQGYMxTiSiJNGO8DDQrrsZOyqWJhw0Dv/aKqE=) 9: XN9ItxoiVygt3a0qQVsmKKlWk9E.roa (hash: iH4X65Vs6HtOKFxQaLyaQ9nZPsCEbiHQMEBYUWCi4KY=) 10: bba2QTZrp_1uueLnjfHPBxHS3PY.roa (hash: OYrkuz8mezgI3XbKfKRWAwnwwsrmJ+JNJd03sNYC3L8=) 11: djcMZ6pGXyKmA-lIeoWfJvgd_vg.roa (hash: 2V8x5uW66gGIUCrfVlUVt3oOyIC3Jcqdd44dr46xxaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:75:24:ba:6a:4f:63:e0:e4:84:30:9f:42:d1:fb:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jul 28 16:00:54 2026 GMT Not After : Jul 29 16:00:54 2026 GMT Subject: CN=ccf2d5b172c01fb61308c9cdc3059e98d2e63a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ad:ca:6d:e0:44:86:29:af:62:64:74:97:20: eb:6b:17:11:c6:54:ba:da:a2:9b:a2:e0:4f:4b:80: a8:84:c6:68:4b:54:e8:50:87:16:40:41:98:5e:4e: c9:c1:62:34:c8:7c:f6:0c:1c:db:23:db:75:e8:22: d2:d8:44:35:cd:b3:97:7a:ad:fe:d1:f1:a8:54:be: 5b:2f:4c:69:d2:2f:c5:5e:fd:04:82:b2:d8:b1:1f: 75:df:26:59:43:67:48:6c:7e:72:e6:69:11:63:e8: 56:45:da:d7:67:52:b7:85:a0:96:05:94:21:f6:b0: 86:b7:d3:24:3a:5a:36:85:99:a1:55:cc:a0:9c:bb: 47:ff:1c:02:1c:c0:eb:77:3e:48:35:99:98:3f:a0: 04:f6:5c:6d:6b:82:31:4b:fb:2d:b3:db:89:75:e1: fb:c6:38:25:45:d7:b4:41:5c:c6:ac:35:a6:77:b0: 20:ca:f7:dd:f2:54:da:9c:da:e2:d7:74:27:82:23: ad:a8:6e:61:c9:cf:04:4a:92:c0:b7:4d:dd:fd:bb: de:a4:c4:21:11:2e:eb:7b:e0:e7:52:f3:f4:01:ef: 4d:82:dd:d9:59:d5:61:21:d6:de:fb:98:a2:c9:41: 4c:f7:1d:ca:49:9f:ce:ff:ed:6d:31:31:b4:df:6b: 06:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:F2:D5:B1:72:C0:1F:B6:13:08:C9:CD:C3:05:9E:98:D2:E6:3A:6D X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:e9:46:d6:d7:ec:e5:29:b7:87:d9:f4:08:8b:72:7f:78:09: 6e:73:47:65:1e:33:03:33:8f:6d:6a:79:e6:51:c6:28:80:90: 55:55:bf:8b:25:76:17:ef:77:fa:9e:10:e7:90:21:43:94:86: 42:5e:4e:ea:b9:61:1f:2c:6b:59:e9:54:e1:4c:4e:f9:93:83: 88:1d:29:b1:10:11:70:ed:66:07:78:1a:87:fc:e9:00:12:0c: f3:00:98:e1:ca:8b:9a:5a:76:35:5a:b3:c0:e0:73:b0:a6:17: 3f:e1:36:c2:1e:25:21:4c:92:3c:68:b4:fa:21:a4:0c:3d:7f: 54:38:1d:34:4c:c9:55:91:31:04:56:40:bf:e8:46:34:d7:0e: f7:a7:9a:8a:56:f2:e3:23:c7:93:12:45:07:0b:32:a2:11:37: eb:e6:2d:1e:41:a9:be:65:58:ed:23:e1:b2:59:d8:d9:91:00: 45:c4:df:ca:6c:6e:9e:4a:62:d8:35:e5:d1:ba:3f:3f:65:66: ff:e3:d6:8a:d1:82:2b:f0:c1:82:70:5c:9e:55:47:83:05:6b: 0d:6e:69:35:97:41:57:13:8b:99:7c:75:4c:b0:f5:03:f8:2f: 6c:13:68:a0:06:ab:32:05:f8:0f:51:a2:fd:9d:96:22:d7:f7: 58:b7:a6:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pdSS6ak9j4OSEMJ9C0fsRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwNzI4MTYwMDU0WhcNMjYwNzI5MTYwMDU0WjAzMTEwLwYDVQQD EyhjY2YyZDViMTcyYzAxZmI2MTMwOGM5Y2RjMzA1OWU5OGQyZTYzYTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmK3KbeBEhimvYmR0lyDraxcRxlS6 2qKbouBPS4CohMZoS1ToUIcWQEGYXk7JwWI0yHz2DBzbI9t16CLS2EQ1zbOXeq3+ 0fGoVL5bL0xp0i/FXv0EgrLYsR913yZZQ2dIbH5y5mkRY+hWRdrXZ1K3haCWBZQh 9rCGt9MkOlo2hZmhVcygnLtH/xwCHMDrdz5INZmYP6AE9lxta4IxS/sts9uJdeH7 xjglRde0QVzGrDWmd7Agyvfd8lTanNri13QngiOtqG5hyc8ESpLAt03d/bvepMQh ES7re+DnUvP0Ae9Ngt3ZWdVhIdbe+5iiyUFM9x3KSZ/O/+1tMTG032sGwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMzy1bFywB+2EwjJzcMFnpjS5jptMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtOlG1tfs 5Sm3h9n0CItyf3gJbnNHZR4zAzOPbWp55lHGKICQVVW/iyV2F+93+p4Q55AhQ5SG Ql5O6rlhHyxrWelU4UxO+ZODiB0psRARcO1mB3gah/zpABIM8wCY4cqLmlp2NVqz wOBzsKYXP+E2wh4lIUySPGi0+iGkDD1/VDgdNEzJVZExBFZAv+hGNNcO96eailby 4yPHkxJFBwsyohE36+YtHkGpvmVY7SPhslnY2ZEARcTfymxunkpi2DXl0bo/P2Vm /+PWitGCK/DBgnBcnlVHgwVrDW5pNZdBVxOLmXx1TLD1A/gvbBNooAarMgX4D1Gi /Z2WItf3WLemrQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:39:29 2026 by rpki-client