$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json) Hash identifier: 7gTHHGcD+N7P3gqPeiFGFkWQJCezP9NtCqv+ABQIxfU= Subject key identifier: 90:68:D0:D6:18:54:E9:11:1D:0E:87:CD:A4:51:CD:EB:B5:98:D2:A7 Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 019FA8620E061CB85F12D2FA2DF50B0F98C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft Manifest number: 1A21 Signing time: Tue 28 Jul 2026 11:00:26 +0000 Manifest this update: Tue 28 Jul 2026 11:00:26 +0000 Manifest next update: Wed 29 Jul 2026 11:00:26 +0000 Files and hashes: 1: 1-Wl5nNIYq_W3pgo34yEVZQdbxyU.roa (hash: G+7+XKaWZcYGhV9Z4DnGNMnW/7HpmVdpN8SBoPugm7A=) 2: 6R28sM8NerO2u18G_AMWCWlWH18.roa (hash: NDy+Juig3WdCXI1JH5AcQ2fEURwLEtaXUjO+rQmeRKY=) 3: NFl71PMJau8OoVT-JEiyhHLSIZE.roa (hash: 3lKUsUjSDTNYTFbKVTbGnC0rr8zeipPM6TGCp1smax4=) 4: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=) 5: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=) 6: XU-lnejjTfdYfkel9cu2qcj3jOg.asa (hash: 162FwGPbBSAqHbgij5iWFOSWYdvU5C2K98+sNPEBfXc=) 7: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: pmpxda1jRq4T8e7QBSoxrUcmVoL1+J9Zq0GOxAqZNU4=) 8: cpt1ugrQd2rHwxe5DoZShXs9qzA.roa (hash: mY1xZ8RVFs4GaD6HtiYmaN9LhtKWxyqpPX89QA8Zdpk=) 9: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=) 10: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 11:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:62:0e:06:1c:b8:5f:12:d2:fa:2d:f5:0b:0f:98:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Jul 28 11:00:26 2026 GMT Not After : Jul 29 11:00:26 2026 GMT Subject: CN=9068d0d61854e9111d0e87cda451cdebb598d2a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:fb:2b:80:c7:73:86:e4:b2:cf:92:71:e6:e0: 6b:09:18:a2:83:21:ee:5d:0e:32:ec:3e:5d:57:05: 56:79:3c:3f:ef:d6:67:3a:23:2a:8a:c7:a9:eb:97: 66:ff:9b:4e:f5:ae:8a:be:1d:71:c3:15:7f:7f:15: 9c:a3:63:7d:8f:56:d0:94:5e:6a:ea:6e:62:ae:eb: 98:41:f9:91:69:34:4d:c8:f4:a5:07:b5:91:32:62: 19:11:34:fb:f8:d5:98:12:4b:bd:cf:b8:29:0d:14: fa:35:91:ac:ef:67:f0:99:c5:de:f6:4b:68:da:6e: 03:1b:1b:e3:fb:72:43:ec:d8:ce:dc:76:cf:77:f0: 39:73:67:30:5a:f6:ed:80:99:2e:13:3c:50:11:a7: ca:b6:37:8c:16:26:26:6e:39:8c:72:ae:d5:48:90: a1:d6:be:7c:f1:5d:a4:db:fb:3d:cb:07:5b:7d:3b: 2e:87:96:70:6c:ca:21:cf:f5:28:45:21:b6:ff:67: fd:d8:8f:67:ef:da:1e:ed:51:1c:e5:67:6d:2f:9f: aa:19:da:76:3e:be:19:fc:03:4a:33:de:68:1c:bb: 94:ee:66:cc:83:e5:c9:6f:b4:8c:5d:32:0a:8e:e2: 77:a1:cc:4b:ac:31:85:ca:45:14:cd:43:75:c1:de: 87:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:68:D0:D6:18:54:E9:11:1D:0E:87:CD:A4:51:CD:EB:B5:98:D2:A7 X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:da:41:6c:a4:90:df:1f:97:89:a4:45:5d:23:fd:99:85:d0: ce:77:69:34:15:e4:60:b1:80:c1:9f:1a:c1:06:b0:2e:85:28: 13:13:8a:57:2e:86:70:90:cc:b1:0b:5d:83:5f:f1:38:95:48: 52:5d:d1:93:86:4d:1c:2d:43:0f:16:12:9f:a6:21:86:64:22: bc:e8:2e:3b:e4:43:f8:92:0a:0e:8a:16:0c:1e:67:6e:66:0a: 09:f8:14:f2:32:09:c5:d1:32:f5:9a:68:e8:e7:1d:e1:11:48: 5d:28:cc:77:ab:46:e8:e7:47:e7:65:38:35:83:fe:11:1c:f9: b9:c1:e6:d2:13:16:37:78:a1:63:ee:f6:17:10:ac:83:54:3f: 6e:90:83:5d:09:da:22:14:48:30:69:44:49:4f:73:63:e0:47: 87:14:f8:2f:f7:4f:e8:03:54:3a:84:80:52:1b:07:68:4b:50: 76:bb:fe:10:bd:48:38:9b:ff:f9:4a:de:ee:f0:1e:8a:22:9e: 54:0a:2a:6f:86:70:62:71:2e:d5:a3:c9:ac:98:1e:70:78:ae: 97:25:97:4d:80:69:49:ad:68:68:37:49:dd:1b:74:0f:ee:0d: bf:70:6b:41:06:c3:87:f7:e4:35:2e:22:4b:b4:f7:e1:87:fa: 07:a3:fa:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oYg4GHLhfEtL6LfULD5jAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjYwNzI4MTEwMDI2WhcNMjYwNzI5MTEwMDI2WjAzMTEwLwYDVQQD Eyg5MDY4ZDBkNjE4NTRlOTExMWQwZTg3Y2RhNDUxY2RlYmI1OThkMmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/srgMdzhuSyz5Jx5uBrCRiigyHu XQ4y7D5dVwVWeTw/79ZnOiMqisep65dm/5tO9a6Kvh1xwxV/fxWco2N9j1bQlF5q 6m5iruuYQfmRaTRNyPSlB7WRMmIZETT7+NWYEku9z7gpDRT6NZGs72fwmcXe9kto 2m4DGxvj+3JD7NjO3HbPd/A5c2cwWvbtgJkuEzxQEafKtjeMFiYmbjmMcq7VSJCh 1r588V2k2/s9ywdbfTsuh5ZwbMohz/UoRSG2/2f92I9n79oe7VEc5WdtL5+qGdp2 Pr4Z/ANKM95oHLuU7mbMg+XJb7SMXTIKjuJ3ocxLrDGFykUUzUN1wd6HXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJBo0NYYVOkRHQ6HzaRRzeu1mNKnMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALdpBbKSQ 3x+XiaRFXSP9mYXQzndpNBXkYLGAwZ8awQawLoUoExOKVy6GcJDMsQtdg1/xOJVI Ul3Rk4ZNHC1DDxYSn6YhhmQivOguO+RD+JIKDooWDB5nbmYKCfgU8jIJxdEy9Zpo 6Ocd4RFIXSjMd6tG6OdH52U4NYP+ERz5ucHm0hMWN3ihY+72FxCsg1Q/bpCDXQna IhRIMGlESU9zY+BHhxT4L/dP6ANUOoSAUhsHaEtQdrv+EL1IOJv/+Ure7vAeiiKe VAoqb4ZwYnEu1aPJrJgecHiulyWXTYBpSa1oaDdJ3Rt0D+4Nv3BrQQbDh/fkNS4i S7T34Yf6B6P6gg== -----END CERTIFICATE-----Generated at Tue Jul 28 15:46:58 2026 by rpki-client