$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json) Hash identifier: IHv5CcFq2+KSjLoeephvy4MSmFBiMCGS5ycJzA8SLpE= Subject key identifier: 0D:A9:83:6B:FF:C5:2F:46:1F:83:BA:F1:63:41:3C:20:74:FF:BB:10 Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 019FA9078F0A69E38AB1A4D082B719D82C93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft Manifest number: 1877 Signing time: Tue 28 Jul 2026 14:01:12 +0000 Manifest this update: Tue 28 Jul 2026 14:01:12 +0000 Manifest next update: Wed 29 Jul 2026 14:01:12 +0000 Files and hashes: 1: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (hash: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4=) 2: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (hash: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs=) 3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: eYxDy/tGbMByw0GITJmRqWa9/DZoG8DYoBZ10jNxjps=) 4: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (hash: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs=) 5: LKPNjW0FwzxJuXJJO8QeVx8xVKA.roa (hash: 7aAIkZ00eO3qTrf1/VDBo5PmzNCovWfeD3QFFzPD2+k=) 6: OhdvuW1MhWIplOiaXjr0jKrnav0.roa (hash: J4+sEU+gHBe6CqLgaPIzNFJg58JXNWIbDProtv3aR8c=) 7: XWplAHLb4h-dRGf7GRqU5aYBne4.roa (hash: vcUnwVhvidom6bWizccTCS7wF3vMreiwdFHr11qyWHQ=) 8: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (hash: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04=) 9: bu5zIhc9syS0fhKBovFQXcGQRxQ.roa (hash: /Bq2k4bmIQ5EUPK41v03YcsLqkRVvDHXfxrIn2yzw5A=) 10: epRr3ot_tO1I-RC0EsosxizeUW8.roa (hash: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo=) 11: hIAZzuP6Gsu6ylCAGgkd82Ycc_M.roa (hash: SQISDbvDjBaLkSadlmENoao3YxR8/bK49Sgx969cf+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:07:8f:0a:69:e3:8a:b1:a4:d0:82:b7:19:d8:2c:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Jul 28 14:01:12 2026 GMT Not After : Jul 29 14:01:12 2026 GMT Subject: CN=0da9836bffc52f461f83baf163413c2074ffbb10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:15:b1:ac:de:07:d1:de:a0:e7:38:8c:2e:cb: cd:77:04:75:4d:3f:c2:c1:8d:11:b1:18:56:72:c4: d1:9b:a2:b0:b5:96:60:8f:b9:b1:3b:a3:9d:13:35: a8:d6:ac:f2:e1:ca:5a:30:94:91:b4:b1:50:a1:77: 0d:52:75:47:e2:01:9c:07:39:f1:5f:f8:3c:3b:ad: c9:4e:23:b4:5e:e1:d4:55:18:c4:ef:6d:34:46:cf: 6b:3d:c1:d8:74:18:9b:1e:b5:27:a4:50:a4:bb:9c: 1c:1c:58:e1:b7:c1:71:01:5b:39:44:d2:f7:7e:16: ed:08:9c:a0:8c:31:b0:07:ff:9f:81:b3:2e:a7:c7: 08:be:da:4e:0d:32:b7:74:7a:20:bc:1c:e7:eb:5c: 72:41:8a:0c:ac:f3:25:39:ed:ad:76:ca:52:77:38: b1:af:23:12:01:de:cb:74:48:e2:af:ec:de:a4:d8: 2c:7a:d1:ba:cf:df:23:a5:77:56:9d:37:a6:72:d6: f9:7f:75:b4:5d:df:53:88:e7:33:a7:cb:1f:c8:33: 58:2c:61:a0:18:a0:53:33:ea:c0:4b:7c:41:9b:83: e5:48:9b:42:51:27:9e:42:a5:91:71:06:c1:9f:96: 05:2a:ec:7e:e1:19:05:ac:4c:cd:a8:29:a3:ae:1c: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A9:83:6B:FF:C5:2F:46:1F:83:BA:F1:63:41:3C:20:74:FF:BB:10 X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:d6:c2:db:3e:a2:3f:85:17:75:90:f8:9d:88:d8:3c:f6:1d: 62:6f:e3:bb:ec:6f:b6:d1:60:d6:f6:98:0b:eb:e3:84:5c:e6: d1:df:13:4f:4d:6c:03:92:58:b9:fd:48:26:45:bc:3b:6a:7f: 73:17:48:78:0c:5a:0a:02:dd:37:f0:d3:41:37:fb:d3:b8:9e: 18:35:05:42:2f:9c:69:63:f1:99:19:c3:e5:d2:e9:d0:82:33: 0e:7b:ac:a1:0a:00:a8:9c:04:2a:70:9d:1a:2b:a5:ea:5b:63: ab:86:41:f1:f3:50:ce:76:b5:5f:46:e6:35:b4:7e:78:b4:00: 8b:10:23:f4:d6:62:db:3d:1a:e9:b7:59:00:38:8c:b4:95:eb: d6:34:57:99:b5:01:f2:06:72:c3:61:e8:36:53:6e:47:75:0e: 0f:27:7c:a8:6b:fa:7b:9f:bc:8e:73:85:4e:28:7b:52:fa:0a: 26:d7:8d:5a:fe:f0:e4:e6:97:4c:5e:28:d1:ce:50:c0:12:64: f1:a5:0f:b8:af:f5:d1:ee:18:af:9c:60:18:cc:5f:7b:7c:50: ef:47:8d:a8:a2:03:90:6d:95:9f:24:f5:36:61:fe:3d:1b:aa: b3:06:bc:3b:86:ef:1a:4a:9a:57:93:0a:93:c3:52:2d:94:73: 4a:c6:bc:52 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pB48KaeOKsaTQgrcZ2CyTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjYwNzI4MTQwMTEyWhcNMjYwNzI5MTQwMTEyWjAzMTEwLwYDVQQD EygwZGE5ODM2YmZmYzUyZjQ2MWY4M2JhZjE2MzQxM2MyMDc0ZmZiYjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hWxrN4H0d6g5ziMLsvNdwR1TT/C wY0RsRhWcsTRm6KwtZZgj7mxO6OdEzWo1qzy4cpaMJSRtLFQoXcNUnVH4gGcBznx X/g8O63JTiO0XuHUVRjE7200Rs9rPcHYdBibHrUnpFCku5wcHFjht8FxAVs5RNL3 fhbtCJygjDGwB/+fgbMup8cIvtpODTK3dHogvBzn61xyQYoMrPMlOe2tdspSdzix ryMSAd7LdEjir+zepNgsetG6z98jpXdWnTemctb5f3W0Xd9TiOczp8sfyDNYLGGg GKBTM+rAS3xBm4PlSJtCUSeeQqWRcQbBn5YFKux+4RkFrEzNqCmjrhzW9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA2pg2v/xS9GH4O68WNBPCB0/7sQMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZtbC2z6i P4UXdZD4nYjYPPYdYm/ju+xvttFg1vaYC+vjhFzm0d8TT01sA5JYuf1IJkW8O2p/ cxdIeAxaCgLdN/DTQTf707ieGDUFQi+caWPxmRnD5dLp0IIzDnusoQoAqJwEKnCd Giul6ltjq4ZB8fNQzna1X0bmNbR+eLQAixAj9NZi2z0a6bdZADiMtJXr1jRXmbUB 8gZyw2HoNlNuR3UODyd8qGv6e5+8jnOFTih7UvoKJteNWv7w5OaXTF4o0c5QwBJk 8aUPuK/10e4Yr5xgGMxfe3xQ70eNqKIDkG2VnyT1NmH+PRuqswa8O4bvGkqaV5MK k8NSLZRzSsa8Ug== -----END CERTIFICATE-----Generated at Tue Jul 28 23:30:41 2026 by rpki-client