$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft File: nZibOZjhn8APhnDPbJ10AXFc808.mft (raw, json) Hash identifier: vGcF1xo+GOA+FeYV8PS3WqnTZQNRx7VHgMXXqgCRXQ8= Subject key identifier: 5C:0F:76:EB:9A:99:62:73:6D:06:2D:C0:3D:7C:50:B8:66:39:85:09 Authority key identifier: 9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F Certificate issuer: /CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Certificate serial: 019FAB9A3F2676179222741FEFC4722971CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft Manifest number: 04CC Signing time: Wed 29 Jul 2026 02:00:40 +0000 Manifest this update: Wed 29 Jul 2026 02:00:40 +0000 Manifest next update: Thu 30 Jul 2026 02:00:40 +0000 Files and hashes: 1: 0hivjmx3zESdF4O-A2SSYqLGRzk.roa (hash: shH0/H2kUggaPw7GkO5zNoGa7K6ORDulOONVmqwNyzg=) 2: 34ts3PIYYIFWGi911YLJC_MNTy0.roa (hash: 4pjAppUY+fw8yDaAV/Qux+rVoBRiKl+Kw/H8kkGtDI4=) 3: 3iXoIa0Tnc6nSmaQlZwJpvHoBP4.roa (hash: 92O5pIZ5W4yGOk4rHe6wXslYmPaUdiXeWtRLQm4goss=) 4: 4BsASipyNhMfne7kcDB1nUMHv4U.roa (hash: gNxM9v4Ci9bVQzz6zMSsl4HxARtJa2mrpaEAF1ssvBc=) 5: 51oAIofJkFXpGxq0u0pMpGIor0Y.roa (hash: luFon6hTssLT0GVFCEnyosU6nzOcK0/WHgWU8mcIjfk=) 6: 6v6eeI5cY68j_2oFbpbr5jPTgdU.roa (hash: zqirwLCXgdjJFeXHZFQIYNjwkSF+pg6w51CqhX494MQ=) 7: HHVyXzUcc_YIy8baKZaV2Y45k38.roa (hash: ndUe7viQWWyFXFChfyWy877/Y7Q3qjUplP6K/mFzfDE=) 8: SodBob46gHvkE9f0X3aM1jnjv_0.roa (hash: USjt5jELYEu1iaW09TQw060b9YelZ/w0+6LrYh++vTo=) 9: bCcuJlZ7M57UlbvTbB3xJ5-RVYo.roa (hash: JYxMnFiCRaisfCjM99QzlqqTlxpJrwkoJa68usH9YxI=) 10: cHAy_4A-CMasQbGFupRjCXJRveA.roa (hash: Z5sX4UD5pwFqxzXI/4DJgcahhJVYCnCAo+Vk4S1WDik=) 11: fwIX4p6uDI8a1ig_uNG57F-CyyQ.roa (hash: sPu4yXxTGRc2nkq1SBHu8c/xRYRB8YjHSE2w/qhSkXw=) 12: kEgukI4x5ATV385AVFHglji0HH0.roa (hash: 7W67j4OKnAJPYfKA7VB2yMPYazX4qvOU73e4/HvQ//o=) 13: nZibOZjhn8APhnDPbJ10AXFc808.crl (hash: VFvSeDyxxfKy4+fYmqxmC35ItxziWGhbnVAP04RJPyw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:9a:3f:26:76:17:92:22:74:1f:ef:c4:72:29:71:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d989b3998e19fc00f8670cf6c9d7401715cf34f Validity Not Before: Jul 29 02:00:40 2026 GMT Not After : Jul 30 02:00:40 2026 GMT Subject: CN=5c0f76eb9a9962736d062dc03d7c50b866398509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:5a:2d:2e:9f:5a:a6:94:3c:08:42:51:9d:6b: 8f:81:bc:5d:47:a3:db:0d:ef:e0:6e:53:1e:35:db: b7:fc:2a:2d:13:54:7a:6b:bf:3a:eb:da:e8:06:1f: 80:35:58:8b:ce:57:77:45:2d:33:bb:04:4a:15:ee: c1:ba:d3:e6:a4:6c:7c:91:c7:bd:0a:19:3f:18:53: aa:87:63:f0:7a:dc:73:68:30:73:bd:81:a8:3c:18: da:e6:3d:d4:44:8a:8c:be:3a:ac:32:05:2b:a5:98: d3:e1:41:96:8a:3a:38:99:34:e7:6f:0b:d6:8b:4e: 2e:07:09:2a:8b:30:45:cf:21:e6:53:6f:4e:8c:18: 57:f9:9f:a4:17:32:8f:55:e5:cf:d0:2e:6b:7f:30: 71:74:5f:85:68:ae:ea:ff:a9:4a:b3:32:53:cc:b9: 27:38:86:ed:6d:53:db:80:80:85:af:98:b2:f8:5b: 51:4d:04:bb:cb:e1:77:84:3d:94:df:09:da:c5:d9: cb:e6:71:17:85:9e:d7:e5:6a:fe:c0:8a:1a:8e:cf: 55:7b:6a:56:b2:8a:7d:b0:6b:90:a1:3c:02:63:4e: 2f:4f:07:5a:47:61:8d:39:42:78:11:da:e3:ec:7f: 93:01:e6:bc:24:8a:ab:93:c2:b0:e9:01:c6:46:a4: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:0F:76:EB:9A:99:62:73:6D:06:2D:C0:3D:7C:50:B8:66:39:85:09 X509v3 Authority Key Identifier: keyid:9D:98:9B:39:98:E1:9F:C0:0F:86:70:CF:6C:9D:74:01:71:5C:F3:4F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZibOZjhn8APhnDPbJ10AXFc808.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/8c5f5a-804b-4df6-827b-c7ccd7943106/1/nZibOZjhn8APhnDPbJ10AXFc808.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:fb:ab:77:4e:e6:ce:eb:7f:11:b0:b7:7c:dd:31:d3:ec:27: 46:9f:3a:d7:1b:70:48:15:ec:9f:48:93:d2:56:9d:86:39:49: 2b:7c:ab:8d:ae:72:e1:c3:75:f1:f7:52:ef:6c:50:96:fa:fb: af:03:9c:fa:62:6b:20:c5:88:96:27:f0:2a:8f:a0:2c:03:ad: a8:9f:2e:9b:aa:7a:7b:3f:3a:a0:94:79:c9:55:1d:52:82:3b: 3c:95:09:ac:f5:4f:6a:5e:5c:61:c8:14:bf:29:d2:fb:d6:09: 36:15:09:d5:d6:37:35:94:8c:2b:33:0f:c0:a6:c8:a8:77:db: 04:68:77:78:ba:b3:1c:a2:d8:58:71:f6:e7:f2:81:0b:b1:f1: 05:ca:e4:c3:d6:b2:ee:4d:77:11:54:1a:c0:cc:4a:f0:b4:5f: 92:82:fb:14:6b:85:65:ed:b5:3b:13:9a:5b:97:9e:5a:5e:4a: 9f:32:c3:32:1e:9b:c9:2a:36:d3:eb:2d:c9:bd:82:75:02:65: bb:da:ab:fc:87:62:20:c1:bd:a8:09:3c:05:ac:38:3a:e4:b8: e4:4f:e3:75:19:07:44:eb:3a:5c:09:a8:d7:89:81:33:02:20: 41:95:d5:47:4e:3b:ef:92:d5:2a:fd:1b:b6:35:82:1e:b9:e4: 28:d5:e8:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rmj8mdheSInQf78RyKXHLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkOTg5YjM5OThlMTlmYzAwZjg2NzBjZjZjOWQ3NDAxNzE1 Y2YzNGYwHhcNMjYwNzI5MDIwMDQwWhcNMjYwNzMwMDIwMDQwWjAzMTEwLwYDVQQD Eyg1YzBmNzZlYjlhOTk2MjczNmQwNjJkYzAzZDdjNTBiODY2Mzk4NTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFotLp9appQ8CEJRnWuPgbxdR6Pb De/gblMeNdu3/CotE1R6a78669roBh+ANViLzld3RS0zuwRKFe7ButPmpGx8kce9 Chk/GFOqh2PwetxzaDBzvYGoPBja5j3URIqMvjqsMgUrpZjT4UGWijo4mTTnbwvW i04uBwkqizBFzyHmU29OjBhX+Z+kFzKPVeXP0C5rfzBxdF+FaK7q/6lKszJTzLkn OIbtbVPbgICFr5iy+FtRTQS7y+F3hD2U3wnaxdnL5nEXhZ7X5Wr+wIoajs9Ve2pW sop9sGuQoTwCY04vTwdaR2GNOUJ4Edrj7H+TAea8JIqrk8Kw6QHGRqTaMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFwPduuamWJzbQYtwD18ULhmOYUJMB8GA1UdIwQY MBaAFJ2YmzmY4Z/AD4Zwz2yddAFxXPNPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2It YzdjY2Q3OTQzMTA2LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNC84YzVmNWEtODA0Yi00ZGY2LTgyN2ItYzdjY2Q3OTQzMTA2 LzEvblppYk9aamhuOEFQaG5EUGJKMTBBWEZjODA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQPurd07m zut/EbC3fN0x0+wnRp861xtwSBXsn0iT0ladhjlJK3yrja5y4cN18fdS72xQlvr7 rwOc+mJrIMWIlifwKo+gLAOtqJ8um6p6ez86oJR5yVUdUoI7PJUJrPVPal5cYcgU vynS+9YJNhUJ1dY3NZSMKzMPwKbIqHfbBGh3eLqzHKLYWHH25/KBC7HxBcrkw9ay 7k13EVQawMxK8LRfkoL7FGuFZe21OxOaW5eeWl5KnzLDMh6bySo20+styb2CdQJl u9qr/IdiIMG9qAk8Baw4OuS45E/jdRkHROs6XAmo14mBMwIgQZXVR04775LVKv0b tjWCHrnkKNXoAQ== -----END CERTIFICATE-----Generated at Wed Jul 29 09:19:02 2026 by rpki-client