$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json) Hash identifier: wThCk6eMmVocvLzKPyQNlEwuL4xVIiKsniL2ujT1HFg= Subject key identifier: 13:73:29:AE:B8:B5:D1:11:80:1F:88:AC:30:A7:C0:70:D7:AC:D6:9A Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Certificate serial: 019FA9ABA0D7C137AE706E02AFC7EBA12190 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft Manifest number: 19F5 Signing time: Tue 28 Jul 2026 17:00:25 +0000 Manifest this update: Tue 28 Jul 2026 17:00:25 +0000 Manifest next update: Wed 29 Jul 2026 17:00:25 +0000 Files and hashes: 1: 2um_rS6WPk2IN6s5x2XbXkQen_M.roa (hash: B3h5JybIRNgVZgqeJwphCEgik9Z267VqHxwbsqTyFKg=) 2: 5du9oXm-5RnmJ8KX2xj_Zy0VqSw.roa (hash: Y1EwroZc2iGhdcqssdik2/Y5BQLLil5kyZQd3CFxooI=) 3: 8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa (hash: qCD4Jc/TwmM8SzWErouUslVtMstyIPcxvXJzTBG565w=) 4: AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa (hash: ZpJgowIRgidE/63sx4+7oMD9312HUQ//RvFSY5dDQVE=) 5: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: JV4fUKh8Sn71CeDQFO3p3Kh8ToRNVCEloX/qAawlSrE=) 6: DewPVx0uxJChPazGVl04iEQt-GM.roa (hash: zJ7nbS6MIVpf02vap/KhBVzOnoGcoyj3FKo3YbsVGF0=) 7: NRE_ExP25AUx8aw3isiH4EnLbWo.roa (hash: SKLRbqjSGl9WDWUOA+lP72kkE1542Czk3hD2WUZlOgE=) 8: WLsy-DnnYnQhVtIJoLpzduDgWrE.roa (hash: V18CJCRRVUNGPvZK+aRf70kDiLaxF9fIzOBbbor2Dw4=) 9: b1zJ7NbuL57-e0rkevnmNIo0USU.roa (hash: 6oXQKWkeIUo+oie2lp60DcRhSM6jyLL6Sog8QbpX/bA=) 10: mWfbcxQdC8J-VBP4j7EBWfW3Qb4.roa (hash: osYbMfspLkdv49SbR62yA1rUcvBEuqW1/Mq+AH8uZCU=) 11: pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa (hash: ZB/G3ZNzs5uxcuPvRWlbNalCCRVbwpgrXGxyYOGJMA4=) 12: xvB92g3viVT1q0eYULHN2quLguo.roa (hash: VRmr+2VnW18lzVv/zbO7wYNSjIEYoaGpdy+0x7pBFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:ab:a0:d7:c1:37:ae:70:6e:02:af:c7:eb:a1:21:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Validity Not Before: Jul 28 17:00:25 2026 GMT Not After : Jul 29 17:00:25 2026 GMT Subject: CN=137329aeb8b5d111801f88ac30a7c070d7acd69a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f9:4e:1f:08:65:79:0e:9e:80:29:16:b4:38: 50:b9:b4:14:3c:54:12:82:91:59:9b:ce:84:bb:7c: e3:3b:49:9e:39:f1:76:41:77:f2:95:49:b6:e9:23: e5:6e:ab:22:9b:0d:7e:5b:3b:69:62:20:ea:23:7a: a3:46:4c:c5:b6:4b:4b:b0:ff:00:87:ef:83:aa:6e: 47:7a:f9:8c:01:d7:1b:cf:e0:9f:1b:cb:94:38:40: 8a:3e:5b:50:e9:5d:d9:5a:e0:21:c9:a3:25:f5:c2: 42:57:cf:78:94:57:f9:4a:c1:34:f6:90:3e:05:1e: 21:fe:46:3b:aa:6d:0c:e5:ba:80:90:de:49:3a:4c: 31:94:3d:11:57:ae:5a:d5:bf:95:02:67:e7:c5:a6: a2:38:73:31:02:c4:c9:b3:36:8c:c5:0d:97:d2:f4: 79:2e:dd:34:3b:2d:44:ca:04:f3:06:3f:a4:e7:d6: b4:39:86:88:ea:88:94:bb:ef:78:11:65:3b:63:b4: 0d:60:0c:c6:70:ff:93:6d:6f:37:52:aa:ea:71:8a: b5:f5:87:a7:76:f3:c0:cb:e8:8f:9a:bd:2e:e5:da: e5:ca:58:26:1b:67:a0:09:cd:fb:b5:af:ba:7e:e4: b3:89:b0:36:2c:76:55:c7:d4:6b:68:0f:c4:6b:c4: 94:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:73:29:AE:B8:B5:D1:11:80:1F:88:AC:30:A7:C0:70:D7:AC:D6:9A X509v3 Authority Key Identifier: keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:0d:46:99:dd:32:2d:9e:99:66:b7:25:43:fd:31:c3:b4:4d: e6:c9:ce:2c:33:08:89:21:8a:1d:98:aa:35:3f:d7:b2:c2:f3: 7d:e7:38:ac:90:61:9d:be:6b:94:90:15:0f:96:95:f3:d0:99: 67:c5:ac:8d:ae:01:2e:a3:a2:2e:58:ae:24:2a:18:1f:cd:a4: e9:02:33:52:d2:bc:c3:28:81:6d:ce:dd:83:9e:ff:a7:83:4f: 59:7d:9d:73:f8:d1:09:2f:a6:82:aa:eb:9b:84:0d:dd:0a:79: 0d:e0:a7:92:20:ec:07:cb:86:d6:ff:4b:7e:c2:91:51:3d:66: ba:c3:cf:e9:62:55:9b:f4:77:8a:7c:1f:f0:0d:df:db:d1:09: ec:d7:8b:f6:a0:fc:c0:da:18:72:32:47:07:1c:c1:43:d9:85: aa:10:4b:20:35:90:2f:4d:bd:b2:9f:3c:27:73:b8:a2:0c:aa: f2:7b:74:32:93:ee:a1:a1:84:45:f6:17:2f:e9:4c:69:b4:28: ae:1b:a9:ff:6f:42:e0:4b:55:b7:b6:18:7b:40:2e:1b:cd:60: 0a:7e:92:e5:15:71:bc:2b:c4:3c:5d:27:7f:b2:f3:de:20:44: f4:33:04:cd:91:41:24:32:9b:25:10:3d:73:51:2d:f5:48:dd: 01:fc:15:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pq6DXwTeucG4Cr8froSGQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh M2Q0YjUwHhcNMjYwNzI4MTcwMDI1WhcNMjYwNzI5MTcwMDI1WjAzMTEwLwYDVQQD EygxMzczMjlhZWI4YjVkMTExODAxZjg4YWMzMGE3YzA3MGQ3YWNkNjlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPlOHwhleQ6egCkWtDhQubQUPFQS gpFZm86Eu3zjO0meOfF2QXfylUm26SPlbqsimw1+WztpYiDqI3qjRkzFtktLsP8A h++Dqm5HevmMAdcbz+CfG8uUOECKPltQ6V3ZWuAhyaMl9cJCV894lFf5SsE09pA+ BR4h/kY7qm0M5bqAkN5JOkwxlD0RV65a1b+VAmfnxaaiOHMxAsTJszaMxQ2X0vR5 Lt00Oy1EygTzBj+k59a0OYaI6oiUu+94EWU7Y7QNYAzGcP+TbW83UqrqcYq19Yen dvPAy+iPmr0u5drlylgmG2egCc37ta+6fuSzibA2LHZVx9RraA/Ea8SUcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBNzKa64tdERgB+IrDCnwHDXrNaaMB8GA1UdIwQY MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt MmUxYzBhZjRmYWE0LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0 LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyA1Gmd0y LZ6ZZrclQ/0xw7RN5snOLDMIiSGKHZiqNT/XssLzfec4rJBhnb5rlJAVD5aV89CZ Z8Wsja4BLqOiLliuJCoYH82k6QIzUtK8wyiBbc7dg57/p4NPWX2dc/jRCS+mgqrr m4QN3Qp5DeCnkiDsB8uG1v9LfsKRUT1musPP6WJVm/R3inwf8A3f29EJ7NeL9qD8 wNoYcjJHBxzBQ9mFqhBLIDWQL029sp88J3O4ogyq8nt0MpPuoaGERfYXL+lMabQo rhup/29C4EtVt7YYe0AuG81gCn6S5RVxvCvEPF0nf7Lz3iBE9DMEzZFBJDKbJRA9 c1Et9UjdAfwVSA== -----END CERTIFICATE-----Generated at Tue Jul 28 21:55:41 2026 by rpki-client