$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft File: miSyfZ899uFOvHnhRui-MnVL-AA.mft (raw, json) Hash identifier: h1712OKyeor6HhASdXiIM7rnPRGWXPs6ZxiyL8eLROY= Subject key identifier: 0A:DD:AC:06:77:3A:29:D7:10:A4:4C:83:D8:9B:8A:03:FA:3F:2E:9F Authority key identifier: 9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 Certificate issuer: /CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Certificate serial: 019FA9E2E8E90D778DC6A9E30C95935832DE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft Manifest number: 0BA4 Signing time: Tue 28 Jul 2026 18:00:47 +0000 Manifest this update: Tue 28 Jul 2026 18:00:47 +0000 Manifest next update: Wed 29 Jul 2026 18:00:47 +0000 Files and hashes: 1: 4BtZ6ImulGiBNPfFEyIkenVvnSE.roa (hash: 6h+jPwLu4nddov8mWqAqvJNAzlSrWOgSVAeEWaQAHMQ=) 2: 9dGHInAQI-j4vyLy3UUNRAYsuCY.roa (hash: Q9ame2KwxdqQfHrlASmNDuZYejwWS5cB+ic/WNNh4SE=) 3: Gc-zxgRLIzAQa_iFPqWdSCs1AfA.roa (hash: knk2ar6caQbw//JlOcHZhkt4Z0WhcJB+DOpi0h0a7F4=) 4: HUdkOXLhBSaGi7zaB3tiAzHsu2w.roa (hash: SMC3snHw7F/Tr45ZUYM0iuFzgEgu3dYKECc195mdzRs=) 5: ZBdtDqtan4ryfsX_DPoSWN_nnIM.roa (hash: mMR9AMjlqz3mZdhz4HhiNub8llzDHhmNDp6KeOjkBNo=) 6: iMagr2JhNrn6UcBo9-V-8mQcTn4.roa (hash: mQklS7JkHJd3eY4Nb4US8i0zJjbD5uDxAwa3Ul/Mehk=) 7: miSyfZ899uFOvHnhRui-MnVL-AA.crl (hash: 2zdiVO+n5g1105Ru0Ru7Bovc86HAXGSySJMtGLjDhWY=) 8: pTIdOhwN38ILsZQYi8bIDMjeY4U.roa (hash: GtMRQsNo+pmOf3YedJ1j8ncQIy9S7xqsYIsqepUk4Dw=) 9: tkLKI36bEE_d9mFrnpG75Jz1duc.roa (hash: GQR5CqcIcifEV/UVBCebbmLSOnvxcbQORub4i3S8oOk=) 10: ycU_XNZEXN413MBQCsimYNHq3Uc.roa (hash: Nto1BYyts37ycUiG2XmvVx1RqM7RGKIW4OTTPggZvXE=) 11: zt6aVptNzEemFtVcszL1t-xA0vs.roa (hash: pSOP40u7PQPwSGBic+DInKoefhITjHCDk1ttR6rrtpE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:18:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:e2:e8:e9:0d:77:8d:c6:a9:e3:0c:95:93:58:32:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a24b27d9f3df6e14ebc79e146e8be32754bf800 Validity Not Before: Jul 28 18:00:47 2026 GMT Not After : Jul 29 18:00:47 2026 GMT Subject: CN=0addac06773a29d710a44c83d89b8a03fa3f2e9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:9c:9a:6a:23:a7:f0:47:23:81:a1:1d:d0:9a: 90:b8:1f:e8:20:47:0c:bc:d9:aa:df:41:15:b7:77: 8f:b9:2d:09:7e:5c:7f:47:dc:10:0d:d0:37:ee:40: 95:f1:db:58:2a:f4:58:f0:54:0d:03:94:73:62:4e: b5:43:e7:5a:45:6a:ab:6a:b2:05:05:56:4a:f9:a9: da:11:33:05:26:85:f5:5a:1b:a3:f3:08:96:8a:81: 10:55:08:18:61:bf:60:c6:2b:f2:ff:a9:6f:cc:f5: 31:7f:fa:53:fb:74:79:55:4d:c4:6a:27:f6:78:d3: 7c:85:ba:c4:94:d3:b3:1a:bb:c1:74:8e:29:67:ac: 82:e6:06:68:36:a3:0e:a0:d4:2b:9d:94:e4:23:31: 0c:a1:91:0e:fc:40:00:dc:7a:00:fb:6c:66:7e:9c: 50:28:35:0c:16:4e:1e:f7:66:81:70:c4:b7:fb:a0: ab:f0:5f:bb:6e:7f:d7:40:5e:1b:6f:6f:de:63:77: 0b:9b:38:23:74:e7:94:d4:b7:b5:07:d8:9c:3f:50: 05:ce:d9:13:79:fd:d1:28:eb:ea:b1:04:4c:e6:c3: 61:34:c7:95:8d:44:00:31:fc:42:6d:af:12:f1:d7: 06:6d:34:e3:3b:c3:8f:6e:fc:10:06:82:9e:d5:3c: cc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:DD:AC:06:77:3A:29:D7:10:A4:4C:83:D8:9B:8A:03:FA:3F:2E:9F X509v3 Authority Key Identifier: keyid:9A:24:B2:7D:9F:3D:F6:E1:4E:BC:79:E1:46:E8:BE:32:75:4B:F8:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/miSyfZ899uFOvHnhRui-MnVL-AA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/da/0251f2-a1bb-44fb-b908-48d5ff4ba255/1/miSyfZ899uFOvHnhRui-MnVL-AA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:cf:ec:65:65:3a:72:8c:1c:27:c1:7b:c3:e1:b8:54:09:6b: ed:1c:53:f2:20:83:dc:9a:d3:60:8e:9a:2f:d4:63:00:a6:20: bc:e1:16:37:6b:c5:d3:ae:a5:28:d4:fc:b3:40:06:f0:57:e5: 7b:75:3d:fa:49:5f:86:bf:30:eb:d2:8f:59:e0:1b:13:86:89: 1e:1f:90:d3:1d:47:c6:fe:bd:bf:d7:d3:fc:c1:eb:51:ed:11: b3:2f:16:27:ae:31:26:85:7b:82:52:90:5c:ca:53:90:ba:73: 5c:9a:54:3f:b2:84:7e:07:06:08:a2:05:da:1c:59:d3:fc:ae: 3e:a1:eb:7e:bf:2e:88:c8:e0:c4:bd:86:4d:b7:6a:56:68:3f: dc:b7:c7:aa:19:8e:51:a0:13:a9:c0:c0:50:da:c2:09:08:d1: dd:b2:d5:fc:71:e6:07:9b:f4:96:31:8c:09:43:a8:59:f4:14: 3b:98:e0:9e:71:e7:ad:a6:39:cf:53:5b:ec:3d:13:7a:1e:1f: cf:2a:83:53:d0:6c:19:26:52:68:62:40:c6:3a:9e:3f:61:7e: 81:cd:79:18:2f:e6:36:63:7b:d3:98:9d:88:59:a1:89:68:5d: 27:86:03:2a:ff:5c:01:02:ae:22:50:b9:ab:55:95:50:0e:0d: 22:10:1d:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+p4ujpDXeNxqnjDJWTWDLeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMjRiMjdkOWYzZGY2ZTE0ZWJjNzllMTQ2ZThiZTMyNzU0 YmY4MDAwHhcNMjYwNzI4MTgwMDQ3WhcNMjYwNzI5MTgwMDQ3WjAzMTEwLwYDVQQD EygwYWRkYWMwNjc3M2EyOWQ3MTBhNDRjODNkODliOGEwM2ZhM2YyZTlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpyaaiOn8EcjgaEd0JqQuB/oIEcM vNmq30EVt3ePuS0Jflx/R9wQDdA37kCV8dtYKvRY8FQNA5RzYk61Q+daRWqrarIF BVZK+anaETMFJoX1Whuj8wiWioEQVQgYYb9gxivy/6lvzPUxf/pT+3R5VU3Eaif2 eNN8hbrElNOzGrvBdI4pZ6yC5gZoNqMOoNQrnZTkIzEMoZEO/EAA3HoA+2xmfpxQ KDUMFk4e92aBcMS3+6Cr8F+7bn/XQF4bb2/eY3cLmzgjdOeU1Le1B9icP1AFztkT ef3RKOvqsQRM5sNhNMeVjUQAMfxCba8S8dcGbTTjO8OPbvwQBoKe1TzMBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFArdrAZ3OinXEKRMg9ibigP6Py6fMB8GA1UdIwQY MBaAFJoksn2fPfbhTrx54UbovjJ1S/gAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgt NDhkNWZmNGJhMjU1LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYS8wMjUxZjItYTFiYi00NGZiLWI5MDgtNDhkNWZmNGJhMjU1 LzEvbWlTeWZaODk5dUZPdkhuaFJ1aS1NblZMLUFBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUM/sZWU6 cowcJ8F7w+G4VAlr7RxT8iCD3JrTYI6aL9RjAKYgvOEWN2vF066lKNT8s0AG8Ffl e3U9+klfhr8w69KPWeAbE4aJHh+Q0x1Hxv69v9fT/MHrUe0Rsy8WJ64xJoV7glKQ XMpTkLpzXJpUP7KEfgcGCKIF2hxZ0/yuPqHrfr8uiMjgxL2GTbdqVmg/3LfHqhmO UaATqcDAUNrCCQjR3bLV/HHmB5v0ljGMCUOoWfQUO5jgnnHnraY5z1Nb7D0Teh4f zyqDU9BsGSZSaGJAxjqeP2F+gc15GC/mNmN705idiFmhiWhdJ4YDKv9cAQKuIlC5 q1WVUA4NIhAdcQ== -----END CERTIFICATE-----Generated at Tue Jul 28 20:31:59 2026 by rpki-client