$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft File: mh5pNoq9NFOP533aq83INa9ZXro.mft (raw, json) Hash identifier: Y1LONLNQ7+SSKQ5r2GHO9+dWB9sQZMTd8z2CBxOxpsQ= Subject key identifier: 65:93:A1:88:08:C4:3A:19:01:3D:CB:2A:CD:C0:97:DC:85:79:F9:96 Authority key identifier: 9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA Certificate issuer: /CN=9a1e69368abd34538fe77ddaabcdc835af595eba Certificate serial: 019FAB2C5C689B62786D6A48765CAC54C39E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft Manifest number: 1A08 Signing time: Wed 29 Jul 2026 00:00:38 +0000 Manifest this update: Wed 29 Jul 2026 00:00:38 +0000 Manifest next update: Thu 30 Jul 2026 00:00:38 +0000 Files and hashes: 1: 2Hc4YFcU8ovqMtT3nDy_-Mmmpuk.roa (hash: By6JZckFdiOutj8o+6oMyXRB9HR4gdxFVnXhuj/iQm0=) 2: 2yaXAAUSdtsPMaSBJFquEdDTT6k.roa (hash: judwS/WZsJiXUyPGTQqvtLBMK0N9HxSeMb7YxOm0ElY=) 3: 3gGcFRvr1pwpGKp8J_owuE8piH4.roa (hash: NIgKE2RVbifnf8DXxCkQaZgBSHqic6iJrtoPDVmLBd4=) 4: 6d_ENWzH-VQ6PZSxBVnrr_FPch4.roa (hash: nLEVzgKnOcDJKPh426JAlzQMVVXnAa8GP6UiExx+ycU=) 5: 877gblyC3fNplcxOQRcSVA_wkoU.roa (hash: FPmfqAGJMI/bwduEg7CvapHPJGcw4GGIWlU9wyWJ4Ns=) 6: Bfe7L2rRCwRxeEADyBmboJ0sWyw.roa (hash: jn4v7UaJGuF63x4KwRuVVxNuQK5XDXqr9trOmgkxfWU=) 7: CO3NGBtj6lvSDwNx7qgisnxcpZE.roa (hash: Ta+b1EmbPlRx8CBP3A/a0A01hRd22nzH/W3OVEU0ya4=) 8: DehND8NWso8fnWINtOcuecHBpxM.roa (hash: Gz26lK/lJI78kkVOCpMyQ4aBO2ZM1W96onuysw9+iUg=) 9: F40rkkhDW3ybCB_12cIOKOyXk08.roa (hash: h+hLlHz7DDayf/In7Q6RDRACl8fHTXkiC3/X/Kl3h7E=) 10: Jtp72CS2jEm3lTCDgWP7039dKYg.roa (hash: Q1Hpm3kD459iodRBV3umbkyn+j4+wiimsCk0/+2lO84=) 11: Ke0VSjrkP1jgta_WS5ntQtfKR38.roa (hash: yxWTZVrICzskJJpD6AIg7gNqPSzszPgc+Bf6OnBQWQw=) 12: Kg06NaGezROeWtBK1qTOADXp_pQ.roa (hash: wmDFJ/5sVQtr4RNwEITHDUmCB7Qq4hdLVGdv9QNDX30=) 13: Kqrj1I1nhBciDkKkCGbNHZhNTMY.roa (hash: a7/AaQlYcrFAkZVVuXf4+IUOGpcRC0INBiFnmBVtSx4=) 14: LnDxIxD-hluuct808CIO9EDyMIU.roa (hash: BcxRwhFwjkIGGKDrrvqL77SCEYThrU0rRvnjjzU14s8=) 15: MAhbKgRlvoF4_D9KUePJuDoAmS4.roa (hash: ZxoAbFForFx0WnVahVEJoAAhiXTlHQB8gaScqzkZ4UU=) 16: MOd1w7flMfCwv3SyFF--8p3elzE.roa (hash: EYwivvrV/eFyx237VqFEYH6spoOnfr8g4cHpOeBFaeU=) 17: McPz5S5PBhTWxGifH8fs1_NS2jU.roa (hash: KEIARx1I4vqfMuZP+WJZ2f9AE00BEAWPF5jqTraiMB4=) 18: Rlj4VlWfwkfz6GkH-OueIIaSCuc.roa (hash: ii4MZTYhkg0ytZp/Vdsah05JAy4dduK8Ytc1ySn7mXs=) 19: SoVFcNc1lU_1SEfGUkw_ciUcpAQ.roa (hash: I90mbwCIchHVNf7BLD+pAvrY/vzh+76mAoOiyMR3xRk=) 20: Zkjg3hn61JFL00ei8OTWJjwR5z4.roa (hash: 588yrYLogN7emBldqJ08eH+eoXXQ8TYe9+BBfSEy2Vs=) 21: _uRGOQez4F9IJ4Gje99KnY5dr8A.roa (hash: pCEJUwH1c1/puNRCPg+jE/RCxUnjqEhyrOo9cHXdY5Y=) 22: bXvBo_CQO1mQ2Jmfwik38TsSdgs.roa (hash: v3xzvBX/k+ZUQX7D1tuVRaHRVvVvUQdIj7NXDvVhP5I=) 23: gwB8EQKBkF6rAUQregKYO8DR9DM.roa (hash: bkCyPXRCyEr0y70TR0Ql1njvG/oRBgnO+/E/e2UhPeQ=) 24: i8o1wvAhrbjSp3BYIhISOUXvW1I.roa (hash: 4Iwgm5dU08CJdYBhUPj/wfHJLQ3KLg/J2wrS95smlME=) 25: icBjslH5ERqmqpU1USzkMdhkEjI.roa (hash: wMYjLB/rE9ycsdnG1IDtuH3D8/HkxmDfxjH3cnkuOvM=) 26: jb9SdOC3s-L1tQx9YD9dSwx4lm4.roa (hash: C4fwq2ctCqLfFVuzRmoqBvwlEei99AA0lShohKylmsU=) 27: kZx2IxBD5HOKLTGnyUCslhrff3s.roa (hash: Vt6Cc39kOpNIWweAmZd5zbwANosQpiB4xiB1jbdvahg=) 28: lSaiK2qUcsBb2SRVSSn0lBTLk8w.roa (hash: Jw4NGPd3f960D6rAt45BHw7wfutR5RSd+rPJNYNB2E0=) 29: lnpel8l0zvHfaReJqv_lxZ_B7Z0.roa (hash: kesVe4OXCvVFnF3zB6nMGPK6v8LEXAUi0VV82fdI66M=) 30: mW7TNNKOcx8Asff3LA5hFbwolus.roa (hash: C0qSa3VXz/TpxHHnVA5yQuQAXKAh2TZvyE/riAp87yc=) 31: mh5pNoq9NFOP533aq83INa9ZXro.crl (hash: fxQU+nRj7b9lfBu0/ABE3/bEndFD1J5ZDiqr34viTGM=) 32: n50HYNvX301s5gEUcCw5M0DpFnA.roa (hash: jEK7Am032lzW1juS2l3eGVIV9V+ymC/9POxHIJyEPwU=) 33: sH-rx8tmxtUlkAPsANTQF0wHaOY.roa (hash: YlV5vFTDmgtf0eEsrUs5mGeaHd46OeYW58DJe4ZgWg4=) 34: utcMZoZ-bKrrR12tmJyNO0cBhnU.roa (hash: 6+DnoOfl4lL5gwEZUZds9jlaGi0yZaNkuduSpVBj2X8=) 35: xEUKzOOkARoDjaObKTAU7gIkvJ0.roa (hash: 78z8Ey8iTFTJsB0kmSdbcd2syS5QWJtz2XrcMbWt2hA=) 36: xNY2gUvtLtxYfY6gU7_3js38DyA.roa (hash: 3CcNNA7q88gUr/9Ae4mjWpxXE8KozaNGoTSekGYA77Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:2c:5c:68:9b:62:78:6d:6a:48:76:5c:ac:54:c3:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9a1e69368abd34538fe77ddaabcdc835af595eba Validity Not Before: Jul 29 00:00:38 2026 GMT Not After : Jul 30 00:00:38 2026 GMT Subject: CN=6593a18808c43a19013dcb2acdc097dc8579f996 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:2f:c0:30:4d:f7:b8:49:99:6c:1b:4b:8a:5e: a3:72:29:55:94:18:de:57:a6:62:27:d5:d8:8c:f5: 62:3f:19:f6:78:b9:51:67:b6:54:7e:47:c1:0b:36: de:4b:77:64:2c:3f:60:2b:7b:08:1e:e5:01:c9:26: e3:d2:e6:c7:bb:ab:3c:28:91:0d:83:48:81:80:2e: 1d:63:b9:32:b4:88:f8:05:4f:d6:2d:5a:98:43:18: 06:54:7f:fb:2e:9b:27:da:6e:79:5b:82:39:8d:37: 23:46:14:5a:e5:a4:8a:7c:cc:c0:35:7c:0b:7c:45: bd:1d:2f:57:01:25:ae:33:c9:e2:48:b8:b2:bc:c5: e3:2d:ce:c2:be:99:5d:ba:a9:02:f7:3f:ac:b8:86: d7:71:d3:d9:13:67:02:66:1d:c2:5b:49:ec:0c:b2: 65:48:43:0c:a9:31:38:78:ff:88:30:94:83:07:89: 49:10:28:5d:7d:56:85:44:74:9a:b0:71:cc:85:70: e6:da:0a:da:94:0d:63:43:3b:a0:82:01:0e:ca:bb: 28:38:1c:38:c3:eb:61:e6:57:f5:e1:a9:c2:d5:a6: 10:57:0a:10:9a:5a:5b:0b:2e:1d:f7:26:7d:d1:cf: cc:e0:54:c3:6a:6b:00:11:f5:3e:5b:26:0f:14:9c: 41:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:93:A1:88:08:C4:3A:19:01:3D:CB:2A:CD:C0:97:DC:85:79:F9:96 X509v3 Authority Key Identifier: keyid:9A:1E:69:36:8A:BD:34:53:8F:E7:7D:DA:AB:CD:C8:35:AF:59:5E:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mh5pNoq9NFOP533aq83INa9ZXro.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7886f4-5fcc-4d44-bd62-10982e040d53/1/mh5pNoq9NFOP533aq83INa9ZXro.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0f:e4:19:9c:39:00:e9:97:e2:af:7b:18:cb:4b:da:ae:31: 35:36:3a:40:78:b5:bc:19:f3:f3:ee:ea:47:5c:48:ea:6a:8d: 4c:fd:0b:53:8e:b3:3c:e3:9f:ca:a2:80:f4:84:aa:2a:65:d9: ae:87:c3:87:09:93:97:a8:e5:f5:68:26:58:bc:e4:e3:9c:e4: e6:46:03:79:9c:f5:7c:ce:85:b1:78:6e:cf:ba:70:8f:71:a1: a0:9e:49:34:ea:60:0f:c9:1b:27:31:b7:66:74:97:68:0e:76: d6:4c:d3:0d:e6:e7:9f:50:55:ce:12:76:db:ac:2f:a4:0f:3e: d9:ab:28:64:78:46:3d:d8:db:e1:0a:10:cf:b6:34:b5:28:c5: fb:ea:ef:d4:24:65:83:cb:99:22:68:9c:41:97:72:a6:e6:fa: 05:ae:69:04:88:e1:94:e1:6d:7f:7a:3c:c6:03:77:34:a8:7d: 9b:2d:b3:5d:55:aa:b1:e8:22:e9:35:34:a3:db:c1:6b:7f:2a: fb:a6:8c:b6:09:df:09:bf:20:8a:0b:9a:d9:9b:ce:c8:61:b5: 7d:30:eb:7b:e5:ca:07:a3:38:c7:1f:e4:84:2c:8d:7f:9f:6c: 38:9d:de:d2:78:2a:b9:6b:87:b2:71:95:b2:0e:90:03:65:87: b6:83:59:e2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rLFxom2J4bWpIdlysVMOeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlhMWU2OTM2OGFiZDM0NTM4ZmU3N2RkYWFiY2RjODM1YWY1 OTVlYmEwHhcNMjYwNzI5MDAwMDM4WhcNMjYwNzMwMDAwMDM4WjAzMTEwLwYDVQQD Eyg2NTkzYTE4ODA4YzQzYTE5MDEzZGNiMmFjZGMwOTdkYzg1NzlmOTk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0C/AME33uEmZbBtLil6jcilVlBje V6ZiJ9XYjPViPxn2eLlRZ7ZUfkfBCzbeS3dkLD9gK3sIHuUBySbj0ubHu6s8KJEN g0iBgC4dY7kytIj4BU/WLVqYQxgGVH/7Lpsn2m55W4I5jTcjRhRa5aSKfMzANXwL fEW9HS9XASWuM8niSLiyvMXjLc7CvplduqkC9z+suIbXcdPZE2cCZh3CW0nsDLJl SEMMqTE4eP+IMJSDB4lJEChdfVaFRHSasHHMhXDm2gralA1jQzugggEOyrsoOBw4 w+th5lf14anC1aYQVwoQmlpbCy4d9yZ90c/M4FTDamsAEfU+WyYPFJxBxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWToYgIxDoZAT3LKs3Al9yFefmWMB8GA1UdIwQY MBaAFJoeaTaKvTRTj+d92qvNyDWvWV66MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjIt MTA5ODJlMDQwZDUzLzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYi83ODg2ZjQtNWZjYy00ZDQ0LWJkNjItMTA5ODJlMDQwZDUz LzEvbWg1cE5vcTlORk9QNTMzYXE4M0lOYTlaWHJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbA/kGZw5 AOmX4q97GMtL2q4xNTY6QHi1vBnz8+7qR1xI6mqNTP0LU46zPOOfyqKA9ISqKmXZ rofDhwmTl6jl9WgmWLzk45zk5kYDeZz1fM6FsXhuz7pwj3GhoJ5JNOpgD8kbJzG3 ZnSXaA521kzTDebnn1BVzhJ226wvpA8+2asoZHhGPdjb4QoQz7Y0tSjF++rv1CRl g8uZImicQZdypub6Ba5pBIjhlOFtf3o8xgN3NKh9my2zXVWqsegi6TU0o9vBa38q +6aMtgnfCb8gigua2ZvOyGG1fTDre+XKB6M4xx/khCyNf59sOJ3e0ngquWuHsnGV sg6QA2WHtoNZ4g== -----END CERTIFICATE-----Generated at Wed Jul 29 06:30:39 2026 by rpki-client