$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: d8SXUGAwxYTvPYg7d4KEvHHGCUmSlM1zDDxcnwpAlGY= Subject key identifier: EA:37:59:F7:80:BB:27:C1:F5:4D:DE:E5:B3:F1:C5:FE:23:49:A7:31 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019FAABEB28FA0B34DF01DA05A6F08EF8608 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0D89 Signing time: Tue 28 Jul 2026 22:00:51 +0000 Manifest this update: Tue 28 Jul 2026 22:00:51 +0000 Manifest next update: Wed 29 Jul 2026 22:00:51 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: tvPxZ7/F28E89190dFZH0I0fXuLR+/2VORqVfs7VzNI=) 9: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 10: aV15c49lSGl3dteQSHc3IvNZ2Yw.roa (hash: idSDFzUORIOI2C3DdmyZjUWIVKrr2rvoia+URiMKZUk=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 14: jdhRRSqw1KV-OBkZuUAJ-tCWDik.roa (hash: PZnlHT69L4VcU/X0HEwE+Wn3yCWoZ+g03Z4fHifOKPg=) 15: ta9QPHmvElN9LQbU3Ml0S8yt9cs.roa (hash: pWwk3bYPZv/2DLVIuX6tB76kOFRVtUjaqBNqlUqnu+g=) 16: wea1j7CCiOwKhbp9xRs9xEsak8o.roa (hash: hckz/qMoMAZzO9HmBfzADkSbkz16uEss9Ro4N3hyVDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 22:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:aa:be:b2:8f:a0:b3:4d:f0:1d:a0:5a:6f:08:ef:86:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jul 28 22:00:51 2026 GMT Not After : Jul 29 22:00:51 2026 GMT Subject: CN=ea3759f780bb27c1f54ddee5b3f1c5fe2349a731 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6e:f8:85:01:69:8f:3e:1f:9a:a8:d0:4e:e4: 4b:66:02:f2:fc:6e:4c:84:a4:c4:4c:8d:a1:c6:44: 89:18:5e:97:fb:22:cd:45:d8:3e:29:10:bc:a7:56: 39:44:6f:07:82:eb:bc:88:a8:ca:73:14:d5:5c:14: ac:5a:ed:73:77:b2:a7:86:de:60:a6:fa:d0:58:28: 78:d3:17:d9:ed:f3:08:5e:a2:27:cd:65:d4:b7:a2: cf:f7:29:08:ae:56:cb:aa:25:3d:2d:24:57:1a:cc: e6:ba:7e:a0:46:7a:c7:cd:29:e8:87:07:fd:44:c0: e3:88:98:b8:d1:99:b7:76:f3:fc:14:7c:ee:be:9d: a9:b3:bb:e7:c9:ef:5f:04:fc:84:47:22:54:de:40: e0:ab:bd:e7:16:9e:d5:0f:34:3d:15:72:4b:6b:54: 11:51:6b:63:67:a8:a6:29:32:3b:6a:8a:98:b0:74: 47:8b:3a:bd:05:5f:f5:6f:4b:4c:bb:08:af:29:12: a4:90:f6:45:93:03:24:ab:46:6b:ea:17:19:5f:1f: a8:9f:a9:ee:12:9e:f9:70:e9:47:fb:fd:03:74:ca: 8c:d6:22:06:ae:bc:8e:38:5a:08:56:f1:83:5e:c0: 0d:8f:30:d2:ef:fb:3b:fe:c2:c3:eb:40:a9:b4:01: ec:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:37:59:F7:80:BB:27:C1:F5:4D:DE:E5:B3:F1:C5:FE:23:49:A7:31 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:58:ed:9a:84:da:a6:f0:d5:ff:bd:68:01:f0:78:32:4b:43: 9c:e0:e3:56:9c:e2:0f:42:d7:c8:e6:ee:c9:6a:b7:94:66:d0: 39:1d:28:d8:f9:dd:b4:4c:01:7f:52:0e:66:31:27:c5:88:69: 10:d4:fd:8b:39:c2:21:d6:df:10:e6:d8:9f:da:34:d4:4c:3b: 99:6f:c5:17:ef:1d:eb:9d:92:a9:17:24:4d:c2:71:73:58:8f: f4:df:10:8c:74:9e:f2:99:f6:9d:7a:ce:d9:ba:7e:de:35:18: 65:01:89:68:b8:88:83:50:5f:97:d5:de:a4:84:bb:42:30:8e: 75:10:b8:58:dc:a2:62:39:66:9d:80:42:30:1d:b8:ce:e4:6c: f7:41:45:2d:10:d1:ae:42:09:65:f6:27:30:5c:0b:6b:60:8a: 22:35:e7:38:f4:c0:6d:c3:da:4a:80:6a:6e:25:fd:44:db:aa: 6d:f2:48:0c:67:4e:49:86:9d:aa:72:7b:b2:0e:50:72:aa:0c: 19:9d:9d:65:5d:4b:f1:0c:ec:12:7e:dc:95:17:c2:d2:de:50: 6b:1f:30:24:a3:da:09:16:8f:75:66:25:fa:6d:15:70:01:b5: 1e:9b:fd:05:34:df:d1:ef:01:eb:4f:5c:9f:58:59:6b:35:70: 6d:28:46:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+qvrKPoLNN8B2gWm8I74YIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwNzI4MjIwMDUxWhcNMjYwNzI5MjIwMDUxWjAzMTEwLwYDVQQD EyhlYTM3NTlmNzgwYmIyN2MxZjU0ZGRlZTViM2YxYzVmZTIzNDlhNzMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn274hQFpjz4fmqjQTuRLZgLy/G5M hKTETI2hxkSJGF6X+yLNRdg+KRC8p1Y5RG8Hguu8iKjKcxTVXBSsWu1zd7Knht5g pvrQWCh40xfZ7fMIXqInzWXUt6LP9ykIrlbLqiU9LSRXGszmun6gRnrHzSnohwf9 RMDjiJi40Zm3dvP8FHzuvp2ps7vnye9fBPyERyJU3kDgq73nFp7VDzQ9FXJLa1QR UWtjZ6imKTI7aoqYsHRHizq9BV/1b0tMuwivKRKkkPZFkwMkq0Zr6hcZXx+on6nu Ep75cOlH+/0DdMqM1iIGrryOOFoIVvGDXsANjzDS7/s7/sLD60CptAHswwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOo3WfeAuyfB9U3e5bPxxf4jSacxMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq1jtmoTa pvDV/71oAfB4MktDnODjVpziD0LXyObuyWq3lGbQOR0o2PndtEwBf1IOZjEnxYhp ENT9iznCIdbfEObYn9o01Ew7mW/FF+8d652SqRckTcJxc1iP9N8QjHSe8pn2nXrO 2bp+3jUYZQGJaLiIg1Bfl9XepIS7QjCOdRC4WNyiYjlmnYBCMB24zuRs90FFLRDR rkIJZfYnMFwLa2CKIjXnOPTAbcPaSoBqbiX9RNuqbfJIDGdOSYadqnJ7sg5QcqoM GZ2dZV1L8QzsEn7clRfC0t5Qax8wJKPaCRaPdWYl+m0VcAG1Hpv9BTTf0e8B609c n1hZazVwbShGBw== -----END CERTIFICATE-----Generated at Wed Jul 29 07:28:39 2026 by rpki-client