$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft File: 1g9F98xLaR_UoxwfHAtPYF13pu8.mft (raw, json) Hash identifier: MHJ45TRvwK3ge4v9jSx6F1+NyFZ3MDdHuhbEqxkBlTY= Subject key identifier: A0:BE:18:60:86:FF:53:3F:2A:8C:DE:2E:7E:F7:A2:3F:85:A3:76:EC Authority key identifier: D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF Certificate issuer: /CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Certificate serial: 019FA907B130A601D81F7B3234C95CFDEB51 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft Manifest number: 19DE Signing time: Tue 28 Jul 2026 14:01:21 +0000 Manifest this update: Tue 28 Jul 2026 14:01:21 +0000 Manifest next update: Wed 29 Jul 2026 14:01:21 +0000 Files and hashes: 1: 1g9F98xLaR_UoxwfHAtPYF13pu8.crl (hash: zQuYxq0mXop+UWYB94JWuKWKU1bQmj/qQMye5BTF9cs=) 2: 4oZyLCfBt_PtcDqSB1D6VrV0TUM.roa (hash: 37kfxzMZjAEGlX1IGqlGrRZxkEO+b+KVXD2c+rB8lAQ=) 3: 5DaV4gudkDeBpkpNjorFjKdwKas.roa (hash: 9p8+UHTs/RBIZPqnbM430sMtYPmrN12mqZCcC9V+LKI=) 4: GUFmBdi0_Y_tG7LWELBPh9QEM9o.asa (hash: ZMR4mH+eqRB4yaYaBEAA+Z5mr/sJpbjQJrZ/3hcHthA=) 5: NXcDx5Sh25pDfJxJSkQVgnYIs4Q.roa (hash: iydF4IYrO0jpMLNCVz/nzmnnrXkl06goqTATkMGnBns=) 6: PQ1WsgJ8M5ShklrV4cWrXgsRk98.roa (hash: AjAU0i8BrIwCW5B50+6SMIS7/KHtVI1eqRb3YHJQN80=) 7: PV0ldyvamyXaSXwGWeb_iIj6z1Y.roa (hash: xcQLOrHxGLRq/OYf2oo8JfChvAAfg4ixHJ0AkaTe8sQ=) 8: UCPHMmyCJR4JmPeGnCgq8nfbn60.roa (hash: p5d6kd0pgtOUZ1UeSMMJANP3mYr/gpl0DKc8A48nhnk=) 9: UbMfCzQPRA-kXXe02IoFpUNWHRI.roa (hash: Y+LpUOlGM6jHvhHw5voeozmV7CMx8mnBHn3GF0Ey7Mk=) 10: duDdMIsWaX3Qv6Ulhf1btV1iznY.roa (hash: 8VGr6lGBwXaEA0xjsXJFLABQFwnIWckpws1DFvMKFV8=) 11: tA5rc4xvYJaghwkQOKn8tH8_iLQ.roa (hash: QuIvgGmxEmrKFzj/tALJgGDhMmAZX/608ZoICxEakwY=) 12: u5FKfMgZNEwRxNieZ5Cq5Wc0Bng.roa (hash: logMCehLES5I14Fvvq1Wfet2WZemmEdMO+ZvgR5D7JY=) 13: uB8MKGWb3Ah0aZK2Vf2usmZHzG8.roa (hash: BfFc9lt0STbJmAF8lGnEz5SYrhiI62mYVaN3nT2PLtQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 14:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a9:07:b1:30:a6:01:d8:1f:7b:32:34:c9:5c:fd:eb:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60f45f7cc4b691fd4a31c1f1c0b4f605d77a6ef Validity Not Before: Jul 28 14:01:21 2026 GMT Not After : Jul 29 14:01:21 2026 GMT Subject: CN=a0be186086ff533f2a8cde2e7ef7a23f85a376ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:b7:a9:21:03:64:54:75:c6:db:b8:f9:4d:eb: 01:64:37:3d:12:d2:53:62:71:29:ec:3d:b1:58:a8: 12:bf:f6:c4:be:fc:1c:75:65:b6:54:c5:df:59:dd: cb:23:76:27:76:6e:3c:d5:30:e4:cd:52:f7:10:2e: 14:8b:14:bd:ff:3b:d3:31:41:a7:01:c0:05:25:53: de:99:b3:72:f7:b1:64:3b:63:27:6d:71:db:3d:2a: 35:e1:24:21:7e:37:7c:a9:3b:2d:54:e9:d2:39:34: da:ab:61:67:3b:bd:4d:b5:24:47:4f:10:12:e8:cf: 48:c5:ef:b8:81:44:c6:a8:8c:8e:f5:bd:c2:3d:be: f1:e3:b1:b7:70:cd:93:40:40:b7:2b:01:97:de:46: 54:82:24:2a:0e:12:c8:ff:9e:33:69:ac:e3:04:31: 3c:4c:94:6c:20:b3:f3:a0:cc:26:0b:40:28:b3:39: bb:58:ff:8e:bc:ad:01:be:97:a1:06:a6:2e:c0:2d: b9:e0:7b:b7:75:44:d8:a3:1a:23:ed:fb:df:18:ed: 22:ec:15:b0:12:5b:6b:65:63:b1:7d:25:c1:16:7c: 4f:ae:21:57:06:09:87:3a:8b:e6:20:4d:66:9a:e9: f7:91:ba:1f:92:a7:ca:e1:d2:ba:31:bb:e1:95:19: 58:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BE:18:60:86:FF:53:3F:2A:8C:DE:2E:7E:F7:A2:3F:85:A3:76:EC X509v3 Authority Key Identifier: keyid:D6:0F:45:F7:CC:4B:69:1F:D4:A3:1C:1F:1C:0B:4F:60:5D:77:A6:EF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1g9F98xLaR_UoxwfHAtPYF13pu8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/ad3044-cdce-46cf-92c9-a954d053994a/1/1g9F98xLaR_UoxwfHAtPYF13pu8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:e3:80:2c:75:2c:d4:5d:b0:79:35:49:58:4a:a0:3c:40:e3: cd:a6:b8:7b:75:d2:9c:61:04:b3:a4:62:0b:0c:5a:29:4f:f4: 46:c8:90:9c:cd:8d:56:51:0b:cb:da:94:3d:f9:40:2b:0e:dc: 07:af:1e:29:f2:06:89:96:a5:21:45:30:44:5a:06:4c:fa:23: b0:53:37:e2:39:32:d1:ec:bc:7e:1a:fc:bc:06:3e:73:de:f5: 6b:fb:c1:63:1f:91:90:ea:12:ab:dd:81:13:9a:a2:f2:a7:bf: 6c:6f:20:c0:87:29:a4:66:50:f5:61:47:74:58:7a:97:42:2a: 0f:59:28:e5:db:db:d9:83:b9:15:f3:a9:50:08:90:0f:6f:20: 0c:24:2a:03:59:63:b8:34:d2:a5:c9:2d:fa:45:78:85:d2:a9: f9:00:6a:35:4c:0a:16:7b:00:88:3e:2b:4b:69:e9:21:b2:2c: 9e:00:2b:9d:01:f3:79:bf:82:24:74:85:b9:4f:b3:2b:30:b4: 6a:f6:30:f2:fc:80:a6:76:a7:3a:57:a0:26:fa:11:43:3d:0d: 62:dd:41:03:b0:22:db:e8:31:f5:5b:80:4d:b3:6f:6a:be:c5: 04:f6:f2:84:c6:06:18:99:91:a3:ef:c1:8f:8c:ac:b5:ef:26: 29:b6:65:7e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+pB7EwpgHYH3syNMlc/etRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MGY0NWY3Y2M0YjY5MWZkNGEzMWMxZjFjMGI0ZjYwNWQ3 N2E2ZWYwHhcNMjYwNzI4MTQwMTIxWhcNMjYwNzI5MTQwMTIxWjAzMTEwLwYDVQQD EyhhMGJlMTg2MDg2ZmY1MzNmMmE4Y2RlMmU3ZWY3YTIzZjg1YTM3NmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmbepIQNkVHXG27j5TesBZDc9EtJT YnEp7D2xWKgSv/bEvvwcdWW2VMXfWd3LI3Yndm481TDkzVL3EC4UixS9/zvTMUGn AcAFJVPembNy97FkO2MnbXHbPSo14SQhfjd8qTstVOnSOTTaq2FnO71NtSRHTxAS 6M9Ixe+4gUTGqIyO9b3CPb7x47G3cM2TQEC3KwGX3kZUgiQqDhLI/54zaazjBDE8 TJRsILPzoMwmC0Aoszm7WP+OvK0BvpehBqYuwC254Hu3dUTYoxoj7fvfGO0i7BWw EltrZWOxfSXBFnxPriFXBgmHOovmIE1mmun3kbofkqfK4dK6MbvhlRlYQQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKC+GGCG/1M/KozeLn73oj+Fo3bsMB8GA1UdIwQY MBaAFNYPRffMS2kf1KMcHxwLT2Bdd6bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzkt YTk1NGQwNTM5OTRhLzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMi9hZDMwNDQtY2RjZS00NmNmLTkyYzktYTk1NGQwNTM5OTRh LzEvMWc5Rjk4eExhUl9Vb3h3ZkhBdFBZRjEzcHU4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAueOALHUs 1F2weTVJWEqgPEDjzaa4e3XSnGEEs6RiCwxaKU/0RsiQnM2NVlELy9qUPflAKw7c B68eKfIGiZalIUUwRFoGTPojsFM34jky0ey8fhr8vAY+c971a/vBYx+RkOoSq92B E5qi8qe/bG8gwIcppGZQ9WFHdFh6l0IqD1ko5dvb2YO5FfOpUAiQD28gDCQqA1lj uDTSpckt+kV4hdKp+QBqNUwKFnsAiD4rS2npIbIsngArnQHzeb+CJHSFuU+zKzC0 avYw8vyApnanOlegJvoRQz0NYt1BA7Ai2+gx9VuATbNvar7FBPbyhMYGGJmRo+/B j4yste8mKbZlfg== -----END CERTIFICATE-----Generated at Tue Jul 28 15:56:41 2026 by rpki-client