$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: cO2p0ItAAhZBnGoXVBPo0kMbW0AlOrzoJp57eqpS8zQ= Subject key identifier: FA:B4:83:B2:B4:AE:D0:16:47:0E:3B:F2:88:5D:A7:0D:36:DB:9F:62 Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 019FAB9ACCBDA90833A65CBA3AD0271E2A08 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 15CA Signing time: Wed 29 Jul 2026 02:01:16 +0000 Manifest this update: Wed 29 Jul 2026 02:01:16 +0000 Manifest next update: Thu 30 Jul 2026 02:01:16 +0000 Files and hashes: 1: 1_FG2YBqdRhKKIdbfUoaXRIcZtY.roa (hash: DZwW0dAX0l87sLjk9z+qjZR2gAmIuChfWqvnjdJSHpE=) 2: ExLhkVGO_IcP9FKIq81f0oI-oCg.roa (hash: 5HCccmMIa3ZS3Rm7UZ7dWL9/99iZ3k4KgXviDu7U84Y=) 3: H6mXElUtGqkaAjyOWeq60UIxFTg.roa (hash: w/TMQtz3h82vi+GWHVA7q+rO8Depf0bjlxba/vl6eeg=) 4: OwOin32AoXhBJ_iuSSZtdUpdHEA.roa (hash: r6AonYcdKDjFrDRqsif54MlJGphnOtEytVNCx0qvCio=) 5: SCLX0yMUDK_0tO4v6NxcoovzWj8.roa (hash: 9dBLmpKDLrwgh9sSkk5HAo/xRWDF0x1027A7nhDZK08=) 6: U2zR2wxNZR-C_elTQ_PCnfByBwY.roa (hash: OLi955MoAoQc7KvGiHIZSl5vpca4xWCeVTWNOe8m2YI=) 7: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: 05iQ/AseZvRHXaL98TUHM4I1X+9LieiM0I6GoTp7k1U=) 8: c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa (hash: DoQj2C6sdy5dVILWLV9HA8ZssSHksnBbLRNoxs++EvU=) 9: eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa (hash: eqAtKP8l84cvF2pEaSF30rGhGOuNYfoTW/MjLLS2XHU=) 10: jI-hqwxak8Tg6ancnuy3V90l4fQ.roa (hash: SFQVGGwwzufvH2Q6e3Xanl+xEEo+gFMHtCdjrjGcZV4=) 11: k5tcy3X-bfkTgY-KuojhW38Hb84.roa (hash: /njehwBJ3hy+S6rVtCdBk1btpc3S6jZQpXCGPHURc0Y=) 12: nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa (hash: sLTLPurFLTwE8YAq+DTkGVZv2q4SAYzP5ZK8/ib+u2M=) 13: omuRSlN3uxDC5Q-fxRiwTPk66HM.roa (hash: GxwNrXChKZTEhS9UT+A6aKihcuWe4QoSUJOCbKFbnmw=) 14: ova4DZPGmvsGGPiVCauJt7d6bFk.roa (hash: FJLqImsR5CthuAk7jPWHhT6Jl73gBfGj24WDFfNiWgI=) 15: woLmD7M3XCh8hzd96HJkdchNmr0.roa (hash: IO6F5iDxJpzGWBZGaFRUP1UT9NVbjAY85NrP45yAAgA=) 16: zEU1dCR-4rlXlEW4u-atk395zhk.roa (hash: Kfvh6mjf8zMx7Jx8eSoWtHWYqopwifCIKWlHo0qGGIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ab:9a:cc:bd:a9:08:33:a6:5c:ba:3a:d0:27:1e:2a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Jul 29 02:01:16 2026 GMT Not After : Jul 30 02:01:16 2026 GMT Subject: CN=fab483b2b4aed016470e3bf2885da70d36db9f62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cc:65:a8:0c:54:98:08:d6:17:ce:3a:4f:9e: 52:f7:d4:31:d6:a4:b3:50:b2:e1:fd:1d:3e:2f:0b: fd:69:40:18:bc:4c:61:8d:cc:63:1e:1b:89:12:36: a8:d5:49:99:27:15:7c:6c:e4:8b:e3:2f:49:3e:01: bf:c0:f4:57:ee:e8:d5:df:a3:14:a6:d4:e4:75:2f: 4f:64:41:bb:a0:19:a5:dc:e9:f0:99:b2:61:25:8c: 81:ef:d7:c1:3f:f2:71:c8:97:ed:c7:b9:3d:65:cf: 2a:e7:97:12:00:37:de:62:cc:c6:90:d7:61:02:0b: db:ca:f8:d9:e9:6e:f9:3e:19:13:c0:65:c8:02:00: 3c:f1:7e:7a:09:a1:c6:7c:98:3a:2a:b5:5d:51:01: 8a:de:7e:55:68:b2:df:3c:38:90:67:f9:29:46:92: 9f:dd:c2:07:19:66:dd:93:9d:c7:46:0c:16:30:8a: eb:bf:ee:d0:de:ef:89:b7:e1:1a:b7:fd:ec:83:a0: 24:e6:0c:f7:c0:38:b0:ae:a3:2b:7a:3a:86:25:32: 8c:68:56:33:df:b4:cf:62:db:5e:b9:32:c0:72:b1: 0b:d7:90:4d:ba:fa:fb:ae:de:c6:e2:1e:89:ba:95: b1:83:0e:7c:79:e8:21:c7:8b:ea:60:de:88:34:07: 3e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B4:83:B2:B4:AE:D0:16:47:0E:3B:F2:88:5D:A7:0D:36:DB:9F:62 X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:17:9f:67:d6:7d:5d:af:7c:5c:94:b3:f1:f6:03:87:32:18: 9a:03:eb:1f:f3:cd:e0:61:d8:8a:5c:7d:25:2a:3b:e3:6a:11: cd:2f:48:75:4c:5e:86:3c:f8:a3:de:89:89:58:34:7c:22:ba: 2d:c8:9e:b6:25:a8:b7:4f:da:8d:d0:ec:22:30:5a:be:4c:08: 5b:51:a3:52:1b:3d:ee:29:8a:91:08:17:8d:b4:d2:e8:4d:24: c1:75:f4:f6:bc:97:b5:7e:a9:00:b2:be:d9:4f:3c:70:10:9a: ba:e0:25:0d:44:42:05:94:07:dd:a2:a9:96:64:61:16:09:bc: b9:bf:af:b8:f6:39:86:69:0a:df:9f:ef:b0:ca:bf:f3:6f:55: 33:d3:99:1c:8c:c2:5f:b2:0e:fb:49:ad:2c:10:68:6c:3e:f6: 5a:e1:40:34:63:3b:27:4e:00:64:a5:a1:a6:1d:cd:ef:69:c3: 3b:e7:40:28:64:5a:93:77:65:81:ba:8e:50:c1:b0:09:37:2d: dd:57:d9:28:b0:c1:b7:45:62:7c:38:2c:08:25:2e:2b:a8:09: e6:64:e2:91:5d:23:59:14:e0:e6:79:13:ca:6f:b4:d7:41:74: d7:fd:5d:ed:b9:06:d8:12:87:f1:ee:6e:b4:3c:75:8e:8e:1c: ff:57:e4:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+rmsy9qQgzply6OtAnHioIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYwNzI5MDIwMTE2WhcNMjYwNzMwMDIwMTE2WjAzMTEwLwYDVQQD EyhmYWI0ODNiMmI0YWVkMDE2NDcwZTNiZjI4ODVkYTcwZDM2ZGI5ZjYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAncxlqAxUmAjWF846T55S99Qx1qSz ULLh/R0+Lwv9aUAYvExhjcxjHhuJEjao1UmZJxV8bOSL4y9JPgG/wPRX7ujV36MU ptTkdS9PZEG7oBml3OnwmbJhJYyB79fBP/JxyJftx7k9Zc8q55cSADfeYszGkNdh AgvbyvjZ6W75PhkTwGXIAgA88X56CaHGfJg6KrVdUQGK3n5VaLLfPDiQZ/kpRpKf 3cIHGWbdk53HRgwWMIrrv+7Q3u+Jt+Eat/3sg6Ak5gz3wDiwrqMrejqGJTKMaFYz 37TPYtteuTLAcrEL15BNuvr7rt7G4h6JupWxgw58eeghx4vqYN6INAc+sQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPq0g7K0rtAWRw478ohdpw02259iMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfRefZ9Z9 Xa98XJSz8fYDhzIYmgPrH/PN4GHYilx9JSo742oRzS9IdUxehjz4o96JiVg0fCK6 LcietiWot0/ajdDsIjBavkwIW1GjUhs97imKkQgXjbTS6E0kwXX09ryXtX6pALK+ 2U88cBCauuAlDURCBZQH3aKplmRhFgm8ub+vuPY5hmkK35/vsMq/829VM9OZHIzC X7IO+0mtLBBobD72WuFANGM7J04AZKWhph3N72nDO+dAKGRak3dlgbqOUMGwCTct 3VfZKLDBt0VifDgsCCUuK6gJ5mTikV0jWRTg5nkTym+010F01/1d7bkG2BKH8e5u tDx1jo4c/1fkyA== -----END CERTIFICATE-----Generated at Wed Jul 29 04:12:29 2026 by rpki-client