$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: dPfxDZm5WI80gk36R6MEQZUlOxg1hCNZ66MS++Q+msg= Subject key identifier: 11:29:B8:A9:87:84:34:2D:AD:19:1A:0F:52:35:2B:28:AB:01:6D:6C Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 019FA82BA82C0D9B59C722A8C1D90D2FA3A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 1223 Signing time: Tue 28 Jul 2026 10:01:01 +0000 Manifest this update: Tue 28 Jul 2026 10:01:01 +0000 Manifest next update: Wed 29 Jul 2026 10:01:01 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 5: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 6: CliNDeoIzFeDMEH3wX5DpgCkBDE.roa (hash: X2wGn+OIgA5q23nvVMID+7z155TCD1qHOkkmj4aaJNY=) 7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: FIRir1dbtHvsGQBa++x6oq+LmE4I02jvp4KlLo1wL/o=) 8: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 9: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 10: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 10:01:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a8:2b:a8:2c:0d:9b:59:c7:22:a8:c1:d9:0d:2f:a3:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Jul 28 10:01:01 2026 GMT Not After : Jul 29 10:01:01 2026 GMT Subject: CN=1129b8a98784342dad191a0f52352b28ab016d6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:6c:d0:25:36:d0:54:83:d9:c5:ff:66:2f:3f: 23:16:df:b6:b0:b4:55:b4:4d:82:80:76:11:fb:21: f5:d5:c9:a4:b9:ea:22:f3:5a:f3:c9:2f:02:ce:52: be:73:ab:57:c4:71:7e:a4:cd:6d:ed:c7:67:e1:44: 2d:b3:c1:53:36:74:10:bb:68:e4:6c:f9:f8:c5:73: a7:97:de:bd:cf:62:3a:d1:df:f5:38:00:68:c1:d9: 24:ee:c8:80:a3:d1:2c:23:7a:10:cc:d7:d2:7e:b5: 21:16:79:39:be:71:18:69:0d:f7:ef:33:b8:66:78: 0f:03:07:7a:35:4d:d9:ca:87:a7:4e:b2:8d:49:bc: 2d:19:62:0d:bc:8d:6a:dd:b9:ec:45:91:d9:77:c8: 16:65:8c:d6:37:85:49:2e:82:71:00:d4:98:a7:4c: 62:a7:3f:ea:8e:5d:98:a3:28:73:ac:00:86:d5:54: 95:ab:73:a8:31:c3:fb:f4:7a:2c:69:0d:ac:e2:c8: 91:c8:62:3b:33:b3:1d:7c:65:63:59:d6:e1:35:1e: 4a:9e:df:2e:06:6d:92:91:94:84:0b:d5:ce:42:ec: f6:8b:15:80:24:ac:48:aa:10:4d:8f:3b:5e:12:92: 26:04:78:7f:2f:92:fe:82:56:bf:d3:f0:bb:e2:ca: 12:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:29:B8:A9:87:84:34:2D:AD:19:1A:0F:52:35:2B:28:AB:01:6D:6C X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d8:e8:44:d7:53:96:06:df:ed:df:a1:cd:19:09:96:c8:a7: a7:57:33:7b:cd:1f:46:6d:2e:b6:56:15:54:48:5d:90:2f:bf: 74:fd:26:ed:12:ad:83:be:84:75:91:9f:a1:c3:49:f2:02:4f: dc:fe:84:26:0f:7b:df:c7:90:1c:48:94:e5:d1:ef:c3:c8:f7: 5e:38:21:88:0d:a1:a5:83:da:83:cf:18:41:b7:be:43:08:4b: cb:4a:26:45:8c:52:22:8b:a4:c5:8c:ad:bc:f4:dd:33:03:c8: a6:dc:8e:ec:ac:50:11:f2:d5:88:23:97:3b:39:4a:08:0f:03: 84:e3:96:f2:84:f6:53:31:6c:d0:e8:46:02:b1:1a:9d:67:09: 88:f4:82:cc:5d:92:aa:dc:14:b5:10:ec:c7:4d:7b:1f:de:34: 09:f0:9b:46:70:bc:d9:fa:9a:35:73:93:48:df:4c:64:1f:86: af:d7:f8:2b:aa:40:fc:ad:dd:4c:89:66:74:81:5f:ef:4e:69: 40:58:e5:e2:c5:e0:c9:dd:f3:dd:b2:85:a6:75:15:ee:bd:a9: ef:93:bf:50:fb:0c:b7:91:36:46:f8:7c:a8:68:fb:6a:d0:7d: e4:da:e3:15:17:09:39:4c:e5:cb:df:d8:9a:f4:1a:b1:49:cd: aa:3a:3f:47 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+oK6gsDZtZxyKowdkNL6OpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwNzI4MTAwMTAxWhcNMjYwNzI5MTAwMTAxWjAzMTEwLwYDVQQD EygxMTI5YjhhOTg3ODQzNDJkYWQxOTFhMGY1MjM1MmIyOGFiMDE2ZDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GzQJTbQVIPZxf9mLz8jFt+2sLRV tE2CgHYR+yH11cmkueoi81rzyS8CzlK+c6tXxHF+pM1t7cdn4UQts8FTNnQQu2jk bPn4xXOnl969z2I60d/1OABowdkk7siAo9EsI3oQzNfSfrUhFnk5vnEYaQ337zO4 ZngPAwd6NU3ZyoenTrKNSbwtGWINvI1q3bnsRZHZd8gWZYzWN4VJLoJxANSYp0xi pz/qjl2YoyhzrACG1VSVq3OoMcP79HosaQ2s4siRyGI7M7MdfGVjWdbhNR5Knt8u Bm2SkZSEC9XOQuz2ixWAJKxIqhBNjzteEpImBHh/L5L+gla/0/C74soSfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBEpuKmHhDQtrRkaD1I1KyirAW1sMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG9joRNdT lgbf7d+hzRkJlsinp1cze80fRm0utlYVVEhdkC+/dP0m7RKtg76EdZGfocNJ8gJP 3P6EJg9738eQHEiU5dHvw8j3XjghiA2hpYPag88YQbe+QwhLy0omRYxSIoukxYyt vPTdMwPIptyO7KxQEfLViCOXOzlKCA8DhOOW8oT2UzFs0OhGArEanWcJiPSCzF2S qtwUtRDsx017H940CfCbRnC82fqaNXOTSN9MZB+Gr9f4K6pA/K3dTIlmdIFf705p QFjl4sXgyd3z3bKFpnUV7r2p75O/UPsMt5E2Rvh8qGj7atB95NrjFRcJOUzly9/Y mvQasUnNqjo/Rw== -----END CERTIFICATE-----Generated at Tue Jul 28 19:44:00 2026 by rpki-client