$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json) Hash identifier: WQcsi47k6fCIUi25EYmjk/Sw/A0tP4Ap9VXAEUKEqYo= Subject key identifier: 84:39:14:6F:8F:CD:C0:5D:7C:7E:1C:EF:E8:24:2E:84:98:5B:C5:89 Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019FA7BD3E2F2550A851FB24B66F0F2F4D83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft Manifest number: 0B07 Signing time: Tue 28 Jul 2026 08:00:25 +0000 Manifest this update: Tue 28 Jul 2026 08:00:25 +0000 Manifest next update: Wed 29 Jul 2026 08:00:25 +0000 Files and hashes: 1: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=) 2: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=) 3: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=) 4: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=) 5: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=) 6: DPMVT21xt_FxJ1sn3UX-_U68dhM.roa (hash: W+9Q7HyRT/GtNJeWW1rH3dBewR4z6axBBAIPrMJ0PUU=) 7: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=) 8: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=) 9: OGHkr0sseqVyPYMaosc0EKOfAbE.roa (hash: wHhBT3+BNkPQLV5c3JD9yLqsApNS0AOyvlFX/QBAowQ=) 10: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=) 11: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: 4+wKRCWNxUnwTJNeGbd1u/J5VlAfC8d5RmY8WGMhMtg=) 12: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=) 13: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=) 14: WgBBESiMNBhg0ejLbo4ygFVFK_g.roa (hash: fOGX3A1MJMqw5iFjseRV1GnR/NKzbA2c83gmI0QyUAc=) 15: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=) 16: cLp8aoUEerNehAr3h59hozd_gn0.asa (hash: H0H1PRm+pfO0EaD/QilESt/v2w81RZ9KkTdDOLHz0OM=) 17: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=) 18: r-jH3K8gcLw126eQ4FkoGo2cj9Q.roa (hash: WprvCGc4fvgZRtpPYXPu9X3gBWvFU60j9mgBknNXAj8=) 19: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=) 20: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=) 21: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:bd:3e:2f:25:50:a8:51:fb:24:b6:6f:0f:2f:4d:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Jul 28 08:00:25 2026 GMT Not After : Jul 29 08:00:25 2026 GMT Subject: CN=8439146f8fcdc05d7c7e1cefe8242e84985bc589 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:13:ae:da:03:90:ea:7d:0c:59:89:6e:f9:71: d5:ed:26:f7:bd:f4:e7:18:13:a4:6b:6c:ed:26:9c: 0e:fa:b1:a3:68:dd:9a:c3:c7:9f:b0:1d:da:9d:19: 84:b2:e8:6c:04:77:84:46:70:93:ac:dd:31:48:be: 2c:09:5d:80:db:54:7e:5f:01:27:01:51:b9:43:e7: 60:2c:ae:bb:c2:cc:86:bd:34:a2:5c:30:ba:32:44: e7:af:82:93:83:12:18:5e:80:11:6a:7c:84:95:12: 65:10:1d:7d:28:0f:6c:c3:8d:7a:28:8b:f8:45:aa: b0:e6:c8:52:c0:b9:a8:f5:55:4f:d5:30:02:66:2e: 4b:a2:36:d9:62:74:7b:7d:91:f4:59:73:10:6f:1a: dc:13:cc:1a:2b:33:94:86:d9:87:47:c3:4c:00:d5: 2f:77:09:b1:8f:fb:24:89:d1:fb:41:60:ef:31:2d: ae:51:0f:e2:b4:cc:d9:c8:7c:43:ae:c4:89:2c:db: 6e:43:a8:f1:f2:d6:8e:b3:66:ff:7b:2b:34:9e:76: e1:d7:d3:4b:14:50:a6:18:ec:44:fe:eb:ae:44:d1: 12:3b:db:52:61:90:01:d2:cc:bd:8b:b1:37:c1:68: 1c:87:af:e6:e5:f6:47:60:80:a1:5d:66:6a:9f:e0: 55:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:39:14:6F:8F:CD:C0:5D:7C:7E:1C:EF:E8:24:2E:84:98:5B:C5:89 X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:5c:3d:54:b4:cd:d0:e6:8b:94:f5:23:34:d2:b3:a3:d6:76: 81:1d:5e:70:81:de:28:6d:8c:3a:a8:b8:42:7e:f6:74:18:ef: 86:1b:18:94:52:a7:36:b5:c2:83:e0:3f:53:29:4a:cd:af:d5: a1:17:a7:17:63:26:b4:f9:eb:38:6a:0b:2e:93:77:ac:6d:a2: d9:a8:1a:94:99:45:71:b6:b2:68:9b:c8:d1:38:85:2f:d5:df: af:15:e4:47:a5:6f:42:6f:e0:13:96:40:8e:e3:46:d5:14:a9: ce:65:de:f2:e2:e0:9b:b5:60:ab:95:35:d8:5d:9a:c1:f6:a9: ff:2d:55:de:a0:d0:e7:6f:7a:70:0f:a4:59:f6:45:ba:56:64: 21:f1:73:75:ad:4c:98:f0:95:09:a5:d5:93:76:d8:60:0c:85: df:0c:57:5e:29:2d:b4:42:af:e1:6d:ec:2b:28:22:dc:b9:a7: a4:a8:a9:1d:57:de:d9:9b:42:46:2d:00:16:19:4d:67:a2:97: cb:82:ed:2c:06:fa:97:5c:ca:ba:8d:f5:fe:26:e3:e1:de:cb: c2:ae:85:78:3b:77:d7:da:ca:b0:63:ab:67:0f:a4:16:44:3e: 01:f7:0a:05:2c:95:d4:17:fd:c8:11:3f:34:6f:8f:3f:01:88: e9:d9:fe:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+nvT4vJVCoUfsktm8PL02DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwNzI4MDgwMDI1WhcNMjYwNzI5MDgwMDI1WjAzMTEwLwYDVQQD Eyg4NDM5MTQ2ZjhmY2RjMDVkN2M3ZTFjZWZlODI0MmU4NDk4NWJjNTg5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwROu2gOQ6n0MWYlu+XHV7Sb3vfTn GBOka2ztJpwO+rGjaN2aw8efsB3anRmEsuhsBHeERnCTrN0xSL4sCV2A21R+XwEn AVG5Q+dgLK67wsyGvTSiXDC6MkTnr4KTgxIYXoARanyElRJlEB19KA9sw416KIv4 Raqw5shSwLmo9VVP1TACZi5LojbZYnR7fZH0WXMQbxrcE8waKzOUhtmHR8NMANUv dwmxj/skidH7QWDvMS2uUQ/itMzZyHxDrsSJLNtuQ6jx8taOs2b/eys0nnbh19NL FFCmGOxE/uuuRNESO9tSYZAB0sy9i7E3wWgch6/m5fZHYIChXWZqn+BV5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQ5FG+PzcBdfH4c7+gkLoSYW8WJMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt1w9VLTN 0OaLlPUjNNKzo9Z2gR1ecIHeKG2MOqi4Qn72dBjvhhsYlFKnNrXCg+A/UylKza/V oRenF2MmtPnrOGoLLpN3rG2i2agalJlFcbayaJvI0TiFL9XfrxXkR6VvQm/gE5ZA juNG1RSpzmXe8uLgm7Vgq5U12F2awfap/y1V3qDQ5296cA+kWfZFulZkIfFzda1M mPCVCaXVk3bYYAyF3wxXXikttEKv4W3sKygi3LmnpKipHVfe2ZtCRi0AFhlNZ6KX y4LtLAb6l1zKuo31/ibj4d7Lwq6FeDt319rKsGOrZw+kFkQ+AfcKBSyV1Bf9yBE/ NG+PPwGI6dn+rA== -----END CERTIFICATE-----Generated at Tue Jul 28 15:51:24 2026 by rpki-client