$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft File: _TfMjxazxsvTNGqj7WF3Hz6DrJc.mft (raw, json) Hash identifier: z6htS7WU9DY2IkdTujCcLkdqtUq6OrQQKNEuO6lKL+U= Subject key identifier: 96:91:17:A7:3E:AE:B6:49:36:A1:D5:E1:F5:89:E8:BB:7D:A8:7E:ED Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Certificate serial: 019FA7867ADDCA1052790E168A05705EACEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft Manifest number: 1A39 Signing time: Tue 28 Jul 2026 07:00:35 +0000 Manifest this update: Tue 28 Jul 2026 07:00:35 +0000 Manifest next update: Wed 29 Jul 2026 07:00:35 +0000 Files and hashes: 1: 1onWddNgt-hbXxg-7fMMVDkSMv8.roa (hash: 6xbzz0JrjMO/4fz5zHo8PgQ0CyGaKVVD/UoDkWFGr1M=) 2: 4k3-HpRCXFW3j7_8C4stbYfFUYA.roa (hash: C8f2KuD10zOuLUQcMwm5C74B3yZTjBcW9yOV/aVWErg=) 3: 8MDk26A6HB8ESAemQVS635P3dlM.roa (hash: rxyUnW+DZGiT5coh/pmWc5vX6tfUq/igWAH5aJLS19c=) 4: EehQPHS3ECI0lRzW1E37Vi8D5UE.roa (hash: tiuPhQwwNNDpckTGAMR+WIUq44ng7RNOy+b3509lEHc=) 5: Nsh_W4gT44WToqQeMBkvLdwLp7U.roa (hash: s1XEdXMI1+3uP5BkHw14NLcZMVjF5mmNtQSI8IR6ni8=) 6: OujepPxEWJf76CUpCTyqTjOXKpU.asa (hash: ThWY+hR9gmQ1aouAGBEnVouEZokSrfcbByNw6RJAbVQ=) 7: QKaa5M_Ls464BGXTJZlXMkecYvk.roa (hash: VYfsIkTwFvkSA3FB9Pu7FhpTVM9hzat73ShbqylONR8=) 8: Uhz_TUI3Hsi81u75mxMWZpekOT4.roa (hash: q9Go9HD9nYKVh+b76qK8j4mJsOQptkJ61FqLETJCZTU=) 9: Un_qTs_qUw6Cr9rSAjxMcB_qwIQ.roa (hash: /NZAsUlQyUhQsDytYI9yrui4/CAPCfbgRtz4l6TLnkU=) 10: Y1K-rQ-VX44rWAjvqhl_hw7Dweo.roa (hash: cEsowcsrRQw+N5wEyAbdQXCFdceUeFzwtiYgytJDtj8=) 11: _TfMjxazxsvTNGqj7WF3Hz6DrJc.crl (hash: jXURSrZGN3tjgg4LXn693/I2UFoahVUo02VSKte6rz0=) 12: aKvQ03F1bR1q6-Woc8m1q6jONu8.roa (hash: LcJqfZb4sulh5jvt0J4ioSYZjOzoPCpUud+7/IHHoW8=) 13: ip7XsN0-IlSnuEP_E--FUjD8qf0.roa (hash: CO94Nw8OySvoAWy5RjY0I0/eplwWsGb3UO5iKzV120U=) 14: l0uiGfn0_Ao0KJi5bVUaMaNKV8Y.asa (hash: 5p613mEjLDKXtkZwHBWoFC0KynCvj30DBewuSTWYGQ0=) 15: osuU6cABAT-z_og2fdV709jwbR4.asa (hash: ItbTyIqWcJVCMwjVvKdgJl+ZPlR3yuOKXNSj6k02k90=) 16: rjxf5Ppv88saIf4NMrBg7Lnjt88.asa (hash: 8f9M0wG41PE6ZfVDs5zv6PTV0f6czRl9ExFIm9zaW0o=) 17: t0cVkqPZjARFv36ftR5F1LXB_P8.roa (hash: aH1VNEGWBhfBG6pKNECJ5Njp4Dom+Xvfv76b48XldZ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 29 Jul 2026 07:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a7:86:7a:dd:ca:10:52:79:0e:16:8a:05:70:5e:ac:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97 Validity Not Before: Jul 28 07:00:35 2026 GMT Not After : Jul 29 07:00:35 2026 GMT Subject: CN=969117a73eaeb64936a1d5e1f589e8bb7da87eed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:5d:af:9f:ec:bc:cd:69:c5:1c:a4:95:ba:43: 4e:dc:c2:47:8a:c0:0c:51:1f:2e:d4:8e:81:3d:3c: c5:98:3f:a4:0f:05:6b:8d:c4:82:21:d0:a2:c3:f8: 5d:8c:bf:56:2b:c8:e5:f8:71:b5:94:9f:2b:58:76: a4:75:a1:b8:b2:90:2e:0b:48:59:a9:83:5a:d4:bd: 3a:6d:82:23:68:69:a0:24:f1:da:84:04:fe:10:52: 47:79:89:e8:cd:97:6a:aa:83:14:85:eb:05:51:2b: ae:97:44:57:9d:13:80:2c:79:a3:26:c1:3d:eb:25: f1:c6:39:cd:c3:1b:e3:61:e4:66:d7:ce:c9:0a:d4: 37:62:57:4a:a6:66:3a:f9:cc:8d:f7:4f:55:ea:87: 3a:26:1d:2d:e7:2d:07:0a:53:18:87:06:92:97:56: eb:ed:0b:c2:73:b5:f8:7a:2b:2b:c8:29:5b:89:f3: 2c:76:f7:9e:d9:57:01:0e:86:8c:57:17:8a:81:8c: b0:d1:bc:ec:3b:41:be:fa:c6:18:df:9f:b8:5c:ef: ce:c6:1d:5c:d9:3d:38:41:d2:55:56:af:1d:4c:7e: 47:7a:56:6c:7b:8b:3f:74:7b:ab:90:02:c4:a4:8f: eb:40:1d:18:05:ce:37:75:c8:7e:e7:b6:61:b0:19: 94:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:91:17:A7:3E:AE:B6:49:36:A1:D5:E1:F5:89:E8:BB:7D:A8:7E:ED X509v3 Authority Key Identifier: keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:79:37:f2:a0:e6:b1:f5:65:06:a1:24:3a:d2:d9:56:f2:0e: 2a:f3:70:da:23:6e:5a:16:02:89:22:23:6f:f4:70:b9:a8:2a: b1:62:60:28:43:e3:ee:05:30:81:d5:ba:bb:6f:d0:10:5e:d1: 95:c9:b2:fe:89:17:e2:49:3e:37:6a:3b:45:ac:1c:70:7a:b8: 63:45:95:bf:9f:33:45:de:c0:86:14:11:e6:09:dc:55:9e:49: 50:8c:88:78:03:2e:91:14:c4:8f:41:50:bc:0f:01:6c:8e:cc: 3b:60:bf:dc:98:d4:0e:05:96:87:a9:58:30:14:40:c0:68:42: 21:0e:d9:f3:96:5d:18:30:c5:bf:c0:48:a2:b6:3c:02:0f:1b: 56:a1:12:3f:cb:b5:56:2c:34:fd:07:c7:dd:27:a5:44:1d:77: c7:a5:80:71:1f:9d:ca:be:6c:91:33:c4:16:10:6e:79:ae:ec: 84:d3:ef:a6:75:82:22:c0:0b:2c:98:29:80:db:22:28:63:38: d8:67:32:fc:0c:d3:bc:7d:15:56:6a:d9:fe:e5:d1:9a:cb:8b: a0:07:1e:a9:bf:fa:2a:7d:0e:18:12:67:c9:d0:e3:82:05:65: cd:ce:f7:7a:8d:a7:21:b1:db:be:0a:0a:9b:be:e5:cc:62:d8: e9:77:d3:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+nhnrdyhBSeQ4WigVwXqzsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZkMzdjYzhmMTZiM2M2Y2JkMzM0NmFhM2VkNjE3NzFmM2U4 M2FjOTcwHhcNMjYwNzI4MDcwMDM1WhcNMjYwNzI5MDcwMDM1WjAzMTEwLwYDVQQD Eyg5NjkxMTdhNzNlYWViNjQ5MzZhMWQ1ZTFmNTg5ZThiYjdkYTg3ZWVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l2vn+y8zWnFHKSVukNO3MJHisAM UR8u1I6BPTzFmD+kDwVrjcSCIdCiw/hdjL9WK8jl+HG1lJ8rWHakdaG4spAuC0hZ qYNa1L06bYIjaGmgJPHahAT+EFJHeYnozZdqqoMUhesFUSuul0RXnROALHmjJsE9 6yXxxjnNwxvjYeRm187JCtQ3YldKpmY6+cyN909V6oc6Jh0t5y0HClMYhwaSl1br 7QvCc7X4eisryClbifMsdvee2VcBDoaMVxeKgYyw0bzsO0G++sYY35+4XO/Oxh1c 2T04QdJVVq8dTH5HelZse4s/dHurkALEpI/rQB0YBc43dch+57ZhsBmU0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJaRF6c+rrZJNqHV4fWJ6Lt9qH7tMB8GA1UdIwQY MBaAFP03zI8Ws8bL0zRqo+1hdx8+g6yXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMt N2UwNWFiNDFiNmU0LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZS8wNWUxN2YtZDMxZi00MzFmLWE4YmMtN2UwNWFiNDFiNmU0 LzEvX1RmTWp4YXp4c3ZUTkdxajdXRjNIejZEckpjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKnk38qDm sfVlBqEkOtLZVvIOKvNw2iNuWhYCiSIjb/RwuagqsWJgKEPj7gUwgdW6u2/QEF7R lcmy/okX4kk+N2o7RawccHq4Y0WVv58zRd7AhhQR5gncVZ5JUIyIeAMukRTEj0FQ vA8BbI7MO2C/3JjUDgWWh6lYMBRAwGhCIQ7Z85ZdGDDFv8BIorY8Ag8bVqESP8u1 Viw0/QfH3SelRB13x6WAcR+dyr5skTPEFhBuea7shNPvpnWCIsALLJgpgNsiKGM4 2Gcy/AzTvH0VVmrZ/uXRmsuLoAceqb/6Kn0OGBJnydDjggVlzc73eo2nIbHbvgoK m77lzGLY6XfTmA== -----END CERTIFICATE-----Generated at Tue Jul 28 15:55:37 2026 by rpki-client