$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: tTZ0bi7i2jZPbCxOhGtDwT9J7fzEs4TWJrsjHQiszbg= Subject key identifier: 8B:C5:5E:D0:1F:50:56:67:B1:70:E2:34:41:31:14:5F:15:E6:9B:9D Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 019F92119A77D9749DEF8CDF04D1B140CF3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 122C Signing time: Fri 24 Jul 2026 03:00:54 +0000 Manifest this update: Fri 24 Jul 2026 03:00:54 +0000 Manifest next update: Sat 25 Jul 2026 03:00:54 +0000 Files and hashes: 1: 1-aAnZPPZWae4lmSE9DlntwOcXpY.roa (hash: TLz+E6d2U8toIx66GckohN5FWKsxPmC34gYYCDNp0r0=) 2: 4bmJyGbIVo-cNj8QK-IT7nzsaPA.roa (hash: nSZRPOQqe7DVG+VL7Za1u1OIJhF6Aajk+6MyhNvdJuI=) 3: 8mCRXCtonebQyWHGJmlph-emqDk.roa (hash: 4h/4zlSVQ3uClic9xPZW/eCYpC+NvSaS6+RDz79In4U=) 4: LQ3rz3zVoUTed5OAPDBbq1tAQz0.roa (hash: Ar/LKRozDT6A+/9HgHGJRKF1bqwqINiTlNo97b3clYU=) 5: SvWH_F0xbXxOUFZQOL_3i9ck6iw.roa (hash: zNIPgBSX8VCcabNEfftrOoKWD6CfW4gZjvdLbZ3CW10=) 6: TAzsBCSWRRWP3sxoJPIFBh0QlYs.roa (hash: y1ZUup4RV6VYrfrFEeKQot2GjsYXMJViBC6DIcYY0x8=) 7: VvuULWo9vnBO8IgJn77OurAnWAA.roa (hash: ShcVZVH6pnVAy2008Lo5H5VH8tpGQf0z80jAV3QDe0I=) 8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: hVf4cU1CGBp4Vt4hGUtz7KrgEifDFPo5Tg1P4RscpMQ=) 9: _dx2CJojBdg1dQ90hMAD_lCOwHQ.roa (hash: 0ULsxNCLOF7Mmtn3rqBfqWSvtKN6lj6291u6ShH3qyo=) 10: eAYv8vDO2qhIknKZLTDaqDcYe_A.roa (hash: l1XCq+KcyC0Vi5Vj0FihyhILnDir1QdAPneVvVSs4Nc=) 11: h_yiaR3EGim6MLv4wKm89eZLt8A.roa (hash: E2gv1E8KeqioSiQ2UiAhiWEUqE/cYHvimtqkuYdbZCo=) 12: keGrabfGTJ2PEb01MkX--1neS-4.roa (hash: UEjR3a/XAnpTopt/espJ908UvKBCEKVmdYlDVMZv55A=) 13: oPwG9ExReYsnz5p8vqlzN-e5OB0.roa (hash: a55Jgbq5JGC8OLRc6+/t9QpTipFlzpXiFcszhhlrsgc=) 14: ryuLKef_IroC7PFQdKy3-YDqSJA.roa (hash: RsW64+NIzEg1i7l38AMRGxCtDbntws+JXmRcjIu9krk=) 15: sCs1RNsbbpdtdRshELC1NWwIFUo.roa (hash: j90iLo+GDhNMJvSg6R7KagmOxlr89VNNZUUzZVXbYuI=) 16: tVehCQA-0IdFUBojRkGxC6ziJ8Q.roa (hash: w4l/5QNspHBtCuymre4LSN3BUOt0TxFzN4DS6VDcIh4=) 17: uCQIdQRThP22a-vG2hgUMuJi64o.roa (hash: J4OTf97Q7mJGTx3r4bDe4F/00WPH3RPpof+YFgGU2K8=) 18: uNZumzZxREIEhiZ1e6ytJlQ3oOs.roa (hash: RsHJ5U9eOIuGOA1dGk00xAYGTPYQHBbKZ1jbE2JgsM4=) 19: y1QDMX1RAbu1Kwa57mrptTZjJpE.roa (hash: VJ2cPikLiBRQj2D0yK7yoI27euxpQX3kpa5NIbLsEkE=) 20: zOEbGJULluKjsKP-6SB80Ki-zPM.roa (hash: CbTOwAg9UzNbOO3cwH9W5POV271hMLj4rly3u023LhE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 03:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:11:9a:77:d9:74:9d:ef:8c:df:04:d1:b1:40:cf:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Jul 24 03:00:54 2026 GMT Not After : Jul 25 03:00:54 2026 GMT Subject: CN=8bc55ed01f505667b170e2344131145f15e69b9d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:0c:30:79:df:54:3d:d1:b8:8c:c5:b6:12:9b: af:85:d4:5a:cf:f5:7c:ae:61:8c:d5:e1:98:77:8d: 31:eb:77:d6:f5:12:ad:33:18:fa:bb:6f:03:4b:dd: 4c:99:14:15:57:19:69:88:12:8c:d2:2d:8e:e3:d8: 8b:7b:43:94:5a:e5:e8:8e:6f:89:24:3c:06:df:5d: e1:42:08:88:8d:ee:83:37:c6:7d:22:d8:50:64:be: 67:ca:b3:47:19:1a:44:5a:27:b9:e1:70:30:53:0a: 3f:51:d5:1b:f9:c0:4d:38:d1:f9:be:5f:89:cc:12: 62:9b:49:0e:aa:01:c0:45:32:8c:9e:f3:f6:8d:de: 56:20:45:b2:c3:13:e5:d1:ef:97:8d:21:bb:03:b1: 6e:5a:a3:af:7a:0b:b8:4b:a0:7a:5d:48:73:77:fe: b5:f3:34:c1:ed:cd:e4:ef:36:35:de:77:e0:af:0c: 24:3f:2f:69:74:57:db:73:fa:f5:fb:11:03:f3:f6: 2b:90:56:71:a3:ef:64:d9:75:af:49:4a:85:a5:a7: 43:33:3f:3d:af:89:11:cd:32:52:90:2c:54:1f:d2: 35:b6:ac:82:55:be:10:53:ee:c8:fc:4e:c8:6b:fc: 21:6a:37:e3:c1:30:84:08:62:b9:01:98:a8:0d:c7: f7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:C5:5E:D0:1F:50:56:67:B1:70:E2:34:41:31:14:5F:15:E6:9B:9D X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:34:42:5d:91:40:12:db:44:81:af:89:73:b0:7b:a7:79:50: 73:dc:f5:ec:e9:26:8b:50:00:f1:7f:66:e6:ba:4c:48:ec:b7: ef:9d:97:75:90:2e:fd:33:74:ea:86:33:00:a7:b1:db:fd:89: af:3a:16:37:d4:81:a8:25:ee:2a:59:e0:d8:fa:60:55:10:f2: 27:29:56:3f:03:b4:ef:c3:3c:bd:05:fe:fe:ec:fe:3c:b0:e8: e2:2b:bf:85:bc:37:46:29:9b:a9:27:89:b3:1d:0a:48:2b:3f: 63:ae:1e:75:d2:af:b6:38:e0:f4:92:96:8b:d0:0a:a0:e5:01: e2:db:b2:89:b0:22:02:54:c7:5d:ee:08:e1:bc:9e:cd:ac:e0: 42:6d:46:69:4a:87:2f:58:9a:56:b0:6d:2c:1e:95:f1:c5:ca: 3e:54:23:81:e8:2a:b0:ce:f0:04:d3:f7:57:ad:7d:9a:ff:38: d9:67:3b:33:90:cb:d4:29:43:0a:ff:c7:1a:36:fb:e0:e4:35: 6a:a4:3c:4d:14:f2:e3:b5:5a:df:b1:cd:60:f6:b5:e9:da:a4: 2b:da:45:21:48:45:d9:45:69:a4:2e:ef:84:6d:5e:36:96:cf: 57:dd:a4:dc:65:0e:e4:c3:86:0c:1e:03:a6:5a:c4:87:c5:fb: c6:af:d7:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+SEZp32XSd74zfBNGxQM8/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjYwNzI0MDMwMDU0WhcNMjYwNzI1MDMwMDU0WjAzMTEwLwYDVQQD Eyg4YmM1NWVkMDFmNTA1NjY3YjE3MGUyMzQ0MTMxMTQ1ZjE1ZTY5YjlkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwwwed9UPdG4jMW2EpuvhdRaz/V8 rmGM1eGYd40x63fW9RKtMxj6u28DS91MmRQVVxlpiBKM0i2O49iLe0OUWuXojm+J JDwG313hQgiIje6DN8Z9IthQZL5nyrNHGRpEWie54XAwUwo/UdUb+cBNONH5vl+J zBJim0kOqgHARTKMnvP2jd5WIEWywxPl0e+XjSG7A7FuWqOvegu4S6B6XUhzd/61 8zTB7c3k7zY13nfgrwwkPy9pdFfbc/r1+xED8/YrkFZxo+9k2XWvSUqFpadDMz89 r4kRzTJSkCxUH9I1tqyCVb4QU+7I/E7Ia/whajfjwTCECGK5AZioDcf3KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvFXtAfUFZnsXDiNEExFF8V5pudMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOTRCXZFA EttEga+Jc7B7p3lQc9z17Okmi1AA8X9m5rpMSOy3752XdZAu/TN06oYzAKex2/2J rzoWN9SBqCXuKlng2PpgVRDyJylWPwO078M8vQX+/uz+PLDo4iu/hbw3RimbqSeJ sx0KSCs/Y64eddKvtjjg9JKWi9AKoOUB4tuyibAiAlTHXe4I4byezazgQm1GaUqH L1iaVrBtLB6V8cXKPlQjgegqsM7wBNP3V619mv842Wc7M5DL1ClDCv/HGjb74OQ1 aqQ8TRTy47Va37HNYPa16dqkK9pFIUhF2UVppC7vhG1eNpbPV92k3GUO5MOGDB4D plrEh8X7xq/Xzg== -----END CERTIFICATE-----Generated at Fri Jul 24 09:47:20 2026 by rpki-client