$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft File: 520NqzR6OOK4e1oiovfJ4hwYybw.mft (raw, json) Hash identifier: Ai9YpV9eCef9IeH1vQSRizxT5Wh6J2P9G7Zqpp+TSiQ= Subject key identifier: E4:63:73:C1:D3:25:2F:F2:41:16:47:17:62:CF:60:66:CD:9B:32:DD Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019F8FECCFC5B92BCEBC4E24899792802294 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft Manifest number: 14B3 Signing time: Thu 23 Jul 2026 17:01:29 +0000 Manifest this update: Thu 23 Jul 2026 17:01:29 +0000 Manifest next update: Fri 24 Jul 2026 17:01:29 +0000 Files and hashes: 1: 1dfOhFGT4Rz19mHWVabW0kWxTss.roa (hash: Rjg1gNguWYpEwGKvfk1H+hd0eMsqKT2A4N+C2/8Q+uQ=) 2: 520NqzR6OOK4e1oiovfJ4hwYybw.crl (hash: hqpJXxKjudES/99tEgISXdmEFmjxpkUWyRHdcAjliDw=) 3: 7EPxlfzuNdNfziGNw3Hj7EoZj1Q.roa (hash: fYUfx118C/cw672kHDWSH3DD1Ik9WuMEeaQ/qAV9tYE=) 4: 9EzrkfCb3685-QENXXhTIl2uZz4.roa (hash: 4o0MB77YQKRQiZHQrZxR1nkb/HsRFN1Kq0iR4K53WZA=) 5: DVIKLwP8b0UVJE_X0Zz4hLCMFmU.roa (hash: 2ROrixfhF0UtgJihhtThPaEztRX+VVHt8WTM1ZfZQ1o=) 6: Fn3txwFOnsHfJqp3dmOvAMcvgHc.roa (hash: 0tFPd6mFP89u9IcgrQmVyEuYoDxe9S4zwwRr4qndNks=) 7: RqZv9lI-beWajs98dICrEK2DwUM.roa (hash: z0DWSEDfb+oWc/lkT9R9ehjWWb2y0A0CPcHglnAYRf8=) 8: Ud0XI3ub85_CL2l55YZW3cXrctA.roa (hash: 2gMJyy7om8/uY1IqvCz0ubvDeUV63nAu6cUom48+3U0=) 9: ao5k8aMHz2Rr-UFohnKN0Vsy0ts.roa (hash: qeXz8tDdKItxGK8qtWsvUAbM0Ooz+MmMiDN8cvBIyTQ=) 10: bbXWGNkALy-ajnXnVwsq6VcslC8.roa (hash: lOmBCerqz+GglurufDI5e+15DQVwzjxcTvAfkACkLYE=) 11: jTMEUhkl6sKPDlW6gGgXZsH4VwQ.roa (hash: bLe2Zk8IquF+7aI/fXPQxZklmLIeFhH3W5DkdYCydQA=) 12: r-NoE_XHTABnwPRM9GdFHoEeHJo.roa (hash: qsD5Rt9CKRxXFQG5JSeN7cqv7sQvsG2HbFGsWmdhdi8=) 13: rIIpXZCn7E3HgJjpCaYYUR4k6ZI.roa (hash: Vvylnj2QqF4AFfq4GCTBxANmDk4TfXB5W5GNlTLI/Qw=) 14: rp3l1DRMo7bxNlcekPEumkx_Cu4.roa (hash: cvH000yVT30CU4NGwC5k2pFAaWGJcYLG4wfqKOyLWIU=) 15: s9E0mrs6RE5G3diI6qJ2dNaQlCY.roa (hash: ALHEFczsxrK3P9zm6czuHQOWsz9Vxib3j6fIwRLXdsA=) 16: smuPovOHBHHaIAv32qcc0ZyhNkQ.roa (hash: HcQ/8p3eoCWjnnKfMtVzm8focRBIq46dCnVV7vdjMxQ=) 17: v94LL-qGGgahldRNvzQc-ZVS3KI.roa (hash: a3YAXYAGQiNiI/eRCe9RKvTaP1hHvgR2d27wk4bq6Cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:ec:cf:c5:b9:2b:ce:bc:4e:24:89:97:92:80:22:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jul 23 17:01:29 2026 GMT Not After : Jul 24 17:01:29 2026 GMT Subject: CN=e46373c1d3252ff24116471762cf6066cd9b32dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:58:c7:37:a7:56:e9:4a:ee:d5:86:49:23:aa: 12:a5:4e:79:45:36:4e:53:fa:30:56:18:e4:4e:55: ac:8a:10:a4:bc:09:65:7b:b4:df:c2:d1:1f:72:6b: 9d:ad:9f:7f:f0:11:06:13:9f:60:9b:17:e0:20:86: df:9a:5e:ae:99:9d:46:14:30:67:19:b2:e0:a6:a1: 1c:37:43:fc:41:15:c2:30:71:39:67:55:95:4a:e3: 0a:ab:88:6e:c0:6c:64:e7:0c:77:61:b0:dc:59:af: 00:55:2e:51:47:04:c2:40:0b:08:b0:ed:e5:3b:23: bc:de:10:80:cb:9f:3a:4f:1b:29:f9:88:f1:76:97: 99:40:9d:4c:e1:aa:7b:6f:d2:44:d3:71:b5:41:54: e7:bb:d4:ef:8c:71:b7:7a:35:ee:11:2d:54:a8:75: 42:da:ce:cd:5e:53:6c:bf:c6:fc:6d:5b:b4:69:5d: ea:98:95:36:4d:a8:ba:9e:75:11:d0:fb:fb:ce:0b: 47:17:6e:06:d9:bb:a5:c0:2d:6e:f8:3a:a1:83:af: df:d0:7a:74:b9:91:58:0f:7f:9d:b0:1c:51:a7:f1: 16:c5:4b:1d:1a:b2:36:8a:e4:05:5d:d3:e3:3f:10: 6c:ec:b9:a4:13:77:51:94:96:c6:1e:97:f8:be:84: 17:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:63:73:C1:D3:25:2F:F2:41:16:47:17:62:CF:60:66:CD:9B:32:DD X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:85:7f:4e:48:e9:2a:90:2c:33:fe:35:24:cb:da:5b:e5:d1: 75:48:36:62:63:74:1a:9f:94:87:5e:46:d1:f1:c5:a5:72:ac: 99:28:4d:17:c3:13:d6:6b:2c:f5:37:08:d0:bc:f3:75:fb:de: 73:1b:3d:8f:2a:2c:ca:22:f2:5a:77:12:9a:9d:4d:8c:fb:94: 07:95:e8:28:5d:5b:11:24:ef:03:1c:f7:c1:06:11:e0:87:3c: 60:c7:5f:9b:f6:8c:df:de:b2:71:28:5f:ca:7b:c3:63:32:a0: c2:f9:55:2d:64:28:23:ba:6b:98:12:df:a9:4f:0b:d8:77:85: d8:65:b4:d5:3a:8e:d2:54:d1:02:c0:b1:93:4b:f2:4c:f4:09: 6f:a4:b7:1f:e0:ab:5e:d7:24:ff:f7:30:22:e5:79:a9:62:47: 01:45:c8:b2:77:7b:f6:ea:5b:1e:1e:8d:38:3b:ea:e5:71:e1: ce:5e:fb:4c:a9:a6:bc:0a:1f:50:e3:d7:0c:92:49:da:7a:0f: d6:c4:91:6b:03:0c:e5:2f:de:67:d6:16:c6:56:3a:e6:22:0f: f7:61:c7:cb:cd:1a:bf:58:d4:58:20:4a:3e:77:3e:26:3f:6a: c9:a7:ff:2d:a8:04:4a:81:96:06:a9:aa:72:9f:af:bd:be:f5: 19:48:71:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+P7M/FuSvOvE4kiZeSgCKUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwNzIzMTcwMTI5WhcNMjYwNzI0MTcwMTI5WjAzMTEwLwYDVQQD EyhlNDYzNzNjMWQzMjUyZmYyNDExNjQ3MTc2MmNmNjA2NmNkOWIzMmRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ljHN6dW6Uru1YZJI6oSpU55RTZO U/owVhjkTlWsihCkvAlle7TfwtEfcmudrZ9/8BEGE59gmxfgIIbfml6umZ1GFDBn GbLgpqEcN0P8QRXCMHE5Z1WVSuMKq4huwGxk5wx3YbDcWa8AVS5RRwTCQAsIsO3l OyO83hCAy586Txsp+YjxdpeZQJ1M4ap7b9JE03G1QVTnu9TvjHG3ejXuES1UqHVC 2s7NXlNsv8b8bVu0aV3qmJU2Tai6nnUR0Pv7zgtHF24G2bulwC1u+Dqhg6/f0Hp0 uZFYD3+dsBxRp/EWxUsdGrI2iuQFXdPjPxBs7LmkE3dRlJbGHpf4voQXbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORjc8HTJS/yQRZHF2LPYGbNmzLdMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATIV/Tkjp KpAsM/41JMvaW+XRdUg2YmN0Gp+Uh15G0fHFpXKsmShNF8MT1mss9TcI0Lzzdfve cxs9jyosyiLyWncSmp1NjPuUB5XoKF1bESTvAxz3wQYR4Ic8YMdfm/aM396ycShf ynvDYzKgwvlVLWQoI7prmBLfqU8L2HeF2GW01TqO0lTRAsCxk0vyTPQJb6S3H+Cr Xtck//cwIuV5qWJHAUXIsnd79upbHh6NODvq5XHhzl77TKmmvAofUOPXDJJJ2noP 1sSRawMM5S/eZ9YWxlY65iIP92HHy80av1jUWCBKPnc+Jj9qyaf/LagESoGWBqmq cp+vvb71GUhxfQ== -----END CERTIFICATE-----Generated at Thu Jul 23 20:26:34 2026 by rpki-client