$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: eRvqaZ47jFY3YzOIcnoj0p8KIe1at6Ish1IZykXGmnk= Subject key identifier: CD:DC:A2:38:F0:C2:57:20:C7:64:A8:7B:65:EB:1A:6B:86:45:5A:34 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019F92B5FE4E3E3A683571B48B45E18C1992 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 06D7 Signing time: Fri 24 Jul 2026 06:00:28 +0000 Manifest this update: Fri 24 Jul 2026 06:00:28 +0000 Manifest next update: Sat 25 Jul 2026 06:00:28 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: 5BojnfdQWwDasamuTK4j9WWDZK/JJHV9euZlIVyGx94=) 2: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=) 3: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=) 4: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=) 5: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=) 6: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=) 7: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (hash: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=) 8: fro6TGls5A_k6d-cTWMJbP0QioE.roa (hash: 9eBljoV7C7Gpp7fNoutyzWwHkUabzavd+/jPQySZ6NQ=) 9: i0m0APQnzZzJyvphl4KkBXW_Ryo.roa (hash: CjwHIj9Cl0AJLk1K/3uk0D4To9cvJODmOb3ct/kJmsM=) 10: o5v2otthTxI9MaotpF4RXsxny8c.roa (hash: 8Fkmii+rqIIBVQH5OTZvGOuhbJRNm26073tjiOdkjrw=) 11: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=) 12: ufJWMAdllEMmIPcuF9xb-uLZ_Ug.roa (hash: WQKwVoqUwSPAOPq2m2hpOUE0h89BiOqZqr9Z2GNDF64=) 13: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:b5:fe:4e:3e:3a:68:35:71:b4:8b:45:e1:8c:19:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Jul 24 06:00:28 2026 GMT Not After : Jul 25 06:00:28 2026 GMT Subject: CN=cddca238f0c25720c764a87b65eb1a6b86455a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a0:bf:77:e8:2a:bc:55:e5:1b:68:b7:76:6e: 75:d5:b4:dc:9b:64:ff:4b:c9:45:29:1b:45:6e:fa: 22:bb:54:3c:7e:1c:5a:18:ba:cc:6c:91:15:c6:8d: 67:d4:80:2f:41:eb:bb:9d:16:43:19:81:cc:a9:99: 4c:1e:80:06:ba:f4:c1:d1:67:20:78:aa:81:98:5d: 05:00:88:bd:1a:16:3a:25:3e:a7:14:41:21:15:3c: 5d:25:cc:53:f3:5c:57:26:4f:6b:ce:ab:74:46:75: 51:42:a6:e5:af:de:e6:84:30:7e:9c:86:fd:64:f3: 34:34:32:89:de:55:11:79:3b:d8:dc:22:8f:31:21: 91:d8:0f:d8:09:fb:36:28:f1:bc:5d:05:b2:85:80: 54:83:d2:0c:15:f8:e2:5b:62:fb:4a:b8:da:a8:49: eb:d1:c0:97:f6:eb:f8:1a:23:71:9d:8e:63:01:f4: 23:ef:29:a6:28:be:6e:65:4c:54:a1:77:b4:6e:dd: fb:7e:69:3c:10:4f:8a:a5:c9:1f:76:55:78:0b:42: 22:c4:9c:8f:02:ba:ce:d3:13:50:03:67:07:8d:75: 37:87:01:01:78:50:d2:f3:ee:b4:5a:e9:6f:74:41: aa:ff:6b:c7:9c:55:46:a5:fb:df:40:08:09:3b:70: d0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DC:A2:38:F0:C2:57:20:C7:64:A8:7B:65:EB:1A:6B:86:45:5A:34 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:68:c6:28:4f:90:64:9b:62:69:38:7e:d7:c8:11:25:23:9a: 19:f5:0a:2b:b9:f6:df:3e:fd:a0:eb:d4:5d:76:4e:26:b9:aa: 51:b5:a1:a0:b5:c0:da:89:41:c5:3f:c8:62:75:a8:df:c8:04: 58:6c:0e:4d:dc:7c:5f:22:c9:7e:0c:c0:1f:b5:41:2d:03:7d: 4d:07:15:73:64:1a:f9:e1:0c:a2:ad:1a:69:f9:54:a1:1e:34: c2:ad:74:5e:d9:36:6c:5e:9a:cd:45:e3:ca:96:50:a5:d2:d9: 74:f1:0a:84:6b:ac:ee:03:e4:a7:76:d6:78:63:4b:0f:79:f8: d1:b4:ad:7f:e0:4d:71:b9:f6:dd:6f:00:bf:39:be:cd:8d:f4: e3:e2:b9:c0:56:34:7d:53:06:b5:a9:42:43:30:7a:b0:a7:0f: fc:6a:26:5e:48:8e:f9:9e:23:5c:ad:a6:c1:33:4f:f6:71:c0: d6:9b:b5:ed:55:84:1f:d8:e2:5e:38:12:fd:84:30:da:5f:bd: 42:cc:91:44:c9:87:d6:3e:69:b3:8a:81:05:40:9a:be:4c:fd: c9:8c:0a:40:63:c4:ef:cf:9e:84:71:4b:c7:01:d7:ee:3a:87: ea:36:92:aa:8d:14:76:5d:7c:e1:ad:40:45:29:b7:8b:a3:7f: a9:51:25:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Stf5OPjpoNXG0i0XhjBmSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwNzI0MDYwMDI4WhcNMjYwNzI1MDYwMDI4WjAzMTEwLwYDVQQD EyhjZGRjYTIzOGYwYzI1NzIwYzc2NGE4N2I2NWViMWE2Yjg2NDU1YTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaC/d+gqvFXlG2i3dm511bTcm2T/ S8lFKRtFbvoiu1Q8fhxaGLrMbJEVxo1n1IAvQeu7nRZDGYHMqZlMHoAGuvTB0Wcg eKqBmF0FAIi9GhY6JT6nFEEhFTxdJcxT81xXJk9rzqt0RnVRQqblr97mhDB+nIb9 ZPM0NDKJ3lUReTvY3CKPMSGR2A/YCfs2KPG8XQWyhYBUg9IMFfjiW2L7SrjaqEnr 0cCX9uv4GiNxnY5jAfQj7ymmKL5uZUxUoXe0bt37fmk8EE+KpckfdlV4C0IixJyP ArrO0xNQA2cHjXU3hwEBeFDS8+60WulvdEGq/2vHnFVGpfvfQAgJO3DQaQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM3cojjwwlcgx2Soe2XrGmuGRVo0MB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm2jGKE+Q ZJtiaTh+18gRJSOaGfUKK7n23z79oOvUXXZOJrmqUbWhoLXA2olBxT/IYnWo38gE WGwOTdx8XyLJfgzAH7VBLQN9TQcVc2Qa+eEMoq0aaflUoR40wq10Xtk2bF6azUXj ypZQpdLZdPEKhGus7gPkp3bWeGNLD3n40bStf+BNcbn23W8Avzm+zY304+K5wFY0 fVMGtalCQzB6sKcP/GomXkiO+Z4jXK2mwTNP9nHA1pu17VWEH9jiXjgS/YQw2l+9 QsyRRMmH1j5ps4qBBUCavkz9yYwKQGPE78+ehHFLxwHX7jqH6jaSqo0Udl184a1A RSm3i6N/qVElUQ== -----END CERTIFICATE-----Generated at Fri Jul 24 09:04:23 2026 by rpki-client