$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: lYZfWoD0KdaFGKDElRXYloxhVkK9VlXRMTkhDb7CKEQ= Subject key identifier: 69:8C:F4:A4:F4:FF:3A:70:BC:38:32:0F:A5:A0:6F:2C:6F:7B:88:6D Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019F8FEBE17565278565E88D8D00BF190921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1A65 Signing time: Thu 23 Jul 2026 17:00:28 +0000 Manifest this update: Thu 23 Jul 2026 17:00:28 +0000 Manifest next update: Fri 24 Jul 2026 17:00:28 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: DelqthXhdXM13JCV5tgISAjlHOk2VhIbHclIleFRlKs=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 3geV6AQmnNE3--gs3xHupJZtVFw.roa (hash: sNT96XO64aXnjNnHk7Dhs9S+Zq3PRzmgEqOTblaXNls=) 6: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 7: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 8: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 9: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 10: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 11: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 12: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 13: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 14: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 15: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 16: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 17: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 18: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 19: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 20: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 21: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 22: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 23: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 24: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 25: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: gdiJRVH83qzM0Hc5PweB6gWC6-8.roa (hash: pgZ+GtjefMqu429BIRcG12cEE/zIXfPx6RFdA+xRHiE=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:eb:e1:75:65:27:85:65:e8:8d:8d:00:bf:19:09:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jul 23 17:00:28 2026 GMT Not After : Jul 24 17:00:28 2026 GMT Subject: CN=698cf4a4f4ff3a70bc38320fa5a06f2c6f7b886d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:e1:b5:e6:8e:10:2e:5d:d6:a3:4b:92:be:e4: 0c:d9:77:7a:30:81:58:61:e2:27:77:c2:28:bf:d0: eb:88:72:4a:59:e9:b9:51:ec:1e:3f:59:53:17:c6: 01:d4:76:41:e7:b8:8a:3b:49:77:ba:9c:79:d9:99: 20:d2:c4:69:97:d0:23:97:7d:85:dc:d2:fc:a4:6b: 2d:30:29:86:2c:f6:41:c3:a8:bf:64:29:f3:b2:f9: ed:77:79:d0:bb:ef:12:49:8a:ce:e3:ad:55:47:f4: 23:d2:50:b3:55:0f:ac:b2:cc:9a:31:db:5a:7b:c8: a0:dd:17:c8:38:59:ee:4e:2e:3e:3d:28:47:15:54: 7f:77:b6:e3:7c:c5:b7:c3:19:d9:89:e7:bc:ec:b0: 89:6d:03:32:1c:50:ea:69:46:29:fb:e8:bc:9c:31: f3:a0:ed:88:60:8c:81:7e:72:86:85:3f:c8:5a:98: f3:f2:36:82:c6:9d:7c:1a:6a:7d:97:c1:a4:fd:0f: 19:38:14:2b:6c:bf:68:1f:18:f7:d0:78:e6:72:86: 4e:44:ed:a4:0d:fd:20:b9:e7:4c:87:a9:be:c5:98: f3:e7:72:35:22:08:a4:98:d0:b5:aa:74:56:3e:ed: 67:85:c6:f4:0a:2a:a6:4a:6e:0f:91:96:4c:d3:b3: 51:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:8C:F4:A4:F4:FF:3A:70:BC:38:32:0F:A5:A0:6F:2C:6F:7B:88:6D X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:44:34:f9:06:67:72:3a:aa:fe:99:28:e6:66:d6:fd:8e:fd: 3c:0a:13:64:f8:5c:d1:0d:d8:50:ae:c4:ae:99:e4:a3:1a:ad: 5f:2f:03:75:7c:33:42:57:e0:6b:f9:07:f2:21:e0:92:e0:4c: 05:4e:c4:d0:3c:29:d7:99:ed:d0:ec:8d:54:35:9f:e7:fc:8c: 0a:0a:43:e0:df:9b:16:98:e8:f7:70:b2:3b:05:ae:e7:d2:8f: 80:4a:15:3d:90:78:94:80:51:77:18:30:73:5d:fc:82:a8:b8: c7:8a:04:cb:cd:88:87:f1:ac:65:59:09:e8:06:a7:a7:d3:b4: a9:2e:7b:d7:47:3f:96:47:81:86:cc:44:5f:3d:40:06:a8:09: 41:70:50:c1:3f:bd:9d:fb:e2:da:33:96:2f:34:c4:5b:05:0d: 3c:aa:da:87:08:a1:02:a9:73:32:c7:4d:74:8a:0f:73:c3:7a: 86:f2:6a:ae:85:01:98:b3:e7:d8:26:d8:d8:42:95:04:a4:5b: 30:1f:6f:6f:c5:c8:9d:e3:02:b8:23:15:cf:5d:24:a7:3a:36: 94:2d:61:c8:d5:28:f7:c1:67:9c:4a:3e:5f:be:e4:4a:e1:04: ff:57:61:03:b8:f7:fc:29:9b:3b:7f:39:1a:04:8e:01:30:63: f5:54:0f:c4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+P6+F1ZSeFZeiNjQC/GQkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwNzIzMTcwMDI4WhcNMjYwNzI0MTcwMDI4WjAzMTEwLwYDVQQD Eyg2OThjZjRhNGY0ZmYzYTcwYmMzODMyMGZhNWEwNmYyYzZmN2I4ODZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5OG15o4QLl3Wo0uSvuQM2Xd6MIFY YeInd8Iov9DriHJKWem5UeweP1lTF8YB1HZB57iKO0l3upx52Zkg0sRpl9Ajl32F 3NL8pGstMCmGLPZBw6i/ZCnzsvntd3nQu+8SSYrO461VR/Qj0lCzVQ+sssyaMdta e8ig3RfIOFnuTi4+PShHFVR/d7bjfMW3wxnZiee87LCJbQMyHFDqaUYp++i8nDHz oO2IYIyBfnKGhT/IWpjz8jaCxp18Gmp9l8Gk/Q8ZOBQrbL9oHxj30HjmcoZORO2k Df0guedMh6m+xZjz53I1IgikmNC1qnRWPu1nhcb0CiqmSm4PkZZM07NRXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmM9KT0/zpwvDgyD6Wgbyxve4htMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAikQ0+QZn cjqq/pko5mbW/Y79PAoTZPhc0Q3YUK7ErpnkoxqtXy8DdXwzQlfga/kH8iHgkuBM BU7E0Dwp15nt0OyNVDWf5/yMCgpD4N+bFpjo93CyOwWu59KPgEoVPZB4lIBRdxgw c138gqi4x4oEy82Ih/GsZVkJ6Aanp9O0qS5710c/lkeBhsxEXz1ABqgJQXBQwT+9 nfvi2jOWLzTEWwUNPKrahwihAqlzMsdNdIoPc8N6hvJqroUBmLPn2CbY2EKVBKRb MB9vb8XIneMCuCMVz10kpzo2lC1hyNUo98FnnEo+X77kSuEE/1dhA7j3/CmbO385 GgSOATBj9VQPxA== -----END CERTIFICATE-----Generated at Thu Jul 23 21:37:08 2026 by rpki-client