$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: Dhkg9EC1SVPiOx32Es8qEAjUDN7u9tTRSDQhO+NuA7M= Subject key identifier: D1:47:76:08:76:46:55:0B:13:2F:76:15:13:01:54:11:64:70:A1:78 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 019F8F47836AB3D6514310AE6FDE8874AC8B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 1396 Signing time: Thu 23 Jul 2026 14:00:56 +0000 Manifest this update: Thu 23 Jul 2026 14:00:56 +0000 Manifest next update: Fri 24 Jul 2026 14:00:56 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: 8GqgyuBEGgaxxoSISnrib6CW3Mc.roa (hash: bEjUXEX5Pqm/nOdrF3XYPCSr/Iq3FxwuCHubprCAlnQ=) 3: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 4: IT-G9anfftKLn-JNHdB3nhqaHRg.roa (hash: 8S5tnd+3z64Mysha0HCn0KENKA3IjsNdvVfiIIaQQlM=) 5: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 6: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 7: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 8: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 9: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 10: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 11: mQVVU0yW21pC8IYFai3gUt7H-pE.roa (hash: H5zFgqItky5UWDxQkcovYBDjwRGeK4Gj998+PN5ijik=) 12: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: XSjj0wqslRwoJ4oVRxgIpLAzmEdSc/byyXHsCf5QMlk=) 13: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) 14: uCc138TA6I8oKDd9GfZ4DDo3vbk.roa (hash: 9QywaX+xNWWX8/eIoZHqrPbZhEsxSCi5Zlf0wOs/po0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:47:83:6a:b3:d6:51:43:10:ae:6f:de:88:74:ac:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Jul 23 14:00:56 2026 GMT Not After : Jul 24 14:00:56 2026 GMT Subject: CN=d14776087646550b132f7615130154116470a178 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:04:ce:77:99:11:18:86:8b:f3:24:9f:52:2e: 70:c7:20:c4:a0:d2:5f:ed:74:4c:43:10:a7:33:b1: 06:9d:2c:73:16:1d:a2:f9:86:6d:58:c3:ba:66:b7: df:22:db:39:4d:45:9d:68:c3:cd:49:83:1e:05:8f: 75:7e:e5:da:ee:99:ef:bb:70:1b:c8:5e:4d:a1:be: 0b:82:37:a0:ff:75:3c:18:10:6a:74:fe:88:33:69: 40:c5:6b:55:ef:3c:db:69:d0:8f:c7:db:6f:3a:f8: 50:05:fa:0b:26:d2:0f:ef:70:33:2b:3c:09:19:1d: b8:8c:a9:82:77:8b:84:1b:a1:f3:ac:f1:15:77:15: cf:cf:cb:79:71:b1:09:b5:dc:50:09:3a:82:07:fb: be:db:50:7c:35:01:b5:38:16:97:5e:7b:89:3c:c8: 10:2e:39:6b:ee:99:b2:a8:8e:cf:59:2b:9d:dd:8e: ed:9a:82:80:e8:79:7c:7f:d1:db:d5:cf:74:17:ed: 1f:d3:90:cf:af:a3:0f:52:1a:92:3f:cc:bf:b1:ea: 4b:33:34:e2:02:00:2d:a6:4b:2c:a3:e3:b2:3c:77: 6c:cc:13:e0:2b:e5:6d:b5:85:18:09:6b:b2:28:ec: 39:17:58:4d:0f:9f:23:bf:15:f7:fb:57:40:6d:d1: 66:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:47:76:08:76:46:55:0B:13:2F:76:15:13:01:54:11:64:70:A1:78 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:7e:1e:ba:00:02:04:22:7c:27:7f:81:5f:b8:67:12:1e:b0: 0d:0e:cf:1d:2f:17:0a:18:fb:c8:be:1a:01:0e:3a:cc:02:40: 6c:31:91:cf:13:f4:18:2f:4a:b4:29:0f:ff:4a:85:1a:30:87: 7b:dd:61:ff:05:22:36:4c:4d:fd:c2:e1:d6:b9:65:f5:ef:cf: e7:82:09:a9:99:22:a6:5e:4b:4b:a2:05:a5:e2:d1:89:07:ae: eb:2a:bb:36:d7:80:a1:78:d4:6b:e7:4e:d2:49:c8:70:72:13: 02:cd:a6:db:98:9c:38:2a:28:f6:08:02:d0:4c:2d:49:c6:af: 6e:75:af:5f:6b:68:72:21:0c:f6:dc:15:c4:cc:51:76:42:3c: 3b:0c:bd:34:fb:ad:7b:d9:c8:62:32:9c:04:54:a4:48:77:7f: 09:1a:51:18:77:46:05:7c:87:36:6b:44:ab:9b:28:65:f8:52: e2:3c:14:22:ab:ab:3f:21:61:e3:ec:81:62:7f:93:d2:3a:81: 41:d6:09:3c:48:f4:78:0e:1a:1f:59:cc:8c:88:83:1c:b0:c8: 65:69:61:60:73:f4:83:b4:60:67:97:c4:09:15:c3:5a:bc:3b: 3f:89:12:dd:66:9d:21:09:0a:9b:7f:1f:7f:31:39:ca:0c:bd: 6a:ac:ad:06 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PR4Nqs9ZRQxCub96IdKyLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwNzIzMTQwMDU2WhcNMjYwNzI0MTQwMDU2WjAzMTEwLwYDVQQD EyhkMTQ3NzYwODc2NDY1NTBiMTMyZjc2MTUxMzAxNTQxMTY0NzBhMTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgTOd5kRGIaL8ySfUi5wxyDEoNJf 7XRMQxCnM7EGnSxzFh2i+YZtWMO6ZrffIts5TUWdaMPNSYMeBY91fuXa7pnvu3Ab yF5Nob4Lgjeg/3U8GBBqdP6IM2lAxWtV7zzbadCPx9tvOvhQBfoLJtIP73AzKzwJ GR24jKmCd4uEG6HzrPEVdxXPz8t5cbEJtdxQCTqCB/u+21B8NQG1OBaXXnuJPMgQ Ljlr7pmyqI7PWSud3Y7tmoKA6Hl8f9Hb1c90F+0f05DPr6MPUhqSP8y/sepLMzTi AgAtpksso+OyPHdszBPgK+VttYUYCWuyKOw5F1hND58jvxX3+1dAbdFmdQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFHdgh2RlULEy92FRMBVBFkcKF4MB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaX4eugAC BCJ8J3+BX7hnEh6wDQ7PHS8XChj7yL4aAQ46zAJAbDGRzxP0GC9KtCkP/0qFGjCH e91h/wUiNkxN/cLh1rll9e/P54IJqZkipl5LS6IFpeLRiQeu6yq7NteAoXjUa+dO 0knIcHITAs2m25icOCoo9ggC0EwtScavbnWvX2tociEM9twVxMxRdkI8Owy9NPut e9nIYjKcBFSkSHd/CRpRGHdGBXyHNmtEq5soZfhS4jwUIqurPyFh4+yBYn+T0jqB QdYJPEj0eA4aH1nMjIiDHLDIZWlhYHP0g7RgZ5fECRXDWrw7P4kS3WadIQkKm38f fzE5ygy9aqytBg== -----END CERTIFICATE-----Generated at Fri Jul 24 00:22:54 2026 by rpki-client