$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft File: v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json) Hash identifier: 8vWGhmhnlhGnNW98mtPKi1J72tqOokvR8FAD+osylQU= Subject key identifier: 71:C8:C0:0E:39:D2:47:6D:0D:F5:68:1C:F1:D0:FA:C2:8A:BC:6A:31 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019F8F7FA1C9554278DF600A7F26DD71DF3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft Manifest number: 16C8 Signing time: Thu 23 Jul 2026 15:02:13 +0000 Manifest this update: Thu 23 Jul 2026 15:02:13 +0000 Manifest next update: Fri 24 Jul 2026 15:02:13 +0000 Files and hashes: 1: 0OCOakcDI9m6fmr8VzZ-9Hd4VgU.roa (hash: cTnCK/Fe0k+kOxPdh3z5AeFWC42FsqaaV1sppIVkCH8=) 2: 0kXS2WjCCmGHS0asFcjHjq0ESdA.roa (hash: NcRJslp6Cst9ywqKbBrXM4eKGnOe3QAwekOYiXZ066c=) 3: 0xTXzw65S6SAKbF2ypbnQR8flBY.roa (hash: KPGmo03a7ngvQ5hpXQozCZzOmDre3xu+doPSkJFQPEI=) 4: 2j9VUbHTcDA1b90rifQ58Inn2f8.roa (hash: Lgs88tbxXG61dcN+ofeHaAXMJYWju9945L7ezP0hATg=) 5: 35-RC4YDZpErq0qZEtlrtSl4SMw.roa (hash: FOYizqXKHMLapyQGMwFyEz9qVvs69XW13Uh469YQNIU=) 6: 4sHcg46CKKDvMyDChpwWDh0Egl4.roa (hash: w75qFMjuUV9F/cJXn+EoOEYDQsrts8ozrq3p5+rPA14=) 7: 81eHHbv2rPJYI93isZ476W6B7zM.roa (hash: rilqDOE3ousOR3KDCOC0oQFrfowQVUhBVFfyKLTOWP8=) 8: DNKVTDfCdlLHW9MrVOz_V6C3F8g.roa (hash: uasjkvXg+88xW1j9weGfc4+Lwe8xp4HgPIRySLA8dcs=) 9: EfB0MxJFEM8P-mBHWzWP2g-vuRg.roa (hash: 5I3dde4Z0pGqorT+Es4EH70Wh9X5Be4WVxahJvSkgLw=) 10: JFQGAOGdlBoIozV3Kg-vDWtfVao.roa (hash: Z1+P9csIB0WjKmg8chhTuD4xrRsrTBYnir8esGAQC6M=) 11: K2kXXUMGcaKa7rD6RGsaKEmV9Wg.roa (hash: 4AJJT3KGPCqJR4OBHfMLmZzKwbu+xSqi/JOf68BFrzw=) 12: LmmhI1Z3bNWasqW3KYfLikF4t-g.roa (hash: uSBHG/9Uy3S7auLYGJFCjkn17D9/u94iRRv7BQ0qdiA=) 13: MdUIZIJ4fMdMmnWpGakpfnXUhu8.roa (hash: 0v7DpVyOb9ZenfEj+uZlG8WAK7SkWOmPeuDGZI04ctc=) 14: PY9DCNlwLD7ejVBXpUKsZjzW_qs.roa (hash: WsUPkIgFvWT/RRRySu92Di42VU11w6gI/VSIsfWKIOw=) 15: SPffAYS64U7u27GBmdl07WWErQg.roa (hash: vr6LcPLMe9RSzc82PbDWlTuc7hI9MZj2/NAkezEnd3I=) 16: WZWGYo1-x5iiMmTQB8f7pscBQ5Q.roa (hash: IhIWhgnItgwnoOUYHAHgKAbDJ1m2IH1w4DFw6ZTXRMU=) 17: ZI-MShlThOM7MmKhvKsXH3X5V7o.roa (hash: c+aesfiAR4qnVM9MuqdOghCy4EQQegO3MHfJlwBvics=) 18: _3QnYavnGKdVR8ot9gFC26BVhJw.roa (hash: otGVERCj59KUslBr2RM1j+OVDAaoPU+125tJ6V2gctY=) 19: e-D3VZHxEnpb_XDj-m8FygPLC-s.roa (hash: WK2WT9RvaBwGkJpwbeKYdSX5XZW7KaarQn4kK4Tt/3Q=) 20: f3fqu4tTHl2vcBZdGXPsMyAjKYU.roa (hash: YnhL3R6TQw9jOlB6ezNd4A83xIKsm64Z7pwt9aESzIw=) 21: fjse87W44P51UOVIGX0DCsEjxWY.roa (hash: D/rrQpS+2FkVVqoE2nZZbtPj0yMnQI478zTpRsOTiWY=) 22: gWgAGHArAQssrrGXIRyn4VHTFXU.roa (hash: B6SPcVHep6hBRDtoMqsctR3R17FHDgKNs8lCIVE2720=) 23: h8D1gq051tBYJNb_Y4nlpSpaChc.roa (hash: 1sY2UtAw3qppMv1YMtACKA33nss4PyBDyZbo40TbUgc=) 24: hX8tn5PQD1Q3xnN4zBUDg2Tf8lM.roa (hash: 026nSWMHgQU56Hi3MyG9cbKQuQzStIRUijp25hynlD4=) 25: n9hfxlzMrKjl_ez1Jru0AUxKJqo.roa (hash: wMMEhDIFHLMDz45INJ2mEHVBm4ljHgWChRaMaS+Z7dk=) 26: pP2Eqoq22dtdkWjab3oZAROYYF4.roa (hash: da24Wj5a2cpI62MpsJZPfy8BAzcyJwxfNfWbY87N+KQ=) 27: qzMo16nmO71L2QshypR-MMDDoCo.roa (hash: l9OxB1GKfb3RigjCep1J7ekawkvlh+mNfXTsSVv2Rdo=) 28: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: 1Xkfg5P2MIqSTqsiolPgvqUN7dcTL1rqnd7Tp9jtv/o=) 29: vkMFwtq4YF4EVCLGJI8W54e9cDU.roa (hash: fYkoWxoHIoRzoqnLvhuQiUpyD9UJxfV83j77hWPTRPw=) 30: wlK8DH6vvBCSGiPEt6TQ8ln7xrI.roa (hash: 95bSqsPZ8Qh5qUbW4eyvVKJiv3x2zL+UElIQsl4lr1A=) 31: yvCCpk4_0puwnurWWSMz-GRqa9g.roa (hash: plmFtmIHnJ65gF4go6f2ImnNM5YPATO4+CT4TY1gN5c=) 32: zSbJ_zmLsvnYD4Tj3NdHFOYhGs0.roa (hash: DJQ4yfm4mN/el8pVTO9ZIBKqMkmNeH54/xwSWHyykMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:7f:a1:c9:55:42:78:df:60:0a:7f:26:dd:71:df:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jul 23 15:02:13 2026 GMT Not After : Jul 24 15:02:13 2026 GMT Subject: CN=71c8c00e39d2476d0df5681cf1d0fac28abc6a31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:28:7c:af:90:3b:8f:e1:f5:68:6e:29:c3:72: b2:ad:12:59:00:f7:1b:56:f5:ae:84:5c:9a:48:1b: a2:1c:65:a0:dd:d1:2a:75:f3:6f:e0:da:ff:cb:f4: c1:aa:c5:bb:e9:d2:ee:ff:32:c3:15:f1:ad:c7:10: 64:c3:a6:cd:6a:ef:29:ea:6d:0d:91:62:04:e3:e9: eb:76:b5:28:5c:8a:98:6c:49:d9:7a:3d:94:d5:e7: 88:71:3c:eb:90:b0:d1:0e:75:88:1b:b3:19:cd:77: 96:d8:f5:8f:cc:86:6b:62:4e:1e:29:91:0f:7d:94: 88:1d:e8:7f:9c:bc:da:63:dd:f4:60:0f:ca:8c:92: 25:65:b9:c7:d0:96:5c:88:da:a8:db:9c:2b:52:b5: 38:3a:c0:fd:7f:57:21:f6:28:c3:85:1c:23:0d:a9: 1a:89:da:43:63:f7:ee:1f:67:70:89:0f:9c:bf:6c: 9e:37:65:a1:03:0f:57:3f:60:54:5b:6f:bd:d1:fc: e0:d8:52:ed:03:c1:96:67:dd:d8:22:85:ae:38:e4: 76:a3:e0:28:8a:aa:ab:17:39:7d:48:44:33:c6:24: 92:e3:b9:ff:73:ac:4f:c2:ca:d0:99:9b:d8:59:7f: de:b5:45:55:34:86:0d:fd:b5:83:d8:8d:62:bf:24: 45:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:C8:C0:0E:39:D2:47:6D:0D:F5:68:1C:F1:D0:FA:C2:8A:BC:6A:31 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:d2:62:80:7b:e9:48:81:ae:19:0c:dc:a5:a6:60:58:40:4d: 05:57:4f:f2:86:70:67:27:91:71:61:bc:cc:06:27:18:84:66: ab:00:ec:ee:7b:9d:ec:f0:6b:1c:81:3d:d3:37:68:84:19:ed: a0:57:09:40:c0:11:f1:62:7b:98:e7:b9:62:08:8b:5c:29:d3: 3c:a5:63:a7:af:11:3d:2e:73:45:0f:93:53:80:e8:44:65:06: b1:83:52:02:50:01:7d:1c:df:a2:17:a4:6c:c3:93:cd:5d:05: 50:53:97:db:f7:a7:b8:42:3d:76:ea:f3:aa:68:70:8b:a6:46: 5b:5c:2b:53:1e:34:24:1a:b3:60:ef:b0:3d:a0:e5:cc:f5:c9: 0f:aa:27:91:39:ed:3a:e0:6b:fe:8b:5c:e3:39:52:4d:77:29: d2:8c:30:cd:c1:ec:3b:8e:23:82:64:91:ac:26:85:96:ec:eb: c5:cc:c6:b6:3a:9d:93:20:c8:d9:61:18:6f:e3:d4:2b:06:86: 9f:e4:4f:d3:53:92:a8:e3:a8:f3:2e:b5:30:63:48:c5:5b:6a: 6f:00:4a:50:a2:ec:cd:42:c9:76:b9:09:3c:45:78:b4:84:1f: 0d:3b:b1:3c:9a:88:1b:a8:50:87:2a:98:ca:36:37:3c:ea:a1: 67:63:ae:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Pf6HJVUJ432AKfybdcd87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwNzIzMTUwMjEzWhcNMjYwNzI0MTUwMjEzWjAzMTEwLwYDVQQD Eyg3MWM4YzAwZTM5ZDI0NzZkMGRmNTY4MWNmMWQwZmFjMjhhYmM2YTMxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwih8r5A7j+H1aG4pw3KyrRJZAPcb VvWuhFyaSBuiHGWg3dEqdfNv4Nr/y/TBqsW76dLu/zLDFfGtxxBkw6bNau8p6m0N kWIE4+nrdrUoXIqYbEnZej2U1eeIcTzrkLDRDnWIG7MZzXeW2PWPzIZrYk4eKZEP fZSIHeh/nLzaY930YA/KjJIlZbnH0JZciNqo25wrUrU4OsD9f1ch9ijDhRwjDaka idpDY/fuH2dwiQ+cv2yeN2WhAw9XP2BUW2+90fzg2FLtA8GWZ93YIoWuOOR2o+Ao iqqrFzl9SEQzxiSS47n/c6xPwsrQmZvYWX/etUVVNIYN/bWD2I1ivyRFawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHHIwA450kdtDfVoHPHQ+sKKvGoxMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArdJigHvp SIGuGQzcpaZgWEBNBVdP8oZwZyeRcWG8zAYnGIRmqwDs7nud7PBrHIE90zdohBnt oFcJQMAR8WJ7mOe5YgiLXCnTPKVjp68RPS5zRQ+TU4DoRGUGsYNSAlABfRzfohek bMOTzV0FUFOX2/enuEI9durzqmhwi6ZGW1wrUx40JBqzYO+wPaDlzPXJD6onkTnt OuBr/otc4zlSTXcp0owwzcHsO44jgmSRrCaFluzrxczGtjqdkyDI2WEYb+PUKwaG n+RP01OSqOOo8y61MGNIxVtqbwBKUKLszULJdrkJPEV4tIQfDTuxPJqIG6hQhyqY yjY3POqhZ2Ou8g== -----END CERTIFICATE-----Generated at Thu Jul 23 21:39:26 2026 by rpki-client