$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft File: v7CXo2wjJdEDH_QJG6AKhkWdQog.mft (raw, json) Hash identifier: CeZQJeMMxaZLa2aAzwkwGarmNU/RLXAmz6t/onMeIOI= Subject key identifier: AB:F6:D5:22:6D:4D:1C:DF:83:CC:EA:E7:47:18:28:F0:42:E6:45:DD Authority key identifier: BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 Certificate issuer: /CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Certificate serial: 019F91356CF2986E0112670DBD617E37CEAD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft Manifest number: 19E0 Signing time: Thu 23 Jul 2026 23:00:25 +0000 Manifest this update: Thu 23 Jul 2026 23:00:25 +0000 Manifest next update: Fri 24 Jul 2026 23:00:25 +0000 Files and hashes: 1: 2JAGeWqOz-z8FVKdPCxyLtHJNFA.roa (hash: +TySuOsOtYESlmt3r8OIGn1Nao4rCD0nAMni4cCzhG0=) 2: 37plEvr9_SAxpS24SOyNrKA9Ebo.roa (hash: T+3X8+kwm0mxKJkDFOwSTGKX5y/yChg7gIfBo7o4fzc=) 3: 4v2abVtxmKK1EfY1UKsh5vBwTBQ.roa (hash: Fs7Ab7yQf/ulu1DAd1ofgpYjehocmFGlxjUMdJ2h/+Y=) 4: 6FvTo5bRSodTC6FDiz2fehPBQHE.roa (hash: apDjsNYn3O+BU+7M5QZsfrZaIB7/OL7UKbfG6C5NerE=) 5: 9KcHIAUvzuR2GWge4D-VK2067f8.roa (hash: 9sijw09CpBSxcD1XyR49IxKSXJ+lbUtfOT6XCsfhPs4=) 6: B8mKcjnkQ06bQ0cYOYl4NuSVaMg.roa (hash: BHHwvopeV4L0Tgx1rARSKD5k/JLb/fI5L/vuVF66caI=) 7: BmKkxsvsllYGRv2VQUx8x8IPybM.roa (hash: iJVvCwQgSkbFGgNZWYbEzkgvbnxvQYXvysN7fV/Jo/I=) 8: CTkFnxq5k5gkKBOyHIjTnJxEA10.roa (hash: wNOA1anlJOJNxwL/khfQbYI7GWefAhmxsi5L1GTuKvA=) 9: CybUaoE-1zIBrxVRyCGND427ieM.roa (hash: 8GMC+ouN1TxZrZlKa6hwbH6dJmnjXnGYbHSveCF/7PM=) 10: ELqztzBTOVJ9TbgArZg2cCQeUqs.roa (hash: RpN+biF12RBn9jYvgP/g7LA1mBZiYaf6GKLjllO7nRY=) 11: JO5erv-vSOU_O-xUynzRSVbHmIc.roa (hash: zMiR3ptMJOgOIdKG+IIwNcZj+cGNLnGMV7wyCQljD4s=) 12: JXnrULMb6DsHyM2cbpC7FtDo9UY.roa (hash: iamRHWkLnsJiPb+n+IZVDqFiRKag4o4LNxuZZzmL0jQ=) 13: Jb979-aOtFrxIQewqtQtN3rvkPY.roa (hash: h5kBwpidUiteAllQX66DeU4MAx24NppeXa8u24NM7iI=) 14: SybLZ24hhMiBkVFRqMhgG4Tt_So.roa (hash: jdIOIL7oBwjwXGbHbND2Uo+qRIMM4Rdpr2383Sxr5BI=) 15: TEEJpugeYt1F43E2tJGuUV3FeZA.roa (hash: DLdME2cAIv/rSNCUPiFiPYf01huYXXEj3+nEaRucgYU=) 16: Tg7LpYV7I-GpxinThcktcQRnm_4.roa (hash: BbXoN3AQWQv407qJGvIy6QX/6IL8zec6zQB0QjsD6HA=) 17: ZPlBlPD-W-maIRDabAoyZWrxupE.roa (hash: MQ/ql1GxKXsn5YKKa+q3cWZtrV1Ms5Llr3f8Hh6BGNE=) 18: c9_fZRRZyW0XDy9Nuj5gaWSKFjw.roa (hash: 1Hs4IJDmnuMEMdz/1IBBL0atJ2FMVY2hg6chmbt42Mo=) 19: lUbooQJTqUPsGNWs9whSoRmQ9io.roa (hash: kluWa3I7Ato5aw2LG6KL/4iV6N2sUDy3GUsBbZKsEa8=) 20: mhK9zCgXdFlII0XrtCsgCaL9xjI.roa (hash: hSBJb7L+mvFAKQjClhKXrHgKgsxf+0/Ah1GNpCqTJNQ=) 21: sMNPbaJ2swpQDptjsmEdLRBAjsE.roa (hash: wMrNQ1Dt9RdtalTcVqalUbl+Cb5VgC4Yw+MpJfT4roY=) 22: sWFQ2639y5fQaDmU5ThRk6YSWFs.roa (hash: YXKPoBXjKE1eqIFJiy/DtB2fJyWSkDcytdS8/Lx36Lc=) 23: ul8RfOvZQFi7b7h3CYZZMyB1Thc.roa (hash: ftj7d2qkg7awZuZD1JzEyU8qjVc4i/LwIGNmp8+f9gY=) 24: v1XAMryHcbVYBLXiFz1wOW3tUKk.roa (hash: JN1atA5xt1OyKxkpHh4rNxtPiXKSK2GbqwVySmKSgl0=) 25: v7CXo2wjJdEDH_QJG6AKhkWdQog.crl (hash: SGuwH4ru5AmnRjFEiPXj0OM23kNtJLI13KqQU4TtDDY=) 26: x0heqVIS4ldbm4VvDuHpvjwdG18.roa (hash: Q0/M1s9b+ez//kkSZOV821TfmbgQGcZ8JApzRiFz1/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:35:6c:f2:98:6e:01:12:67:0d:bd:61:7e:37:ce:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bfb097a36c2325d1031ff4091ba00a86459d4288 Validity Not Before: Jul 23 23:00:25 2026 GMT Not After : Jul 24 23:00:25 2026 GMT Subject: CN=abf6d5226d4d1cdf83cceae7471828f042e645dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:88:85:ce:22:3b:99:f9:a2:19:13:21:48:65: 4c:72:ee:8f:45:19:cc:1b:b4:23:aa:5a:a3:8f:b7: 20:1d:05:1a:5a:9c:a8:a3:51:6b:dc:69:44:83:65: f9:99:2a:29:2e:14:40:5c:aa:f6:09:b7:07:73:20: 66:08:da:24:7e:8f:fa:56:29:9e:b7:e8:c9:91:2c: 7c:2b:7d:6f:aa:c3:6a:6a:41:e8:02:17:59:4b:9d: 2b:fb:95:f0:e6:a0:9c:fb:c4:12:55:e6:39:7b:49: db:12:ae:52:46:6e:75:9c:24:34:78:9b:bd:39:b7: de:ca:1b:1f:3f:b4:70:75:e9:f7:60:05:96:1d:6b: 4b:da:66:8d:f0:05:47:0f:60:15:aa:00:d5:1f:b9: c2:4b:ac:bc:01:a0:2c:cf:c5:aa:98:9f:aa:32:53: e5:ba:ad:73:fc:72:fc:a5:32:b3:6c:ce:b0:f6:66: aa:06:71:21:cb:08:45:b8:b7:e1:42:14:e2:24:a7: 99:ee:d7:41:c1:44:15:22:d8:64:99:fb:bf:30:ab: 4c:cd:a5:5d:3a:01:6f:c0:53:cf:5d:52:cf:50:13: f0:93:16:3a:74:69:9c:1f:b7:38:02:cd:29:af:5a: 31:56:2c:6b:8a:dd:dd:d7:ca:41:0d:05:fd:64:db: ae:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:F6:D5:22:6D:4D:1C:DF:83:CC:EA:E7:47:18:28:F0:42:E6:45:DD X509v3 Authority Key Identifier: keyid:BF:B0:97:A3:6C:23:25:D1:03:1F:F4:09:1B:A0:0A:86:45:9D:42:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v7CXo2wjJdEDH_QJG6AKhkWdQog.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/27/f2c5e8-8d37-4838-a33b-ecc49bdc2ad8/1/v7CXo2wjJdEDH_QJG6AKhkWdQog.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:51:23:89:e4:e9:c0:11:f9:d7:61:9c:30:44:30:af:0c:e7: 3a:59:8c:51:7a:9b:d1:54:27:a0:a3:ec:8e:d0:85:79:e6:ef: b9:66:d0:4b:72:74:be:03:f1:75:92:57:01:0d:21:69:16:a0: a5:83:88:e6:8e:de:01:74:e9:c7:dc:e0:21:fa:4b:85:c3:df: a6:d2:b0:ad:1c:20:ff:06:47:df:b2:f9:a4:d1:92:71:db:ef: 3a:6b:66:30:87:c8:1a:6c:43:d9:7e:2c:e2:de:0d:e3:08:62: ac:a5:23:f3:c6:6c:61:9c:b7:3b:f1:69:e8:f3:4c:ac:c1:48: 9a:8d:6f:ff:b6:b4:18:b6:c2:8c:77:a9:41:10:a0:6a:4d:b5: 0a:81:5a:f7:51:35:e5:2d:ad:4f:15:a2:61:e0:ff:3e:c8:f3: 6e:e8:9d:50:e6:70:1a:74:af:4f:b5:00:b9:00:70:b3:a6:e3: 88:d6:f7:0c:9b:f5:ef:92:7e:93:c4:f1:1d:f2:a5:ce:93:0c: b1:ed:65:a1:9a:ed:d4:60:cc:a1:57:a4:8c:b6:08:b6:05:b2: f3:5f:4c:b1:9d:8d:72:7d:f3:f0:2e:c5:9e:93:6d:b9:4b:d6: 0c:6e:e3:70:15:7d:d9:d6:8e:b0:b4:ac:41:fa:dd:e7:92:62: 51:4e:7a:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RNWzymG4BEmcNvWF+N86tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmYjA5N2EzNmMyMzI1ZDEwMzFmZjQwOTFiYTAwYTg2NDU5 ZDQyODgwHhcNMjYwNzIzMjMwMDI1WhcNMjYwNzI0MjMwMDI1WjAzMTEwLwYDVQQD EyhhYmY2ZDUyMjZkNGQxY2RmODNjY2VhZTc0NzE4MjhmMDQyZTY0NWRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYiFziI7mfmiGRMhSGVMcu6PRRnM G7Qjqlqjj7cgHQUaWpyoo1Fr3GlEg2X5mSopLhRAXKr2CbcHcyBmCNokfo/6Vime t+jJkSx8K31vqsNqakHoAhdZS50r+5Xw5qCc+8QSVeY5e0nbEq5SRm51nCQ0eJu9 ObfeyhsfP7Rwden3YAWWHWtL2maN8AVHD2AVqgDVH7nCS6y8AaAsz8WqmJ+qMlPl uq1z/HL8pTKzbM6w9maqBnEhywhFuLfhQhTiJKeZ7tdBwUQVIthkmfu/MKtMzaVd OgFvwFPPXVLPUBPwkxY6dGmcH7c4As0pr1oxVixrit3d18pBDQX9ZNuulwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKv21SJtTRzfg8zq50cYKPBC5kXdMB8GA1UdIwQY MBaAFL+wl6NsIyXRAx/0CRugCoZFnUKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2It ZWNjNDliZGMyYWQ4LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNy9mMmM1ZTgtOGQzNy00ODM4LWEzM2ItZWNjNDliZGMyYWQ4 LzEvdjdDWG8yd2pKZEVESF9RSkc2QUtoa1dkUW9nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlEjieTp wBH512GcMEQwrwznOlmMUXqb0VQnoKPsjtCFeebvuWbQS3J0vgPxdZJXAQ0haRag pYOI5o7eAXTpx9zgIfpLhcPfptKwrRwg/wZH37L5pNGScdvvOmtmMIfIGmxD2X4s 4t4N4whirKUj88ZsYZy3O/Fp6PNMrMFImo1v/7a0GLbCjHepQRCgak21CoFa91E1 5S2tTxWiYeD/PsjzbuidUOZwGnSvT7UAuQBws6bjiNb3DJv175J+k8TxHfKlzpMM se1loZrt1GDMoVekjLYItgWy819MsZ2Ncn3z8C7FnpNtuUvWDG7jcBV92daOsLSs Qfrd55JiUU56pg== -----END CERTIFICATE-----Generated at Fri Jul 24 08:16:32 2026 by rpki-client