$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: G1OCH2BjaVo4bK408rMelEN2SuN8vtu1jKiHmgsq7ss= Subject key identifier: 74:FC:77:6D:5B:F1:13:EC:CC:0F:5A:80:B5:32:5F:CA:68:64:E5:23 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019F8E6B283B4604A7D800DFB98D0E377526 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 1ACB Signing time: Thu 23 Jul 2026 10:00:14 +0000 Manifest this update: Thu 23 Jul 2026 10:00:14 +0000 Manifest next update: Fri 24 Jul 2026 10:00:14 +0000 Files and hashes: 1: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (hash: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84=) 2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: LNG7xzg488tQn8XSeC1GPHHd9J6578di+FtkanXBn5A=) 3: 1xKMTxjcAyTOqPTp48dbyl1IVKs.roa (hash: USplCCSviit7LuwikiCrStcHpPZhldNMRmJaNU4sZJs=) 4: 2WrIc3-SP4DwQkwPJgua1bGNJ8U.roa (hash: 1n+jxmJd5F9eDLk5zWmpaiLv++ZbzD7Fd2FD1jx9EQI=) 5: 2tySjVTQSHiULWpIIHxe3UTXyKc.roa (hash: 11efIhc4jliYz5b7ccbbcBy+lueobimG/f4ImBFKSr4=) 6: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (hash: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE=) 7: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (hash: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE=) 8: 8s9uSzf6TvkzP7AMAwk-J-bBoaI.roa (hash: HhHYyz7/gaXYnl+eOQvtBscobpbKRyobYY7K5LG1gFs=) 9: CW-qcI1ohMNZFrtxwKP6h3IuUsY.roa (hash: Q0m3SYkmGKp057as4cDbrXW6Plo1d3nxk1JPEsbDaPY=) 10: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (hash: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE=) 11: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (hash: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk=) 12: hjwqR_BvVV3igv-VRSRakB0C0gY.roa (hash: dGn15gWRk4S5nvTCswCYk4PnSEMzXrTWJmJ53SFUgxE=) 13: iyfIsG_zCzXslesxdnK347yeiF4.roa (hash: tDXmuusqCyRHX/DQh8nnAapHWqFHXmFSmh6Yr5JKuq0=) 14: lITdQxhmX_QJLHCdZAw823-rxIE.roa (hash: LD1BnadL45zxeXJQFcYTUwoYEdwQD3yyFtEI21xm/MU=) 15: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (hash: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s=) 16: wQvwuyTtVhloyL12ClFe1Tmx_YM.asa (hash: 7C5CFFl7eP926O+5F2qKTmqq4J0LTe8XElvBDea1xIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 10:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:6b:28:3b:46:04:a7:d8:00:df:b9:8d:0e:37:75:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Jul 23 10:00:14 2026 GMT Not After : Jul 24 10:00:14 2026 GMT Subject: CN=74fc776d5bf113eccc0f5a80b5325fca6864e523 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:1f:0e:e2:f7:5e:46:bf:55:24:ec:5f:1b:8c: 74:0e:82:a2:fe:51:c2:51:8f:f6:90:9b:64:65:42: 2e:78:80:c4:18:5d:a8:0c:32:46:77:fc:23:0d:72: e6:1e:fa:d6:84:c8:e7:35:a5:f1:e3:c6:5e:2e:23: a2:d1:1b:ba:0f:41:48:70:56:a0:cf:d1:1d:bc:bd: ef:2f:ab:3b:0e:af:4d:f8:8d:91:68:5f:80:8a:37: 4e:0d:75:84:c1:14:63:b2:54:68:5d:a0:b3:2a:fe: 11:49:46:25:26:c5:03:19:76:53:02:7c:3d:ed:68: 9c:b4:74:1d:38:f6:b9:62:04:08:ab:83:cf:65:2a: 7d:37:ad:54:d2:18:4c:cb:0e:51:3a:b8:7e:cd:42: 61:ad:26:19:9c:4e:22:53:1e:ab:1b:c4:e9:c7:7e: 02:e2:6a:c6:6d:7b:df:d4:73:e8:37:ad:a7:8d:63: e9:27:89:e0:35:fa:af:40:65:61:34:90:8a:44:dc: bf:0b:02:1c:87:27:7b:7a:fa:bd:a7:f3:34:14:88: b8:45:94:5c:fb:2c:6e:e9:14:c0:b8:9e:a4:c1:bc: 3a:2d:b4:87:df:7b:ea:76:d9:10:5b:e3:05:0d:0f: ba:85:08:1f:60:10:33:a0:3c:2f:f6:b3:69:2a:3e: 93:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:FC:77:6D:5B:F1:13:EC:CC:0F:5A:80:B5:32:5F:CA:68:64:E5:23 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c1:7f:44:a7:2d:20:77:b5:35:52:7a:8f:4b:b6:d0:a2:40: 80:c1:aa:19:46:9f:3b:0d:80:c5:59:3d:52:3f:b5:d8:5a:0b: ea:cb:05:2a:e1:7c:fc:20:80:67:a5:96:00:25:a4:8c:57:81: 09:74:d6:47:95:a9:90:ec:e5:d3:b9:8b:80:32:da:dc:f7:cd: 9c:b3:18:d9:5d:a8:ad:c9:57:5b:c0:41:2b:79:d2:31:05:08: f0:96:21:0b:57:34:b4:f6:73:ad:01:87:23:ac:f4:99:f3:28: 61:c6:95:30:3b:4d:00:60:84:75:d7:f0:b7:1a:5b:a5:1c:af: dc:3a:93:0f:bd:38:6f:2b:99:6d:e6:7b:a2:37:c5:bd:0b:f3: c8:4b:3f:ec:42:28:db:d3:d5:6b:c6:5d:0a:62:49:a2:19:39: 15:f4:27:15:d5:05:19:f0:d4:e4:bd:06:04:c2:cc:20:91:8f: 0d:4a:65:8c:a0:99:9e:48:5a:76:73:86:ba:a3:82:b6:76:22: e6:fb:b3:cd:e3:28:38:67:95:55:eb:ef:37:cf:0b:23:ac:aa: 4e:3d:1a:fb:aa:f7:5c:41:31:60:fd:7e:69:a6:05:6b:26:f8: 39:e3:87:15:69:73:3d:9d:b8:a6:15:6a:30:90:73:90:ef:14: 1c:7d:3e:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Oayg7RgSn2ADfuY0ON3UmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwNzIzMTAwMDE0WhcNMjYwNzI0MTAwMDE0WjAzMTEwLwYDVQQD Eyg3NGZjNzc2ZDViZjExM2VjY2MwZjVhODBiNTMyNWZjYTY4NjRlNTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsR8O4vdeRr9VJOxfG4x0DoKi/lHC UY/2kJtkZUIueIDEGF2oDDJGd/wjDXLmHvrWhMjnNaXx48ZeLiOi0Ru6D0FIcFag z9EdvL3vL6s7Dq9N+I2RaF+AijdODXWEwRRjslRoXaCzKv4RSUYlJsUDGXZTAnw9 7WictHQdOPa5YgQIq4PPZSp9N61U0hhMyw5ROrh+zUJhrSYZnE4iUx6rG8Tpx34C 4mrGbXvf1HPoN62njWPpJ4ngNfqvQGVhNJCKRNy/CwIchyd7evq9p/M0FIi4RZRc +yxu6RTAuJ6kwbw6LbSH33vqdtkQW+MFDQ+6hQgfYBAzoDwv9rNpKj6TYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHT8d21b8RPszA9agLUyX8poZOUjMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMF/RKct IHe1NVJ6j0u20KJAgMGqGUafOw2AxVk9Uj+12FoL6ssFKuF8/CCAZ6WWACWkjFeB CXTWR5WpkOzl07mLgDLa3PfNnLMY2V2orclXW8BBK3nSMQUI8JYhC1c0tPZzrQGH I6z0mfMoYcaVMDtNAGCEddfwtxpbpRyv3DqTD704byuZbeZ7ojfFvQvzyEs/7EIo 29PVa8ZdCmJJohk5FfQnFdUFGfDU5L0GBMLMIJGPDUpljKCZnkhadnOGuqOCtnYi 5vuzzeMoOGeVVevvN88LI6yqTj0a+6r3XEExYP1+aaYFayb4OeOHFWlzPZ24phVq MJBzkO8UHH0+qQ== -----END CERTIFICATE-----Generated at Thu Jul 23 19:07:07 2026 by rpki-client