$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft File: ag4WzCqLkctIP0UegTtniul1grA.mft (raw, json) Hash identifier: kjl7hPuMXBYiT6ZvmxdNC0NEtLptFafaGVb05kdyJ7o= Subject key identifier: 85:F2:92:1B:A3:DD:EA:36:51:65:D3:4B:A6:F3:99:23:66:BF:BB:EE Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0 Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0 Certificate serial: 019F8F7EF0B23CE4633E5F3679526B23695D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft Manifest number: 3F Signing time: Thu 23 Jul 2026 15:01:28 +0000 Manifest this update: Thu 23 Jul 2026 15:01:28 +0000 Manifest next update: Fri 24 Jul 2026 15:01:28 +0000 Files and hashes: 1: 1-L9_xn5XwFHg99yogQ5P-JRQJno.roa (hash: saknG4EeimO2uKEX00r/busJjcraxx17Sa52KQHrOss=) 2: 1IO7D2ixQ-lvyHRtaxSutQuJrdk.roa (hash: w8VZiMHzBrWoJWSQi1dFm3cARenc5HNcqj8t4FMaUvc=) 3: 82--YWEKcMvIJETSOTv0fBdL6CM.roa (hash: txaVMOY8ninC/G6RFe/UwHhOENX0T290iWUIMYkdnmk=) 4: CZ_Zb2Aq89SafghWM0E4713VX70.roa (hash: HeGm7Ab0oXBCA+8D5xtUkFSt/G3Ij7tbRDAtEbpDGr0=) 5: D5_G8DCmM_3b5irrbtVaGAGf_cc.roa (hash: BVXdof9XgxwNSFTMs9cYrt8qNsJcVYYSZufUMkC5DG4=) 6: MHRGHVH_9ryY5YWmrqyOo25Yw-w.roa (hash: p0ZTTiOVdQ6jigzVZJJBkL+3fqMDD1xA2wHogGA9TUQ=) 7: P9YT4wpleippbcH7ySs9yJhewoc.roa (hash: cSxqBMShQEu5xdePejl0TQuouUbtuQWYRC9Of5i3nxw=) 8: PehZN3iXx53NNUUfpGjKtEgbtG0.roa (hash: ZF5FCAasCGxv9d43oiaKd2A5u46kRGpM48JeEUZzsOY=) 9: QcJ1_3me8VKJVSwljpvJ4RRo4bI.roa (hash: oLE/UmjEKWdlluphq/E4JLOUzru3Xt/qp1y2xi32ZuM=) 10: RoQDt4PjdwW0SoiiPvyTsxSfuY8.roa (hash: 1mJogWLp+9JQPWumTmYBS2/tf+nhYhyUXRjcoUUswLw=) 11: RvNLAe_RSP56uzDHYQxY7j2RYDA.roa (hash: 138Cifhmc2WWQk/qLf2plQLxN1qV8R840l4XB+Ds6Qg=) 12: SOdgrNHWpRExOJRc-f9cfWJ4cms.roa (hash: k5GQQCFGnAJdQAMjkz3mMLNhKN0O4TfU790kcOAiuaM=) 13: UqImUVHBq3p8NTSpUZrZaZqeIO0.roa (hash: b0cbtwxFDLQWZmYSn/tfFyO/bdt5kbBtbbVLEmIteZY=) 14: V4QNov5aUVl0kjPoDbGXWUTFf3c.roa (hash: RWwYnwshC1K5yWsQ6bl0FWPq+jSiHD0KLQ+6u/grLQo=) 15: ZXMBfEzRQgZ6XQqYEpUztP_oHuk.roa (hash: CES/AfhEQn2U94y88HLeLxHi0QZ8IQSspRKZIOPxVHU=) 16: ag4WzCqLkctIP0UegTtniul1grA.crl (hash: hv7K32+cUbSBRrD3/7ov4816hu7XZOcS35F/AlmAmmU=) 17: hr6KKW3gkx0Rqd2xi4SSwYOvYAo.roa (hash: AW1B3GU+CHp2dLnlTMaUnh9So+6olkFuGvAvVFpBybo=) 18: nYlDDvhL9ZKod4FxRoAJN8wFPy8.roa (hash: kUW/q0E+5ap6XJqy3o0pzyvq0pN9N7639FqeoHqln7w=) 19: vTCE3_WjlZWEHiUifn-Z3rZn-3g.roa (hash: k0eIUOFWrIqLB7Ha+lzX5IKld1csxUVRrPdDqLcQHmQ=) 20: yde-3lSgZiRr0HU1KS1x7njAoeA.roa (hash: eSGD7O7kwdqNPAeSE2PmhfFGu0OTxONTMV1cXFqWo/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:7e:f0:b2:3c:e4:63:3e:5f:36:79:52:6b:23:69:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0 Validity Not Before: Jul 23 15:01:28 2026 GMT Not After : Jul 24 15:01:28 2026 GMT Subject: CN=85f2921ba3ddea365165d34ba6f3992366bfbbee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ff:b4:d3:e7:31:b0:00:13:93:11:5e:ff:40: a5:84:92:6c:a7:ea:6f:61:46:56:f4:39:a3:28:18: 5b:cb:18:dc:2e:74:7f:db:30:b8:dd:79:b7:fe:0d: 39:28:e1:04:a3:7f:a6:8b:a3:92:8f:92:cc:c7:3a: 57:38:04:d6:5d:25:93:61:d3:24:85:a4:ec:a5:04: 26:52:1e:6a:75:74:ca:69:1b:f3:17:59:81:3c:4d: 9b:0a:70:88:dd:d3:33:20:02:fb:ca:19:60:b2:de: ec:cc:77:23:db:30:f9:85:17:53:79:1d:45:c7:0f: 9d:de:fd:a1:f7:62:4e:f8:fe:d5:48:b5:20:0d:b8: bb:e8:00:06:c8:66:a8:d7:0a:bf:9c:6b:b8:07:f4: 9b:aa:80:92:f5:db:69:01:6b:b1:4e:30:dd:23:48: fb:22:54:7e:6e:1a:e3:95:27:be:51:0f:50:f6:97: 7c:5c:2c:3b:33:7f:4a:92:a6:88:6a:c8:93:ae:3d: d4:74:4e:46:1c:3f:c3:f7:80:2e:e3:4c:ac:04:f3: 45:07:09:ba:6b:98:22:2f:83:7d:b1:a8:96:ac:4f: cc:20:bb:d5:d7:28:4b:e2:ba:e5:76:45:09:1e:f9: 71:ec:51:49:b4:7e:17:82:f6:1c:a7:af:4f:3d:43: 18:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F2:92:1B:A3:DD:EA:36:51:65:D3:4B:A6:F3:99:23:66:BF:BB:EE X509v3 Authority Key Identifier: keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:9a:67:76:dc:5b:57:10:8e:9a:9b:2b:8f:37:46:2d:0e:ac: 24:48:35:d9:de:11:8f:f6:8f:78:6a:47:c3:8d:6b:33:bf:28: 68:2b:32:57:e6:ef:2d:a5:60:3d:eb:cc:0c:75:63:76:cb:8b: 9f:fc:4a:31:df:8d:14:44:c3:a9:aa:ad:b1:61:33:47:96:c1: 66:2b:db:b0:44:2a:f2:70:99:1b:05:c3:7a:c5:6a:be:ae:18: 2d:be:89:0f:de:5a:76:ba:a9:7e:af:77:00:a5:66:f2:1c:3c: 8d:1c:cd:b6:e9:ae:d1:62:70:65:83:5c:1e:12:35:a2:49:25: bb:73:15:49:73:9f:3d:2c:e1:eb:ab:92:07:c1:6f:a1:64:95: f5:a9:35:e9:ad:14:24:00:ac:e7:f5:bf:a3:0f:48:a4:3d:3c: 4f:47:e9:bc:d9:a4:94:0d:ed:a8:8b:b8:d0:69:1b:0c:73:e5: b2:43:0a:5d:f9:3b:b9:5f:1d:d1:2a:2b:25:2c:28:c4:76:7a: 2e:c9:b4:4f:75:22:78:68:19:1a:d2:f5:dd:a2:81:80:a5:58: b3:8d:7f:10:0b:e5:83:ab:e4:08:f3:8b:6a:be:c5:9c:1b:76: 45:47:64:7c:76:e0:8f:8c:72:43:69:0a:fb:71:b8:32:38:67: 3d:d8:e2:37 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PfvCyPORjPl82eVJrI2ldMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMGUxNmNjMmE4YjkxY2I0ODNmNDUxZTgxM2I2NzhhZTk3 NTgyYjAwHhcNMjYwNzIzMTUwMTI4WhcNMjYwNzI0MTUwMTI4WjAzMTEwLwYDVQQD Eyg4NWYyOTIxYmEzZGRlYTM2NTE2NWQzNGJhNmYzOTkyMzY2YmZiYmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsP+00+cxsAATkxFe/0ClhJJsp+pv YUZW9DmjKBhbyxjcLnR/2zC43Xm3/g05KOEEo3+mi6OSj5LMxzpXOATWXSWTYdMk haTspQQmUh5qdXTKaRvzF1mBPE2bCnCI3dMzIAL7yhlgst7szHcj2zD5hRdTeR1F xw+d3v2h92JO+P7VSLUgDbi76AAGyGao1wq/nGu4B/SbqoCS9dtpAWuxTjDdI0j7 IlR+bhrjlSe+UQ9Q9pd8XCw7M39KkqaIasiTrj3UdE5GHD/D94Au40ysBPNFBwm6 a5giL4N9saiWrE/MILvV1yhL4rrldkUJHvlx7FFJtH4XgvYcp69PPUMYCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIXykhuj3eo2UWXTS6bzmSNmv7vuMB8GA1UdIwQY MBaAFGoOFswqi5HLSD9FHoE7Z4rpdYKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZpndtxb VxCOmpsrjzdGLQ6sJEg12d4Rj/aPeGpHw41rM78oaCsyV+bvLaVgPevMDHVjdsuL n/xKMd+NFETDqaqtsWEzR5bBZivbsEQq8nCZGwXDesVqvq4YLb6JD95adrqpfq93 AKVm8hw8jRzNtumu0WJwZYNcHhI1okklu3MVSXOfPSzh66uSB8FvoWSV9ak16a0U JACs5/W/ow9IpD08T0fpvNmklA3tqIu40GkbDHPlskMKXfk7uV8d0SorJSwoxHZ6 Lsm0T3UieGgZGtL13aKBgKVYs41/EAvlg6vkCPOLar7FnBt2RUdkfHbgj4xyQ2kK +3G4MjhnPdjiNw== -----END CERTIFICATE-----Generated at Thu Jul 23 21:27:16 2026 by rpki-client