$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json) Hash identifier: RBd86sUP1IN2CUqZr7obXNwPPSVY2RRorqtsw4Fi9kg= Subject key identifier: A4:28:5C:4A:83:DE:96:E0:09:2A:1B:81:F6:F9:A5:13:91:52:22:FD Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 019F8F476EC73101929DF1D5C79FC24D713A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft Manifest number: 1992 Signing time: Thu 23 Jul 2026 14:00:51 +0000 Manifest this update: Thu 23 Jul 2026 14:00:51 +0000 Manifest next update: Fri 24 Jul 2026 14:00:51 +0000 Files and hashes: 1: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: nT9Xo39p5/XzYfhT6FscVGWLMwgUECqxm8xp0j+BB4g=) 2: 6RiDdnednlszc5nfc-ANOJUv2-o.roa (hash: jp3uEswNG4RA6H4G2MDNF+CFUPavRhXT4rfyfKyq6LE=) 3: HdDV5YwMNyFB8k-B_X4MU9-30nM.roa (hash: luVRxl/FnQsj5OM+H4x3yTlX1ppJM10PIPO1RpHN79g=) 4: Nu_9r8H3m3GpfJQaXI9Z_gksBSE.roa (hash: A0MtvPieujf5jUqev3piW+xmWcpxjiKiXWnP9KoZX/U=) 5: ObexSGVy696Wkd2DRhwt2_VaBs8.roa (hash: Ly1Ec9X97SiqjYPYhofzign3IKjIwUM2uHbt0VCXmE4=) 6: ObzqjXT5GtzebuI8BcIwPsXaLb8.roa (hash: CxduJ99uKrCwZPdYUZzvhflelo5OchrVkeFU+IICnVU=) 7: XJkwKQw1uwsNaMGPHoEZmHJ7ln0.roa (hash: 4mMJPUkmp2WBHWIYLKvvJ35kZmLlEY53pxDsemE3rMA=) 8: Y236QjVhGrl24C2bEpBZTpmsO9g.roa (hash: roo618zomZv/80bpPa5A4SKzRxktEgno100+FqWeWZU=) 9: teSjGmrvY_tu6RkdG_34GiE8KM0.roa (hash: yc8bd5ePK4M8XX+rsAFOZYDdIrq94apPIscjQGUl9lw=) 10: ugVQrwIOiOMJPcA4zFZm9kWmY04.roa (hash: Q8pDB3SA4JzJaHb+up2jkC0do3Kit4mBYGTJ7TNXFRI=) 11: yWZ-5OdaSQI1LPfjNeNs7tCX608.roa (hash: esuWPq3Xg5U/Su3ABpCWC8pkIxvEw4LQCmVfV8WC2QE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:47:6e:c7:31:01:92:9d:f1:d5:c7:9f:c2:4d:71:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Jul 23 14:00:51 2026 GMT Not After : Jul 24 14:00:51 2026 GMT Subject: CN=a4285c4a83de96e0092a1b81f6f9a513915222fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:44:d7:91:89:11:78:6d:e6:09:4a:cf:00:8d: 3b:5b:61:e3:5c:64:40:38:67:9e:37:a3:32:c3:fa: ca:1a:4e:b6:5a:35:ff:bc:d9:67:84:ec:70:03:4a: a8:39:33:ba:d2:26:4d:f2:ac:7a:d4:34:bf:06:95: a6:16:fb:24:87:57:93:28:48:f9:b8:e2:a7:fd:e4: 3f:e2:2f:15:02:a0:0f:54:bc:e2:03:f9:d7:07:49: b0:cb:86:27:39:80:19:cf:5c:58:2d:f6:81:ac:1f: a8:ee:75:19:c1:a3:a8:65:79:6e:9d:ee:a2:06:1e: a4:70:cf:d6:77:5e:7b:f9:1d:0b:ce:ec:3a:c1:06: 2c:5b:1a:bd:3f:f9:1d:1c:9c:4b:7f:f2:4c:8c:40: 50:4f:ca:1c:44:d3:27:31:c3:42:64:06:e2:72:37: cb:b4:4c:e6:ff:62:d8:9e:90:4c:ce:3e:d1:39:49: 44:63:6b:a6:00:46:c7:65:55:46:ec:99:fa:4e:ab: af:85:70:18:da:81:00:31:f5:5e:d0:5e:e4:90:49: 9f:4c:00:ab:26:da:82:83:a5:51:49:d2:4a:71:c2: 32:ec:62:9f:74:52:13:14:f8:bc:c7:66:98:0f:bf: 6c:43:3e:0c:4f:bf:f1:e9:45:37:52:ae:26:7e:29: e1:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:28:5C:4A:83:DE:96:E0:09:2A:1B:81:F6:F9:A5:13:91:52:22:FD X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b1:24:ad:01:28:d5:d8:2d:8a:7b:cb:24:ee:1c:1e:00:34: b4:a3:5f:fb:bb:cd:a6:ce:96:a4:bb:84:82:d6:55:c3:3f:92: c7:ec:d7:dc:14:07:e9:b6:fa:4a:a8:d8:7b:95:a2:df:52:0b: 9c:2c:a1:c1:d0:38:9a:36:ea:75:20:3b:6e:cc:f2:76:b7:63: 99:80:ec:e4:66:d4:36:01:0d:e9:70:78:d5:3c:97:d4:6a:88: c1:92:eb:d4:fa:12:6a:d2:19:cb:fc:99:54:4f:c1:5a:1c:bf: cc:ce:b4:1e:e5:1c:16:46:23:39:b7:40:3c:ce:69:66:79:64: 81:77:b1:41:a0:f3:c1:50:c8:5f:a0:2f:35:cf:b5:cc:0a:61: ac:5e:e5:00:8f:95:48:fa:90:3a:05:96:29:e1:79:b6:59:48: 2c:99:19:a7:ba:b4:fe:7e:a2:5a:a2:cc:fb:eb:65:da:e2:b5: 85:3d:8c:15:bc:ec:77:42:a1:eb:41:ce:fc:34:c5:3f:49:70: 47:ab:4f:fc:6a:1e:06:32:39:58:99:73:a0:65:89:d6:28:83: d8:a3:37:8d:d4:cf:e6:15:b3:c4:77:68:de:b1:ac:c8:88:dd: 01:9d:11:8f:78:3e:75:d9:ba:93:62:7c:cb:9c:16:77:b8:d9: 9e:77:6c:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PR27HMQGSnfHVx5/CTXE6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjYwNzIzMTQwMDUxWhcNMjYwNzI0MTQwMDUxWjAzMTEwLwYDVQQD EyhhNDI4NWM0YTgzZGU5NmUwMDkyYTFiODFmNmY5YTUxMzkxNTIyMmZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5UTXkYkReG3mCUrPAI07W2HjXGRA OGeeN6Myw/rKGk62WjX/vNlnhOxwA0qoOTO60iZN8qx61DS/BpWmFvskh1eTKEj5 uOKn/eQ/4i8VAqAPVLziA/nXB0mwy4YnOYAZz1xYLfaBrB+o7nUZwaOoZXlune6i Bh6kcM/Wd157+R0Lzuw6wQYsWxq9P/kdHJxLf/JMjEBQT8ocRNMnMcNCZAbicjfL tEzm/2LYnpBMzj7ROUlEY2umAEbHZVVG7Jn6TquvhXAY2oEAMfVe0F7kkEmfTACr JtqCg6VRSdJKccIy7GKfdFITFPi8x2aYD79sQz4MT7/x6UU3Uq4mfinhTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKQoXEqD3pbgCSobgfb5pRORUiL9MB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLEkrQEo 1dgtinvLJO4cHgA0tKNf+7vNps6WpLuEgtZVwz+Sx+zX3BQH6bb6SqjYe5Wi31IL nCyhwdA4mjbqdSA7bszydrdjmYDs5GbUNgEN6XB41TyX1GqIwZLr1PoSatIZy/yZ VE/BWhy/zM60HuUcFkYjObdAPM5pZnlkgXexQaDzwVDIX6AvNc+1zAphrF7lAI+V SPqQOgWWKeF5tllILJkZp7q0/n6iWqLM++tl2uK1hT2MFbzsd0Kh60HO/DTFP0lw R6tP/GoeBjI5WJlzoGWJ1iiD2KM3jdTP5hWzxHdo3rGsyIjdAZ0Rj3g+ddm6k2J8 y5wWd7jZnndsIQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:17:54 2026 by rpki-client