$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: aqGuFvG7pkGAXnmyskAlXFOWlzv8hhu8ALLYORAcRsY= Subject key identifier: 89:00:C2:C2:31:6E:34:22:63:C4:CE:10:CF:59:26:25:74:41:F0:E3 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 019F8F4757AA6DDF6B74CA9A9EB7F6C8D54C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 19DB Signing time: Thu 23 Jul 2026 14:00:44 +0000 Manifest this update: Thu 23 Jul 2026 14:00:44 +0000 Manifest next update: Fri 24 Jul 2026 14:00:44 +0000 Files and hashes: 1: 5bw3FxzpBWgCUPFGor6BeS_x13E.roa (hash: vbv6Fyo711z5Y6WllYiF1+hQCuBRfjBj2SnqOdmQ/Ko=) 2: KClfXxgk0wRzsCWY2cBjE-9OUBw.roa (hash: mZTkzVHUlv75y3/sF2jX1yQ3NF8yk3kbKCgMEXnClVc=) 3: OPUmPq2MCSSLajil_N8xjasEED0.roa (hash: 3ErCgLhuftk7qbnRHyFbXfh2aIHoI6pTjwOjuX9ybbI=) 4: PVZJLc9tODZFqXK-cJmdd7K-baM.roa (hash: nv2FNyj3NvI+l9/bwumlpSj6KXBZJHOiEr8IoIDWWBs=) 5: RD2bQy42cJtcLUpPd6bwEgSdC5g.roa (hash: EXR+FPHGsONaMy04ozJgDUBq2GB63B3p6cERU165gBY=) 6: RTtrcIMD_1Pooh2hybtppswd0Cs.roa (hash: gHzBppcBQRTrZFKZdzTeaIz8G3KIuJKhpm0DEQdKM5o=) 7: ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa (hash: 3HGI+6qeROUPLoU4ORnifqLKfR+6cyux8LhHwuDQCzI=) 8: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: R80FM77/efQkrhJ4xKO2OxfplNx3Gv+YrebgU1vww+0=) 9: iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa (hash: Xmy3joGzE7DOFCUoxtKq+8sQb3nS9R29UjEKhSZ9+oA=) 10: jwL6ZedQy9jrx6zRLmC34t2VuNI.roa (hash: JjbOSGoIoxnMnWQdAupasyiznFb2Rz/tCe7dz0MfJkM=) 11: taRmnaIWL0Lvnk8-ztV91eCLqRU.roa (hash: Duq2TEYTpeDcixHF5tGgiY61uowG5KKhAb2ieJRR8c4=) 12: vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa (hash: HHDiRi1+BOUzXevtTy1X6aaBtWS9/5nRjSa9y3Tpifg=) 13: wUgkHiQ86rCh1plfV-1fhX-AaMg.roa (hash: 86ia7TUjUS+IoQf3wQbTT6jWw8UWMBIHEfrKwtfOipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:47:57:aa:6d:df:6b:74:ca:9a:9e:b7:f6:c8:d5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Jul 23 14:00:44 2026 GMT Not After : Jul 24 14:00:44 2026 GMT Subject: CN=8900c2c2316e342263c4ce10cf5926257441f0e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:a8:85:98:51:4a:2a:9e:5b:8f:14:be:7b:9a: 2d:9a:ba:1a:f2:8e:43:5c:84:7b:ab:7c:19:0e:36: b0:e7:4e:d7:8b:37:77:9d:1c:4d:63:32:26:64:7a: 8f:5d:d8:9e:d3:66:5d:ed:39:ba:86:64:2e:85:2e: ad:32:ea:1a:48:5a:6c:4c:ad:dc:b1:0b:73:97:fd: ae:42:15:51:e3:17:cf:d0:6a:69:0c:59:30:3f:99: c0:07:f5:9d:cf:00:4e:22:c2:92:45:8f:de:b0:42: ad:be:66:9a:0d:32:e3:ae:e9:0e:7f:18:b0:e3:b7: 97:4d:ac:7c:c0:ce:f9:ec:59:ab:c4:96:89:9d:9a: ee:0d:a7:62:90:92:59:7a:40:ff:35:6e:c1:5e:1d: 2f:46:bf:71:4a:65:a4:4a:7e:df:c5:f7:63:ea:b4: 23:53:32:d6:88:38:b4:f3:8f:e9:39:0e:e2:49:52: 49:c2:35:43:e3:bf:9a:85:de:28:3f:31:bb:4e:e0: e7:fc:bb:c7:ab:a6:4e:12:cf:e1:5f:24:47:93:b9: f0:e7:0a:f1:86:a5:99:c9:ea:37:2f:ef:c6:f5:51: 7a:6d:61:5c:90:d9:87:10:92:47:71:0e:23:1e:cc: 66:87:c0:3b:a8:c4:9e:02:3a:e9:2c:3c:62:a0:3e: 76:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:00:C2:C2:31:6E:34:22:63:C4:CE:10:CF:59:26:25:74:41:F0:E3 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:0e:2a:49:c7:55:1d:60:a7:07:04:f9:e4:e3:08:89:d4:43: ae:36:17:d3:1c:4a:79:c8:8f:b2:4e:c3:3b:38:c0:61:e5:3b: 48:4f:33:41:9b:d5:cc:bf:2b:8b:c1:20:d5:98:4e:52:ce:71: 20:42:f2:a5:01:48:ed:32:6a:7c:38:a4:71:26:e8:6d:5a:f6: 74:00:78:8b:ac:9a:8d:d4:ec:f8:8c:2d:19:eb:90:99:56:a7: 4d:5d:21:fb:e8:82:6d:3e:1f:91:7f:36:0c:b8:bd:b7:4d:31: ce:5a:d9:07:df:48:9b:86:cc:e1:c7:51:ff:3a:69:86:ed:4f: 98:38:37:d4:2b:a3:26:b9:14:62:c8:2c:41:14:4b:f8:da:6a: 1c:58:72:fd:f7:bf:f1:29:aa:89:59:4e:01:f8:93:65:00:b5: 90:d8:a5:0b:e2:e2:af:ca:bc:d6:bd:74:94:47:b2:64:e0:23: 01:eb:81:58:3c:17:73:54:90:3c:b2:ec:1d:b0:3b:45:5b:79: 34:97:0d:50:8f:22:08:7b:4e:10:e9:82:94:8f:89:66:67:7b: 73:85:0b:f4:a8:0f:b1:0e:73:7b:fb:66:ba:26:26:ac:fc:02: 45:89:08:41:dd:cf:d0:dd:22:b3:bc:4f:04:59:1a:a0:25:94: 64:fd:ff:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PR1eqbd9rdMqanrf2yNVMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwNzIzMTQwMDQ0WhcNMjYwNzI0MTQwMDQ0WjAzMTEwLwYDVQQD Eyg4OTAwYzJjMjMxNmUzNDIyNjNjNGNlMTBjZjU5MjYyNTc0NDFmMGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qiFmFFKKp5bjxS+e5otmroa8o5D XIR7q3wZDjaw507Xizd3nRxNYzImZHqPXdie02Zd7Tm6hmQuhS6tMuoaSFpsTK3c sQtzl/2uQhVR4xfP0GppDFkwP5nAB/WdzwBOIsKSRY/esEKtvmaaDTLjrukOfxiw 47eXTax8wM757FmrxJaJnZruDadikJJZekD/NW7BXh0vRr9xSmWkSn7fxfdj6rQj UzLWiDi084/pOQ7iSVJJwjVD47+ahd4oPzG7TuDn/LvHq6ZOEs/hXyRHk7nw5wrx hqWZyeo3L+/G9VF6bWFckNmHEJJHcQ4jHsxmh8A7qMSeAjrpLDxioD52IwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIkAwsIxbjQiY8TOEM9ZJiV0QfDjMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMw4qScdV HWCnBwT55OMIidRDrjYX0xxKeciPsk7DOzjAYeU7SE8zQZvVzL8ri8Eg1ZhOUs5x IELypQFI7TJqfDikcSbobVr2dAB4i6yajdTs+IwtGeuQmVanTV0h++iCbT4fkX82 DLi9t00xzlrZB99Im4bM4cdR/zpphu1PmDg31CujJrkUYsgsQRRL+NpqHFhy/fe/ 8SmqiVlOAfiTZQC1kNilC+Lir8q81r10lEeyZOAjAeuBWDwXc1SQPLLsHbA7RVt5 NJcNUI8iCHtOEOmClI+JZmd7c4UL9KgPsQ5ze/tmuiYmrPwCRYkIQd3P0N0is7xP BFkaoCWUZP3/uQ== -----END CERTIFICATE-----Generated at Thu Jul 23 20:13:17 2026 by rpki-client