$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: vaH1wOXz4SxPkq+rJFVlW3GyDzJbXyaipA7Tm4oyvLg= Subject key identifier: FB:BC:A4:37:E9:E1:C6:23:18:3E:33:CA:6B:AC:2F:54:B0:F7:FC:D4 Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 019F91A36AAFB54D62D0E557DC98F636C53C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 19E3 Signing time: Fri 24 Jul 2026 01:00:33 +0000 Manifest this update: Fri 24 Jul 2026 01:00:33 +0000 Manifest next update: Sat 25 Jul 2026 01:00:33 +0000 Files and hashes: 1: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: vngtuVBoIIlzoGHhhqNTQKRF991Y9kQUqrK9nvXsP/0=) 2: GiXGWF3XbNUka_6eZbMkF4lwUUU.roa (hash: Ghc0ZSrMNmrLcxpN1ogM8Bq5yh44DA/gg5TX6sTsGwk=) 3: Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa (hash: z+0vTxrgxYAsB4o2ZlASjMWqhGlPslViBNl8Jj/ge4E=) 4: JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa (hash: O/QTbkFDD3rtzSPUctcOhfkfZ3hImjATVsAJ0E69A4g=) 5: Ow_kueRJVip82pUj00XLQYjimrs.roa (hash: 85eWZxYsHFwXWd/YsiQWTMazT60hSpQui9cmEWNnT5M=) 6: RGm2lZRMnSfKm4B97NAwBPy9lYQ.roa (hash: Wjqw6vgltXyXDlwoAetJMPKopD3DI3ppoohYHWiU90I=) 7: VrPDKYMKmnp2V6k_WEnwqOalUuk.roa (hash: ZZB+gfVCQKe+xuNcEMqRNy9VWy20utbLNNHfbV/UCLc=) 8: ZrXDV17uXjinizgfrrPqhQ0dhJM.roa (hash: GN0pZ4GDE0j/JncpGXJQ21uu5AQ3wwUlO2eU3eTfsns=) 9: bUcBfMu_9o4dYCM9sDK4nJufEqY.roa (hash: iEsA+ypslVdiqyHUg8Q2SIRt6ca1DLneY25H0pJSVOc=) 10: fT61awwkD08cT0v6ICZahtW3HFI.roa (hash: OGczwb/UeMWoa3ZnMERuw+jjcJf8SRTCZaw4MXLAhCE=) 11: gndzUxO1CNccN-YEVyYR7nMztTA.roa (hash: 97uyyMTTG7hyUktNtazYQf48Ni/TGW9HZQJtjllnVwc=) 12: lTeOVHsdxHYl83EtLLUCZPYWmcw.roa (hash: X7lBPJhBSCWsxS5TEyH3LBZWaqEarDMl83TKFDu1c5M=) 13: wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa (hash: x43Z5uj7ACBLhAYU7mriWUpP8c6bdaVxKIh05vTvKqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:a3:6a:af:b5:4d:62:d0:e5:57:dc:98:f6:36:c5:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Jul 24 01:00:33 2026 GMT Not After : Jul 25 01:00:33 2026 GMT Subject: CN=fbbca437e9e1c623183e33ca6bac2f54b0f7fcd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:4f:60:b1:fb:25:42:f7:b9:79:e4:c0:c7:5b: 44:a6:59:d7:b7:86:d5:cc:a7:05:0e:76:d7:41:92: eb:6b:e7:0f:43:79:6d:8d:b0:f0:bd:cc:39:e8:fa: 68:8a:77:cc:f8:ab:b4:b4:b9:1c:56:40:98:8a:b0: 8b:87:9c:50:89:4c:08:e8:f3:c9:91:aa:9c:cc:f5: 8c:0f:d8:af:e5:5e:1c:c3:f8:a8:fb:b2:82:7b:50: 56:20:a9:bf:9d:43:5f:3b:15:42:ec:0a:0c:32:d8: 36:9d:28:a4:3b:58:18:06:d7:fb:28:69:e4:5a:70: 82:00:13:7f:d9:89:4d:d1:38:ff:bb:01:d4:9e:60: 80:32:f5:78:59:04:b7:c7:7a:45:61:96:3e:98:f6: 9f:d7:fd:77:1e:72:86:81:6d:c0:ba:7b:7a:9a:c7: cf:ee:3a:97:ac:68:ea:26:c9:e0:aa:c5:9b:09:87: 6a:95:d8:77:84:bd:e8:10:0c:db:d5:20:80:aa:34: 99:2a:ca:66:77:fc:c8:d3:06:e7:c5:46:8a:a9:d2: ef:2d:b6:ff:b5:7c:06:81:93:d5:82:85:62:18:a5: 09:92:9a:8a:55:fb:29:0e:31:38:95:cf:71:0d:df: f9:3b:2e:65:06:ba:53:b7:e5:d9:33:c6:93:22:01: fe:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:BC:A4:37:E9:E1:C6:23:18:3E:33:CA:6B:AC:2F:54:B0:F7:FC:D4 X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:6d:dc:9c:ab:08:48:3e:25:6d:7c:28:b5:28:0f:65:cb:d3: 4b:2a:0c:db:1e:f4:4e:38:6d:ce:cc:71:e9:61:dc:12:0b:15: ed:3f:35:04:9c:d3:9d:47:a7:fe:65:b8:6b:60:99:aa:9c:bd: d3:9f:c1:35:95:1f:41:99:fd:d2:c5:09:be:3c:5e:9d:71:c6: 15:b0:5e:17:63:02:d7:1e:88:27:02:d3:ce:a1:80:86:20:b4: c6:ab:a9:37:f1:39:8f:4a:22:df:ff:5d:fd:b9:8b:e4:0a:4f: ef:0c:bb:f9:23:a1:6b:8a:87:51:ec:fe:fc:7a:a5:11:6e:13: 93:6a:86:d6:66:4c:ae:b2:dc:5c:d2:1b:8b:fc:2b:1b:ee:62: bc:59:c2:6b:76:56:c4:2c:4a:50:5a:26:3d:fe:fd:02:26:b2: bf:61:59:6c:6d:4a:34:44:37:09:9d:8c:90:c4:9b:b3:3c:4d: 91:a5:79:2d:63:27:45:b9:40:49:7d:a1:06:81:db:7e:70:eb: f9:37:9f:7f:75:73:df:ea:dc:d2:b0:22:2a:60:91:28:8b:af: ee:f7:8e:c2:84:ec:23:f8:07:a6:82:06:bf:80:65:a0:57:1b: 52:13:09:99:36:e0:c9:71:3b:61:bb:33:ab:dd:2d:65:3e:14: ed:08:79:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Ro2qvtU1i0OVX3Jj2NsU8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwNzI0MDEwMDMzWhcNMjYwNzI1MDEwMDMzWjAzMTEwLwYDVQQD EyhmYmJjYTQzN2U5ZTFjNjIzMTgzZTMzY2E2YmFjMmY1NGIwZjdmY2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk9gsfslQve5eeTAx1tEplnXt4bV zKcFDnbXQZLra+cPQ3ltjbDwvcw56PpoinfM+Ku0tLkcVkCYirCLh5xQiUwI6PPJ kaqczPWMD9iv5V4cw/io+7KCe1BWIKm/nUNfOxVC7AoMMtg2nSikO1gYBtf7KGnk WnCCABN/2YlN0Tj/uwHUnmCAMvV4WQS3x3pFYZY+mPaf1/13HnKGgW3Aunt6msfP 7jqXrGjqJsngqsWbCYdqldh3hL3oEAzb1SCAqjSZKspmd/zI0wbnxUaKqdLvLbb/ tXwGgZPVgoViGKUJkpqKVfspDjE4lc9xDd/5Oy5lBrpTt+XZM8aTIgH+DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPu8pDfp4cYjGD4zymusL1Sw9/zUMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU23cnKsI SD4lbXwotSgPZcvTSyoM2x70Tjhtzsxx6WHcEgsV7T81BJzTnUen/mW4a2CZqpy9 05/BNZUfQZn90sUJvjxenXHGFbBeF2MC1x6IJwLTzqGAhiC0xqupN/E5j0oi3/9d /bmL5ApP7wy7+SOha4qHUez+/HqlEW4Tk2qG1mZMrrLcXNIbi/wrG+5ivFnCa3ZW xCxKUFomPf79Aiayv2FZbG1KNEQ3CZ2MkMSbszxNkaV5LWMnRblASX2hBoHbfnDr +Teff3Vz3+rc0rAiKmCRKIuv7veOwoTsI/gHpoIGv4BloFcbUhMJmTbgyXE7Ybsz q90tZT4U7Qh5qA== -----END CERTIFICATE-----Generated at Fri Jul 24 07:49:27 2026 by rpki-client