$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft File: Kb4C3qCghumID1ZMhocrvFl8xnI.mft (raw, json) Hash identifier: 5Lahh9HP1zJbsRIt+UGyP0OV/qizT4OljBKy3Ka84A8= Subject key identifier: E1:BB:AA:A5:D4:21:16:56:0A:77:4C:66:20:3F:CB:90:3D:E1:EE:C4 Authority key identifier: 29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 Certificate issuer: /CN=29be02dea0a086e9880f564c86872bbc597cc672 Certificate serial: 019F92B6A00971F599C04F99F820A268A7F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft Manifest number: 17BA Signing time: Fri 24 Jul 2026 06:01:09 +0000 Manifest this update: Fri 24 Jul 2026 06:01:09 +0000 Manifest next update: Sat 25 Jul 2026 06:01:09 +0000 Files and hashes: 1: 1-W964s-KtZyiNamSbJ6IP1jbFT4.roa (hash: tyUpzznYouv+Rmk3/StqHsUEFXC/JRLOGyGTS4NNP4Y=) 2: GStnKDxU2VExQ_xcPN4egFEKjLo.roa (hash: siSBOiPXXJh3GCU5grMPMkb/iUn8KcQ7coKcPhWce6E=) 3: Kb4C3qCghumID1ZMhocrvFl8xnI.crl (hash: +xASnaYyhcWcvP4plb7Qj/5H+xK7Sidc1o5Df2kH3po=) 4: KzDc8QsMTzvMJxQ96GJ3yCoLi_U.roa (hash: Xkhd86uGm3VF/evalHU0tYC3SzwGKBs1H4sASP/73Pg=) 5: RMWLa9nYNadgqj8fRvJ7gt0vmRY.roa (hash: YPSVWQ4p2Yzt69XO4XRgEZdOa23MUm2U51FrUJbQeG0=) 6: VSrC1QP0T_UaXaaEFdbsOmUjBh0.roa (hash: zTpZ/xLPhwOsaGOqgGhoR4AJouaTmVoH7QdVIfFBLJc=) 7: mju1GTQPLsJiestxJWXcq-E1Bo0.roa (hash: 95gpW7g+cVKJk4QbRN0p3aXkVNHoQsAxKOBXvYSCcxk=) 8: qJD08TGqbLXdbWVjPMA7B5pGkPI.roa (hash: Kx7++AsdN5bNJwCWFiOZcN26zdxHM+ZF2tTRAsBHsXQ=) 9: rg80XbUJLJkTb5OEL1rZgHZ1y6U.roa (hash: vhHXEQRDhmmcuNgaQBq7IXJimIzM9H1G1xvHCsunoqk=) 10: wlkqPCWXMJsz1R99hgzE3_VYv5c.roa (hash: KrKqWLoyfi0cuRqfEdDLZj1DmY6m+y1d1kGaimNA4oE=) 11: xewkVdgaX0V36_1yEpoUi8m7v6c.roa (hash: kF/BrgELi4+Am7OL4A+u/VI4R7I6POdHlx4gpQyUi6M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:b6:a0:09:71:f5:99:c0:4f:99:f8:20:a2:68:a7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29be02dea0a086e9880f564c86872bbc597cc672 Validity Not Before: Jul 24 06:01:09 2026 GMT Not After : Jul 25 06:01:09 2026 GMT Subject: CN=e1bbaaa5d42116560a774c66203fcb903de1eec4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:5f:c3:5d:a4:89:92:e1:83:c7:c1:39:d6:7d: 14:71:38:bf:0b:82:2c:38:44:0d:f8:6f:a7:ea:d7: 6c:f9:13:27:99:ac:c5:0f:00:a4:d9:aa:51:92:87: 3b:de:86:73:79:b5:f5:b9:7a:5b:32:ba:98:2a:00: 91:1f:e0:85:63:80:3b:fe:55:82:f1:78:8e:71:4e: 72:15:a2:ed:70:8a:46:f0:b3:69:8b:ed:99:c1:ae: e9:7c:1a:8d:67:ef:2e:d3:a9:e4:03:84:d4:95:aa: 38:1a:1e:fe:39:77:e5:b9:0a:fb:aa:bf:b4:6c:d1: 19:02:82:09:ae:d2:31:72:84:5d:6d:fc:07:4e:6a: c5:5a:c8:73:fa:49:70:15:9e:45:cc:a1:30:f9:ef: 5c:28:35:7e:66:ea:62:23:2c:3a:91:41:89:0f:9c: d9:fb:50:e2:6a:bd:99:1f:c7:62:f9:30:9b:c6:fd: 81:56:52:8a:fd:f6:ad:8c:ce:9a:8f:9b:c7:19:65: 05:52:16:3e:85:ab:35:a9:0e:f1:11:b0:07:ee:a5: 63:d7:0f:6a:fd:c0:5d:0d:f6:5f:86:c4:8a:81:25: 9c:2c:eb:df:6f:4e:1f:4c:f2:2a:91:a4:ac:1a:89: 6e:bc:0c:73:c6:3e:ec:96:3f:4f:b4:d8:dd:c0:53: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:BB:AA:A5:D4:21:16:56:0A:77:4C:66:20:3F:CB:90:3D:E1:EE:C4 X509v3 Authority Key Identifier: keyid:29:BE:02:DE:A0:A0:86:E9:88:0F:56:4C:86:87:2B:BC:59:7C:C6:72 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kb4C3qCghumID1ZMhocrvFl8xnI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/ea1cff-ae8f-4719-89b3-003a1568bf3f/1/Kb4C3qCghumID1ZMhocrvFl8xnI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:25:10:4f:2a:33:bf:dd:12:6c:59:a1:7d:d7:47:53:ff:d6: 50:c4:b3:fe:93:51:27:0b:2e:8d:ea:d5:ba:cc:18:40:27:dd: c9:ee:bd:1b:98:a1:b3:64:c1:2b:78:78:0c:26:b8:7b:71:07: 5b:0b:b8:13:29:3e:b4:fc:28:29:20:4d:54:2b:06:ea:80:a1: 09:04:57:f4:20:dd:53:80:db:6d:6c:20:9e:be:03:4e:9e:37: 3c:29:b6:83:11:2c:69:d7:ff:ff:01:ad:6c:4e:31:0b:d3:fa: 0e:74:eb:51:de:c2:28:3f:5b:54:a4:27:86:14:6c:57:e9:7b: 13:a3:0a:7d:eb:86:d3:f5:10:3b:c0:8d:0d:11:10:77:b8:60: cd:31:e7:98:01:80:67:59:4d:c9:bb:d5:e0:a3:77:bc:b1:98: b8:27:f8:a2:d1:6b:4f:53:39:65:0d:8d:21:84:ba:a4:5b:ef: 5a:7c:0e:36:20:ba:b5:ef:9c:32:2f:e7:a3:29:21:10:5e:07: db:10:4b:34:1b:1a:0c:59:a6:50:e2:58:ad:d1:bc:e1:9b:27: d9:e0:63:ac:f4:91:c2:06:fe:dd:95:9d:67:f6:40:9c:4f:44: f0:bc:5f:ca:ef:c1:0c:ef:af:75:19:5d:f3:1f:54:77:bb:e6: 07:ac:50:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+StqAJcfWZwE+Z+CCiaKf1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YmUwMmRlYTBhMDg2ZTk4ODBmNTY0Yzg2ODcyYmJjNTk3 Y2M2NzIwHhcNMjYwNzI0MDYwMTA5WhcNMjYwNzI1MDYwMTA5WjAzMTEwLwYDVQQD EyhlMWJiYWFhNWQ0MjExNjU2MGE3NzRjNjYyMDNmY2I5MDNkZTFlZWM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtl/DXaSJkuGDx8E51n0UcTi/C4Is OEQN+G+n6tds+RMnmazFDwCk2apRkoc73oZzebX1uXpbMrqYKgCRH+CFY4A7/lWC 8XiOcU5yFaLtcIpG8LNpi+2Zwa7pfBqNZ+8u06nkA4TUlao4Gh7+OXfluQr7qr+0 bNEZAoIJrtIxcoRdbfwHTmrFWshz+klwFZ5FzKEw+e9cKDV+ZupiIyw6kUGJD5zZ +1Diar2ZH8di+TCbxv2BVlKK/fatjM6aj5vHGWUFUhY+has1qQ7xEbAH7qVj1w9q /cBdDfZfhsSKgSWcLOvfb04fTPIqkaSsGoluvAxzxj7slj9PtNjdwFMOoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOG7qqXUIRZWCndMZiA/y5A94e7EMB8GA1UdIwQY MBaAFCm+At6goIbpiA9WTIaHK7xZfMZyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMt MDAzYTE1NjhiZjNmLzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS9lYTFjZmYtYWU4Zi00NzE5LTg5YjMtMDAzYTE1NjhiZjNm LzEvS2I0QzNxQ2dodW1JRDFaTWhvY3J2Rmw4eG5JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADyUQTyoz v90SbFmhfddHU//WUMSz/pNRJwsujerVuswYQCfdye69G5ihs2TBK3h4DCa4e3EH Wwu4Eyk+tPwoKSBNVCsG6oChCQRX9CDdU4DbbWwgnr4DTp43PCm2gxEsadf//wGt bE4xC9P6DnTrUd7CKD9bVKQnhhRsV+l7E6MKfeuG0/UQO8CNDREQd7hgzTHnmAGA Z1lNybvV4KN3vLGYuCf4otFrT1M5ZQ2NIYS6pFvvWnwONiC6te+cMi/noykhEF4H 2xBLNBsaDFmmUOJYrdG84Zsn2eBjrPSRwgb+3ZWdZ/ZAnE9E8Lxfyu/BDO+vdRld 8x9Ud7vmB6xQKw== -----END CERTIFICATE-----Generated at Fri Jul 24 07:39:51 2026 by rpki-client