$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: +M51P1aEiftfxr294xN+ftHqVxc0ko8NU3Z6VTPiiYc= Subject key identifier: 5D:33:09:61:53:AC:D6:DB:36:67:0C:3F:91:C8:29:34:AC:9B:7C:6E Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019F90FECD83E92570BCBF7FD7B150D9CA6E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 16A5 Signing time: Thu 23 Jul 2026 22:00:45 +0000 Manifest this update: Thu 23 Jul 2026 22:00:45 +0000 Manifest next update: Fri 24 Jul 2026 22:00:45 +0000 Files and hashes: 1: 0inTqtkV7aRdA0poVknUSc5weqM.roa (hash: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8=) 2: 6TbA_Za4Eowieja7n7niJ7Rt1gs.roa (hash: scQ2AMr4c5KWoojUsMClo/2J+rhonxe/8Y7reFR2/oA=) 3: F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa (hash: jxUQ0KKcc1cvSdaRZ9vh81k1iQSpuyreVGWce3iIfz4=) 4: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (hash: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw=) 5: KOWxSmH0_bapiUsF2I5NvMk2mAE.roa (hash: qlla291EA5iael/7BwH1F/97Ya9GRn26shYvkPQjZ4Q=) 6: OYUqnwa8yQK0vig2w6Um7A1Wcg4.roa (hash: vSXWDq1SS7TbMrb96ytcbFUS3oNQ6vxE3t+U54lGeWc=) 7: _qefhBTX4GrLHAKY0SuGouHYv88.roa (hash: ZZ2WFS7hoXoz7ExsxVHk1ghS6uAk+/8jwy793fgoALQ=) 8: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (hash: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc=) 9: cYegkqTDRQkQYBG0QAGLC43ERoE.roa (hash: Jj0rGclcjFrkbXAtvfPBQZbVxQ41VQry0fjFc8pn/lw=) 10: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (hash: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM=) 11: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: Y6SDqQ+jXZtALKKeZu4VD+ZN9LnnL7UHFPFJcBnpTl4=) 12: roVhJvLE3W-3AVNXrvbfZb_XPPo.roa (hash: 6LQ91r1uUm0MXEXzntSjw9cSGp9nmQGmFVNHFHmb1Zw=) 13: thPKVIAn4Mtb5x7VAf0Ti0_MWKQ.roa (hash: U0wPlIAv75ZKpiMwZqpBCEwATCl9LCbwg1gs4MzHORI=) 14: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (hash: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:fe:cd:83:e9:25:70:bc:bf:7f:d7:b1:50:d9:ca:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jul 23 22:00:45 2026 GMT Not After : Jul 24 22:00:45 2026 GMT Subject: CN=5d33096153acd6db36670c3f91c82934ac9b7c6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6e:75:11:56:3c:26:bd:a3:9d:1e:6e:90:0f: d1:c2:42:1a:0f:9a:26:c5:b7:e5:d4:8b:10:e0:69: d5:b9:ad:62:1b:3d:b3:82:18:d1:75:5e:d6:69:26: 95:d4:08:34:b5:f4:3c:4c:11:2b:33:d1:f6:7f:a3: a0:e3:1e:6d:a8:25:bd:c9:e1:40:ea:fe:4d:44:d6: df:9c:78:84:ac:d8:5b:10:ec:ae:e7:82:f8:86:51: 9f:6f:a3:e9:e2:bc:9a:be:1d:92:17:a7:94:39:c0: 3b:22:ae:3c:7b:a3:4c:6e:d4:f8:4b:2f:0d:19:6f: bf:ae:0b:1b:14:30:ba:58:d9:9b:b1:37:5c:ed:14: 24:24:be:1b:5b:73:9c:90:d2:6e:eb:e8:e1:ea:2d: ac:c7:d6:bc:83:29:41:68:b1:1a:c5:89:cc:09:5b: 1e:89:04:c8:d7:3c:1b:be:d3:37:14:10:3d:88:c8: 93:6c:3f:7b:9a:63:4a:91:71:bb:59:3e:a7:49:1a: a9:68:cd:e4:02:70:54:9f:88:23:27:a4:a9:97:4a: c0:d6:aa:2f:90:62:e7:50:4b:31:fa:e5:3d:1d:e0: 93:9f:30:05:b8:62:c6:da:2b:66:ec:71:c1:60:8c: 63:73:81:82:a9:15:08:0e:b3:0f:f3:b6:dd:77:f5: 0c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:33:09:61:53:AC:D6:DB:36:67:0C:3F:91:C8:29:34:AC:9B:7C:6E X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:91:42:ea:cc:a9:d5:f0:8c:39:b8:81:8d:4f:8e:43:43:e0: cc:1a:ca:da:e4:b6:61:00:b2:29:87:3c:30:db:28:7d:14:49: 56:b1:0d:0e:0d:0b:06:8f:72:7f:ea:6f:e0:86:f6:2f:fd:56: 87:a7:a2:88:b0:4b:15:a6:ac:3b:30:7c:45:df:75:49:d1:0c: d3:2c:cb:4d:16:29:65:69:7e:07:19:9f:d5:68:0e:68:72:ea: 27:47:a4:14:f2:00:3e:d0:a6:d6:06:76:2c:15:14:b9:bc:d5: 5c:ee:d1:9d:e2:3d:b8:bb:51:88:ce:69:fa:06:6d:a4:48:2f: cf:b4:a2:c8:15:0d:43:ae:01:dc:95:2f:42:3e:91:ef:66:79: a0:2d:43:e7:3a:d2:e6:af:9a:6b:41:8f:69:f9:08:fe:3d:b5: 3d:99:f2:d7:26:f5:e5:7d:60:9d:22:3d:a2:d3:ee:89:58:fa: 8f:df:fe:98:d1:36:99:1a:43:c9:dd:4d:03:7b:b9:4a:ee:f6: 5e:70:27:d0:69:54:b8:09:9b:0f:3f:4d:c1:f1:22:56:21:72: 4c:c9:99:88:30:e7:f6:42:69:3f:f1:86:a9:1f:55:de:48:8d: 7f:8b:35:7e:35:90:9c:80:c2:4e:50:89:09:36:40:47:a4:26: 6d:f3:8c:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/s2D6SVwvL9/17FQ2cpuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwNzIzMjIwMDQ1WhcNMjYwNzI0MjIwMDQ1WjAzMTEwLwYDVQQD Eyg1ZDMzMDk2MTUzYWNkNmRiMzY2NzBjM2Y5MWM4MjkzNGFjOWI3YzZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqG51EVY8Jr2jnR5ukA/RwkIaD5om xbfl1IsQ4GnVua1iGz2zghjRdV7WaSaV1Ag0tfQ8TBErM9H2f6Og4x5tqCW9yeFA 6v5NRNbfnHiErNhbEOyu54L4hlGfb6Pp4ryavh2SF6eUOcA7Iq48e6NMbtT4Sy8N GW+/rgsbFDC6WNmbsTdc7RQkJL4bW3OckNJu6+jh6i2sx9a8gylBaLEaxYnMCVse iQTI1zwbvtM3FBA9iMiTbD97mmNKkXG7WT6nSRqpaM3kAnBUn4gjJ6Spl0rA1qov kGLnUEsx+uU9HeCTnzAFuGLG2itm7HHBYIxjc4GCqRUIDrMP87bdd/UMIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF0zCWFTrNbbNmcMP5HIKTSsm3xuMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5FC6syp 1fCMObiBjU+OQ0PgzBrK2uS2YQCyKYc8MNsofRRJVrENDg0LBo9yf+pv4Ib2L/1W h6eiiLBLFaasOzB8Rd91SdEM0yzLTRYpZWl+Bxmf1WgOaHLqJ0ekFPIAPtCm1gZ2 LBUUubzVXO7RneI9uLtRiM5p+gZtpEgvz7SiyBUNQ64B3JUvQj6R72Z5oC1D5zrS 5q+aa0GPafkI/j21PZny1yb15X1gnSI9otPuiVj6j9/+mNE2mRpDyd1NA3u5Su72 XnAn0GlUuAmbDz9NwfEiViFyTMmZiDDn9kJpP/GGqR9V3kiNf4s1fjWQnIDCTlCJ CTZAR6QmbfOMjA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:45:25 2026 by rpki-client