$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft File: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json) Hash identifier: 3hnGjjDIYOan/2GPnnHaHLUp+dVbAbY6PTLgtmAvfwU= Subject key identifier: DE:1A:9B:FB:7C:62:8A:FA:E2:09:0D:12:39:C7:79:DA:A6:87:89:0B Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 019F90C7A8DC611A7D302BE791F3DF62816F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft Manifest number: 19EF Signing time: Thu 23 Jul 2026 21:00:31 +0000 Manifest this update: Thu 23 Jul 2026 21:00:31 +0000 Manifest next update: Fri 24 Jul 2026 21:00:31 +0000 Files and hashes: 1: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: VMDFiMgj/h7HX/jxM4CVoz+7yQZyiISanV4GbHk8wpA=) 2: C49vSVt4dfdT17Z5kZxdlV_lY_Y.roa (hash: 6HfpvHUMJisoBNoMG7lySqZtsVK9Z40fSQ9YGkMMFF0=) 3: CYTlKlzSJSqB3jTzZOH673qv2os.roa (hash: nMYpBRNUUmqx48+xTuVDjH9QkSUeA9v7hDY4KWKCBCQ=) 4: DIVTK05T8Vdhwjp7g0z7MnF1TQQ.roa (hash: 6vlsDL0j8NnBvb9Ab/QGUCQui9hFjQ/teVqIFOEkwLQ=) 5: ENla5OgKBu9uunWqxWQAfu7kwx0.roa (hash: Fbmqrk8r0alDCgWyzCOzHqp7tHL/3UqhpNT6d1lPtlY=) 6: IamjYw1vikCzZIhDeU8H0NMAjHs.roa (hash: M+kmsNXkFSxnu0j1QJUyRMfdThsPZBpSXk2/kSsLWUY=) 7: Iyt7Ob_snKf1ZPop-eeEldXM0fQ.roa (hash: 9XeUKSaM919H72Lo2RzCdmjP30DLuCdA4txuvCcKAVk=) 8: ODquW4yfiTrN0BslpesyLROdhCU.roa (hash: LguXTTUIpUVmRso7Duo92XjODqxY0o7l3A4Aw6gkmmA=) 9: Q5HfXdIQnusnCwKJeNtcbaxYKRw.roa (hash: cgDqaBa5oL7jHKKM1uUVRVvnMYGroeNLDuSFwDAGhy8=) 10: _izOulmhuUBG3FatKk1kjhEzI5I.roa (hash: D2Y24n1qrh+NyvYt/hta8znqPyvAoiiYcPgWq6TG2zI=) 11: bAO9OihdfpmA-XpEMUum-i6NlvM.roa (hash: w9BYm30HDg7VDCHpAaP2FWEEPT1iEKkPQOttAF9gh5o=) 12: bnpbPX_ctt0kqkwx6ukV-j4WTGM.roa (hash: 730AnutRLa9Haz+ZMN+qGZx6PYPOqH6zu3NH8XC/47k=) 13: dbi31yJdjzH-gnfiJixAWom7O2Y.roa (hash: wv59+nx6Q7SMg8qYiivt/O65l/1UFWdvKThzkz1L+E8=) 14: gTyFz4o7qq-mz7kkyhI4YQAE3F8.roa (hash: ql1a+n9u4sT8twi+Ey5tWWvsl/zO/3fN4L8B2DWoXrk=) 15: h2mTI89G79vzZdTXcNgpiY_bSuE.roa (hash: qa2BzNyouPFY7/V6+HRcQ7umJPtaaWKwpg9jeFVJFSE=) 16: hhAxTUm-YLDfu5gnVbj74LIg_xE.roa (hash: 5lrRMZNGyqCPeI3ughaZF3pVN6T3OxbFiijuNyO2VPw=) 17: j8JXlUTEd1j_9VoERc0ZtsXM8O8.roa (hash: A11q2a+vMmn2Uc3d6mAqUut0tGh3JvhOP0a9hwmGjMs=) 18: lru0bK1pFWTdlNh3tSeVRy2RxB4.roa (hash: D3uDWSg2oVhHneIgFjvyT24SUbp4OtxjQr0JkAH/IGY=) 19: x9kxYUUdYs3Vc1XQvx9EJnJhrDs.roa (hash: Xjj2UlUQT0tIyuN4wzeBBIdle7HnaFZ9oWTYHnJPnD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:c7:a8:dc:61:1a:7d:30:2b:e7:91:f3:df:62:81:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Jul 23 21:00:31 2026 GMT Not After : Jul 24 21:00:31 2026 GMT Subject: CN=de1a9bfb7c628afae2090d1239c779daa687890b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:82:58:c4:0b:2c:3d:77:3c:45:9b:66:05:c2: 1c:7c:d6:06:77:40:d0:aa:99:d2:6e:fd:b6:d5:b3: da:0f:cb:49:f0:1e:cc:33:38:ba:97:c0:72:9f:26: 38:e8:5d:3e:59:f3:b3:ca:aa:b2:82:19:80:b6:9c: 51:18:6a:b5:c1:a3:c2:b1:4a:bc:fb:09:57:a0:e9: 13:0f:bb:86:9d:10:02:70:f4:85:35:22:d6:3b:00: 6d:05:3a:95:ec:72:25:70:9f:ba:50:a9:65:16:87: 46:dd:09:ba:37:ed:eb:e5:f4:27:ef:6d:0b:f7:41: c4:d0:e7:fd:ec:64:d1:16:d1:77:db:c7:4d:01:5d: 97:a5:19:99:51:c6:70:07:cc:db:16:ec:b6:b8:55: 61:66:12:06:f3:1b:66:a6:d2:07:6b:db:7f:60:12: 76:ad:f0:a0:5b:d1:85:a7:d5:8f:64:47:4f:84:1c: df:25:14:ea:23:51:48:a5:c3:bc:1f:98:86:82:6a: 1e:96:33:26:8f:e9:b9:fc:50:3c:0e:fd:a7:61:dc: 4d:ef:25:21:93:ec:9d:57:53:bd:2a:6c:46:d2:bd: 11:4d:b0:2d:f6:9f:8d:5a:e4:d8:b9:cd:a8:bd:c1: 34:93:40:13:12:bd:2b:6a:1f:48:5b:7c:50:ce:28: f4:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:1A:9B:FB:7C:62:8A:FA:E2:09:0D:12:39:C7:79:DA:A6:87:89:0B X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:d8:e8:b0:19:08:45:c5:ed:db:d5:5e:d8:1c:dd:f5:e7:ed: 63:f9:39:5f:ca:01:16:01:80:63:2c:e1:70:f1:f3:a5:4d:6a: cd:7c:4b:15:c0:4e:2c:bf:88:dc:ac:00:5f:f5:17:51:17:bb: 49:60:72:da:0c:ef:9d:b8:a0:d1:d9:ed:68:3e:55:70:d4:69: a9:20:a0:04:75:38:89:bc:8a:11:5a:45:da:8a:1b:65:bd:64: 32:35:4f:f7:ba:3b:a9:56:6a:5c:b2:ef:03:d2:db:f8:85:6c: 0f:6d:4e:f0:1d:32:74:8e:73:ee:21:85:88:c1:da:0b:41:92: 55:aa:0e:b5:e8:3b:54:f1:60:7b:28:0a:0f:9d:af:43:3b:a5: 66:e1:cb:22:f8:c2:31:66:79:a6:ae:de:38:35:9c:29:9d:e3: d4:aa:c2:ef:0f:4c:a6:8a:e9:fb:ed:00:6e:f1:d2:28:88:06: fd:15:80:3e:5c:05:db:96:70:32:3b:6f:7d:55:d9:8b:27:a8: 4a:a1:ce:fc:a9:52:5a:43:9e:44:0e:45:51:83:a9:b6:f4:47: c9:83:20:27:e7:0f:ba:43:c8:12:11:05:fa:c4:1e:68:19:e4: 06:73:64:0d:9a:47:d4:7f:7e:5b:bc:70:cf:92:23:2f:5a:e6: 21:cf:57:57 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Qx6jcYRp9MCvnkfPfYoFvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYwNzIzMjEwMDMxWhcNMjYwNzI0MjEwMDMxWjAzMTEwLwYDVQQD EyhkZTFhOWJmYjdjNjI4YWZhZTIwOTBkMTIzOWM3NzlkYWE2ODc4OTBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4JYxAssPXc8RZtmBcIcfNYGd0DQ qpnSbv221bPaD8tJ8B7MMzi6l8BynyY46F0+WfOzyqqyghmAtpxRGGq1waPCsUq8 +wlXoOkTD7uGnRACcPSFNSLWOwBtBTqV7HIlcJ+6UKllFodG3Qm6N+3r5fQn720L 90HE0Of97GTRFtF328dNAV2XpRmZUcZwB8zbFuy2uFVhZhIG8xtmptIHa9t/YBJ2 rfCgW9GFp9WPZEdPhBzfJRTqI1FIpcO8H5iGgmoeljMmj+m5/FA8Dv2nYdxN7yUh k+ydV1O9KmxG0r0RTbAt9p+NWuTYuc2ovcE0k0ATEr0rah9IW3xQzij0SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN4am/t8Yor64gkNEjnHedqmh4kLMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn9josBkI RcXt29Ve2Bzd9eftY/k5X8oBFgGAYyzhcPHzpU1qzXxLFcBOLL+I3KwAX/UXURe7 SWBy2gzvnbig0dntaD5VcNRpqSCgBHU4ibyKEVpF2oobZb1kMjVP97o7qVZqXLLv A9Lb+IVsD21O8B0ydI5z7iGFiMHaC0GSVaoOteg7VPFgeygKD52vQzulZuHLIvjC MWZ5pq7eODWcKZ3j1KrC7w9Mporp++0AbvHSKIgG/RWAPlwF25ZwMjtvfVXZiyeo SqHO/KlSWkOeRA5FUYOptvRHyYMgJ+cPukPIEhEF+sQeaBnkBnNkDZpH1H9+W7xw z5IjL1rmIc9XVw== -----END CERTIFICATE-----Generated at Thu Jul 23 22:51:57 2026 by rpki-client