$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: 77EYcE9zGbwtYO+jme1yq6RklXKLPcyxZnHdALUI0/c= Subject key identifier: 52:27:5F:55:80:7D:96:BD:4C:28:1F:8E:AA:33:C7:44:92:32:27:01 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019F9135A61BBF7AC14DE7A90580E2C5C7CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 11E2 Signing time: Thu 23 Jul 2026 23:00:39 +0000 Manifest this update: Thu 23 Jul 2026 23:00:39 +0000 Manifest next update: Fri 24 Jul 2026 23:00:39 +0000 Files and hashes: 1: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=) 2: C4GFPQJi7p8x697vDEqdYSForok.roa (hash: x37lAGnggrFkEEQihLvJsXhXtDeedMO3diP0XULMgKY=) 3: FXRjYZvbpR4kI47t-xbWMZKIpXs.roa (hash: f82R7m8nlKkGC17z2MB1wjV2cD02/YvewqP02lzhH/g=) 4: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=) 5: ZPQxZyBJh2Vw2t_b2vNEAiLh99k.roa (hash: NDs1Vf1mQ8nJ5oBooS0cBClzynoCDC8zG6mfNnpUvhE=) 6: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: 2e7qXHgJZn+geobif86wTNecZSOidpgrRZ2t+Fqx/AM=) 7: eoCcRd3DQ06osUmaj6wTPXbyx3M.roa (hash: Bag32wKiY/ZwSFfm1YHrZ2XH/ziquJ1Nmz4VoaY0zzY=) 8: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=) 9: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=) 10: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:35:a6:1b:bf:7a:c1:4d:e7:a9:05:80:e2:c5:c7:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Jul 23 23:00:39 2026 GMT Not After : Jul 24 23:00:39 2026 GMT Subject: CN=52275f55807d96bd4c281f8eaa33c74492322701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:9b:3d:45:45:37:37:d1:71:f4:a4:28:2f:76: a0:02:f6:e1:eb:52:02:bc:f6:1c:a5:c6:e2:c6:f1: c6:2e:cc:22:43:7b:e2:2c:f5:c1:99:95:d2:8b:79: 62:a2:cf:af:42:04:4c:cc:2f:36:70:4a:6f:95:18: 83:e4:ff:cd:4c:0d:b0:a1:18:81:8d:eb:cd:cc:22: 42:da:f0:67:c0:73:e7:a4:48:7c:2b:c6:bf:f6:2f: 64:a5:c0:28:75:a0:94:d5:52:4e:7b:d7:d6:28:f8: d4:1c:24:a1:eb:f3:57:d8:0f:9f:18:97:82:d5:d9: 91:7d:48:d7:fe:4e:07:96:08:fa:ca:6e:08:21:8e: 06:aa:32:0c:6c:ce:dc:d2:5b:55:95:09:85:fe:50: 7d:77:76:03:c1:06:a7:20:a3:70:7f:e8:b6:e4:80: bc:bd:87:4c:bb:71:39:7f:da:33:27:c3:9e:83:30: d1:25:e6:f6:ea:ca:6e:0c:09:ad:9f:9d:be:24:46: 39:14:43:91:d5:12:7c:86:ce:d6:3a:b4:3f:7a:84: 06:87:db:d7:06:a5:79:ad:47:6c:29:b6:d0:4d:eb: 25:2c:a5:ce:d2:38:d5:ad:4b:01:d4:5e:67:c3:34: dd:47:60:92:b5:ad:fb:66:9b:73:6d:ca:8b:e1:8f: 75:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:27:5F:55:80:7D:96:BD:4C:28:1F:8E:AA:33:C7:44:92:32:27:01 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:0b:b2:3c:47:a1:5e:54:44:8b:af:db:83:0d:f8:84:a6:24: 15:71:cb:35:fd:27:bf:7b:3f:05:6a:86:0e:ab:e5:67:04:ff: 74:ea:ad:82:92:cd:8a:53:9b:eb:e7:27:4c:80:f6:e2:22:6b: 63:36:63:ad:17:6c:8f:65:e2:ac:ed:ed:98:10:ff:76:2a:9b: 51:34:52:0c:aa:37:eb:85:4d:7d:34:97:61:5c:fa:ad:3a:d5: ff:26:e8:9f:ac:e4:9d:bc:2f:5e:25:c0:64:61:83:81:f9:a5: 1b:66:33:ec:f6:a5:c2:ea:b3:3b:00:67:8b:e5:ff:b3:dc:43: be:67:66:bb:05:2b:76:6f:d7:da:89:70:cd:ff:ea:88:69:8b: 96:87:fd:68:c7:99:6a:d8:22:8d:1a:14:7b:cc:44:23:a5:8d: e0:50:52:e6:42:7c:5d:e3:de:b8:26:fa:3d:b2:2b:16:47:c8: e1:cc:24:9d:db:d1:a8:ea:db:b7:fa:9a:cc:4f:0e:ee:2c:e9: dd:dd:78:dd:16:cf:8b:7d:27:c1:b5:c7:e6:0e:b7:52:38:8c: ad:9a:3e:46:c1:e3:35:62:a1:27:c7:b8:4e:91:8a:08:31:93: ce:0e:8a:9a:a8:e3:fd:62:ac:7f:63:10:4e:44:12:65:44:7f: d5:81:74:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+RNaYbv3rBTeepBYDixcfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwNzIzMjMwMDM5WhcNMjYwNzI0MjMwMDM5WjAzMTEwLwYDVQQD Eyg1MjI3NWY1NTgwN2Q5NmJkNGMyODFmOGVhYTMzYzc0NDkyMzIyNzAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Zs9RUU3N9Fx9KQoL3agAvbh61IC vPYcpcbixvHGLswiQ3viLPXBmZXSi3lios+vQgRMzC82cEpvlRiD5P/NTA2woRiB jevNzCJC2vBnwHPnpEh8K8a/9i9kpcAodaCU1VJOe9fWKPjUHCSh6/NX2A+fGJeC 1dmRfUjX/k4Hlgj6ym4IIY4GqjIMbM7c0ltVlQmF/lB9d3YDwQanIKNwf+i25IC8 vYdMu3E5f9ozJ8OegzDRJeb26spuDAmtn52+JEY5FEOR1RJ8hs7WOrQ/eoQGh9vX BqV5rUdsKbbQTeslLKXO0jjVrUsB1F5nwzTdR2CSta37ZptzbcqL4Y910QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFInX1WAfZa9TCgfjqozx0SSMicBMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALAuyPEeh XlREi6/bgw34hKYkFXHLNf0nv3s/BWqGDqvlZwT/dOqtgpLNilOb6+cnTID24iJr YzZjrRdsj2XirO3tmBD/diqbUTRSDKo364VNfTSXYVz6rTrV/ybon6zknbwvXiXA ZGGDgfmlG2Yz7PalwuqzOwBni+X/s9xDvmdmuwUrdm/X2olwzf/qiGmLlof9aMeZ atgijRoUe8xEI6WN4FBS5kJ8XePeuCb6PbIrFkfI4cwkndvRqOrbt/qazE8O7izp 3d143RbPi30nwbXH5g63UjiMrZo+RsHjNWKhJ8e4TpGKCDGTzg6Kmqjj/WKsf2MQ TkQSZUR/1YF0Xg== -----END CERTIFICATE-----Generated at Fri Jul 24 03:05:59 2026 by rpki-client