$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: nA464hrnaKXQSem5zXRD9utXde81+GGEKIWtIQTfFbk= Subject key identifier: 06:1B:76:AF:86:92:76:72:AB:DF:DA:C8:6D:EA:E0:5B:10:85:EC:19 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019F8F478A98099C099563E68310128DB05B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 11E1 Signing time: Thu 23 Jul 2026 14:00:58 +0000 Manifest this update: Thu 23 Jul 2026 14:00:58 +0000 Manifest next update: Fri 24 Jul 2026 14:00:58 +0000 Files and hashes: 1: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=) 2: C4GFPQJi7p8x697vDEqdYSForok.roa (hash: x37lAGnggrFkEEQihLvJsXhXtDeedMO3diP0XULMgKY=) 3: FXRjYZvbpR4kI47t-xbWMZKIpXs.roa (hash: f82R7m8nlKkGC17z2MB1wjV2cD02/YvewqP02lzhH/g=) 4: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=) 5: ZPQxZyBJh2Vw2t_b2vNEAiLh99k.roa (hash: NDs1Vf1mQ8nJ5oBooS0cBClzynoCDC8zG6mfNnpUvhE=) 6: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: ve0jODMl9S0LGqe45hsAgBc2L+2whdvjaRHE9Tvq+Tc=) 7: eoCcRd3DQ06osUmaj6wTPXbyx3M.roa (hash: Bag32wKiY/ZwSFfm1YHrZ2XH/ziquJ1Nmz4VoaY0zzY=) 8: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=) 9: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=) 10: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:47:8a:98:09:9c:09:95:63:e6:83:10:12:8d:b0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Jul 23 14:00:58 2026 GMT Not After : Jul 24 14:00:58 2026 GMT Subject: CN=061b76af86927672abdfdac86deae05b1085ec19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ae:f0:91:04:4b:8e:73:25:f1:2b:92:49:92: 0b:f3:f0:1c:42:81:1c:d9:fb:ce:eb:1f:42:a2:86: e1:03:cf:59:94:f4:e2:48:3c:10:58:70:d9:0b:72: f7:e7:bb:b8:45:eb:a5:b5:8a:0d:e2:4a:6e:ca:bf: e0:df:6e:2e:f6:55:e3:17:15:46:3a:96:21:76:f6: f6:4d:b6:51:4a:97:bc:4f:e6:a8:c9:42:4d:d3:86: 56:99:d6:c6:f6:92:43:99:37:df:08:e9:ce:0a:5f: ef:e5:00:6c:e1:95:9c:65:2a:4b:29:f1:a6:26:3d: 13:2c:62:3f:49:bc:f2:49:6e:a5:ef:b5:c8:2b:c9: b9:31:eb:cd:02:38:c2:5c:e4:c7:aa:53:92:a6:c3: 6e:7c:03:59:80:4f:d5:1b:6a:22:0f:c1:e8:1f:a5: 90:9b:36:7c:49:10:16:a5:53:82:33:91:be:21:6c: 0c:ae:9e:20:ad:df:b1:ce:0b:4b:4c:6c:aa:06:ce: 2d:2a:e5:2e:e8:f8:ec:02:e3:a4:1a:28:95:59:eb: a5:62:79:b3:99:74:7c:9c:ee:bd:fa:b3:4e:83:56: c1:6f:46:ac:5a:4b:bd:6f:60:5f:9c:c2:46:5c:93: 64:90:b3:53:53:9a:6c:f4:d2:fb:65:4b:7f:33:b0: 13:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:1B:76:AF:86:92:76:72:AB:DF:DA:C8:6D:EA:E0:5B:10:85:EC:19 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:00:b0:82:cc:e0:23:bf:07:7f:d3:eb:4c:ca:c3:c4:3a:e8: 19:b8:d3:b7:fd:92:88:07:1f:86:19:9a:ad:4f:ea:99:c4:53: 9a:69:bb:1b:13:99:72:4c:97:96:ed:ce:ed:af:9b:60:2c:51: 89:f9:bd:5a:1e:8b:5d:de:20:c1:a3:c4:2e:45:98:2b:77:f7: 5c:cf:cb:7f:e1:b7:99:53:2f:42:ee:14:81:9a:63:bc:85:d3: 65:12:e9:d0:73:82:37:07:ee:72:92:5e:e8:f3:36:3f:d5:3e: 4d:c9:73:96:29:67:21:b8:6a:c3:a9:a5:3a:fa:a6:5f:c9:c2: c3:69:8b:c4:3a:ec:8b:52:41:67:5a:1f:c7:2d:8c:8c:ec:e0: b6:de:b8:90:f1:48:14:7f:17:29:ce:c7:dd:18:a9:8f:e3:60: f0:03:69:9a:e1:30:a4:28:c4:4f:2b:2d:5a:0b:e9:59:ee:df: 7b:3d:47:1a:dd:0e:6e:2c:af:03:51:a8:89:ba:7b:44:38:54: 6b:bf:63:97:e5:44:e0:c1:1c:5a:80:ec:46:a6:72:5b:7c:f0: 09:5b:36:28:aa:a6:f1:89:29:0e:2b:a6:79:0e:2f:37:cd:ce: ae:07:19:82:39:33:ee:89:9d:b5:65:83:1b:f8:43:77:4f:53: 09:51:a1:25 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PR4qYCZwJlWPmgxASjbBbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwNzIzMTQwMDU4WhcNMjYwNzI0MTQwMDU4WjAzMTEwLwYDVQQD EygwNjFiNzZhZjg2OTI3NjcyYWJkZmRhYzg2ZGVhZTA1YjEwODVlYzE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAka7wkQRLjnMl8SuSSZIL8/AcQoEc 2fvO6x9CoobhA89ZlPTiSDwQWHDZC3L357u4ReultYoN4kpuyr/g324u9lXjFxVG OpYhdvb2TbZRSpe8T+aoyUJN04ZWmdbG9pJDmTffCOnOCl/v5QBs4ZWcZSpLKfGm Jj0TLGI/SbzySW6l77XIK8m5MevNAjjCXOTHqlOSpsNufANZgE/VG2oiD8HoH6WQ mzZ8SRAWpVOCM5G+IWwMrp4grd+xzgtLTGyqBs4tKuUu6PjsAuOkGiiVWeulYnmz mXR8nO69+rNOg1bBb0asWku9b2BfnMJGXJNkkLNTU5ps9NL7ZUt/M7ATGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAYbdq+GknZyq9/ayG3q4FsQhewZMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAgCwgszg I78Hf9PrTMrDxDroGbjTt/2SiAcfhhmarU/qmcRTmmm7GxOZckyXlu3O7a+bYCxR ifm9Wh6LXd4gwaPELkWYK3f3XM/Lf+G3mVMvQu4UgZpjvIXTZRLp0HOCNwfucpJe 6PM2P9U+TclzlilnIbhqw6mlOvqmX8nCw2mLxDrsi1JBZ1ofxy2MjOzgtt64kPFI FH8XKc7H3Ripj+Ng8ANpmuEwpCjETystWgvpWe7fez1HGt0ObiyvA1Goibp7RDhU a79jl+VE4MEcWoDsRqZyW3zwCVs2KKqm8YkpDiumeQ4vN83OrgcZgjkz7omdtWWD G/hDd09TCVGhJQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:17:32 2026 by rpki-client