$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: vQhcLAZETT54oSwzvM8JNe8EZLL0ULjkFRbKRulmyuw= Subject key identifier: 3A:25:2D:A1:3B:43:45:8E:90:85:CA:D1:49:30:0C:58:E3:7D:0C:51 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 019F905A7922C5F3BA1B47632FAB3C8EDA98 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 19CE Signing time: Thu 23 Jul 2026 19:01:15 +0000 Manifest this update: Thu 23 Jul 2026 19:01:15 +0000 Manifest next update: Fri 24 Jul 2026 19:01:15 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: 87ewKSZQOYBzo5vQIoJmUZ6uN6q6Hx5NjbF5+joy+rA=) 2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=) 3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=) 4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=) 5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=) 6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=) 7: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=) 8: lfsA-CiV23r-qpL7I-OyuqCLA7E.roa (hash: IDCu8RiLCmmGO2wQI4VtUyw3k0YFKxR4jBPe/VBgfYc=) 9: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=) 10: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=) 11: qu1WOvTSGJhb9qCrwaoo2MELsDg.roa (hash: sMcBLOOPq2yXaLqHdTpicJZ4I/4D7ujzTrP/m9dXVgg=) 12: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=) 13: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=) 14: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=) 15: yB3ntVub05F4F9i1cWLaKANNBso.roa (hash: zdKl/J+2C305Q7rX/8wtABN6OkAsZKkNZDLRLh5HUdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:5a:79:22:c5:f3:ba:1b:47:63:2f:ab:3c:8e:da:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Jul 23 19:01:15 2026 GMT Not After : Jul 24 19:01:15 2026 GMT Subject: CN=3a252da13b43458e9085cad149300c58e37d0c51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7b:a2:39:18:cb:8b:aa:72:f6:44:81:79:19: ee:11:c8:f1:71:46:df:10:75:5a:62:9d:51:b4:f3: c0:b9:61:75:89:ad:62:a7:75:92:4e:0e:71:a0:fd: 58:ee:b6:59:f5:db:9d:65:c4:e5:9b:1f:29:1c:6b: f6:63:1c:69:16:03:62:cc:d3:44:c1:35:fb:9a:af: 2a:cb:ee:63:45:92:42:17:ff:41:3f:62:93:d3:31: 0a:a0:73:62:b4:de:46:30:0e:52:79:f4:fe:f8:01: 74:2f:9e:90:cb:02:5c:6d:83:c9:89:8a:c7:27:11: 07:2b:8c:78:94:28:ce:1b:a9:d3:be:36:50:2a:be: e1:a3:10:28:96:b4:21:3f:fa:65:17:0c:17:e0:dc: 6d:33:d6:8b:27:9a:17:d3:11:31:e3:d2:56:b8:d4: 76:f9:8a:cf:20:52:9e:de:66:5f:b2:07:30:cf:45: 3b:b6:bf:50:10:66:b6:e1:9e:bc:21:4e:6c:48:fe: 9c:92:88:3c:74:94:95:f2:6e:12:38:b5:a3:15:2b: 37:ad:1e:d8:97:61:cc:36:74:b1:8e:9b:88:09:ec: c0:d0:49:97:41:90:9f:44:85:2a:9f:53:f5:dc:ae: 01:23:55:e9:d8:1f:e0:d7:24:ab:5d:dd:90:82:e8: cc:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:25:2D:A1:3B:43:45:8E:90:85:CA:D1:49:30:0C:58:E3:7D:0C:51 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:19:66:1d:ab:82:c7:92:14:18:04:d7:1c:87:2a:34:71:97: 28:0d:e2:b8:d7:74:cd:22:68:8a:f1:bc:f6:41:6d:09:66:be: 90:1c:80:9a:66:30:e6:84:b0:85:a9:da:6c:a4:89:a1:aa:63: 12:60:99:fe:cf:67:bd:b4:59:f3:d6:9c:33:bf:c0:19:7f:a9: 0f:f0:cb:ae:83:26:e4:28:ee:65:d8:2e:18:9b:9a:fb:31:9e: d0:b6:01:49:22:62:cd:53:66:58:eb:df:a5:f3:32:a2:f9:9b: b5:51:87:ec:8f:ac:a1:64:28:a6:66:0d:3c:6e:47:e1:dc:19: 39:cd:34:ad:77:37:97:bd:71:60:66:4e:ed:d8:c8:39:15:ad: 52:18:63:6a:06:48:61:25:6c:91:0f:23:96:da:53:6b:ea:75: 2c:6c:9e:f1:50:3e:21:ba:d0:89:18:80:9b:6a:52:ee:86:43: 83:52:89:3b:19:13:b2:74:b8:ff:fd:dd:f2:3a:9d:7e:71:39: 91:06:67:85:54:e9:c7:f8:9d:97:f3:9a:2b:bf:29:fb:2b:66: da:c6:44:d5:de:b3:35:da:16:89:7c:b2:b6:dd:f6:d8:5c:38: 5d:33:59:69:fb:7d:30:c2:30:02:71:35:dd:3c:de:84:73:42: 96:ee:e2:68 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ+QWnkixfO6G0djL6s8jtqYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwNzIzMTkwMTE1WhcNMjYwNzI0MTkwMTE1WjAzMTEwLwYDVQQD EygzYTI1MmRhMTNiNDM0NThlOTA4NWNhZDE0OTMwMGM1OGUzN2QwYzUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXuiORjLi6py9kSBeRnuEcjxcUbf EHVaYp1RtPPAuWF1ia1ip3WSTg5xoP1Y7rZZ9dudZcTlmx8pHGv2YxxpFgNizNNE wTX7mq8qy+5jRZJCF/9BP2KT0zEKoHNitN5GMA5SefT++AF0L56QywJcbYPJiYrH JxEHK4x4lCjOG6nTvjZQKr7hoxAolrQhP/plFwwX4NxtM9aLJ5oX0xEx49JWuNR2 +YrPIFKe3mZfsgcwz0U7tr9QEGa24Z68IU5sSP6ckog8dJSV8m4SOLWjFSs3rR7Y l2HMNnSxjpuICezA0EmXQZCfRIUqn1P13K4BI1Xp2B/g1ySrXd2QgujMqwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFDolLaE7Q0WOkIXK0UkwDFjjfQxRMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaRlm HauCx5IUGATXHIcqNHGXKA3iuNd0zSJoivG89kFtCWa+kByAmmYw5oSwhanabKSJ oapjEmCZ/s9nvbRZ89acM7/AGX+pD/DLroMm5CjuZdguGJua+zGe0LYBSSJizVNm WOvfpfMyovmbtVGH7I+soWQopmYNPG5H4dwZOc00rXc3l71xYGZO7djIORWtUhhj agZIYSVskQ8jltpTa+p1LGye8VA+IbrQiRiAm2pS7oZDg1KJOxkTsnS4//3d8jqd fnE5kQZnhVTpx/idl/OaK78p+ytm2sZE1d6zNdoWiXyytt322Fw4XTNZaft9MMIw AnE13TzehHNClu7iaA== -----END CERTIFICATE-----Generated at Thu Jul 23 22:44:45 2026 by rpki-client