$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: s9kZ9tU6HT19xddKIAvu6bD0xA49cIrokpE6n/neQVE= Subject key identifier: D8:D9:F9:E5:EC:75:61:1C:18:85:3E:8E:F2:6C:26:0D:86:0B:8D:BD Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019F90233A3DD20B6F752DE294C1F3AF393E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0BFC Signing time: Thu 23 Jul 2026 18:00:55 +0000 Manifest this update: Thu 23 Jul 2026 18:00:55 +0000 Manifest next update: Fri 24 Jul 2026 18:00:55 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: yGX76/eC9qplh+iG3BybMFZ17DtPrXZaVh3I+iupuqE=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 8: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 9: SAA7qyjcW84McQBC6YBfHzblJfA.roa (hash: dbjWwV6RFntCa8n+N5y1CE7UmL5X6zdxSBIazMuF9gY=) 10: SAOjAfmVta9T_Ls7ykRFr8U5SYI.roa (hash: r10sWadtpWdod9WG4HGHqPD7qRwz46PwcZV2+I/tlNM=) 11: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 12: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 13: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 14: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 15: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 16: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 17: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 18: zFqREBgVNzI2E15fdQInesLKPTw.roa (hash: NsrPAKNCirfx6K/YKvvDtbYP5Q+iM+dl/3GgSwcg4O8=) 19: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:23:3a:3d:d2:0b:6f:75:2d:e2:94:c1:f3:af:39:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jul 23 18:00:55 2026 GMT Not After : Jul 24 18:00:55 2026 GMT Subject: CN=d8d9f9e5ec75611c18853e8ef26c260d860b8dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ef:77:85:a4:f4:4a:52:4d:fa:be:38:cd:14: fa:b7:0b:d6:6e:08:23:9b:dd:82:bd:44:db:b5:80: cd:ba:91:2d:ed:b7:2a:b8:51:b2:21:c8:9a:0d:3a: 65:d1:2a:3a:0b:59:37:ad:00:12:80:40:39:a8:bb: a3:23:37:49:2e:72:f0:e5:9c:1a:93:d8:bb:a3:42: 69:7b:9d:4b:a0:ff:e5:a5:3c:bf:29:21:93:44:f3: 26:75:aa:ea:e9:c5:11:9f:07:ac:4f:72:b2:1d:11: 72:9d:13:2e:1a:7e:62:e0:dc:87:ef:1f:9c:a1:7e: 1a:1a:0c:7c:e0:68:19:e5:0f:a1:4a:8f:a8:75:b8: 21:38:fc:cf:e0:35:57:08:b0:2a:9b:61:7c:68:18: 69:0c:92:82:0e:91:77:5b:22:8f:1f:8f:a2:55:08: 54:81:a4:ec:c2:90:39:3c:d0:b9:b1:94:81:c0:5b: 1f:6f:e8:7c:b1:48:86:7d:99:f8:d5:d8:f6:02:b0: c5:a0:56:25:c0:be:e7:fd:9a:e1:a8:88:36:82:58: b2:3e:f1:83:03:20:7e:b1:b5:7e:be:a8:ce:f9:07: 78:59:5d:50:68:49:16:39:a6:e6:1d:be:cd:62:14: fe:b8:8d:29:ca:7e:ed:4d:d1:00:8e:e0:c6:46:a6: 03:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D9:F9:E5:EC:75:61:1C:18:85:3E:8E:F2:6C:26:0D:86:0B:8D:BD X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ee:86:3b:16:90:a8:55:7d:14:15:e9:4f:d4:0e:d3:84:9d: a3:98:57:dc:9d:6e:73:31:03:bf:e2:d4:bf:61:59:7b:97:af: ff:f1:ce:80:62:7f:51:2c:c6:ff:b2:a6:9c:a1:c5:2b:fd:84: 0b:1e:a7:1e:86:88:63:87:e3:eb:c1:66:d4:ac:fc:2c:5f:7e: 63:ff:32:d8:db:ec:e9:12:e1:4c:a1:b1:04:1a:9e:ea:f8:49: e2:f5:1b:df:08:d7:e2:04:8a:13:c8:d0:7c:08:8a:93:55:ad: 14:93:88:d5:e6:4b:cf:a4:dc:25:31:5c:18:cd:18:81:94:0a: e4:b6:12:32:78:bb:30:b6:ab:c2:b2:0a:81:69:dd:14:20:5c: e9:d2:21:a3:65:8b:bd:e7:2f:49:25:fa:4b:f0:71:0b:a9:e9: 38:5b:41:87:69:e7:13:16:0a:52:12:24:bf:25:1b:cc:7c:72: c2:99:e8:9c:11:a4:81:0b:3e:91:75:34:85:b0:92:d8:61:b4: 49:6a:5a:f3:19:03:dc:01:af:78:77:43:b3:4b:50:40:91:d4: 82:fa:dd:b5:84:91:8b:cc:37:a3:92:96:00:30:87:46:fd:f5: 1d:c9:39:68:fc:6b:90:5f:ad:40:50:98:82:3f:1d:ed:8f:ef: 04:22:93:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QIzo90gtvdS3ilMHzrzk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwNzIzMTgwMDU1WhcNMjYwNzI0MTgwMDU1WjAzMTEwLwYDVQQD EyhkOGQ5ZjllNWVjNzU2MTFjMTg4NTNlOGVmMjZjMjYwZDg2MGI4ZGJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAse93haT0SlJN+r44zRT6twvWbggj m92CvUTbtYDNupEt7bcquFGyIciaDTpl0So6C1k3rQASgEA5qLujIzdJLnLw5Zwa k9i7o0Jpe51LoP/lpTy/KSGTRPMmdarq6cURnwesT3KyHRFynRMuGn5i4NyH7x+c oX4aGgx84GgZ5Q+hSo+odbghOPzP4DVXCLAqm2F8aBhpDJKCDpF3WyKPH4+iVQhU gaTswpA5PNC5sZSBwFsfb+h8sUiGfZn41dj2ArDFoFYlwL7n/ZrhqIg2gliyPvGD AyB+sbV+vqjO+Qd4WV1QaEkWOabmHb7NYhT+uI0pyn7tTdEAjuDGRqYDFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNjZ+eXsdWEcGIU+jvJsJg2GC429MB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYe6GOxaQ qFV9FBXpT9QO04Sdo5hX3J1uczEDv+LUv2FZe5ev//HOgGJ/USzG/7KmnKHFK/2E Cx6nHoaIY4fj68Fm1Kz8LF9+Y/8y2Nvs6RLhTKGxBBqe6vhJ4vUb3wjX4gSKE8jQ fAiKk1WtFJOI1eZLz6TcJTFcGM0YgZQK5LYSMni7MLarwrIKgWndFCBc6dIho2WL vecvSSX6S/BxC6npOFtBh2nnExYKUhIkvyUbzHxywpnonBGkgQs+kXU0hbCS2GG0 SWpa8xkD3AGveHdDs0tQQJHUgvrdtYSRi8w3o5KWADCHRv31Hck5aPxrkF+tQFCY gj8d7Y/vBCKTlQ== -----END CERTIFICATE-----Generated at Thu Jul 23 22:54:05 2026 by rpki-client