$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: zSI+R/f12Sr5HaUH8aKAfYXNXKznZrvjWr2OszcfRiI= Subject key identifier: 23:5C:41:B5:8A:1B:43:66:CF:B6:11:0D:6E:78:11:EA:DF:01:5B:17 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 019F909115B2760F890FA366F39C75A4FD40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 19CC Signing time: Thu 23 Jul 2026 20:00:55 +0000 Manifest this update: Thu 23 Jul 2026 20:00:55 +0000 Manifest next update: Fri 24 Jul 2026 20:00:55 +0000 Files and hashes: 1: 1ms-U7GStIQWyhBvk39Pmz4mWvA.roa (hash: lEZsZW9Tv4rbrMsSytyM2px+I6/78sknyWxeRiHKwJM=) 2: 465Kcfdz-gCkfuGZh8doO_u-oWc.roa (hash: +omro3YFQE2sJ1eByZhKP6jW3x+UZ2ptJKtI+7UVFM8=) 3: FudhY_GW4msTOukhgnBFXzVYoiM.roa (hash: 7UgC+06y5UTQvkQ9UgPJMOjARzvFFXEio5n7Jvg4z+k=) 4: HK6BNNsWSLGubaZl3upPyutswvU.roa (hash: WzFjY3CdZWeDvACOL+XKBEMBzEj0lVc25php/SCslcU=) 5: IBvfpHlo0nhBmzHxQLjSRpI2BSY.roa (hash: DAVNHApbGflPu1pSl2KrRTguzWmq2zUGW0dSw+3gnZ8=) 6: LTfWXRthcASup-DyG7vEDraK0EY.roa (hash: whp6f+y/ya/1LAvlaxCVtUimjkVrV3wXO989ASjx2UI=) 7: PUPZ5PDa_TnnNK5CKrAamkbA9qg.roa (hash: mlGNam5OVbUbnfHBcyzvj7iTYMgBLkQF8bhZoX4e0R8=) 8: XZ_A9oOFh615-GWf-jG9mLRl_BA.roa (hash: IjFd4KfJkkTKhVMOqjReLPHCLFxiAiN7OyTxurp0L6k=) 9: cqQ13TfAA2f3o1iYd5u_zHjR1og.roa (hash: PPVmtCcOrF5jhwXK7aADjsl4uaCgfyEm1Gbo+31zhCo=) 10: kCm_uKpWKjhNUczVOAQvBZ4TtMQ.roa (hash: S9J7ulFMDCXhT6uUyj2J+Qhp8QQOqTeuNdKWWsuYDSA=) 11: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: g+gX44FsezKz3f+JLf8tyFMxvB5br1+b+uLLXLf7bQ4=) 12: rEIw8icF5JeHNJs8hiRgw1rRnR0.roa (hash: ZktjBhuI012cqumaMif+o0oMdONZdwewIFYAJ7bf8FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:91:15:b2:76:0f:89:0f:a3:66:f3:9c:75:a4:fd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Jul 23 20:00:55 2026 GMT Not After : Jul 24 20:00:55 2026 GMT Subject: CN=235c41b58a1b4366cfb6110d6e7811eadf015b17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:57:d8:c5:b5:15:7b:75:82:3e:53:83:3c:67: e6:7d:1b:60:f4:d0:ce:06:59:a2:9c:a0:db:84:a3: 77:70:b9:f2:b4:9c:f5:5b:31:98:2f:0c:aa:d0:5f: b9:25:2c:bf:14:e6:9c:37:38:63:1a:62:1a:e6:c0: 8c:08:bd:8d:ad:76:0c:79:3e:9d:54:c0:21:8e:79: bc:3b:65:d1:fc:60:9b:f0:a3:af:3e:09:07:fc:5a: be:22:f2:78:cb:c8:cd:95:0a:5c:b0:a5:ea:b8:9b: 95:39:11:29:5b:5a:c3:94:2c:6f:bc:09:22:6a:bd: 2e:a8:8e:51:6b:46:5d:92:2c:91:28:7e:c1:7a:ee: ec:5c:24:3b:87:6b:ca:20:09:5a:04:86:be:ec:6f: 9b:3c:fa:fc:c7:9d:c5:f5:e7:5e:b0:c6:3f:81:98: ac:82:ae:ac:aa:68:0a:d4:45:f2:fe:59:33:a2:41: 67:a4:b3:c7:d2:85:bb:4f:a5:1b:31:f5:7d:6f:44: b9:44:7e:9a:62:ff:47:26:a3:67:17:67:5e:ae:52: aa:ad:49:8a:f9:f7:57:5f:8c:38:30:b6:28:87:72: ff:f3:4c:cb:17:5f:01:15:b7:15:17:91:71:7b:27: 87:49:2a:08:b5:7e:0e:15:f7:99:ab:e4:5b:61:09: b3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:5C:41:B5:8A:1B:43:66:CF:B6:11:0D:6E:78:11:EA:DF:01:5B:17 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:15:9e:04:f6:3d:a8:40:dc:e6:25:b5:6e:59:c9:fa:3b:ed: 91:f6:c1:93:e5:2f:68:89:88:e1:4f:67:e5:6f:e6:2e:ac:a2: 58:2e:97:02:b8:f0:b0:ba:7b:f2:a0:00:10:44:85:53:26:9e: e6:7b:a6:e2:8f:dd:ba:84:35:da:2a:e4:e8:92:c0:49:97:11: 7b:12:81:2c:e3:41:08:cd:55:e5:5a:b0:74:7d:90:4b:9b:d8: 09:b6:5d:51:55:e5:3f:f4:17:db:a5:54:84:88:6a:39:93:3f: 3a:62:73:e3:0a:62:12:dd:ee:f7:e6:24:39:36:b4:77:58:18: 83:32:94:2b:26:86:f1:67:13:4e:de:54:d9:a2:a6:94:bc:26: c0:84:87:31:50:61:00:9f:6d:cd:b2:73:f4:05:85:de:ae:44: b4:a3:aa:ba:e4:b4:57:a2:51:13:30:c9:c6:e3:d4:b4:10:8e: a5:8a:b1:11:8f:1c:ee:1f:11:8a:32:68:20:97:ff:9d:72:9c: 33:58:8d:7e:b5:50:04:68:c2:65:4c:4e:9e:5f:89:45:c0:73: c6:b6:ac:95:e9:df:00:b5:97:de:39:37:73:2f:5d:3a:ad:0e: ba:e2:e3:c5:5b:ed:be:33:29:77:30:93:21:59:0a:f8:fd:c9: ed:da:de:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QkRWydg+JD6Nm85x1pP1AMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjYwNzIzMjAwMDU1WhcNMjYwNzI0MjAwMDU1WjAzMTEwLwYDVQQD EygyMzVjNDFiNThhMWI0MzY2Y2ZiNjExMGQ2ZTc4MTFlYWRmMDE1YjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkVfYxbUVe3WCPlODPGfmfRtg9NDO BlminKDbhKN3cLnytJz1WzGYLwyq0F+5JSy/FOacNzhjGmIa5sCMCL2NrXYMeT6d VMAhjnm8O2XR/GCb8KOvPgkH/Fq+IvJ4y8jNlQpcsKXquJuVOREpW1rDlCxvvAki ar0uqI5Ra0ZdkiyRKH7Beu7sXCQ7h2vKIAlaBIa+7G+bPPr8x53F9edesMY/gZis gq6sqmgK1EXy/lkzokFnpLPH0oW7T6UbMfV9b0S5RH6aYv9HJqNnF2derlKqrUmK +fdXX4w4MLYoh3L/80zLF18BFbcVF5FxeyeHSSoItX4OFfeZq+RbYQmzhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCNcQbWKG0Nmz7YRDW54EerfAVsXMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMBWeBPY9 qEDc5iW1blnJ+jvtkfbBk+UvaImI4U9n5W/mLqyiWC6XArjwsLp78qAAEESFUyae 5num4o/duoQ12irk6JLASZcRexKBLONBCM1V5VqwdH2QS5vYCbZdUVXlP/QX26VU hIhqOZM/OmJz4wpiEt3u9+YkOTa0d1gYgzKUKyaG8WcTTt5U2aKmlLwmwISHMVBh AJ9tzbJz9AWF3q5EtKOquuS0V6JREzDJxuPUtBCOpYqxEY8c7h8RijJoIJf/nXKc M1iNfrVQBGjCZUxOnl+JRcBzxraslenfALWX3jk3cy9dOq0OuuLjxVvtvjMpdzCT IVkK+P3J7drecw== -----END CERTIFICATE-----Generated at Fri Jul 24 01:51:18 2026 by rpki-client