$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft File: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft (raw, json) Hash identifier: Qr4MxbZRv68iFCRA6+G5W8OMqeu4S8aqtjsM9qofQD4= Subject key identifier: 2D:CD:1D:22:32:63:51:E7:FB:CB:B4:51:56:E0:9A:6A:42:A7:B7:8E Authority key identifier: ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C Certificate issuer: /CN=ed6da9e41686d21c12799c8e84b274aa8241508c Certificate serial: 019F8FB4D78C516E4C9CEF9F8A42131D5C07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft Manifest number: 19DA Signing time: Thu 23 Jul 2026 16:00:21 +0000 Manifest this update: Thu 23 Jul 2026 16:00:21 +0000 Manifest next update: Fri 24 Jul 2026 16:00:21 +0000 Files and hashes: 1: 1KzAL4WrD5dhhGZJOCxuUIPFwOk.roa (hash: aO9dX9fJ0rrae7yQKAQfFledrNyIupTZnT+cq07JYUA=) 2: 2fnNi2RG50nUnV2NcaaKxkNfurs.roa (hash: YjCnMRPFuN3k5TRvL6rGrwmbFWVhQVPPpGvWD61uUkg=) 3: 7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl (hash: 4nfgLsiTEf7erAKfnzy+bCA53YdZq18iA8ThfJzddL8=) 4: 88YNLmciNd0j13-H2-rZxVQMdGQ.roa (hash: PZ0hEGC0oEs598gQ8xeAY2EzI4szP3Vs9gNvciW2BKM=) 5: AnqEtz5hZkYAy4yO8qlLikZWRJw.roa (hash: j2OhR3ENDnTZP9Lf8x78QsTXcfAZEG3FS513keiFcpI=) 6: HQdRd7-uxpWaApI_yUxbm_9_dzg.roa (hash: i48eXcWynnm44Ui4IjxVTSgQ+VI6di3z/zykGcaGJUk=) 7: OCuIuLoTyx6UI4cRdqXTZdZqrRE.roa (hash: NtYeBn7vObBSrZet17ESmCNvYRE2bEdCvdV04YI1os0=) 8: RBopAdVF60vgkqykUfTCW-bkIG8.roa (hash: QhamcW1yECyAqJIZtVxwyJIdNVMOgAFF2TzQ8FAjUVo=) 9: RahkU4tOoQngjkSl9mhdDwc4pFU.roa (hash: JWZJdzvFdiQ85WtuycaeUgc1cy9Tzhri/PcDTONVm3Q=) 10: Rsj6R_5dXiHi1eUSKzpDKZzkTiE.roa (hash: nMPA233TUV9gqlw8aP+/RPCmhirOQucfaoSyNAu6fXc=) 11: YUsCKqNl16pDs_8KVE5VLmDFj5M.roa (hash: enLSqBELUYJ70Ss/6MuXxuUTa0RNR44fL5GLxYESEBg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:b4:d7:8c:51:6e:4c:9c:ef:9f:8a:42:13:1d:5c:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed6da9e41686d21c12799c8e84b274aa8241508c Validity Not Before: Jul 23 16:00:21 2026 GMT Not After : Jul 24 16:00:21 2026 GMT Subject: CN=2dcd1d22326351e7fbcbb45156e09a6a42a7b78e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cb:1a:21:3e:b1:61:d1:18:7a:ea:0b:06:1c: 8e:ca:32:1f:df:a3:78:51:5e:96:79:9c:6e:cf:31: d8:38:9d:f7:3a:29:fb:ab:93:c8:25:cd:2f:d5:73: b6:99:e1:98:49:b6:10:49:60:5b:33:38:2e:fe:3c: a3:f6:3a:a5:6f:a6:40:9d:e7:8b:1f:d2:52:01:d1: 52:6b:20:f0:5c:d6:0c:50:68:c3:2d:e7:f2:55:3f: df:d3:05:b9:15:eb:1f:6a:dd:c7:fa:25:e8:6d:18: c5:ce:b8:7d:c7:12:ea:7d:61:6e:0b:e7:af:e3:43: 11:fc:6e:b7:7b:ec:76:d2:57:61:96:9d:a1:9c:d3: 53:56:c7:9a:e5:9f:00:dd:55:bc:50:ee:d7:20:d0: 31:c6:cf:ea:93:6d:af:a2:02:f8:ac:1e:64:f8:a3: 43:29:6c:48:c9:de:0c:df:a2:4b:2e:7a:d2:d8:9b: 9b:c1:a6:0c:e1:82:a8:92:f8:f7:59:9b:e4:4f:9a: f2:3c:b6:63:81:4a:46:ba:a9:33:4d:c0:51:ca:da: a8:49:95:ba:81:51:37:d4:e1:a9:fc:9a:2a:6f:48: 91:d4:93:b0:17:28:6b:b3:31:d7:fd:e4:77:bf:26: 6a:37:fb:2f:a8:fb:6e:93:e8:43:8a:70:51:5c:8e: dc:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:CD:1D:22:32:63:51:E7:FB:CB:B4:51:56:E0:9A:6A:42:A7:B7:8E X509v3 Authority Key Identifier: keyid:ED:6D:A9:E4:16:86:D2:1C:12:79:9C:8E:84:B2:74:AA:82:41:50:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/71/ac017c-ff29-43cf-a3d6-29f1beb2f282/1/7W2p5BaG0hwSeZyOhLJ0qoJBUIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1e:2b:bd:b0:02:3c:3d:72:05:7e:4e:13:cb:eb:9e:6b:b7: c7:5e:67:00:c1:ff:30:22:7b:a2:6b:91:9a:70:20:29:5f:1f: f2:b5:34:d8:db:e3:38:b7:1f:f6:1b:cd:f9:8b:dd:63:09:bc: c1:df:82:91:00:24:cc:12:07:46:08:41:d7:f8:32:c8:4b:ed: 38:ff:dc:d9:11:85:aa:24:f1:fd:02:68:4e:99:66:6d:34:01: 3a:c8:71:4a:53:41:dc:55:1a:77:04:84:05:18:1f:d3:f3:09: 33:8e:2a:21:a4:9d:97:7f:07:2e:92:be:27:3d:68:01:b2:b4: 56:f7:56:23:ed:66:68:99:77:32:d1:35:a4:65:72:97:ac:49: 95:7c:a5:b3:30:54:1a:f6:38:2d:23:37:2f:c1:fb:07:65:d8: 9a:35:3a:fe:08:d2:c9:cc:3b:d0:b8:5e:75:03:d4:36:12:af: 3b:b0:27:b3:84:af:55:c6:55:cf:e0:00:63:0a:10:2b:3a:9b: 94:76:4f:d9:54:be:5d:da:18:0a:3d:5a:d5:74:b7:97:01:a6: 04:88:7f:f7:ad:f7:6f:7f:c6:ec:19:2c:ae:18:31:fc:52:1c: fb:88:81:87:fc:ec:36:2e:47:35:63:31:84:69:e1:8e:73:de: d4:f6:13:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PtNeMUW5MnO+fikITHVwHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkNmRhOWU0MTY4NmQyMWMxMjc5OWM4ZTg0YjI3NGFhODI0 MTUwOGMwHhcNMjYwNzIzMTYwMDIxWhcNMjYwNzI0MTYwMDIxWjAzMTEwLwYDVQQD EygyZGNkMWQyMjMyNjM1MWU3ZmJjYmI0NTE1NmUwOWE2YTQyYTdiNzhlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8saIT6xYdEYeuoLBhyOyjIf36N4 UV6WeZxuzzHYOJ33Oin7q5PIJc0v1XO2meGYSbYQSWBbMzgu/jyj9jqlb6ZAneeL H9JSAdFSayDwXNYMUGjDLefyVT/f0wW5Fesfat3H+iXobRjFzrh9xxLqfWFuC+ev 40MR/G63e+x20ldhlp2hnNNTVsea5Z8A3VW8UO7XINAxxs/qk22vogL4rB5k+KND KWxIyd4M36JLLnrS2JubwaYM4YKokvj3WZvkT5ryPLZjgUpGuqkzTcBRytqoSZW6 gVE31OGp/Joqb0iR1JOwFyhrszHX/eR3vyZqN/svqPtuk+hDinBRXI7cbQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC3NHSIyY1Hn+8u0UVbgmmpCp7eOMB8GA1UdIwQY MBaAFO1tqeQWhtIcEnmcjoSydKqCQVCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYt MjlmMWJlYjJmMjgyLzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MS9hYzAxN2MtZmYyOS00M2NmLWEzZDYtMjlmMWJlYjJmMjgy LzEvN1cycDVCYUcwaHdTZVp5T2hMSjBxb0pCVUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAax4rvbAC PD1yBX5OE8vrnmu3x15nAMH/MCJ7omuRmnAgKV8f8rU02NvjOLcf9hvN+YvdYwm8 wd+CkQAkzBIHRghB1/gyyEvtOP/c2RGFqiTx/QJoTplmbTQBOshxSlNB3FUadwSE BRgf0/MJM44qIaSdl38HLpK+Jz1oAbK0VvdWI+1maJl3MtE1pGVyl6xJlXylszBU GvY4LSM3L8H7B2XYmjU6/gjSycw70LhedQPUNhKvO7Ans4SvVcZVz+AAYwoQKzqb lHZP2VS+XdoYCj1a1XS3lwGmBIh/9633b3/G7Bksrhgx/FIc+4iBh/zsNi5HNWMx hGnhjnPe1PYTHQ== -----END CERTIFICATE-----Generated at Fri Jul 24 00:09:34 2026 by rpki-client