$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft File: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft (raw, json) Hash identifier: wmp4uNUSebcTXxZASdMoohLO7uG8wNmVEe7MlLmYmcE= Subject key identifier: 71:20:07:BD:23:33:73:8F:C4:77:47:4F:F3:0C:79:46:71:D5:1B:A6 Authority key identifier: 02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 Certificate issuer: /CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Certificate serial: 019F90FF7DA3426E3B12DC0AEAA63415E5EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft Manifest number: 19D4 Signing time: Thu 23 Jul 2026 22:01:30 +0000 Manifest this update: Thu 23 Jul 2026 22:01:30 +0000 Manifest next update: Fri 24 Jul 2026 22:01:30 +0000 Files and hashes: 1: AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl (hash: u3EvpCtd+xeV2/94RiPoDC4ftIDI/ejRfTF4wDhgiYo=) 2: B2_FH3MtZlTaOE61buYvXBJKW2E.roa (hash: 55aVAj571Q8/h0HvcQ8YQch6oVhSxMht9hvb0pWG9xs=) 3: EEeXG249QHXtZie6S6hEWpfPs0c.roa (hash: j08Df977nprNp/2GNZ8F6Ri2LTHGQNefm3+Va3aCg1U=) 4: MGuxpogPtwMAFTldHDnEUIBskKY.roa (hash: aRVSa83OdI8eRXcO3WQLPs6YeURGIYliffVNH5moLlY=) 5: OKgmTupzmnhPk0hOIeK3giJ9QaM.roa (hash: vJ5CbfHEFcPbyEC4jXFH5FpTTJogOrELHCnjQEMwhv0=) 6: UuScKKPZU-rxDshW6inBZKRJIH0.roa (hash: oIb88lrmIIDaodPcRGV8PcCWp69cVR7+uTDhUXF8D0A=) 7: ZW_uWUofk0PVk5ZvUH4CXwMQf9k.roa (hash: nMPGS72S0ymOk8yKU1XMgfQYFC4FprUwCeSnvYRogMM=) 8: g_sMt-IMPWFoRArZv0JnssQdxVE.roa (hash: i/F8rrQv+RNHw3Z6W9+3AF4oOHslAP0uqvWz8gg4Un0=) 9: tNc2jSWdykqlG-PkB4v9MVhio4k.roa (hash: k9a+KYr8wPbQKXd8Zqw2THkgTe3lauXtnm8eqnhZ3Nk=) 10: yn0AIXSmQUy2ZdVLfREbNPEMx98.roa (hash: 0/gDR8MJ30pXw1A6bmuJms9g1333tYlKxF2lIJS3jtE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:ff:7d:a3:42:6e:3b:12:dc:0a:ea:a6:34:15:e5:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0232a4bfb7796405a556b759f1d193e4c4d37129 Validity Not Before: Jul 23 22:01:30 2026 GMT Not After : Jul 24 22:01:30 2026 GMT Subject: CN=712007bd2333738fc477474ff30c794671d51ba6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d9:e2:ef:95:4a:99:0f:ea:fa:db:42:b2:33: e3:ad:fa:b3:65:3e:c4:13:49:48:d0:1d:31:72:d2: af:f1:63:f1:cf:99:51:8f:4c:c3:6c:91:ad:be:5a: 19:fd:d5:48:5d:0c:ff:95:a0:92:35:bf:7a:ed:ea: 56:db:ae:d0:ca:e3:86:6f:85:27:63:6f:7c:f8:7e: 4e:43:32:76:9d:5e:25:e2:67:51:14:fc:6d:17:90: 39:c4:c8:6e:be:07:53:39:cb:e1:39:bc:9f:2e:39: ec:41:60:07:c5:36:1b:e8:14:20:33:f7:34:e7:de: d2:f1:ca:20:d2:cc:2d:32:e2:3f:b3:ca:95:0b:d5: 1c:2d:eb:56:90:90:21:5d:21:8b:20:a3:73:fc:e6: c6:d4:ef:19:e2:c8:a6:4e:56:21:0d:c0:3b:cc:91: 6d:d6:76:56:dd:b5:a5:c4:d3:2a:ad:50:ec:5e:bc: 54:58:6e:0b:a8:e4:07:3b:e3:ae:c3:14:c0:55:eb: fa:6d:f6:03:c4:e5:8f:13:8b:c6:eb:93:08:9d:f9: 5d:24:7a:7a:21:61:48:5c:f7:f9:3d:00:65:72:1c: 38:65:85:02:39:cb:2a:ca:f5:c0:95:b4:88:8b:f8: 06:0f:59:5f:df:8f:9a:8b:d1:58:3b:e3:be:39:d1: fb:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:20:07:BD:23:33:73:8F:C4:77:47:4F:F3:0C:79:46:71:D5:1B:A6 X509v3 Authority Key Identifier: keyid:02:32:A4:BF:B7:79:64:05:A5:56:B7:59:F1:D1:93:E4:C4:D3:71:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/81/a7ce7a-8443-46eb-8cba-3bb4d6200518/1/AjKkv7d5ZAWlVrdZ8dGT5MTTcSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:68:69:98:1d:b5:bb:76:4a:da:04:42:c7:a7:a9:2d:46:f0: c9:00:34:ed:75:ae:af:08:e1:96:2e:5e:9c:8a:9c:74:1e:f6: 75:ad:06:52:f7:ee:37:cd:1e:5c:bb:6c:62:21:d8:d8:86:8a: d3:3b:a1:8b:18:2c:42:a6:49:46:27:ce:4b:f7:06:88:a2:b6: d4:ef:7e:3b:4e:c8:f1:67:ff:59:9c:e1:3c:d3:bf:fc:a4:58: 59:1e:07:f3:97:4f:aa:a4:25:fa:9f:09:39:32:ac:21:5e:13: ad:13:b4:08:ed:3d:d8:8b:10:86:ca:1b:43:ee:60:b1:59:cd: 63:62:bd:4c:3a:a8:43:39:0a:1f:32:be:36:99:9b:09:5b:9c: 73:82:a6:9c:db:fa:2e:60:88:01:39:25:54:de:4d:f2:39:06: 66:6a:ea:aa:73:8b:9b:e2:7e:d1:f3:b2:9d:f2:c8:ff:b0:de: 39:29:89:63:ec:61:e4:a2:9c:25:a1:30:b1:7e:de:f0:81:c0: ca:5c:eb:52:c8:8d:98:19:6f:b8:bd:04:ca:96:ff:f0:30:3c: 65:91:29:0e:1c:0d:b8:c6:c8:12:5b:95:0d:ae:77:f9:35:3a: bf:bd:fa:81:3a:1b:af:d5:40:13:44:eb:63:fc:f3:5e:6a:43: f6:63:07:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/32jQm47EtwK6qY0FeXvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAyMzJhNGJmYjc3OTY0MDVhNTU2Yjc1OWYxZDE5M2U0YzRk MzcxMjkwHhcNMjYwNzIzMjIwMTMwWhcNMjYwNzI0MjIwMTMwWjAzMTEwLwYDVQQD Eyg3MTIwMDdiZDIzMzM3MzhmYzQ3NzQ3NGZmMzBjNzk0NjcxZDUxYmE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndni75VKmQ/q+ttCsjPjrfqzZT7E E0lI0B0xctKv8WPxz5lRj0zDbJGtvloZ/dVIXQz/laCSNb967epW267QyuOGb4Un Y298+H5OQzJ2nV4l4mdRFPxtF5A5xMhuvgdTOcvhObyfLjnsQWAHxTYb6BQgM/c0 597S8cog0swtMuI/s8qVC9UcLetWkJAhXSGLIKNz/ObG1O8Z4simTlYhDcA7zJFt 1nZW3bWlxNMqrVDsXrxUWG4LqOQHO+OuwxTAVev6bfYDxOWPE4vG65MInfldJHp6 IWFIXPf5PQBlchw4ZYUCOcsqyvXAlbSIi/gGD1lf34+ai9FYO+O+OdH75wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHEgB70jM3OPxHdHT/MMeUZx1RumMB8GA1UdIwQY MBaAFAIypL+3eWQFpVa3WfHRk+TE03EpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEt M2JiNGQ2MjAwNTE4LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MS9hN2NlN2EtODQ0My00NmViLThjYmEtM2JiNGQ2MjAwNTE4 LzEvQWpLa3Y3ZDVaQVdsVnJkWjhkR1Q1TVRUY1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEmhpmB21 u3ZK2gRCx6epLUbwyQA07XWurwjhli5enIqcdB72da0GUvfuN80eXLtsYiHY2IaK 0zuhixgsQqZJRifOS/cGiKK21O9+O07I8Wf/WZzhPNO//KRYWR4H85dPqqQl+p8J OTKsIV4TrRO0CO092IsQhsobQ+5gsVnNY2K9TDqoQzkKHzK+NpmbCVucc4KmnNv6 LmCIATklVN5N8jkGZmrqqnOLm+J+0fOynfLI/7DeOSmJY+xh5KKcJaEwsX7e8IHA ylzrUsiNmBlvuL0Eypb/8DA8ZZEpDhwNuMbIEluVDa53+TU6v736gTobr9VAE0Tr Y/zzXmpD9mMH4A== -----END CERTIFICATE-----Generated at Fri Jul 24 03:00:49 2026 by rpki-client