$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft File: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json) Hash identifier: AXQcdm1D5m/QigsN1OKBVTuzPLEmNX36/3K2nTX6M9E= Subject key identifier: 03:DD:E3:14:38:5A:D2:9D:8C:00:A3:D3:AB:4A:C8:00:AE:5C:61:04 Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 019F9391B8EBAA0EB0C7985952C49B79A441 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft Manifest number: 17F6 Signing time: Fri 24 Jul 2026 10:00:28 +0000 Manifest this update: Fri 24 Jul 2026 10:00:28 +0000 Manifest next update: Sat 25 Jul 2026 10:00:28 +0000 Files and hashes: 1: 1-TT49rcizdqvLPJimvOy2wpPtYY.roa (hash: Mr8ZdwPM/IiY7ibw7JXGQfEO2ReyfLieMRNepnprPzE=) 2: 3JAtxwaL9PZhHZwQTT5YiNh22Fw.roa (hash: CWRHx3TZjefSlBd9NDpJRO/t7H8jBiSewFf17t/Njyw=) 3: 5M5SewMrUcSzlAUU2Y5kgyVPlzU.roa (hash: 5PHuG/2yfg/F7djopO/P8LSJ7njDaw8qARAXQJpOJT8=) 4: 8clp5oorAoBsYchPl6cs1_-_yQQ.roa (hash: aGkbot2FyDEKH3zE5peM5m5OBxwq4qCPpi/iz6/R4Ek=) 5: Cawe25tqfGGJs6n4gKI57FsVYWg.roa (hash: NB+MRtNZHu4vvSgnR8KFr0cA3CZnUgip7ZoVVLCCGZM=) 6: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: gmWQ5f1B5ZfiFUKEQyFWT+fxmqhGrQhylHurLQU3pqI=) 7: OF82b50F4RRpDQH5D4gfKbMSuFU.roa (hash: CW0u7XK/Whu40GYHN4SjzF3iC2jQoiML5rDldm5EIp0=) 8: Tn3PJSMlMlIzmmP-FZ5TPbh397w.roa (hash: G7E+P3kn4Uq0XN1nP2CmPH/f6877A5TCeW8erfewEzk=) 9: YjTpXYu9NyrNBICY01OHLKH6j3c.roa (hash: L0BG0GvSHQmxeE9rdU6fttHmYduY9CqbE/eTXrcQHRQ=) 10: a3_aA8o-Hdj3p1zSlS7CIv-PMNA.roa (hash: d3XqhyCeJJcJXCDGdv5KzGLONzJ74f2hEc/ZEGAlyf0=) 11: fr-QZrPazBBhZoKl5RxUHW_lsyI.roa (hash: baaneFSMPOisaKzNlkgXnvlbeimO3h1V4sE4AAlv6Y8=) 12: gcItYV1e-J4dmkDnznqDmxsYmQk.roa (hash: CqSPJ8JBYKngu+rxorbWDUNYiEfBWAGX/fu3mmNz+QI=) 13: hArmSNbdGOWTCB88yZcFmdYTlh4.roa (hash: 7xymzSJN5yrlSsnHKXxLCTdMfGJHdPCknvmy4DP+pt0=) 14: nHgifZHPBcIw6s06tGKLHCI4zgw.roa (hash: c7ejrTFJgQw1yik3Spq12DDz0GK+Gtiw+nh8SdakP2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:91:b8:eb:aa:0e:b0:c7:98:59:52:c4:9b:79:a4:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Jul 24 10:00:28 2026 GMT Not After : Jul 25 10:00:28 2026 GMT Subject: CN=03dde314385ad29d8c00a3d3ab4ac800ae5c6104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:f8:7d:41:26:41:5c:f3:ac:1b:7f:a5:94:84: 36:45:2a:35:9f:cd:64:c4:44:b3:fc:dd:15:ef:da: a9:38:3e:b7:c1:6d:ca:d3:47:f8:92:47:7f:d5:9a: 0e:c6:e6:e3:98:00:3a:9c:00:f7:ed:88:44:e0:d5: af:0b:22:a3:e2:3f:23:78:11:86:77:e2:f2:ad:60: 3a:00:33:ba:cb:06:64:6e:0a:20:c7:ec:92:d7:d8: 5a:82:55:3b:3b:8b:96:64:02:9c:02:72:51:be:bb: 3b:ec:37:e7:a1:09:a0:3e:13:46:19:35:df:c0:b9: a2:b5:92:1f:5d:92:17:6b:4c:13:b5:6e:6b:62:14: d0:62:ac:e2:fb:99:8b:ae:01:cf:55:ba:c1:29:08: b6:16:71:63:5d:1b:6c:a0:62:6e:78:f1:c5:07:ff: 2d:07:da:56:43:85:0a:38:19:3b:c9:a8:71:e8:07: 06:8a:c4:23:f5:7f:4e:1e:9e:fc:80:e4:d6:d2:f8: dc:e5:56:35:79:f5:e2:41:36:90:50:22:e0:b2:ee: e3:c0:31:e9:4d:64:35:03:3e:e3:d3:58:14:ef:d0: e1:9d:f1:69:da:81:86:73:42:dd:05:d4:d5:cf:d7: ef:61:75:f7:1a:33:39:b8:62:8a:5f:a0:f3:01:61: 0d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DD:E3:14:38:5A:D2:9D:8C:00:A3:D3:AB:4A:C8:00:AE:5C:61:04 X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:73:f1:51:67:64:b6:44:e6:93:78:80:94:25:3b:39:86:aa: 98:cc:c3:b2:6d:55:b2:ac:fa:18:26:50:ab:88:ee:d9:86:bc: eb:fb:33:40:45:96:be:b4:6e:45:fa:66:f4:a7:0e:a2:95:8d: dd:e2:8e:30:8f:67:38:37:7f:28:f4:a9:13:28:55:e7:82:1f: dd:94:f8:08:ab:fa:60:cc:65:6e:a1:7a:74:57:b2:d2:51:d1: 6b:42:08:23:75:96:d3:bd:01:c1:2b:0c:91:ea:80:77:b7:e2: e5:ae:99:43:9c:99:f1:07:9e:fa:08:0a:82:92:ef:cd:63:2f: 31:90:e7:dd:2f:84:0b:2b:e5:40:8b:18:ed:c3:30:d8:e3:e6: f8:ca:d7:8f:7e:54:e6:20:3b:bf:0a:dc:66:3e:e8:e2:e1:fb: 28:9f:ee:4e:c4:96:62:0a:73:bf:cb:b4:6b:c4:b1:64:88:c5: 06:99:9a:13:25:86:b2:0f:27:8d:46:67:a6:d6:a2:19:00:01: 58:e7:8f:b6:75:45:4b:30:67:7e:b3:38:ef:16:10:0e:2c:72: ab:b5:aa:6a:77:56:c7:6b:6e:04:6d:91:a7:87:11:76:5d:06: c1:5f:04:1d:af:81:41:e8:2e:13:03:17:3d:9c:5e:77:b1:bf: 88:92:31:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Tkbjrqg6wx5hZUsSbeaRBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjYwNzI0MTAwMDI4WhcNMjYwNzI1MTAwMDI4WjAzMTEwLwYDVQQD EygwM2RkZTMxNDM4NWFkMjlkOGMwMGEzZDNhYjRhYzgwMGFlNWM2MTA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ph9QSZBXPOsG3+llIQ2RSo1n81k xESz/N0V79qpOD63wW3K00f4kkd/1ZoOxubjmAA6nAD37YhE4NWvCyKj4j8jeBGG d+LyrWA6ADO6ywZkbgogx+yS19haglU7O4uWZAKcAnJRvrs77DfnoQmgPhNGGTXf wLmitZIfXZIXa0wTtW5rYhTQYqzi+5mLrgHPVbrBKQi2FnFjXRtsoGJuePHFB/8t B9pWQ4UKOBk7yahx6AcGisQj9X9OHp78gOTW0vjc5VY1efXiQTaQUCLgsu7jwDHp TWQ1Az7j01gU79DhnfFp2oGGc0LdBdTVz9fvYXX3GjM5uGKKX6DzAWEN/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAPd4xQ4WtKdjACj06tKyACuXGEEMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk3PxUWdk tkTmk3iAlCU7OYaqmMzDsm1Vsqz6GCZQq4ju2Ya86/szQEWWvrRuRfpm9KcOopWN 3eKOMI9nODd/KPSpEyhV54If3ZT4CKv6YMxlbqF6dFey0lHRa0III3WW070BwSsM keqAd7fi5a6ZQ5yZ8Qee+ggKgpLvzWMvMZDn3S+ECyvlQIsY7cMw2OPm+MrXj35U 5iA7vwrcZj7o4uH7KJ/uTsSWYgpzv8u0a8SxZIjFBpmaEyWGsg8njUZnptaiGQAB WOePtnVFSzBnfrM47xYQDixyq7WqandWx2tuBG2Rp4cRdl0GwV8EHa+BQeguEwMX PZxed7G/iJIxIw== -----END CERTIFICATE-----Generated at Fri Jul 24 16:57:31 2026 by rpki-client