$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft File: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json) Hash identifier: GVzCcAo2L7gAROEtQLmzECtfTNK/2ypcZUd97Yga+q8= Subject key identifier: B9:7E:96:1C:E2:46:82:32:46:E4:44:73:54:A1:A9:C1:FB:A5:12:7C Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 019F91A3916750AE9321B9A7E51D1C785790 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft Manifest number: 17F5 Signing time: Fri 24 Jul 2026 01:00:43 +0000 Manifest this update: Fri 24 Jul 2026 01:00:43 +0000 Manifest next update: Sat 25 Jul 2026 01:00:43 +0000 Files and hashes: 1: 1-TT49rcizdqvLPJimvOy2wpPtYY.roa (hash: Mr8ZdwPM/IiY7ibw7JXGQfEO2ReyfLieMRNepnprPzE=) 2: 3JAtxwaL9PZhHZwQTT5YiNh22Fw.roa (hash: CWRHx3TZjefSlBd9NDpJRO/t7H8jBiSewFf17t/Njyw=) 3: 5M5SewMrUcSzlAUU2Y5kgyVPlzU.roa (hash: 5PHuG/2yfg/F7djopO/P8LSJ7njDaw8qARAXQJpOJT8=) 4: 8clp5oorAoBsYchPl6cs1_-_yQQ.roa (hash: aGkbot2FyDEKH3zE5peM5m5OBxwq4qCPpi/iz6/R4Ek=) 5: Cawe25tqfGGJs6n4gKI57FsVYWg.roa (hash: NB+MRtNZHu4vvSgnR8KFr0cA3CZnUgip7ZoVVLCCGZM=) 6: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: rQGCFJYbD2B5jWsUYZ8VAyZFXtCNDIeEcmNF6ZXIqaY=) 7: OF82b50F4RRpDQH5D4gfKbMSuFU.roa (hash: CW0u7XK/Whu40GYHN4SjzF3iC2jQoiML5rDldm5EIp0=) 8: Tn3PJSMlMlIzmmP-FZ5TPbh397w.roa (hash: G7E+P3kn4Uq0XN1nP2CmPH/f6877A5TCeW8erfewEzk=) 9: YjTpXYu9NyrNBICY01OHLKH6j3c.roa (hash: L0BG0GvSHQmxeE9rdU6fttHmYduY9CqbE/eTXrcQHRQ=) 10: a3_aA8o-Hdj3p1zSlS7CIv-PMNA.roa (hash: d3XqhyCeJJcJXCDGdv5KzGLONzJ74f2hEc/ZEGAlyf0=) 11: fr-QZrPazBBhZoKl5RxUHW_lsyI.roa (hash: baaneFSMPOisaKzNlkgXnvlbeimO3h1V4sE4AAlv6Y8=) 12: gcItYV1e-J4dmkDnznqDmxsYmQk.roa (hash: CqSPJ8JBYKngu+rxorbWDUNYiEfBWAGX/fu3mmNz+QI=) 13: hArmSNbdGOWTCB88yZcFmdYTlh4.roa (hash: 7xymzSJN5yrlSsnHKXxLCTdMfGJHdPCknvmy4DP+pt0=) 14: nHgifZHPBcIw6s06tGKLHCI4zgw.roa (hash: c7ejrTFJgQw1yik3Spq12DDz0GK+Gtiw+nh8SdakP2I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 01:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:a3:91:67:50:ae:93:21:b9:a7:e5:1d:1c:78:57:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Jul 24 01:00:43 2026 GMT Not After : Jul 25 01:00:43 2026 GMT Subject: CN=b97e961ce246823246e4447354a1a9c1fba5127c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:02:c2:7c:c2:00:de:bf:51:ab:fe:3b:8f:fc: 04:dc:d8:a3:3c:bb:f2:fe:32:55:f4:a3:51:9e:47: 88:e3:63:9f:40:6d:ee:88:73:e2:b2:d0:d3:68:ef: c7:84:6c:ac:1a:2d:46:98:00:f8:a3:c0:8c:9c:51: 5a:b6:c2:eb:19:81:38:39:75:7c:f6:c3:20:73:10: d0:2d:8a:fd:85:63:df:42:a3:29:bd:2d:ef:e1:8d: 12:63:63:b1:ac:a2:5c:a0:f7:ee:d7:e6:5c:df:ce: af:9c:54:ff:84:e2:6c:1f:71:1c:29:96:ce:bc:ad: 6f:86:7b:09:34:06:dd:08:78:2d:f9:d5:3d:bd:2c: 30:16:6e:b7:1e:2c:b3:33:93:ca:2b:39:2b:72:fa: 60:09:4c:d9:cb:d9:a6:58:fe:24:d8:a9:20:60:90: 08:09:1d:10:c2:3b:bd:08:b3:cb:30:80:47:40:f6: 38:d9:78:69:63:99:fe:16:98:ab:63:dd:ba:d6:1b: 25:16:50:b9:df:ef:7b:d5:31:83:19:5b:0d:8e:3d: 33:13:7f:34:46:0c:e2:1f:58:de:69:74:ae:76:18: 08:6c:9a:28:52:19:c1:44:71:08:8b:af:3e:36:63: c6:8b:40:a2:de:23:e6:ed:1a:9e:b3:55:54:94:8d: 1a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:7E:96:1C:E2:46:82:32:46:E4:44:73:54:A1:A9:C1:FB:A5:12:7C X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:49:42:e1:6d:99:0c:71:74:fe:18:ca:77:79:d8:8a:da:00: 1b:06:44:78:fc:04:30:e3:48:df:b9:d5:a0:e8:f4:3d:f4:2d: 73:73:2d:21:d6:cc:cc:1a:c2:cd:f4:91:1a:2c:f6:3d:ed:cc: f7:93:4a:f5:80:6e:46:74:0d:78:d5:b1:60:65:ae:c6:2b:fb: 37:01:93:fe:a8:7d:4c:56:de:bc:1c:b3:00:3a:1e:93:09:4c: 54:45:ad:10:5b:c2:b9:61:c0:07:e0:87:08:44:19:15:bf:4d: 93:5d:48:9f:8a:6a:c7:9c:64:2b:d4:1b:14:93:1a:ec:e6:be: 41:d3:b7:0d:a7:87:1c:47:7e:30:08:74:05:88:51:fb:98:df: 6e:13:10:78:40:be:00:dd:8d:d5:05:68:a0:44:bf:05:f2:65: ff:f9:3c:a0:c3:00:f9:67:75:e6:23:a8:42:49:52:e5:7f:29: 3c:94:6d:a8:e3:49:ff:a9:7d:03:46:a2:c2:b1:e7:2a:7c:b3: 93:be:76:b6:7a:5a:dc:45:b1:eb:f0:2c:99:a9:f4:84:c5:1a: da:c8:b9:cc:62:25:92:e7:1c:ef:72:de:85:71:e5:2a:2e:b3: da:cc:4c:9a:21:3b:c9:02:72:20:f6:28:76:8d:33:61:ca:21: ad:e0:05:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Ro5FnUK6TIbmn5R0ceFeQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjYwNzI0MDEwMDQzWhcNMjYwNzI1MDEwMDQzWjAzMTEwLwYDVQQD EyhiOTdlOTYxY2UyNDY4MjMyNDZlNDQ0NzM1NGExYTljMWZiYTUxMjdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0QLCfMIA3r9Rq/47j/wE3NijPLvy /jJV9KNRnkeI42OfQG3uiHPistDTaO/HhGysGi1GmAD4o8CMnFFatsLrGYE4OXV8 9sMgcxDQLYr9hWPfQqMpvS3v4Y0SY2OxrKJcoPfu1+Zc386vnFT/hOJsH3EcKZbO vK1vhnsJNAbdCHgt+dU9vSwwFm63HiyzM5PKKzkrcvpgCUzZy9mmWP4k2KkgYJAI CR0Qwju9CLPLMIBHQPY42XhpY5n+FpirY9261hslFlC53+971TGDGVsNjj0zE380 RgziH1jeaXSudhgIbJooUhnBRHEIi68+NmPGi0Ci3iPm7Rqes1VUlI0ahQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLl+lhziRoIyRuREc1ShqcH7pRJ8MB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiElC4W2Z DHF0/hjKd3nYitoAGwZEePwEMONI37nVoOj0PfQtc3MtIdbMzBrCzfSRGiz2Pe3M 95NK9YBuRnQNeNWxYGWuxiv7NwGT/qh9TFbevByzADoekwlMVEWtEFvCuWHAB+CH CEQZFb9Nk11In4pqx5xkK9QbFJMa7Oa+QdO3DaeHHEd+MAh0BYhR+5jfbhMQeEC+ AN2N1QVooES/BfJl//k8oMMA+Wd15iOoQklS5X8pPJRtqONJ/6l9A0aiwrHnKnyz k752tnpa3EWx6/Asman0hMUa2si5zGIlkucc73LehXHlKi6z2sxMmiE7yQJyIPYo do0zYcohreAFeQ== -----END CERTIFICATE-----Generated at Fri Jul 24 11:32:01 2026 by rpki-client