$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft File: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft (raw, json) Hash identifier: c5VrlZzUSVSxTmeda5SaPyNDBasTXJOui6Y1ixL5fQM= Subject key identifier: D3:5B:04:42:6A:A9:7B:FA:15:A7:75:EA:7B:E8:F0:C5:D9:10:A6:C4 Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888 Certificate serial: 019F8EA2A4F1DB6D5E4AC129CD9DAC20B6ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft Manifest number: 19CC Signing time: Thu 23 Jul 2026 11:00:51 +0000 Manifest this update: Thu 23 Jul 2026 11:00:51 +0000 Manifest next update: Fri 24 Jul 2026 11:00:51 +0000 Files and hashes: 1: 2MINrSF-904_xnWHt9aLmREzfgM.roa (hash: 2JlxQCyPp6ZuyhE6H5mjVo5s7oH/wwZoUZTFvN2689w=) 2: 5ofwE8fWcu41y5nE1W98Xt08B9U.roa (hash: vBHKAReKnkwdzg96lnBkzkJIhU9wk+NEk4UwhyvZN8M=) 3: 6D7xnslgrR1jYkhOQFOsCCy_Ilo.roa (hash: vZ6+RacR9VxPA5+UlqTbSm8U/9rgsp0IuJGD6MdbbQo=) 4: DXimx1XY9etEzx_enIQDGBa9bm4.roa (hash: PZFvhgHYjMFhesaC5VQQRMgpbART5/jL2VnPsqgnMoo=) 5: J1cLQGWUhIVSfZKk_j_qK7xfNRk.roa (hash: txu0I6tcoeoOCvYRp5YDtz869JeJI1kFO2/j3Mpeh2A=) 6: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl (hash: ib4xrnMFonKhMy71LWCxJ/21KDoz2JFE0oPSNw+nbl4=) 7: WzKCG2YANYwDiCPMEDnF3wWEIL4.asa (hash: j0Le2/fYLgItT8RcFxl99L6MkmGjdvtEmpaCnBgE1Nw=) 8: h7z0dcjyEiQrTlWfLJHvO8mytLk.asa (hash: wvs5YngkGWwMTiaT1xG6NC51mWPXd//9JXNAJ/RSeS4=) 9: kOMx0_xNVRgDDoEQ7tlUClFr3ws.asa (hash: 0ziRnXqAEvChx1eTjtol5U+/7UMoVmq7jdKvDvVj9NA=) 10: kjwvRpYiwOhcBYij8xZk0n0qpVs.asa (hash: eLOVHbyXbAmwSoR/i5JEDYllBqHeZO1blxzW1aKtYRM=) 11: taTHP1eAZV5DFgScGmkLmOoYJTk.roa (hash: w4zToqhdyScOj4eQSJZgMvLZqXoAq5qiIOEJ0CUK/zQ=) 12: zh7TzogLebptNJwvcCWZ7OOFbkA.asa (hash: KV2Noq8YepqhgkaIi7JvU21NOnAiECfq1AqTeUrEQYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:a2:a4:f1:db:6d:5e:4a:c1:29:cd:9d:ac:20:b6:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888 Validity Not Before: Jul 23 11:00:51 2026 GMT Not After : Jul 24 11:00:51 2026 GMT Subject: CN=d35b04426aa97bfa15a775ea7be8f0c5d910a6c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:df:2f:2b:74:b5:60:44:9d:b6:c2:61:a8:fc: 14:90:67:00:89:f0:e7:df:09:1b:9b:45:b2:fc:9d: 19:df:87:c6:a0:4f:69:de:88:28:5a:f2:b3:d2:ab: 21:ae:0b:e0:9c:9d:51:5e:a0:16:e6:37:ab:94:15: c1:e9:8e:54:82:64:40:6b:b6:a2:4a:35:b7:e3:c6: d1:b2:5e:03:9f:dc:10:01:bc:06:d8:26:e0:c6:a2: 8b:24:62:80:51:f9:b2:b9:4c:3a:0e:2a:82:f6:b0: 64:d4:5a:e0:90:90:3a:03:99:fc:e3:e4:dc:18:0b: 21:27:93:47:63:f2:07:25:8a:98:ec:de:8d:f4:1c: 1d:9d:a4:ae:23:60:52:38:d3:5c:19:af:15:e6:47: 8b:de:ca:d9:e1:1f:d5:d3:90:af:c3:8a:72:a7:d4: 25:0f:24:7b:9a:c5:13:40:60:57:fb:aa:00:fd:54: ed:5f:3c:36:1a:08:65:b1:66:44:49:42:d5:2a:cf: 9c:10:64:2f:82:a9:ac:ff:d5:41:90:60:95:99:50: 98:f2:fd:8c:03:47:60:5a:70:73:33:10:cf:10:10: 8a:85:c2:14:a9:c3:a1:86:35:47:f9:69:51:62:93: 52:96:db:1f:ff:cc:2b:14:da:cf:7f:8b:8f:2e:7b: 4f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:5B:04:42:6A:A9:7B:FA:15:A7:75:EA:7B:E8:F0:C5:D9:10:A6:C4 X509v3 Authority Key Identifier: keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:93:3a:1e:cf:28:6d:52:49:34:72:10:c3:d3:ae:24:86:ce: 38:8f:cb:8e:23:50:d8:66:f7:ba:35:72:da:c9:9b:6c:74:ba: c6:38:67:62:c4:79:7d:1f:a1:bd:5b:d5:9c:fb:70:5d:ef:74: 4a:28:6b:86:e1:81:d6:87:bf:a6:3d:1f:2c:ec:68:6d:22:51: cf:b6:d0:a5:b4:4d:cb:6f:c7:86:c5:f8:48:3a:e0:6e:2e:9d: 0b:2b:21:b6:49:e7:fd:62:41:4f:a0:f1:0e:8f:b9:e9:0d:74: e9:28:b6:0e:03:b1:d5:8e:e6:25:2f:8c:ad:97:76:e2:54:ec: 70:14:7c:be:f9:c1:ef:ee:e4:83:c2:19:b5:f1:9b:fc:16:cb: a9:9b:b9:09:6b:92:08:43:67:ac:22:c4:85:0a:1e:16:79:a6: 26:32:47:a1:89:e4:e2:ba:65:62:0e:dd:01:54:cf:9b:aa:e5: 7c:0a:c2:4e:0e:c6:05:50:b9:0c:e5:10:0c:2f:16:fe:b1:da: ad:ea:bf:ca:22:d0:5f:2d:e5:a0:6b:05:7e:51:66:92:62:59: fd:d4:65:1e:52:5b:bd:61:46:99:94:b6:3a:dd:cc:dc:08:98: 87:bb:9a:36:aa:d0:23:e6:b7:cf:c2:7b:4f:bd:24:f9:fb:e1: fc:78:3c:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+OoqTx221eSsEpzZ2sILbtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjE3ODhmZTIyMGU0NjQzNDY5MmQxY2M0MzcwNzJkNzky ZDc4ODgwHhcNMjYwNzIzMTEwMDUxWhcNMjYwNzI0MTEwMDUxWjAzMTEwLwYDVQQD EyhkMzViMDQ0MjZhYTk3YmZhMTVhNzc1ZWE3YmU4ZjBjNWQ5MTBhNmM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd8vK3S1YESdtsJhqPwUkGcAifDn 3wkbm0Wy/J0Z34fGoE9p3ogoWvKz0qshrgvgnJ1RXqAW5jerlBXB6Y5UgmRAa7ai SjW348bRsl4Dn9wQAbwG2CbgxqKLJGKAUfmyuUw6DiqC9rBk1FrgkJA6A5n84+Tc GAshJ5NHY/IHJYqY7N6N9BwdnaSuI2BSONNcGa8V5keL3srZ4R/V05Cvw4pyp9Ql DyR7msUTQGBX+6oA/VTtXzw2GghlsWZESULVKs+cEGQvgqms/9VBkGCVmVCY8v2M A0dgWnBzMxDPEBCKhcIUqcOhhjVH+WlRYpNSltsf/8wrFNrPf4uPLntPvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNNbBEJqqXv6Fad16nvo8MXZEKbEMB8GA1UdIwQY MBaAFD6xeI/iIORkNGktHMQ3By15LXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAt ZDk1MDk0NzMwNzJjLzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAtZDk1MDk0NzMwNzJj LzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK5M6Hs8o bVJJNHIQw9OuJIbOOI/LjiNQ2Gb3ujVy2smbbHS6xjhnYsR5fR+hvVvVnPtwXe90 SihrhuGB1oe/pj0fLOxobSJRz7bQpbRNy2/HhsX4SDrgbi6dCyshtknn/WJBT6Dx Do+56Q106Si2DgOx1Y7mJS+MrZd24lTscBR8vvnB7+7kg8IZtfGb/BbLqZu5CWuS CENnrCLEhQoeFnmmJjJHoYnk4rplYg7dAVTPm6rlfArCTg7GBVC5DOUQDC8W/rHa req/yiLQXy3loGsFflFmkmJZ/dRlHlJbvWFGmZS2Ot3M3AiYh7uaNqrQI+a3z8J7 T70k+fvh/Hg8Ow== -----END CERTIFICATE-----Generated at Thu Jul 23 19:04:10 2026 by rpki-client