$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft File: EmxmCzD1aSsrFuKJskkBxRj9pSA.mft (raw, json) Hash identifier: fBbDoF9mYnaMjYq7m5c6BN82XCY2deYA9S1Hu0TZlTU= Subject key identifier: 6B:B6:24:43:8B:A7:63:86:7A:9C:E9:5D:56:4A:94:54:39:30:A8:77 Authority key identifier: 12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 Certificate issuer: /CN=126c660b30f5692b2b16e289b24901c518fda520 Certificate serial: 019F8ED9177EC2E073CAD0480C94DA5FF120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft Manifest number: 19E8 Signing time: Thu 23 Jul 2026 12:00:19 +0000 Manifest this update: Thu 23 Jul 2026 12:00:19 +0000 Manifest next update: Fri 24 Jul 2026 12:00:19 +0000 Files and hashes: 1: 6gnkz6OkX6AmjbUFly1wXQMc5Hc.roa (hash: m39tlNEbvl+KvzNcowhejD0YaetaJPWZmQdZ2mQ/k74=) 2: 9mLGCobs8b6fmlZ1T_zH5qZCHLA.roa (hash: xIWAnWYQk4WbKTNaRD60lnYQAHj9+bf9KBsYFY72scI=) 3: EQZgk_3J5Fyc0bcuLI3Yx--EMu8.roa (hash: aY4YMscFsgJkzrPMKTCHKvSIl1+/sZmyY9rhoC43z2o=) 4: EmxmCzD1aSsrFuKJskkBxRj9pSA.crl (hash: b2RwfahoxuBkikWukp+9nQp0wTalF63YidFMfNrzngk=) 5: FKnKoarmmi6ha7YNrynCE7-GlPM.roa (hash: oKaYSJE4mcvvEbQGIWsb5jJI9dhGriaheyAzBdZoE4M=) 6: NOfTkKQFl3ruOsCGzSg45VC6KLA.roa (hash: WoHHZtSZ2RRzNCMrx4Mo4OnnRJ/xg4jH+vJaSGSMeKQ=) 7: OYOS-7oCt8qB-IolnQtbLO6mNJs.roa (hash: chuIv7V7D8ZTIYroROKzsMh/sfUH1MBxL7TmjhgmwAY=) 8: U0jBWIMSXFd0rjWu9nHmYpEjlxY.roa (hash: 8pB3kCXDYDvqkBMxSrDg6IY/CrYSzIC1l2BK7MAfP6k=) 9: gbXhR2uRK-RKCAkCyIxBQwTU87w.roa (hash: XhuCXdBrzSTullx7dBLgYNOs79sf2A0V1FhHe7MzJH8=) 10: hvYamUzrt8l5XxKg3jQF1nquOy8.roa (hash: xNuK7FrZEwKLbPgJUKdky1f1LSPyUxxPzAOoMN9Fs90=) 11: i6gcioIk1jIxZGNq2Keg8xOkBWg.roa (hash: EYNfjU+Znmdq/oFfOoZVDk/plRE4M9DNa/cL2woqZVo=) 12: kZ63SuCSKudhTtGH6_pJGkWdSXM.roa (hash: OQrqf7NPIuBzSyIJdM7aU9Y2d/U+DEvBIbGAvAZyp2o=) 13: nQVtLPwM7Gp6ZCLT9srWcE_wr_U.roa (hash: cKQn/pyHXQYWuoLIUTT0+l/rc5/mbfiSHrwT1Q5Iikw=) 14: t-oE4oy_z3AHnCC0k6oEiP8UMXs.roa (hash: 3g70luAd5CMmu8cTIqcXY5Mx4qPSObAMdcIqmAZokIg=) 15: vCblwnfnVDcB7QAInr9wO3fWjIk.roa (hash: d2afxpid86oKujS9MPLVfD/AYLN6Tg4NNXIDg5DemP0=) 16: wYpMc3njcI8aYZhP5Vx0YCvhxuE.roa (hash: VGQsQDGB5RifV/TxzkNx5BkHOcVUKguaU5IZPPqP/2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 12:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:d9:17:7e:c2:e0:73:ca:d0:48:0c:94:da:5f:f1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=126c660b30f5692b2b16e289b24901c518fda520 Validity Not Before: Jul 23 12:00:19 2026 GMT Not After : Jul 24 12:00:19 2026 GMT Subject: CN=6bb624438ba763867a9ce95d564a94543930a877 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:64:39:84:74:60:b8:ef:b6:41:a3:c5:e8:6d: 50:e9:8b:54:67:ff:de:46:8b:bf:84:02:f9:70:81: a2:1e:69:59:dc:70:27:c0:2c:ea:21:74:d1:d6:61: 19:13:52:fc:dc:99:d8:a8:ec:89:b4:e3:53:01:c7: cc:e6:5b:87:07:8c:ae:9b:b7:fd:25:71:ad:b7:4c: 38:5f:75:9c:7a:2c:70:d4:3f:1b:2f:c4:5a:f6:56: 35:a9:1f:0d:3a:81:1a:aa:f9:b4:16:34:01:7e:ab: b7:58:15:4b:f6:15:1e:1c:cc:61:2a:40:f8:cf:99: f6:52:3a:6a:9c:16:3b:dc:c3:4e:17:fb:53:70:67: d8:84:71:2c:5e:e9:2a:89:e6:db:11:e1:3c:3b:58: 9a:8e:22:bb:8c:fd:46:62:b1:6c:80:90:34:9e:30: c6:3e:b2:4a:ec:7b:c3:c2:ae:fe:48:58:9d:46:6d: 78:ee:79:b4:af:09:1c:db:13:ea:a8:9a:7c:e1:61: b3:8f:d5:6f:22:9c:b4:f6:bc:75:b2:f9:e3:b5:06: 0b:10:12:c1:27:14:61:87:b5:81:ee:77:e2:3a:c2: 9a:dd:bc:4d:02:8f:7f:24:7a:c1:46:a7:95:ff:8a: 05:98:fe:88:fe:3f:e9:d1:3c:f6:50:03:c8:c0:ff: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:B6:24:43:8B:A7:63:86:7A:9C:E9:5D:56:4A:94:54:39:30:A8:77 X509v3 Authority Key Identifier: keyid:12:6C:66:0B:30:F5:69:2B:2B:16:E2:89:B2:49:01:C5:18:FD:A5:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EmxmCzD1aSsrFuKJskkBxRj9pSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/db787f-c27a-4f23-99b2-438acb72fc5b/1/EmxmCzD1aSsrFuKJskkBxRj9pSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d8:d8:30:da:bd:bd:0b:23:29:ba:91:30:de:c9:0f:3b:d4: 3d:67:ef:6b:8d:49:d1:bd:0f:75:0c:93:fa:2d:eb:52:20:52: af:3b:16:5d:9f:4e:45:39:35:42:25:e7:a5:f5:b4:64:bd:48: 9f:32:4e:cb:c3:dd:89:14:4a:58:dc:82:37:85:fc:3f:3a:1a: 96:9a:a8:4b:d1:3d:d1:ac:e2:50:46:66:de:88:7c:7c:8b:c1: b9:cd:2c:04:d3:d4:78:79:cc:6d:88:29:52:c2:5e:99:d1:12: 8d:cb:82:4e:78:5c:45:07:e8:e6:cd:f1:28:62:a5:50:c7:93: d5:7c:2b:9c:76:90:02:f5:11:d1:25:91:d7:b0:6d:72:1a:b0: 1c:38:70:26:68:d7:34:46:43:19:a7:30:10:f9:ae:45:58:d9: f3:97:41:2d:35:27:f1:a0:44:73:ca:2f:85:7f:79:f3:2d:86: 2f:2c:89:94:66:a6:40:d4:dd:3f:40:0a:25:4a:5d:90:c1:20: 3d:20:4b:e4:37:03:9f:20:ec:57:2c:2f:26:da:9f:11:6d:28: 8a:f8:7a:eb:90:b4:f5:d1:ca:08:a8:c7:c9:36:aa:3b:0c:4d: 2d:e1:86:9d:5f:c0:14:08:80:e5:0f:e2:60:3d:3f:83:de:e3: 52:2a:48:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+O2Rd+wuBzytBIDJTaX/EgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEyNmM2NjBiMzBmNTY5MmIyYjE2ZTI4OWIyNDkwMWM1MThm ZGE1MjAwHhcNMjYwNzIzMTIwMDE5WhcNMjYwNzI0MTIwMDE5WjAzMTEwLwYDVQQD Eyg2YmI2MjQ0MzhiYTc2Mzg2N2E5Y2U5NWQ1NjRhOTQ1NDM5MzBhODc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGQ5hHRguO+2QaPF6G1Q6YtUZ//e Rou/hAL5cIGiHmlZ3HAnwCzqIXTR1mEZE1L83JnYqOyJtONTAcfM5luHB4yum7f9 JXGtt0w4X3Wceixw1D8bL8Ra9lY1qR8NOoEaqvm0FjQBfqu3WBVL9hUeHMxhKkD4 z5n2UjpqnBY73MNOF/tTcGfYhHEsXukqiebbEeE8O1iajiK7jP1GYrFsgJA0njDG PrJK7HvDwq7+SFidRm147nm0rwkc2xPqqJp84WGzj9VvIpy09rx1svnjtQYLEBLB JxRhh7WB7nfiOsKa3bxNAo9/JHrBRqeV/4oFmP6I/j/p0Tz2UAPIwP+nuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGu2JEOLp2OGepzpXVZKlFQ5MKh3MB8GA1UdIwQY MBaAFBJsZgsw9WkrKxbiibJJAcUY/aUgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjIt NDM4YWNiNzJmYzViLzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Zi9kYjc4N2YtYzI3YS00ZjIzLTk5YjItNDM4YWNiNzJmYzVi LzEvRW14bUN6RDFhU3NyRnVLSnNra0J4Umo5cFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ9jYMNq9 vQsjKbqRMN7JDzvUPWfva41J0b0PdQyT+i3rUiBSrzsWXZ9ORTk1QiXnpfW0ZL1I nzJOy8PdiRRKWNyCN4X8PzoalpqoS9E90aziUEZm3oh8fIvBuc0sBNPUeHnMbYgp UsJemdESjcuCTnhcRQfo5s3xKGKlUMeT1XwrnHaQAvUR0SWR17BtchqwHDhwJmjX NEZDGacwEPmuRVjZ85dBLTUn8aBEc8ovhX958y2GLyyJlGamQNTdP0AKJUpdkMEg PSBL5DcDnyDsVywvJtqfEW0oivh665C09dHKCKjHyTaqOwxNLeGGnV/AFAiA5Q/i YD0/g97jUipIhA== -----END CERTIFICATE-----Generated at Thu Jul 23 20:27:01 2026 by rpki-client