$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft File: 1KdSLSfmKuI6RgFD66ZzO3myRHc.mft (raw, json) Hash identifier: XJ5f4iMeioMjPePiQoXw5fWI3n+HMhBWjSjdjPLli0k= Subject key identifier: BF:35:1D:A7:B8:41:D8:99:07:50:C3:BC:E1:53:3E:D7:4D:42:89:2D Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477 Certificate serial: 019F90C7C0BB0EDD1566171E59D273EE62EC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft Manifest number: 42 Signing time: Thu 23 Jul 2026 21:00:37 +0000 Manifest this update: Thu 23 Jul 2026 21:00:37 +0000 Manifest next update: Fri 24 Jul 2026 21:00:37 +0000 Files and hashes: 1: 1-N-2fC6tfa1s0LvlFU9jMbLrhuE.roa (hash: RE3o5Zu1XdF9S+04ylutP3QqzKtcsQWMmIT7k6SNN/Y=) 2: 1KdSLSfmKuI6RgFD66ZzO3myRHc.crl (hash: OfacRpemXiMuqfbnen3YWYACAFsjd3krQi7AShD8WQg=) 3: 6kERmgZGL5UqVKqbENAa-FNSgHc.roa (hash: AClJH/YtHZ63QiXgfCJgcjixUw8nfxsUu8O75U0YUJI=) 4: AhMkHazE-91WYq1pzL4rD-YgpOY.roa (hash: N7RR15LWLaA1GWhDaUwnFbFOrZQPw3IJjIesRqmsD5I=) 5: CBhFxYlbZteyN6PZ-Vmyl3AaymU.roa (hash: cEqju8RXsbFDyu/dW9+z6y7ODNyFcVjrj9eawVPTsVE=) 6: FkByO5VyomUSANjFcmnEdvz3Cko.roa (hash: z10lQ6g3SDPSArAHievRO6Z2mqsSExBrr1d205CDUP4=) 7: IJAySIrj88My47LJGVkAc9rZDtY.roa (hash: an1H6uRWsmTvyleV0pswewslnipkuBrqpFXZ8x8RXI4=) 8: K7O0xdV18ha5dPNdq-y0BPQgffc.roa (hash: GEqEkzuoCanIwB018rtlec4WErFm2E3DumXI3txV98E=) 9: SKjJw3_dqVQh5tqn8vnBC1JzJSI.roa (hash: FFebWzZWCHdxw5ZCEnSdY08q5KwfVzoC6UmmM8w/pz4=) 10: TqDntdHJZddaYt_ZyotBF9-hm14.roa (hash: VjSEFTxxCdGkCwFWGpwHDnoo4e0X5kbRBsmPmmTPxWI=) 11: WvAmQJBuWNK-A1dgFB9mFwv86Gk.roa (hash: i6VXTVtK2u+Sa4dxw7J/aRal1n9vO5pWlCr6D3BmpWo=) 12: XhZYqo-93sizkFwJq1Oc8KABtwQ.roa (hash: FFax2+o10DIFWYK/5aiR6THgjmcFiIwVqFNYjJSFM+w=) 13: bPSazfrJEoM_auhnCGJjDI29Zwk.roa (hash: pMTZbr0m442O8974ozmFdKCgEYF3GhKq7mIvRyWA1Yc=) 14: jlnRp7Jr9ytnSH4nVGSVmBf_k6o.roa (hash: 7kRo5njKROlYBvZ0FU20K/hBTNAanIB/DZh3W6WgLMY=) 15: q-BhPuQnM-Q-h6hN62IefM9bmG4.roa (hash: OIcCu5qI8ffXeo2TrrcMk7ECFhZnyqwj4znnE1b0z/Y=) 16: wZMooB7OVcFLzuI4NUrersbqikQ.roa (hash: pEN10g0qlhvjBHq9CVkl9+QR6Ky5ASwHfrEgR03oriI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:c7:c0:bb:0e:dd:15:66:17:1e:59:d2:73:ee:62:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477 Validity Not Before: Jul 23 21:00:37 2026 GMT Not After : Jul 24 21:00:37 2026 GMT Subject: CN=bf351da7b841d8990750c3bce1533ed74d42892d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:1b:b9:9b:5a:06:d0:40:de:d3:df:25:a1:b2: d4:f3:51:e0:eb:62:31:12:cf:cf:c9:61:e6:49:ea: 4c:5d:c1:61:0a:86:27:6e:54:ca:9d:da:e1:ef:02: e0:11:ae:e8:d7:0c:d6:28:09:8e:03:90:8d:25:88: fc:fc:65:a6:2b:57:4d:c2:f0:44:17:0a:6a:e3:fc: a0:ed:dc:e7:20:9c:d2:82:02:97:04:3b:e5:8e:51: f7:5c:0f:7f:cb:71:73:9e:5f:3c:ad:66:c6:75:c4: 3c:d6:ea:51:b0:e8:88:ca:a3:ce:51:5a:9a:c0:49: 18:39:e1:ef:e3:8f:12:da:d9:78:f4:ff:d5:fb:91: eb:ae:56:96:d2:5e:67:b2:c0:fa:6c:57:02:9c:48: e8:c1:bf:1f:54:0b:f5:41:3b:35:6b:26:2a:df:e6: 6f:71:6a:b6:34:d6:a0:34:13:fd:4c:9a:ad:6e:a2: b0:21:07:a9:e2:df:c3:05:c4:7e:2b:c7:95:c0:e4: 69:bf:c4:31:07:ca:86:02:fa:12:cf:a0:ff:d6:5c: fc:f5:40:e3:86:6b:1b:a3:44:78:99:08:da:57:5a: 81:5b:50:ec:fb:ad:ee:cb:b1:f5:be:4a:c5:d4:d1: 6c:be:35:a1:5a:d6:6c:46:34:39:59:ce:ab:04:1f: 0b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:35:1D:A7:B8:41:D8:99:07:50:C3:BC:E1:53:3E:D7:4D:42:89:2D X509v3 Authority Key Identifier: keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0d:7a:4b:4f:5b:d2:68:b6:b0:f6:58:67:da:1c:41:ec:ae: c4:2d:92:d5:6f:9c:38:8c:a6:8c:ed:d4:db:d3:56:b1:0c:0e: 70:e7:57:30:b1:96:6c:cf:84:90:d4:b7:2a:8c:38:f3:a1:56: 87:57:b8:1f:c9:d5:d7:2b:ec:9d:b0:90:86:f2:64:0d:7b:1e: 0f:70:f1:c0:5a:f9:de:f6:dc:e3:67:ae:6b:b9:3e:c3:88:b2: 08:4b:d3:30:5e:d6:ef:69:e1:42:b1:09:38:ad:ed:77:56:d7: 24:cc:04:95:db:40:00:b5:dd:08:be:9e:5f:f4:af:a2:f3:fc: b8:b5:a4:7b:e2:3d:8f:f6:7e:e0:4a:48:60:d6:c6:84:58:a4: f6:0e:0f:b1:a2:fd:8e:a3:60:a2:53:74:ed:0b:36:f7:42:21: c5:f2:dd:52:9b:6c:f6:77:73:d1:44:f1:dc:0f:8c:e3:60:68: 01:70:b5:ac:63:1e:a3:a4:0d:37:2b:da:cd:b9:9c:30:db:1c: cd:97:b2:ce:49:01:2b:f3:c2:69:1b:fd:c3:34:89:11:ba:72: 5c:5f:d8:b0:09:15:64:74:64:64:92:b9:3c:94:ac:06:8d:6b: c6:49:61:bf:a0:2a:3a:c7:44:b0:ba:2b:8f:67:13:30:15:b1: 3e:4a:25:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Qx8C7Dt0VZhceWdJz7mLsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YTc1MjJkMjdlNjJhZTIzYTQ2MDE0M2ViYTY3MzNiNzli MjQ0NzcwHhcNMjYwNzIzMjEwMDM3WhcNMjYwNzI0MjEwMDM3WjAzMTEwLwYDVQQD EyhiZjM1MWRhN2I4NDFkODk5MDc1MGMzYmNlMTUzM2VkNzRkNDI4OTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRu5m1oG0EDe098lobLU81Hg62Ix Es/PyWHmSepMXcFhCoYnblTKndrh7wLgEa7o1wzWKAmOA5CNJYj8/GWmK1dNwvBE Fwpq4/yg7dznIJzSggKXBDvljlH3XA9/y3Fznl88rWbGdcQ81upRsOiIyqPOUVqa wEkYOeHv448S2tl49P/V+5HrrlaW0l5nssD6bFcCnEjowb8fVAv1QTs1ayYq3+Zv cWq2NNagNBP9TJqtbqKwIQep4t/DBcR+K8eVwORpv8QxB8qGAvoSz6D/1lz89UDj hmsbo0R4mQjaV1qBW1Ds+63uy7H1vkrF1NFsvjWhWtZsRjQ5Wc6rBB8L8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL81Hae4QdiZB1DDvOFTPtdNQoktMB8GA1UdIwQY MBaAFNSnUi0n5iriOkYBQ+umczt5skR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAew16S09b 0mi2sPZYZ9ocQeyuxC2S1W+cOIymjO3U29NWsQwOcOdXMLGWbM+EkNS3Kow486FW h1e4H8nV1yvsnbCQhvJkDXseD3DxwFr53vbc42eua7k+w4iyCEvTMF7W72nhQrEJ OK3td1bXJMwEldtAALXdCL6eX/SvovP8uLWke+I9j/Z+4EpIYNbGhFik9g4PsaL9 jqNgolN07Qs290IhxfLdUpts9ndz0UTx3A+M42BoAXC1rGMeo6QNNyvazbmcMNsc zZeyzkkBK/PCaRv9wzSJEbpyXF/YsAkVZHRkZJK5PJSsBo1rxklhv6AqOsdEsLor j2cTMBWxPkolwA== -----END CERTIFICATE-----Generated at Thu Jul 23 22:46:07 2026 by rpki-client