$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft File: RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft (raw, json) Hash identifier: j9kOVIX1blgelBDZ84ebAP1tn2XD/PWsv6GXzdpEXWA= Subject key identifier: BE:1E:4C:90:28:13:17:F9:AB:F9:54:F6:40:51:B6:73:A5:8E:32:6F Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33 Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533 Certificate serial: 019F935C41D2CC617F8925E4061C6FEAE8D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft Manifest number: 41 Signing time: Fri 24 Jul 2026 09:02:04 +0000 Manifest this update: Fri 24 Jul 2026 09:02:04 +0000 Manifest next update: Sat 25 Jul 2026 09:02:04 +0000 Files and hashes: 1: 27SFGjL64PRRMSLcGYBH49SrHwY.roa (hash: PITM8gWftdzoJkt0rkZ9FWqRBqnEUQ3T5vRe+zc5/CY=) 2: 5tISpF8rQEYFqX2FwQmh5rWJ0Zk.roa (hash: AczR6yQs7ci1IaX5b+iS3KJri6446eAoxlf9O/ku2LE=) 3: CFo5ABZ8MUKR3Fd6UO8--zq7M8k.roa (hash: 2+XQO3qwflJmVUasaub9xdlpRBF+UPsxhcWzlGiEL9U=) 4: CJ-zj836A3TR54KML6nA2kNlyiY.roa (hash: AuGdHKTStnhkWfUpHj8s2x6Pp9jt1yZgqVw4hJJIo3Y=) 5: HLt3ChQvLj8LY2RlhdFsx32ZjtQ.roa (hash: wKiOyGKSsl/R2H5PXAn1g9VUgp4V7yTcuvPe7XIgMUI=) 6: N1LDUBXoMuyaQ5RB_L5TdL6A_bo.roa (hash: ydFk7XHt/wPpdtN+nRxyF+IGde9jjOJbhdYJVNBXgSE=) 7: RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl (hash: 8caz+kGbPid7TG1TdsV+Hd30lRNLEOx6P0NkgBZisVU=) 8: fJB8oRf1C6vKaO7myZ7LMHrSK0E.roa (hash: Z3DT4Iuv/+d3kQTawlogZW0GVTOl0W6XRptIt8v4Yuc=) 9: nk9xUVbrQk03Ta5kBEtwBRsxj3o.roa (hash: y8rjtAjlPGYqktsMfNPd+YZPmUHg0mqok5iv3DPzIpQ=) 10: qfTY39j6wENhgC39URgloBvaDwc.roa (hash: MJgSYqEnjtZo7TnO5PmqwrhzDK5fq5ePybyEEHZ72Z8=) 11: xNYBtHtKlWI4iA2yM39CNxxB3YE.roa (hash: c5VvgWr2oNDztERgklFXuCsqKhPSllyvYEbuD8nPSxI=) 12: zaDnFGvlfelI_tMjoTP339vPBGw.roa (hash: 6zQB6LLudq9lrD59fSKuhQnrVhHCZxEGxEn2HPI44zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:5c:41:d2:cc:61:7f:89:25:e4:06:1c:6f:ea:e8:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533 Validity Not Before: Jul 24 09:02:04 2026 GMT Not After : Jul 25 09:02:04 2026 GMT Subject: CN=be1e4c90281317f9abf954f64051b673a58e326f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cc:5f:6d:b2:62:b6:0c:e1:e6:f0:4f:12:3e: a0:fd:fc:bf:3e:f5:e9:30:72:27:34:3e:fc:27:6b: e9:ac:53:8b:af:71:89:b6:80:e1:c4:16:d1:86:7e: e6:6d:d3:ca:e4:d7:31:48:73:23:08:0c:48:71:24: 44:c1:6c:8c:3e:3a:ab:20:b7:1c:c6:db:e2:0e:b2: 08:b0:63:c9:f7:e6:bc:9a:24:25:53:14:10:5d:e8: 2f:7c:45:fb:b7:42:1c:95:ac:db:3f:e8:c1:62:e9: 15:60:52:31:a5:8d:93:82:76:f8:39:f9:97:2f:0a: e3:ef:e0:b6:c8:49:7a:92:26:fb:db:f6:0d:5f:d5: ec:f9:65:a4:be:b3:24:5c:72:83:e8:0c:08:91:de: 36:f2:48:d7:51:a5:2f:fd:34:ce:da:0c:af:43:39: 58:e7:f5:77:65:06:f7:5c:96:b8:05:fd:3a:40:03: 35:e9:47:2a:f4:39:28:ac:9a:53:2a:50:d6:c7:ae: a0:71:67:02:c2:2a:2d:2c:b5:36:1e:e9:3c:62:99: ca:a9:13:a9:f8:4f:86:cc:ba:3a:79:54:9a:cc:38: 29:92:01:0b:76:04:69:ee:a1:ee:84:04:bc:85:f4: 2b:0c:e8:56:bb:b3:00:f9:05:35:ee:ca:34:de:d5: a5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:1E:4C:90:28:13:17:F9:AB:F9:54:F6:40:51:B6:73:A5:8E:32:6F X509v3 Authority Key Identifier: keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:67:50:2b:85:1a:6c:b5:a2:27:e7:dd:68:a1:c4:0c:c7:cd: e2:ae:40:8d:ae:e1:4f:26:b9:a5:c1:a8:d2:ab:66:a5:7e:7c: 7a:0f:d7:c5:38:0b:03:ea:73:4c:44:59:33:16:19:17:95:46: 6f:5e:fa:15:ef:69:8a:3f:d3:08:01:f1:ca:ff:bf:5c:7f:37: 1e:7a:d0:63:a5:9d:ed:35:a8:ce:8a:47:9d:e9:2f:0f:e6:0c: 34:a1:f0:03:aa:a8:b5:0d:58:28:4e:c0:af:23:fa:94:cf:7b: be:bd:a5:28:a7:9a:66:96:4a:92:fd:ee:e8:44:4a:7d:42:cb: 06:e5:82:76:0b:2f:a2:04:7a:14:ed:dc:90:5d:f9:f1:37:92: 7d:ca:32:5b:3b:a1:b2:a0:62:d6:8a:4e:db:6d:1e:f5:05:c5: 35:e4:1e:3e:df:ae:73:84:6a:46:cb:fd:3e:f8:b7:4c:5b:b4: 4c:07:d8:bd:d8:67:93:7b:17:78:c5:de:f5:a4:a7:7d:aa:eb: 70:79:00:f0:af:96:ef:f9:dd:e8:41:85:9a:54:a2:37:20:bd: 01:bd:7b:68:06:ee:f0:f2:89:e9:04:be:e8:ab:4d:c9:c1:3e: 29:50:b7:21:69:d5:df:b2:16:31:51:39:6c:6d:cf:3f:56:26: 45:62:79:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+TXEHSzGF/iSXkBhxv6ujSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTkxMjA4MDljMjNiZjMwMzNlM2Y1NzM5OTUyNzZmMGM3 YTI1MzMwHhcNMjYwNzI0MDkwMjA0WhcNMjYwNzI1MDkwMjA0WjAzMTEwLwYDVQQD EyhiZTFlNGM5MDI4MTMxN2Y5YWJmOTU0ZjY0MDUxYjY3M2E1OGUzMjZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMxfbbJitgzh5vBPEj6g/fy/PvXp MHInND78J2vprFOLr3GJtoDhxBbRhn7mbdPK5NcxSHMjCAxIcSREwWyMPjqrILcc xtviDrIIsGPJ9+a8miQlUxQQXegvfEX7t0IclazbP+jBYukVYFIxpY2Tgnb4OfmX Lwrj7+C2yEl6kib72/YNX9Xs+WWkvrMkXHKD6AwIkd428kjXUaUv/TTO2gyvQzlY 5/V3ZQb3XJa4Bf06QAM16Ucq9DkorJpTKlDWx66gcWcCwiotLLU2Huk8YpnKqROp +E+GzLo6eVSazDgpkgELdgRp7qHuhAS8hfQrDOhWu7MA+QU17so03tWlzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL4eTJAoExf5q/lU9kBRtnOljjJvMB8GA1UdIwQY MBaAFERZEggJwjvzAz4/VzmVJ28MeiUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmdQK4Ua bLWiJ+fdaKHEDMfN4q5Aja7hTya5pcGo0qtmpX58eg/XxTgLA+pzTERZMxYZF5VG b176Fe9pij/TCAHxyv+/XH83HnrQY6Wd7TWozopHnekvD+YMNKHwA6qotQ1YKE7A ryP6lM97vr2lKKeaZpZKkv3u6ERKfULLBuWCdgsvogR6FO3ckF358TeSfcoyWzuh sqBi1opO220e9QXFNeQePt+uc4RqRsv9Pvi3TFu0TAfYvdhnk3sXeMXe9aSnfarr cHkA8K+W7/nd6EGFmlSiNyC9Ab17aAbu8PKJ6QS+6KtNycE+KVC3IWnV37IWMVE5 bG3PP1YmRWJ5rA== -----END CERTIFICATE-----Generated at Fri Jul 24 10:42:09 2026 by rpki-client