$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft File: gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json) Hash identifier: P8w8RFlGCqmJJSR/laB3Iam+fVCOaBvn8I6EEpldiy0= Subject key identifier: 65:96:2F:C6:5B:B1:68:88:38:5F:7B:45:90:F4:47:73:01:9D:07:29 Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 019F92EDBCD67B8515D39C3A8FB9ED93111E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft Manifest number: 1A57 Signing time: Fri 24 Jul 2026 07:01:21 +0000 Manifest this update: Fri 24 Jul 2026 07:01:21 +0000 Manifest next update: Sat 25 Jul 2026 07:01:21 +0000 Files and hashes: 1: 1-UMvRKVvD5QzsC1RJIFAioK-mEs.roa (hash: cY/EkTeqSslspKNTMCfMPqb7ocfNcYNdxMAXgd+AwHE=) 2: 1-ujynZWH9--RNNC5_Uk-oM46YWY.roa (hash: Z97zfAIXnGKGU4beYEDjMrYWLoViOMxIYSMPQ34jGYc=) 3: 3yh-cYJ83qkN3q-7nEdcSlIj_20.roa (hash: dzEvA83A9jCVdqMsmWHuaDF5o7orRdQLIGhwCqyVCPI=) 4: 459DwuTQ4u0L5Vb8ymCw0jAhBow.roa (hash: R0D1GwtAzqy7rVtSGPweXeDbIoiclk2OGprKctUsxyE=) 5: 4eivQ2nDLeDdl1fAIHvWW6YvmGo.roa (hash: bAX+3N2k8RlvVykaPe2LmehMRssiIT2G4C0pgs5YX9k=) 6: 5hLk4CzA74yVnJ8R2Lz9mlfqzdI.roa (hash: 5TCFaKhrSo2pvg2qnUOf/Mpxm8y6kaDaGlkmH+sSYm0=) 7: AlXg91UMAygxLeoq_VpzKVSK-zI.roa (hash: eUqHFEnUoHvc5mCAUj3SUrBYfTcyscIn0nZYAYnkeo8=) 8: BxGrV8A6iDDKjqHMu12FNwL2n3Q.roa (hash: pM719+JyUQctGBU4zyYhSazZkgZQIBOvLFuwl/fwC1A=) 9: PrN6TL7TtAeV1Kzfy5uz84FNxCQ.roa (hash: WU2WteFRJR30574R62tbwvUvfmw2wupr5nuVewCjZe8=) 10: ROZhmusy1NDknUF5aPaZGu5NXA4.roa (hash: UAuXcLj79aVhKSKK569wYuvrITgWR3uMrjyjPiEXMnE=) 11: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: Zvd2mBxQDHSeIH7nuVwd5jCiQtQCRWVLCBVIJUI4Ei8=) 12: hCfYHkk0WVWAVNiGnZaMduxS2MM.roa (hash: sHk1k6gDs5FjVUXp9YDHQ14y++c+/P5klSoklKCCrLU=) 13: qg_AUns1ULnckQ6SEkH15wSqQPc.roa (hash: 2QjfZoa17nRJGkj/6rKQNzT9ZI7PA+FI8cJrxLBYQjU=) 14: uWmLk5k2zxERG5iAn6QzDWqDfPs.roa (hash: pll+MttvkQdtFZD9rTubFBhF/TVVXiRM3xiehM6Bwxg=) 15: x--VU7ZbGYFtGJI4ezWE-LDaQNI.roa (hash: zVsZGJ3VSfQ6Ddsl5FH2swWgU1UOjj4mJWMcxek3/Sg=) 16: y0zMwdSwGtQEmOU3aRXHZ8EL8YE.roa (hash: uI9dK4uYXwCbZuxbLt/XYfybwdAuEEb0OVH5sk0u+/k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 07:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:92:ed:bc:d6:7b:85:15:d3:9c:3a:8f:b9:ed:93:11:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Jul 24 07:01:21 2026 GMT Not After : Jul 25 07:01:21 2026 GMT Subject: CN=65962fc65bb16888385f7b4590f44773019d0729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b0:47:c5:d2:2c:1a:44:fe:c2:38:d4:0b:11: 4e:68:e6:11:a6:f7:1c:84:b9:f1:97:e4:08:ba:c1: 7f:bf:3c:d5:57:bf:f7:74:a5:8e:88:c5:31:1b:42: ea:42:55:d6:e9:82:d5:f3:42:b1:a9:d2:da:06:28: fe:5d:6f:74:43:35:d2:30:be:2d:4a:34:70:ef:f3: 2a:78:b2:f5:88:34:2f:d3:39:3e:c6:8b:9b:78:c1: 3f:19:4e:bf:e5:a2:46:5f:f3:69:a2:6a:7d:20:ab: 51:0c:5e:c9:e8:64:de:98:46:6f:6a:fb:bc:a9:c5: c5:ea:1c:bc:c3:bd:3c:b4:34:81:9a:59:31:88:f1: af:e3:85:1a:07:a0:73:50:d0:67:13:41:e3:8d:4e: b3:89:d1:e2:74:82:ff:d9:74:b0:83:83:60:6d:06: 99:39:ab:7a:d3:52:4e:91:ae:e4:61:da:bc:0b:6d: a9:aa:61:90:0a:85:bd:f7:da:58:56:52:e1:ce:c1: 0f:38:2a:26:1d:38:e6:91:36:29:68:b6:56:70:a4: 7c:df:e4:9c:0c:b0:f8:a6:00:bc:98:ef:cf:e1:3a: e9:d7:57:17:ec:9b:26:d3:35:59:b9:06:32:d6:18: e5:25:cf:e7:94:90:30:fd:ae:bf:d3:99:af:09:11: 3d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:96:2F:C6:5B:B1:68:88:38:5F:7B:45:90:F4:47:73:01:9D:07:29 X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:7f:fd:35:22:08:c4:30:93:35:c4:cb:a7:6d:31:1b:cd:aa: cd:27:1f:fc:01:11:8e:a4:01:8c:2a:30:c7:aa:87:4a:68:4c: 04:94:49:3c:1d:b5:98:b3:6b:34:3a:bd:3b:b0:00:1a:49:67: 6a:6a:ee:11:ec:0f:da:d3:16:7a:57:29:e8:06:47:11:94:c8: f4:f5:b4:63:95:fb:5c:dc:85:96:88:4d:d8:66:06:53:b8:38: b5:ed:a5:81:fe:1c:16:ee:d5:f0:21:72:0d:c1:23:ea:50:67: 63:85:77:b5:f9:98:ff:12:44:53:c8:19:cb:da:be:ce:7a:45: 08:2f:22:d0:8a:c6:f3:d1:62:e0:2d:5d:42:78:c9:24:ee:16: 5f:b4:dd:2b:07:f9:d0:20:f5:3f:d8:ae:3e:0c:62:0b:8c:b0: 70:46:7b:f6:c4:b4:6a:92:fa:6f:04:d6:77:8a:87:a5:82:d2: 3e:ee:c4:ab:9b:f0:ad:35:8d:e0:34:34:5e:dd:d0:b0:4e:6f: e0:2c:c0:87:3f:6b:e7:43:31:09:18:07:7c:6e:47:04:ec:cc: c8:16:91:3d:4d:50:1e:1f:d7:9c:0c:1d:cb:83:1b:23:22:74: 13:2a:23:f1:18:66:69:41:1b:e5:88:fd:fa:7f:b4:93:dd:9f: ed:b5:60:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+S7bzWe4UV05w6j7ntkxEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjYwNzI0MDcwMTIxWhcNMjYwNzI1MDcwMTIxWjAzMTEwLwYDVQQD Eyg2NTk2MmZjNjViYjE2ODg4Mzg1ZjdiNDU5MGY0NDc3MzAxOWQwNzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bBHxdIsGkT+wjjUCxFOaOYRpvcc hLnxl+QIusF/vzzVV7/3dKWOiMUxG0LqQlXW6YLV80KxqdLaBij+XW90QzXSML4t SjRw7/MqeLL1iDQv0zk+xoubeME/GU6/5aJGX/Npomp9IKtRDF7J6GTemEZvavu8 qcXF6hy8w708tDSBmlkxiPGv44UaB6BzUNBnE0HjjU6zidHidIL/2XSwg4NgbQaZ Oat601JOka7kYdq8C22pqmGQCoW999pYVlLhzsEPOComHTjmkTYpaLZWcKR83+Sc DLD4pgC8mO/P4Trp11cX7Jsm0zVZuQYy1hjlJc/nlJAw/a6/05mvCRE9UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGWWL8ZbsWiIOF97RZD0R3MBnQcpMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP3/9NSII xDCTNcTLp20xG82qzScf/AERjqQBjCowx6qHSmhMBJRJPB21mLNrNDq9O7AAGkln amruEewP2tMWelcp6AZHEZTI9PW0Y5X7XNyFlohN2GYGU7g4te2lgf4cFu7V8CFy DcEj6lBnY4V3tfmY/xJEU8gZy9q+znpFCC8i0IrG89Fi4C1dQnjJJO4WX7TdKwf5 0CD1P9iuPgxiC4ywcEZ79sS0apL6bwTWd4qHpYLSPu7Eq5vwrTWN4DQ0Xt3QsE5v 4CzAhz9r50MxCRgHfG5HBOzMyBaRPU1QHh/XnAwdy4MbIyJ0Eyoj8RhmaUEb5Yj9 +n+0k92f7bVgMg== -----END CERTIFICATE-----Generated at Fri Jul 24 10:00:15 2026 by rpki-client