$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: mcPR/FXXkA4tfrb2v+fq7wuhWl0xeha7SPk+J3ULVCA= Subject key identifier: 7B:AB:EB:E2:C8:E2:5C:D5:EF:FA:28:96:14:BD:0F:24:EA:4B:4F:BB Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 019F902330C3902742D5DE0D51E7405ED623 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 0877 Signing time: Thu 23 Jul 2026 18:00:53 +0000 Manifest this update: Thu 23 Jul 2026 18:00:53 +0000 Manifest next update: Fri 24 Jul 2026 18:00:53 +0000 Files and hashes: 1: 1FTeokhUADkYbgvOTwGp40m_BPE.roa (hash: PPoy3S4bKc1j/djL6NTv+eGLXSL7GZ17YwI5tAXRtDM=) 2: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (hash: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw=) 3: 9c4kttevmySnfkQUW_qfNzaHphg.roa (hash: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw=) 4: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (hash: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ=) 5: FhQiMY_Y2B9WuZvyCd_uaF0M5dI.roa (hash: fZfKiY8vxqzWF+WGF85vLsOO0yrQwq1azfxlL3m6ht4=) 6: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (hash: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y=) 7: KNWwGCklL3zKbMsgIOCdcNGo2tI.roa (hash: 5rF454gnBcOMqEez62ErUsCgENLRW0isAHz0go80+Fs=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: DusjWXeoREK+BtJATLC5VKvmaHEtLzfHvN+1v4BOZto=) 9: Pjq2usg2Ddr0jCim-rnljjUP2xg.roa (hash: 5RL0lX+XVqmkdynoA/ZI5Ffknvw/dGR/1FpAcrG1JiE=) 10: WrWpDNw0abEoNedClZIQXtxLaNM.roa (hash: gCZS2khmjJiGzLXjdqtdk6eKzbLBYpiu89Bi9tphMq4=) 11: aSoz0nTSHVKxl1w-_tXDaUBfI_U.roa (hash: 3H/725peI0ylJlXSnX6sTF3RBFyOHCBWf0zA//LWaS4=) 12: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (hash: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0=) 13: hTJEftSpqDKpAn62ncVILyiUIA4.roa (hash: CgeSiN+wMYpnSUEh7oWmMa8OtknjA6ZGJ6sq3RGzTFw=) 14: nBxToIyQbLD03aHgRpkeeNieOPw.roa (hash: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk=) 15: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (hash: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg=) 16: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (hash: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8=) 17: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (hash: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:23:30:c3:90:27:42:d5:de:0d:51:e7:40:5e:d6:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Jul 23 18:00:53 2026 GMT Not After : Jul 24 18:00:53 2026 GMT Subject: CN=7babebe2c8e25cd5effa289614bd0f24ea4b4fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:4b:07:61:ee:29:80:9f:01:2e:49:7f:a0:e3: cb:79:f8:1d:7b:47:96:97:4d:55:25:86:fc:73:8d: 7c:42:84:44:c2:ba:85:26:41:7b:0f:05:e0:06:7b: 5e:e8:6b:43:83:ef:91:d7:5e:d0:e5:7b:ca:49:be: 2e:ef:7c:db:f5:12:9e:36:37:39:fc:67:5b:12:bb: 28:7c:b1:50:68:43:ff:64:95:6c:82:30:27:59:75: e3:99:cf:91:71:e5:cc:54:54:18:2b:cb:3e:38:5a: 44:b3:4c:eb:c4:32:fc:89:69:82:63:91:2d:85:fa: 01:64:a6:18:83:c2:02:dd:41:11:dc:74:52:17:98: 5a:ef:a4:35:55:5e:08:1b:fa:2f:32:4b:0d:fb:69: c0:c1:a1:98:00:52:70:68:f5:7f:f7:bd:90:11:1e: 3b:fb:1c:75:cf:5e:ae:4a:cb:2c:b0:b8:16:f6:d6: 7a:ef:02:bf:4c:80:26:5f:08:d1:35:0e:cb:e8:e7: 49:03:cc:c0:40:bc:b4:a2:8d:6d:ec:46:c3:66:cc: f4:cb:36:42:fa:bb:c7:4a:d7:ee:d1:3c:69:d1:01: 1c:ff:aa:c2:19:58:cb:5e:ba:29:4e:6a:58:f1:ed: f5:cd:36:b0:45:9d:d9:13:f5:6e:67:f4:9c:33:ef: 85:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:AB:EB:E2:C8:E2:5C:D5:EF:FA:28:96:14:BD:0F:24:EA:4B:4F:BB X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a8:e1:32:e9:19:0f:e3:b1:8d:98:8f:65:6a:a7:6d:a8:16: 63:11:0a:c4:e8:96:6a:e7:6e:e4:b7:ed:3f:cb:1e:eb:7e:09: a3:62:f3:70:3b:b8:05:72:67:63:68:d0:c5:d4:64:b3:70:c0: 68:56:96:4e:16:1c:ff:37:dd:59:08:8d:d3:93:c6:cb:00:60: 50:eb:4a:78:1d:64:aa:73:34:98:71:22:1c:fa:0b:a5:4a:cd: 0e:17:3e:60:38:31:0c:d8:b3:f5:b7:6b:d7:97:fb:c5:14:3e: d2:a9:a4:bb:4f:1e:ad:b1:9c:59:b7:fe:32:3f:25:b0:2d:b9: 7c:9b:6e:92:b2:36:35:9e:38:fe:75:03:1c:19:6c:32:60:95: 12:09:08:38:65:fa:9c:c2:bb:fd:de:98:06:6f:de:2b:2c:41: 6d:f4:a6:d6:28:0e:25:3b:a2:2c:a6:08:ab:a3:c7:8d:70:c9: 35:67:a9:ba:ef:4c:5b:f5:e3:cc:23:f7:41:0a:cd:bb:c7:a1: 30:ed:e6:07:c0:a5:9b:61:9b:04:3c:a7:a0:b4:0d:e9:da:dc: 16:06:c9:eb:43:e8:0b:d3:f9:49:49:5d:64:c6:c5:1e:69:d8: 61:9d:2a:45:d3:36:bc:ba:08:45:c4:ae:a0:c5:37:47:a1:d1: c0:41:d2:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QIzDDkCdC1d4NUedAXtYjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYwNzIzMTgwMDUzWhcNMjYwNzI0MTgwMDUzWjAzMTEwLwYDVQQD Eyg3YmFiZWJlMmM4ZTI1Y2Q1ZWZmYTI4OTYxNGJkMGYyNGVhNGI0ZmJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj0sHYe4pgJ8BLkl/oOPLefgde0eW l01VJYb8c418QoREwrqFJkF7DwXgBnte6GtDg++R117Q5XvKSb4u73zb9RKeNjc5 /GdbErsofLFQaEP/ZJVsgjAnWXXjmc+RceXMVFQYK8s+OFpEs0zrxDL8iWmCY5Et hfoBZKYYg8IC3UER3HRSF5ha76Q1VV4IG/ovMksN+2nAwaGYAFJwaPV/972QER47 +xx1z16uSssssLgW9tZ67wK/TIAmXwjRNQ7L6OdJA8zAQLy0oo1t7EbDZsz0yzZC +rvHStfu0Txp0QEc/6rCGVjLXropTmpY8e31zTawRZ3ZE/VuZ/ScM++F3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHur6+LI4lzV7/oolhS9DyTqS0+7MB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoajhMukZ D+OxjZiPZWqnbagWYxEKxOiWaudu5LftP8se634Jo2LzcDu4BXJnY2jQxdRks3DA aFaWThYc/zfdWQiN05PGywBgUOtKeB1kqnM0mHEiHPoLpUrNDhc+YDgxDNiz9bdr 15f7xRQ+0qmku08erbGcWbf+Mj8lsC25fJtukrI2NZ44/nUDHBlsMmCVEgkIOGX6 nMK7/d6YBm/eKyxBbfSm1igOJTuiLKYIq6PHjXDJNWepuu9MW/XjzCP3QQrNu8eh MO3mB8Clm2GbBDynoLQN6drcFgbJ60PoC9P5SUldZMbFHmnYYZ0qRdM2vLoIRcSu oMU3R6HRwEHSmQ== -----END CERTIFICATE-----Generated at Thu Jul 23 20:15:20 2026 by rpki-client