$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json) Hash identifier: tOyuAUe24x6Vw1/1NHiQ7KsnRK4FW50rg9rZDZfrRk8= Subject key identifier: 2E:10:9F:7E:CC:99:0A:CD:2C:67:6C:80:EB:CC:B2:BD:9C:B7:89:DB Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 019F8F11207B91C783555E84ACCDD23636CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft Manifest number: 15BA Signing time: Thu 23 Jul 2026 13:01:31 +0000 Manifest this update: Thu 23 Jul 2026 13:01:31 +0000 Manifest next update: Fri 24 Jul 2026 13:01:31 +0000 Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: 9k7c8pOdG0mD387fRbHMJ0pFTFXnPczs879ScmA58e0=) 2: 3SoEwaHYmzBhPq3SqrK7-97FxfY.asa (hash: DUPJ+1lMqiRx5QPupK6EYyCTyvEki+rd8cq0JTEqc4k=) 3: 4dRn2JrP2QCTAWF-YiqGTdGG-aY.asa (hash: 5OSvsuPPRn9OvkRvh/NzOUAFS7gn9Nx/H8X3BJxRZYE=) 4: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=) 5: KJiyDl7iQPSHbczb71sauO3rVJk.asa (hash: xzLdynVvAziPI6SDyPFLHYP7bi2ATNLAOqyCRqeT3is=) 6: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=) 7: M8G0hHzNaUEBYlJ18I-LLmZFBKM.asa (hash: 1CwhbIx2C5nHDxmbbu2xhBW2STO+MmyMS7p2LGmo9hk=) 8: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=) 9: T5M14oqasE4RWqdrD07qXbN8eGY.asa (hash: OCqN8M2KvS/h05iREDnHi+l1MPqvKGu7Rk6ZjCf3xcE=) 10: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=) 11: XHeb1AmUfX1kngDYx7cK3_EIu7Q.asa (hash: y1sVzdki0bbI48xSY39Q5D3JsNtDyY7oJ/qahJmputE=) 12: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=) 13: id-lxRpZAXWjSQIYTHcFpR-BOiA.roa (hash: DJLygWwBzeOc6zwCMgS/e3psiWC9iHIdC8QxaCCmABU=) 14: mwjxtKPuHdDhkzcGADt1aiLxCIc.asa (hash: Wy5bjzVJWOG5tUKCM7dwY8G4WJIDxlDcCw2Ld4jrHPw=) 15: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=) 16: vEGsYuYY06TvYutYs-QyPdXXq4Q.roa (hash: UCMk3rT/wVrhtk6MMSMiEAtXXbsHSrVjnWedze014rg=) 17: xVaYIBw7M6bRv3MOmzyAcV4by3I.asa (hash: PgzXvKG2TR216H34m8dFRwASPrUVU9Y5qcUdR1XkLTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 13:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:11:20:7b:91:c7:83:55:5e:84:ac:cd:d2:36:36:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Jul 23 13:01:31 2026 GMT Not After : Jul 24 13:01:31 2026 GMT Subject: CN=2e109f7ecc990acd2c676c80ebccb2bd9cb789db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:8c:94:e9:71:3a:dd:2b:c1:d4:43:64:8f:6e: f3:75:a8:71:f5:2c:fb:19:3c:f1:c9:04:c4:df:9a: 0f:51:01:79:b4:86:97:3d:bd:94:21:2d:1c:0f:e1: f8:50:ff:14:e0:e7:09:ba:a0:c7:50:8f:ae:3d:99: 93:1d:b4:c6:e2:b9:34:84:d5:d7:d0:88:e3:48:e9: 83:30:eb:8f:cd:30:17:91:ab:ee:bd:2d:f1:e7:41: e1:ba:cb:42:a9:31:54:57:91:a2:bc:ae:1c:b7:91: 19:f4:4f:31:a7:64:a6:c4:08:00:2c:ea:5c:66:12: 41:b3:d0:b2:67:12:96:33:1d:9c:47:4a:ee:db:c9: bd:e2:73:29:bb:dd:5e:01:3f:85:dd:18:61:4b:26: 7e:ba:ae:e1:81:24:f2:da:9e:1c:73:db:5d:cd:cf: 02:08:7a:db:70:a7:24:db:3b:f6:7b:6c:61:62:33: c6:28:7a:e6:ee:62:2b:1a:35:83:26:45:d2:84:88: b7:dc:40:5b:1b:3c:f9:1e:79:8c:67:f8:21:c6:86: a2:cb:8a:9c:c2:29:10:65:0c:21:c6:44:fd:9c:72: 8b:3d:a0:d8:13:41:61:44:c2:55:c7:06:d3:3d:02: d9:4d:c8:fa:cb:1c:ff:63:51:a4:36:a0:60:94:50: b8:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:10:9F:7E:CC:99:0A:CD:2C:67:6C:80:EB:CC:B2:BD:9C:B7:89:DB X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:4e:cb:6b:01:6d:01:d2:2b:55:be:67:71:34:73:fd:eb:84: ea:f4:c9:8f:16:bf:52:d6:dd:82:88:74:9f:3a:55:1d:98:ff: fd:8a:8b:80:9c:30:84:05:de:c6:ef:9a:04:27:79:44:2d:a0: c9:0d:8f:ee:b8:0c:c5:6d:55:fb:4a:7c:92:04:98:6f:30:db: b6:60:01:c7:6f:74:2f:3a:e1:f6:81:7c:f5:fc:05:2f:34:4f: ee:ac:d6:72:c6:84:0e:47:3b:66:66:89:f9:00:7b:72:87:8c: 2e:7a:cc:cb:9d:41:c6:f0:4b:57:21:03:8e:c2:16:30:c0:98: 9d:4f:8d:17:3b:64:c6:f0:5a:30:78:8b:65:f3:13:b4:35:4a: b1:e0:d5:08:2f:ba:44:af:ed:3f:9e:81:ae:eb:b0:0c:fa:70: 99:02:9d:87:35:a5:07:68:c7:7e:45:b2:56:89:6f:ab:55:9a: f0:6b:39:77:b7:ca:22:51:cc:bc:2d:64:57:73:20:93:bc:b0: 65:f2:24:d0:57:ee:a5:d8:41:18:5a:02:33:ed:97:47:ae:a2: d9:c0:9e:40:52:61:f7:cc:20:81:34:56:db:28:24:50:ed:51: 24:b5:72:82:ec:e6:28:81:7a:df:22:be:57:d1:6f:4f:8b:6d: 51:8d:ff:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PESB7kceDVV6ErM3SNjbMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjYwNzIzMTMwMTMxWhcNMjYwNzI0MTMwMTMxWjAzMTEwLwYDVQQD EygyZTEwOWY3ZWNjOTkwYWNkMmM2NzZjODBlYmNjYjJiZDljYjc4OWRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7YyU6XE63SvB1ENkj27zdahx9Sz7 GTzxyQTE35oPUQF5tIaXPb2UIS0cD+H4UP8U4OcJuqDHUI+uPZmTHbTG4rk0hNXX 0IjjSOmDMOuPzTAXkavuvS3x50HhustCqTFUV5GivK4ct5EZ9E8xp2SmxAgALOpc ZhJBs9CyZxKWMx2cR0ru28m94nMpu91eAT+F3RhhSyZ+uq7hgSTy2p4cc9tdzc8C CHrbcKck2zv2e2xhYjPGKHrm7mIrGjWDJkXShIi33EBbGzz5HnmMZ/ghxoaiy4qc wikQZQwhxkT9nHKLPaDYE0FhRMJVxwbTPQLZTcj6yxz/Y1GkNqBglFC4BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4Qn37MmQrNLGdsgOvMsr2ct4nbMB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPU7LawFt AdIrVb5ncTRz/euE6vTJjxa/Utbdgoh0nzpVHZj//YqLgJwwhAXexu+aBCd5RC2g yQ2P7rgMxW1V+0p8kgSYbzDbtmABx290Lzrh9oF89fwFLzRP7qzWcsaEDkc7ZmaJ +QB7coeMLnrMy51BxvBLVyEDjsIWMMCYnU+NFztkxvBaMHiLZfMTtDVKseDVCC+6 RK/tP56BruuwDPpwmQKdhzWlB2jHfkWyVolvq1Wa8Gs5d7fKIlHMvC1kV3Mgk7yw ZfIk0FfupdhBGFoCM+2XR66i2cCeQFJh98wggTRW2ygkUO1RJLVyguzmKIF63yK+ V9FvT4ttUY3/lw== -----END CERTIFICATE-----Generated at Thu Jul 23 19:07:15 2026 by rpki-client