$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json) Hash identifier: auY9ydBTplqxSee3OtS+M2+vEvdOWjtfyM6QQ7Zr42c= Subject key identifier: FF:88:E8:9F:BB:74:28:72:37:01:CD:0A:B7:D8:72:3F:77:E8:92:6C Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 019F935C104B05A80FA24A0DECF7A56FB9BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft Manifest number: 19DB Signing time: Fri 24 Jul 2026 09:01:51 +0000 Manifest this update: Fri 24 Jul 2026 09:01:51 +0000 Manifest next update: Sat 25 Jul 2026 09:01:51 +0000 Files and hashes: 1: 0grhf2XqQS0PbS4vuPKgFUJ4CtY.roa (hash: CABCkAtRB5z7qM37KIh3THIotph2AI+4ndFJUzJYceA=) 2: 1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa (hash: EnRdzd4XuA4kPVdeCj63BslUTaDS51Ig0OU7ONlJnmA=) 3: 7TDWyr5P0SFkG_1wE_zPclx-LJY.roa (hash: mwM+t2AjMGEMAQqYQt7qupjhUbDte5jBQzS3pFunV5E=) 4: 8qGSgqlkHDr914hHEHKKhmYVXnE.roa (hash: frQT+RP9L9JKaXT7O/jbBEr9AzGG4KNbuIOuQ79wIgI=) 5: DY4whTo7KFMsapAbjbck9KXaN2Q.roa (hash: Z3/CUxyVCWOqALKEDmYApn9KMCw1qs9OcKyU5Z8f4RU=) 6: I7MkmQek9TX_IQqyz6tzXHWahHc.roa (hash: guTyQfwBcIAtfrQpROz3rqT3lhXR49lhfULYZRlg2k4=) 7: KSert21IyVLdzTzI3FZycKPooac.roa (hash: enNDLKMhC0/+6E/ssv2WFmJ1HNQhuj49stCcOOz9a3U=) 8: MmwxwXtvbBi5TfpYulx_NsdGK8I.roa (hash: CpEEnuPEEQ/Lt5U7MuRSDkJQEaOqlXnkUBi298BTux0=) 9: bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa (hash: irzJrYBfyhTaJEK1r/bwWtkoGmHHDM2zuMWB3WPr1vw=) 10: fCGYEGlgfKRgTz2ikieXaOSbdRE.roa (hash: FYEv1aBWOrr2YMP+bkGoFPlLBNqhRh64fwSr9xKf+yc=) 11: i_8Ltd9wbcfD0mAu6VNm7MTQ_Ac.roa (hash: LXGue0t/sMA2Z7REoNuZF9MeZQKOuFmufuOtJTo72DU=) 12: l46NNfdll0CkF-GyTagj6nVywQA.roa (hash: Bz8PpZZscQ882ZYbIbT/ZfP7vpdnPTaRcDmY5jTgHws=) 13: nhzxopyxtZ3ZNpXqMYr4_bVPXYw.roa (hash: XWNHr6I19HMZl/NwLAbZ/QL51wNU0N0GDXtB6ekbpGI=) 14: qXx90FSqDeV2TFA5z5gkzjt5MT4.roa (hash: GIcu6RV+4oLEen2ihNm9iiU1rL+T3G8HifCPdddrGao=) 15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: kdMYNcfneGDO1iTPWq4tKbrki365ppBpZpxusFsr48g=) 16: vy_B141YrrWxhcrnlEIljoTLECk.roa (hash: xj/TtKRTGyOPxeeyCWIfxLPuFe3BEl/1ac8Kc9RexP0=) 17: w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa (hash: jnFfoOHT3qsowloY5NEfrKxUN2Spb88yoOnFZYPFjK4=) 18: wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa (hash: dmGJEO5REXkLJeMFm08GEDBzv38Ylu5Doyq2n0KUXjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:5c:10:4b:05:a8:0f:a2:4a:0d:ec:f7:a5:6f:b9:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Jul 24 09:01:51 2026 GMT Not After : Jul 25 09:01:51 2026 GMT Subject: CN=ff88e89fbb7428723701cd0ab7d8723f77e8926c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:25:35:c7:46:7c:8e:ce:9a:aa:63:72:00:75: 51:89:9d:1f:06:9a:7a:0a:eb:41:4e:a4:22:43:be: 61:76:d3:9e:1f:2d:f8:c1:6c:4b:29:a3:c9:ef:1a: be:5d:01:6d:59:5d:fe:eb:10:e7:65:8b:0f:d9:e7: fd:9d:67:b5:7f:a8:35:d2:99:1d:d3:53:20:cf:df: 5c:c1:12:1f:51:c5:3d:0d:b6:ef:9a:d0:9f:d4:c8: b6:07:76:78:b6:68:ac:56:d9:4b:7b:4d:20:04:bc: 31:0a:ac:4b:d3:f7:a4:e1:32:cd:f9:87:30:96:03: 30:21:87:dc:3b:8d:30:7c:c8:54:43:3d:47:5f:85: fe:28:4c:fe:6d:5d:0a:25:ae:56:2d:47:5d:53:38: 5e:48:bd:40:e5:1c:f6:ab:5e:ff:a4:fc:9d:5e:80: b2:24:00:80:31:84:8e:42:97:2a:52:50:7a:d0:64: 7a:1b:4e:b9:9b:01:a0:42:d5:d2:d3:54:65:fd:66: 15:b0:4f:0f:18:ea:58:6e:76:f4:fb:93:a1:c1:e9: 7f:e6:da:17:f8:b6:f0:dc:92:cb:77:4e:a8:54:7a: 63:c1:62:f7:88:ab:cf:47:81:a5:97:90:1a:85:dd: e3:75:10:f2:59:f7:7e:b0:37:e9:46:e1:63:82:88: 1c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:88:E8:9F:BB:74:28:72:37:01:CD:0A:B7:D8:72:3F:77:E8:92:6C X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:36:8b:50:6a:4d:26:9e:01:bc:1a:26:ec:a8:3a:d1:f0:6a: 94:f3:1e:fa:ca:78:24:d2:94:56:8f:80:82:5b:c9:55:3d:15: 1a:65:b0:c8:70:3b:cd:69:ed:a4:fa:0d:e1:a5:17:ec:7b:b8: 07:81:12:e7:3b:10:9a:81:8b:4c:ee:73:16:52:e0:99:f2:de: e0:1c:86:f1:0c:93:3c:64:c1:be:d7:37:6a:5f:35:21:01:67: 1e:58:03:fb:a9:39:38:cb:49:ff:8e:df:41:71:63:21:b6:12: 6d:48:a7:bb:13:17:d6:03:ea:4b:f3:ee:e3:9c:be:c1:f6:6b: 94:ee:5a:79:38:df:18:60:78:43:1c:39:bb:62:83:4f:fb:b5: 80:67:db:69:95:e1:bf:f8:1c:5e:96:81:91:37:c3:d7:bc:02: 44:9d:ce:fd:be:78:36:43:ed:b1:c9:03:9c:df:ef:b3:bf:18: 94:9e:a3:ba:3c:88:eb:65:9a:1d:be:8b:89:a4:d5:2a:a4:6c: 90:02:ff:ca:a7:e8:ee:ca:f9:ac:7f:b8:65:c5:72:74:70:9c: 5e:e9:ed:bd:ed:91:12:ac:b2:e5:68:4f:1a:00:2a:3d:aa:80: b7:21:d3:04:b6:39:6f:cd:a6:a1:04:b2:8a:ed:c3:72:ba:21: 21:f2:bb:5b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+TXBBLBagPokoN7Pelb7m6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwNzI0MDkwMTUxWhcNMjYwNzI1MDkwMTUxWjAzMTEwLwYDVQQD EyhmZjg4ZTg5ZmJiNzQyODcyMzcwMWNkMGFiN2Q4NzIzZjc3ZTg5MjZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyU1x0Z8js6aqmNyAHVRiZ0fBpp6 CutBTqQiQ75hdtOeHy34wWxLKaPJ7xq+XQFtWV3+6xDnZYsP2ef9nWe1f6g10pkd 01Mgz99cwRIfUcU9DbbvmtCf1Mi2B3Z4tmisVtlLe00gBLwxCqxL0/ek4TLN+Ycw lgMwIYfcO40wfMhUQz1HX4X+KEz+bV0KJa5WLUddUzheSL1A5Rz2q17/pPydXoCy JACAMYSOQpcqUlB60GR6G065mwGgQtXS01Rl/WYVsE8PGOpYbnb0+5Ohwel/5toX +Lbw3JLLd06oVHpjwWL3iKvPR4Gll5Aahd3jdRDyWfd+sDfpRuFjgogcCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+I6J+7dChyNwHNCrfYcj936JJsMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtzaLUGpN Jp4BvBom7Kg60fBqlPMe+sp4JNKUVo+AglvJVT0VGmWwyHA7zWntpPoN4aUX7Hu4 B4ES5zsQmoGLTO5zFlLgmfLe4ByG8QyTPGTBvtc3al81IQFnHlgD+6k5OMtJ/47f QXFjIbYSbUinuxMX1gPqS/Pu45y+wfZrlO5aeTjfGGB4Qxw5u2KDT/u1gGfbaZXh v/gcXpaBkTfD17wCRJ3O/b54NkPtsckDnN/vs78YlJ6jujyI62WaHb6LiaTVKqRs kAL/yqfo7sr5rH+4ZcVydHCcXuntve2REqyy5WhPGgAqPaqAtyHTBLY5b82moQSy iu3DcrohIfK7Ww== -----END CERTIFICATE-----Generated at Fri Jul 24 16:18:40 2026 by rpki-client