$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: xZFlnoi7Sa4ZC/yA+zE0PFOPgiqg6LblNpTOcHyVBmg= Subject key identifier: 5B:72:23:1D:BD:D2:51:8B:99:B6:97:D7:A1:20:64:CF:35:2F:24:F9 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019F8F472FF740C2FCBD939CD1F25236360B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 19F0 Signing time: Thu 23 Jul 2026 14:00:34 +0000 Manifest this update: Thu 23 Jul 2026 14:00:34 +0000 Manifest next update: Fri 24 Jul 2026 14:00:34 +0000 Files and hashes: 1: 0ld9oICrjkM9PiOBYi7PkCMaP7g.roa (hash: 7pPoPeKMxfAld72vWaWuaU3WiGoLWbNKS8HJfbCj2GY=) 2: 1BFQM936y9WGcLJKwy60Wg2ag-8.roa (hash: NTbQFXMY5QSvW0BgWqBt3HeqiX8tXZPRJi0IS+SKq2s=) 3: DT8TXPB7Zoh4Y9JFFdsSZ2RIgLg.roa (hash: cdCtaCnFbbokb4IxB6SbsLXr+yswcQckTbmvZnS/sJA=) 4: H3d0QP653F6Jo-epVSXBiVH1h6k.roa (hash: B2NZF4jz4UwnLzA3KbDxjNp0EF7Qv4Th+B09WImKi2I=) 5: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: oQxIubZ72hqMCFqLJA6uu9E5/R6VbutKRNmKcd+lIKM=) 6: O2mRnCNeDokP5q-PUWLd28D1SG8.roa (hash: XL7s2EUC28zeBKoJlmCFsu+5IjkYrbxfH3a9YMWon60=) 7: XPPuMgWRNY1QAnjWn2LftTc8cH4.roa (hash: LqWi3Xbli/jxxlx74n8O7L6EJtxaJ1UA0GYHmPMDyEU=) 8: ZRr2QwcqGgt_EOiTtMFoE-lkmow.roa (hash: SIg3ToChfd1+8YW/rxSI4oA419Stw5Sb9StcFL22beM=) 9: dY6eqUD4ykA92I5VKqHmYTX3q88.roa (hash: uvlx5CXBvfA8EWdxrFvclZnKJJH1HmhxtH5z6Fa+fBo=) 10: hCjWTJUhp9C-lxxCdRV4Jwzm4mk.roa (hash: ECwHPN5lxdIugX2ttk1L3l/uci2ps9CeCy1VAcBMeQs=) 11: lERL5Mrj2Bt3hRDr7br_N3d-JkE.roa (hash: /A5fyVRtCeR1gSok1lWq8T+wbRAaNz8PoEuYxSfdZSU=) 12: lWQXyxEJYv9OPJsRSSX1CCPbFb8.roa (hash: qyL/Gv6WkVcsE18337JVKs2VK9z6GTYDQ6GMJ2m3/WQ=) 13: whyP5FxoblHoIHhMTAeqWb1jp8w.roa (hash: a7SodNhSARcbHydA3wymHLN4IRqMOWIhBwT2PU/EoPc=) 14: zd2dqaKa6O4wz9TxJzSxhbKbteU.roa (hash: Sv1+bPBughIj/le0hfMKADppbA91Co/u0NeJGW/Uifs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:47:2f:f7:40:c2:fc:bd:93:9c:d1:f2:52:36:36:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Jul 23 14:00:34 2026 GMT Not After : Jul 24 14:00:34 2026 GMT Subject: CN=5b72231dbdd2518b99b697d7a12064cf352f24f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:90:59:c2:33:9d:cd:a1:cd:10:30:d1:33:8d: 8c:ff:4f:37:70:6b:cd:60:84:c3:b4:ae:34:05:f2: f2:b8:ee:32:13:6b:ea:c5:0b:90:8a:f0:71:3d:cf: 7b:73:ce:1a:81:f0:dd:98:2c:3e:b8:eb:1e:82:b2: 3c:bf:f5:8d:94:1f:ed:4f:ad:ca:2f:06:74:da:f2: e7:01:97:b2:39:b9:df:9f:89:2e:92:cd:b3:2e:b7: eb:57:1a:fa:55:af:e3:63:cf:5d:a7:fa:a5:d8:56: 56:8e:2a:18:d0:91:a1:b2:71:92:65:9f:92:3b:29: c1:45:b1:1b:28:90:8a:2c:a1:70:dd:48:91:13:52: d2:ac:bb:6c:44:3b:b8:2f:c8:da:98:eb:2d:37:97: 32:69:5b:d8:1a:b6:36:98:4e:e8:b4:0b:85:0f:80: 76:48:cb:c1:38:31:61:98:a5:7e:24:e8:2d:2b:5c: 9a:83:41:71:6f:bf:1a:3b:de:c8:d2:dd:bc:20:02: 69:5f:96:fa:38:84:e9:51:dc:21:52:8d:e2:34:9b: 76:e5:80:e3:42:70:15:88:5f:83:dd:e7:8f:0a:3b: 3e:9f:5f:31:e2:34:1e:19:95:33:b0:98:75:b3:fd: 25:af:d3:17:7a:e3:d5:e2:69:a3:34:46:e8:fc:48: 34:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:72:23:1D:BD:D2:51:8B:99:B6:97:D7:A1:20:64:CF:35:2F:24:F9 X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:25:1a:0a:86:bb:f9:4f:53:d6:73:ad:2d:3e:89:a5:38:5e: 69:e5:d4:ec:63:00:8b:0b:4b:29:b6:1a:db:03:92:98:ad:e3: 1b:df:68:9b:6f:e7:57:9c:c1:09:5b:9f:a5:fe:d4:40:12:21: f1:62:56:e6:3d:64:62:7f:ff:57:3e:10:b7:f7:5c:54:8b:cd: e5:45:11:35:44:b0:e8:d8:31:cb:19:59:b9:8c:92:c1:f0:bb: aa:c7:f8:a5:81:60:26:4b:9c:60:f7:fa:82:69:db:ee:9d:aa: 5f:ac:c5:f1:2b:31:9a:b1:f8:cd:8b:07:21:1c:f5:40:78:7f: 08:dd:37:ee:09:d4:fb:73:70:2a:02:3c:2b:dc:37:00:78:7a: c3:86:99:01:cf:75:41:45:6c:0e:86:c3:a4:74:a6:08:62:58: ca:50:23:c4:f4:90:99:49:cf:bc:9f:cd:ef:5c:85:41:4a:34: b9:a7:4c:ed:9e:37:ce:86:d6:0e:be:fa:4b:d2:14:bc:b2:b2: 38:61:57:98:b3:d2:e3:2c:ff:f8:2c:bd:b8:70:7b:14:7a:85: f9:d0:a1:ae:5e:1d:1e:26:0b:c0:14:65:78:4e:18:f4:f6:ce: c7:79:a1:02:8c:78:74:ad:a1:80:6e:b5:fc:51:a5:87:3a:6a: 70:3a:5a:2a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PRy/3QML8vZOc0fJSNjYLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwNzIzMTQwMDM0WhcNMjYwNzI0MTQwMDM0WjAzMTEwLwYDVQQD Eyg1YjcyMjMxZGJkZDI1MThiOTliNjk3ZDdhMTIwNjRjZjM1MmYyNGY5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5BZwjOdzaHNEDDRM42M/083cGvN YITDtK40BfLyuO4yE2vqxQuQivBxPc97c84agfDdmCw+uOsegrI8v/WNlB/tT63K LwZ02vLnAZeyObnfn4kuks2zLrfrVxr6Va/jY89dp/ql2FZWjioY0JGhsnGSZZ+S OynBRbEbKJCKLKFw3UiRE1LSrLtsRDu4L8jamOstN5cyaVvYGrY2mE7otAuFD4B2 SMvBODFhmKV+JOgtK1yag0Fxb78aO97I0t28IAJpX5b6OITpUdwhUo3iNJt25YDj QnAViF+D3eePCjs+n18x4jQeGZUzsJh1s/0lr9MXeuPV4mmjNEbo/Eg0uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFtyIx290lGLmbaX16EgZM81LyT5MB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaSUaCoa7 +U9T1nOtLT6JpTheaeXU7GMAiwtLKbYa2wOSmK3jG99om2/nV5zBCVufpf7UQBIh 8WJW5j1kYn//Vz4Qt/dcVIvN5UURNUSw6NgxyxlZuYySwfC7qsf4pYFgJkucYPf6 gmnb7p2qX6zF8SsxmrH4zYsHIRz1QHh/CN037gnU+3NwKgI8K9w3AHh6w4aZAc91 QUVsDobDpHSmCGJYylAjxPSQmUnPvJ/N71yFQUo0uadM7Z43zobWDr76S9IUvLKy OGFXmLPS4yz/+Cy9uHB7FHqF+dChrl4dHiYLwBRleE4Y9PbOx3mhAox4dK2hgG61 /FGlhzpqcDpaKg== -----END CERTIFICATE-----Generated at Thu Jul 23 20:16:11 2026 by rpki-client