$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: ISEOzy8f8yJyzlTpbVlYWxdQ2gunQ1TTxTNq4kdjZFE= Subject key identifier: A8:66:5E:BD:E5:B1:B7:D1:FC:9B:08:80:CF:46:21:A3:D0:46:3E:6E Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 019F93FFFB48B633C2CBB9574DB949CC1F9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 15E9 Signing time: Fri 24 Jul 2026 12:00:54 +0000 Manifest this update: Fri 24 Jul 2026 12:00:54 +0000 Manifest next update: Sat 25 Jul 2026 12:00:54 +0000 Files and hashes: 1: 35wDpRsfaq8aq0FjZJRW12A2SwI.roa (hash: S32iSai/D3+xMYiGNdr33Lz5mjsLhdP2ds6sS7Zu5bY=) 2: 4xaEdixeinTNAew5f36B5ogFapc.roa (hash: U+lj7Po2vIYbjteMOk724C6A7iSVfdA9w8Qr+wSn2EY=) 3: 6bp5_uY1eTTE0FRpgy0dJ0tGIWA.roa (hash: JQ6e3y/UZad8zx3alMXWmLY2Cs0ywtM7PcyjG1jGvp0=) 4: 9561YDYiFuwA3cK9_Ao81cqPzyw.roa (hash: sI0N1MtQFC1Bs34l2HPoGh51MHvRDzLlzChm4jYV9bI=) 5: IrFs_aYDL98DrBmqXNeImOXYqVs.roa (hash: /du+UzfxF5Oy69bwitaws2QcGuPpQ2q/PzP+2+rlKmc=) 6: Mpb5tIfxbf_t0TleDipa0dPzQfg.roa (hash: dlPOC3LjslO4GRq7Su9TrpsYGXUfWyZVAl7s4ntuJgI=) 7: SnpB0ExR-bCAJLKknHnesUTaAWU.roa (hash: wlr5EY83KcqFkovq8AptI/Jy70VxHPVKk3n5WEh7t3w=) 8: W-auLweCazJVGZa2RWm9KCu-wKE.roa (hash: KDvTseiWMAdzP9ZuSgmWkkWqgGW79SkpbkY25PFZ98s=) 9: YSP2K25IRGuG9q-MByo9uJoo_cg.roa (hash: Pd46j8HnroPwAsfvmv91RgjQs2qRGo37bfk5Rd39ViM=) 10: ZNVLkE0Hncpo1bsQ8SqkvCmjNMs.roa (hash: ckctwOhfUle+O6fK0mnv5ZMxRNGqbUG5lJdOX3nwnlo=) 11: djAPpFOBLqUtxJOa9UwBPjNac1E.roa (hash: 7Rj31INl1FIcMdN33laOh9K9+J+bHShe/BZUzyt8PUg=) 12: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: E4CAs1XL9ao+nG+3Yb/3xJ4VlT+YGkWmiFgmE17Exh8=) 13: nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa (hash: lYeXLJKim2pWsORoTqRVNykk1XTHGi948eQwJ6tFxj4=) 14: pnn2LDubyB-s2_PbTNDUNt7JA_8.roa (hash: vW3hxl2FPzWH44KmHJKXNpZV557F5Hczl/NZRDVCKlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:ff:fb:48:b6:33:c2:cb:b9:57:4d:b9:49:cc:1f:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Jul 24 12:00:54 2026 GMT Not After : Jul 25 12:00:54 2026 GMT Subject: CN=a8665ebde5b1b7d1fc9b0880cf4621a3d0463e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b0:a8:56:c1:cb:cc:7b:65:b3:83:99:32:b2: 9c:22:98:46:bd:4c:73:92:41:bf:10:64:08:65:48: 42:39:2c:1a:7b:07:9f:5f:69:fe:ff:90:ca:d0:9e: d0:00:80:f3:ae:aa:c0:88:e6:1b:5e:f5:20:5b:cf: 8d:c2:72:bf:64:0c:5d:81:f9:81:72:a4:ec:f8:d4: ac:2e:3f:e8:5a:2c:88:e6:34:b2:77:b9:7c:e2:8b: 3e:b2:26:cb:70:a6:bf:6e:68:cb:c9:45:31:4c:ef: a5:c1:0c:dd:8a:be:a0:53:13:97:d8:5b:85:e1:ed: 51:af:28:bc:ec:c0:1a:c0:e8:c9:3f:f9:8e:5d:a1: 64:c1:44:b0:8d:73:7a:cd:d7:a3:dc:1c:0c:87:98: 5d:47:1b:6b:6c:13:8b:53:00:a1:df:c1:8c:f7:23: af:61:0a:70:f4:0e:89:01:e9:44:9d:6b:bb:f3:83: 6c:a2:66:7c:66:27:70:35:e3:96:b5:12:3c:58:9a: f5:78:7f:93:d4:00:cb:53:6c:c8:b8:c5:bf:21:db: 6c:9f:73:4d:f8:a6:74:bb:cc:5f:03:f0:d8:b6:07: e3:22:1d:c5:cc:76:dd:00:3a:06:46:80:1d:9e:67: 52:d2:36:80:a0:c0:8a:6d:87:ee:a9:08:2b:96:39: 80:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:66:5E:BD:E5:B1:B7:D1:FC:9B:08:80:CF:46:21:A3:D0:46:3E:6E X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:eb:da:fb:82:86:93:94:ad:2c:19:85:5b:f1:09:0e:5d:c9: 7a:26:6a:55:39:c1:2f:fa:2e:21:06:fb:87:39:0f:d8:71:8d: 4e:1d:5a:86:90:b1:68:47:38:17:5b:db:16:da:1c:54:fc:f2: ab:4c:26:31:03:9e:db:74:9e:0e:1e:f0:f4:a1:38:46:73:91: 3e:c7:69:e7:ee:28:42:43:05:9a:1b:ad:a2:42:09:b6:39:28: 67:0a:fc:0b:fd:19:5c:82:eb:9f:59:d9:8a:4d:20:b3:e7:87: 95:7c:d8:4b:ef:3c:4a:22:ee:4b:1a:4e:db:e4:c4:a2:82:9d: 57:d5:99:7f:6a:ac:ac:5a:a8:86:73:9b:b0:5b:01:dd:a1:fd: 57:34:0d:94:07:78:9c:67:69:04:2c:39:07:40:64:e0:1b:70: b8:3a:3e:d9:d2:44:45:48:35:ea:9d:69:b5:aa:99:0e:b8:28: fa:e2:bf:4c:93:df:aa:1f:fc:7b:74:db:67:51:c3:ec:88:ea: 23:e0:0c:07:ed:f4:1e:61:32:99:7d:d8:e8:e9:bd:7e:96:40: 67:72:2d:e8:67:15:28:48:2d:5f:42:9b:ec:b6:3b:7e:a5:96: 44:a0:d4:74:f3:15:b0:c9:39:2a:c5:49:20:d2:99:bf:8c:a3: 06:e9:5b:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+T//tItjPCy7lXTblJzB+eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYwNzI0MTIwMDU0WhcNMjYwNzI1MTIwMDU0WjAzMTEwLwYDVQQD EyhhODY2NWViZGU1YjFiN2QxZmM5YjA4ODBjZjQ2MjFhM2QwNDYzZTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLCoVsHLzHtls4OZMrKcIphGvUxz kkG/EGQIZUhCOSwaewefX2n+/5DK0J7QAIDzrqrAiOYbXvUgW8+NwnK/ZAxdgfmB cqTs+NSsLj/oWiyI5jSyd7l84os+sibLcKa/bmjLyUUxTO+lwQzdir6gUxOX2FuF 4e1Rryi87MAawOjJP/mOXaFkwUSwjXN6zdej3BwMh5hdRxtrbBOLUwCh38GM9yOv YQpw9A6JAelEnWu784NsomZ8ZidwNeOWtRI8WJr1eH+T1ADLU2zIuMW/Idtsn3NN +KZ0u8xfA/DYtgfjIh3FzHbdADoGRoAdnmdS0jaAoMCKbYfuqQgrljmACwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKhmXr3lsbfR/JsIgM9GIaPQRj5uMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqOva+4KG k5StLBmFW/EJDl3JeiZqVTnBL/ouIQb7hzkP2HGNTh1ahpCxaEc4F1vbFtocVPzy q0wmMQOe23SeDh7w9KE4RnORPsdp5+4oQkMFmhutokIJtjkoZwr8C/0ZXILrn1nZ ik0gs+eHlXzYS+88SiLuSxpO2+TEooKdV9WZf2qsrFqohnObsFsB3aH9VzQNlAd4 nGdpBCw5B0Bk4BtwuDo+2dJERUg16p1ptaqZDrgo+uK/TJPfqh/8e3TbZ1HD7Ijq I+AMB+30HmEymX3Y6Om9fpZAZ3It6GcVKEgtX0Kb7LY7fqWWRKDUdPMVsMk5KsVJ INKZv4yjBulbjg== -----END CERTIFICATE-----Generated at Fri Jul 24 17:43:00 2026 by rpki-client