$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: WsT33JtdAjyk7WYbNNf0Ll512NBFz734NgMTERdf8Po= Subject key identifier: 9A:39:00:3E:B6:6D:5F:5A:38:D7:11:76:BE:03:F2:30:1C:0E:87:67 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 019F90FE8B663B24451A3440A01E4D86807E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0D20 Signing time: Thu 23 Jul 2026 22:00:28 +0000 Manifest this update: Thu 23 Jul 2026 22:00:28 +0000 Manifest next update: Fri 24 Jul 2026 22:00:28 +0000 Files and hashes: 1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=) 2: 6WWr83TSCDVC54Q6T3lJdNTzhec.roa (hash: bqOXRmyjRmssTC0gEpcTMmCXeTubysghN9/RhsWfZ2I=) 3: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: CUbm520KtEgzZQwyCPRw5gYcFDCt86N7E0i9JabgoXI=) 4: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=) 5: OuOWwWJQka3OidmzTsZ2WEViaC8.roa (hash: bWWJtVeUfjaGHDqLK+RYfHKOfYGUjZcMVA7WDR7akBo=) 6: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=) 7: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=) 8: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=) 9: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=) 10: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=) 11: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=) 12: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=) 13: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=) 14: kGneqi-DhIJThQbxo8k8aRtzhC0.roa (hash: LH1+UqmotTldhBb3/js9nM0r1q8ixXwicRK2tem2Z4A=) 15: n24rpKw-gK2As8dq1f65xDlyLmg.roa (hash: 7YG0l5UwcmGtwI4tXmm6RQMgPqe0InES4/ba+ypR3Fk=) 16: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=) 17: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:fe:8b:66:3b:24:45:1a:34:40:a0:1e:4d:86:80:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Jul 23 22:00:28 2026 GMT Not After : Jul 24 22:00:28 2026 GMT Subject: CN=9a39003eb66d5f5a38d71176be03f2301c0e8767 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:42:99:41:05:15:0c:7d:ae:f6:c9:64:6f:a7: 43:6a:96:6a:15:89:40:ed:3f:23:0a:ad:75:05:e4: b4:46:06:4e:d2:78:4c:4e:65:ea:7a:c8:64:f8:ae: f0:84:80:95:a9:72:72:ea:f8:76:46:d8:5d:9c:6e: 3d:00:a9:14:78:ea:37:20:36:95:76:12:df:29:50: 8f:1c:26:c0:e5:b2:7c:cf:60:28:f1:ff:df:d4:b1: 6f:a4:b0:78:bf:c0:fd:01:bf:ce:5c:a4:4f:26:81: 0a:e6:d7:64:c9:7d:8f:ec:ef:90:b5:2e:99:43:6d: db:70:9e:a9:47:94:0a:81:d7:eb:de:bc:7e:de:16: e7:1a:55:e4:ba:32:68:82:d9:78:ae:c6:23:93:c4: 71:97:80:51:25:ce:f1:e5:25:77:5a:5e:f5:2d:11: 96:a5:bc:10:93:65:d5:5a:7a:dc:9a:ae:02:53:03: 32:7a:81:86:82:86:c7:8c:a6:9e:fa:d8:4e:46:60: 2b:24:a9:a4:58:09:ea:c4:f3:3d:88:45:58:c9:09: 2c:f6:5d:7d:53:11:b7:09:ec:05:dc:e1:0a:1c:ee: ae:87:09:32:1c:8f:9b:b9:bc:5b:cf:2f:d3:93:11: f7:0d:01:a3:36:7a:98:c5:8d:1e:34:63:52:b3:90: 56:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:39:00:3E:B6:6D:5F:5A:38:D7:11:76:BE:03:F2:30:1C:0E:87:67 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:fc:b3:dc:75:d2:d9:c7:8f:4c:1b:f1:e9:ea:47:87:d8:d3: fd:91:ef:ba:d3:7f:ee:ef:7d:5a:97:8f:d7:e6:9c:f2:9c:d7: fe:4f:de:d6:05:04:59:1a:25:67:a5:65:f5:24:df:60:05:16: 7b:d8:8d:ce:db:77:bf:aa:fd:5a:7b:65:fb:6d:e3:d3:a0:1f: 8b:4c:a8:70:32:07:63:3b:35:f8:1d:33:9c:51:a4:30:31:71: 7d:9c:21:7d:c2:f0:2e:d8:31:30:73:cc:73:60:ea:89:77:42: cf:d1:ad:62:2e:7a:6e:32:7a:7e:8b:06:e4:70:0d:5d:0c:f6: 58:43:2d:a7:57:ab:c2:79:95:3a:08:8c:45:1d:ec:cc:17:28: 07:2b:d7:37:7f:64:ad:95:77:e3:ad:6f:cc:fc:4f:eb:88:5f: 8e:47:f8:d5:db:08:6e:2b:73:ec:26:4e:c3:8d:5d:e6:30:0a: 17:dc:fd:20:7a:26:a6:26:a4:1d:77:6f:9a:6d:02:8f:0c:52: 7e:20:b1:76:b3:46:25:7c:31:78:7a:e5:bb:45:3d:ac:e4:bf: ef:01:c8:b6:03:c0:49:1b:3d:b3:12:d3:98:fb:10:68:83:b0: 5d:d7:28:e7:10:de:18:a2:f8:7f:ae:40:f3:09:a4:1b:7f:d1: d6:04:ed:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/otmOyRFGjRAoB5NhoB+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwNzIzMjIwMDI4WhcNMjYwNzI0MjIwMDI4WjAzMTEwLwYDVQQD Eyg5YTM5MDAzZWI2NmQ1ZjVhMzhkNzExNzZiZTAzZjIzMDFjMGU4NzY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0KZQQUVDH2u9slkb6dDapZqFYlA 7T8jCq11BeS0RgZO0nhMTmXqeshk+K7whICVqXJy6vh2RthdnG49AKkUeOo3IDaV dhLfKVCPHCbA5bJ8z2Ao8f/f1LFvpLB4v8D9Ab/OXKRPJoEK5tdkyX2P7O+QtS6Z Q23bcJ6pR5QKgdfr3rx+3hbnGlXkujJogtl4rsYjk8Rxl4BRJc7x5SV3Wl71LRGW pbwQk2XVWnrcmq4CUwMyeoGGgobHjKae+thORmArJKmkWAnqxPM9iEVYyQks9l19 UxG3CewF3OEKHO6uhwkyHI+bubxbzy/TkxH3DQGjNnqYxY0eNGNSs5BWfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJo5AD62bV9aONcRdr4D8jAcDodnMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaPyz3HXS 2cePTBvx6epHh9jT/ZHvutN/7u99WpeP1+ac8pzX/k/e1gUEWRolZ6Vl9STfYAUW e9iNztt3v6r9Wntl+23j06Afi0yocDIHYzs1+B0znFGkMDFxfZwhfcLwLtgxMHPM c2DqiXdCz9GtYi56bjJ6fosG5HANXQz2WEMtp1erwnmVOgiMRR3szBcoByvXN39k rZV3461vzPxP64hfjkf41dsIbitz7CZOw41d5jAKF9z9IHompiakHXdvmm0CjwxS fiCxdrNGJXwxeHrlu0U9rOS/7wHItgPASRs9sxLTmPsQaIOwXdco5xDeGKL4f65A 8wmkG3/R1gTtOQ== -----END CERTIFICATE-----Generated at Fri Jul 24 03:46:36 2026 by rpki-client