$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: 2xF5aHKikEdysuJraAkeUKbDrN8CJ2aDcqCBym4t2Ow= Subject key identifier: 32:05:07:71:F8:9C:61:90:40:38:78:49:32:AE:81:93:92:CD:E6:7B Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 019F905A4D576183FFE13F58D57F8D7F5BB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 19CC Signing time: Thu 23 Jul 2026 19:01:04 +0000 Manifest this update: Thu 23 Jul 2026 19:01:04 +0000 Manifest next update: Fri 24 Jul 2026 19:01:04 +0000 Files and hashes: 1: 5CLXXKkA4JcsyDrUBBM3fxn2kdc.roa (hash: gFWbYqwKSpr3zQtON6eHRCE0iX3y63ZJZklzBNANHsM=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: NS748o3K4WvqBylQYeqhUZOrp5O56bRn7btsMJtsEPg=) 3: DXIDJwT32OV423k4TIWwn2iDwyg.roa (hash: 1DgbvkANX93phDSb+AyRjq7ZFAZDrX3G2DhrbhrdrCY=) 4: Ex4sydFNNb9e9IlWuLzuPazLU44.roa (hash: tuvV0h/eTCcgOOevaItUPifNfonAkWlBsMN+IAbF80I=) 5: F0q3v2kkeTya7vdhm0lzFl3wBAA.roa (hash: BpkEUnq+/w6BrSZ1bTiqPBmMOt7WaZgSwy12/ipsBqo=) 6: GU71SIKDNqtDYi7P5ZGVJfaZ9Ng.roa (hash: 7ZQhqryE0L0rNOAz1gL32gj8EsSrO0yhlKkyCkXl4cc=) 7: PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa (hash: 5xE+UcziQ9DiquZ2A/57aqh1sjUE876lnNSATCS1lTI=) 8: TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa (hash: gEbc+tVQGYMxTiSiJNGO8DDQrrsZOyqWJhw0Dv/aKqE=) 9: XN9ItxoiVygt3a0qQVsmKKlWk9E.roa (hash: iH4X65Vs6HtOKFxQaLyaQ9nZPsCEbiHQMEBYUWCi4KY=) 10: bba2QTZrp_1uueLnjfHPBxHS3PY.roa (hash: OYrkuz8mezgI3XbKfKRWAwnwwsrmJ+JNJd03sNYC3L8=) 11: djcMZ6pGXyKmA-lIeoWfJvgd_vg.roa (hash: 2V8x5uW66gGIUCrfVlUVt3oOyIC3Jcqdd44dr46xxaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:5a:4d:57:61:83:ff:e1:3f:58:d5:7f:8d:7f:5b:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Jul 23 19:01:04 2026 GMT Not After : Jul 24 19:01:04 2026 GMT Subject: CN=32050771f89c61904038784932ae819392cde67b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:13:57:a2:96:2a:a9:cf:68:cf:b0:04:23:d6: 14:92:6b:ca:29:66:48:ca:de:48:48:65:3f:55:30: d6:39:2d:f4:0e:9c:59:52:73:11:98:a2:15:d7:ee: ce:93:2a:1c:f9:64:87:13:d1:80:e1:c6:bc:87:77: bb:2e:2f:cc:58:7a:7c:f9:d7:74:64:a9:a6:9b:d6: 69:c8:d9:c0:b9:71:9e:d1:44:dc:7a:18:f5:96:b5: 17:25:a5:3d:a9:10:4a:de:d5:e0:0b:37:32:96:f1: 7e:04:6b:9c:9a:19:7b:57:a3:98:ae:ab:99:fe:d2: dc:b2:a4:01:49:cb:67:bc:d8:10:1f:18:7f:55:67: f3:23:0b:63:1a:24:ae:8a:a2:99:b9:1c:24:5e:53: 91:e5:79:8f:8f:f7:96:fb:4c:5c:38:a3:bb:ff:9f: 97:65:c7:28:d9:08:63:39:bc:49:81:fa:11:99:4d: 4f:a5:fb:d8:27:f4:1e:a1:05:e3:1a:d9:03:94:c4: d9:f3:5d:e2:ef:c7:ab:12:65:1b:04:ff:9b:f3:05: 65:1b:34:80:f9:ae:b7:17:eb:f7:07:16:6c:99:ab: f2:b9:46:49:6e:2f:62:c5:46:b3:ac:f5:41:f7:df: 00:54:60:3f:a2:ea:64:c9:c9:af:53:51:b4:71:82: 49:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:05:07:71:F8:9C:61:90:40:38:78:49:32:AE:81:93:92:CD:E6:7B X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:15:a1:db:1c:9c:66:9e:23:6d:38:ba:12:77:e1:7c:6f:e0: 55:19:d2:7f:35:36:01:58:72:fe:5c:1f:67:31:44:e5:31:77: 85:3e:99:b1:00:1a:6a:0c:d9:c3:dc:fc:1b:ef:60:27:ae:be: f6:25:eb:1a:90:bd:ea:50:d3:4d:7e:55:73:67:b2:87:5d:1b: 7b:cc:31:79:59:c7:c7:3d:9d:8c:df:38:a2:a7:01:db:c9:63: 0e:29:71:d7:1b:11:39:8e:a0:1f:dd:1e:4b:91:0d:5d:86:2c: 95:15:5e:91:a7:92:e9:7a:a0:89:74:c1:9f:de:91:f2:3d:cb: 77:db:1d:50:d0:55:15:16:92:0e:5c:a1:21:a4:3a:ae:6e:90: 52:0e:65:73:fe:02:7c:8e:f7:67:83:17:29:e2:1d:32:3b:f2: 83:ff:98:85:ef:c9:b0:3b:75:d8:97:c9:5d:88:33:71:ae:0b: 70:4e:46:2f:bf:e9:97:8b:cf:22:15:1c:c6:96:5b:95:f6:f1: 4f:0b:9b:92:30:da:0b:30:3d:a8:77:ee:e3:2d:e3:c9:4f:42: e7:b9:e9:45:54:c9:bb:f0:90:7f:f5:b9:22:8c:55:cc:2a:e1: cf:8f:9e:b3:6b:e1:a3:57:40:30:ca:1e:12:a8:4c:8a:ef:ca: d8:20:8e:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QWk1XYYP/4T9Y1X+Nf1uxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwNzIzMTkwMTA0WhcNMjYwNzI0MTkwMTA0WjAzMTEwLwYDVQQD EygzMjA1MDc3MWY4OWM2MTkwNDAzODc4NDkzMmFlODE5MzkyY2RlNjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RNXopYqqc9oz7AEI9YUkmvKKWZI yt5ISGU/VTDWOS30DpxZUnMRmKIV1+7Okyoc+WSHE9GA4ca8h3e7Li/MWHp8+dd0 ZKmmm9ZpyNnAuXGe0UTcehj1lrUXJaU9qRBK3tXgCzcylvF+BGucmhl7V6OYrquZ /tLcsqQBSctnvNgQHxh/VWfzIwtjGiSuiqKZuRwkXlOR5XmPj/eW+0xcOKO7/5+X Zcco2QhjObxJgfoRmU1PpfvYJ/QeoQXjGtkDlMTZ813i78erEmUbBP+b8wVlGzSA +a63F+v3BxZsmavyuUZJbi9ixUazrPVB998AVGA/oupkycmvU1G0cYJJmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIFB3H4nGGQQDh4STKugZOSzeZ7MB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRWh2xyc Zp4jbTi6EnfhfG/gVRnSfzU2AVhy/lwfZzFE5TF3hT6ZsQAaagzZw9z8G+9gJ66+ 9iXrGpC96lDTTX5Vc2eyh10be8wxeVnHxz2djN84oqcB28ljDilx1xsROY6gH90e S5ENXYYslRVekaeS6XqgiXTBn96R8j3Ld9sdUNBVFRaSDlyhIaQ6rm6QUg5lc/4C fI73Z4MXKeIdMjvyg/+Yhe/JsDt12JfJXYgzca4LcE5GL7/pl4vPIhUcxpZblfbx TwubkjDaCzA9qHfu4y3jyU9C57npRVTJu/CQf/W5IoxVzCrhz4+es2vho1dAMMoe EqhMiu/K2CCOSQ== -----END CERTIFICATE-----Generated at Thu Jul 23 21:40:16 2026 by rpki-client