$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: 6CLjYXsveYrVjwLlRlJEX70xhXS3LOf7HZrYRfH3HQM= Subject key identifier: 1D:DA:90:53:03:A1:EE:2D:63:C3:F3:D0:D7:8E:90:E2:1D:5C:CB:DE Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 019F90913584243637ECB6C467A47F342F8E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 0903 Signing time: Thu 23 Jul 2026 20:01:03 +0000 Manifest this update: Thu 23 Jul 2026 20:01:03 +0000 Manifest next update: Fri 24 Jul 2026 20:01:03 +0000 Files and hashes: 1: 1-lZQQwIGspy-A49VyQ7kHmNHpKQ.roa (hash: 2vhnioGO/eiMQvJeJ+tmXutIm8YlR1a8HfWiqLl7pT0=) 2: 2LWYmASxuBLRbzVC9LCRKSvqhJM.roa (hash: 8dPo2gye6yX3KmBTpVEzeXu2YyozD5gTuof++Xq9PIQ=) 3: 2XNigP1XX5v-b3FUJHAwFh0xXbY.roa (hash: Oo5YPE7FvlEd2/zNBUPSdHNjdbk39M4tT85PV9QMW+4=) 4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=) 5: 9GJllxYCYuwNzBFKMnz_oxHLdWY.roa (hash: YYCua/crN7Zq2OAzCbcmSx0UG9y/gFrgV5F+Ua0iFZc=) 6: AJbfoK5NDzY7slqv2VxoN6jz7Z8.roa (hash: t7Or3kodVU4zmFE+xtd2pyiM3KjgcEq+rYKO3xYIMo0=) 7: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=) 8: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=) 9: HSZJOMMgqldMqXCQrjEqHsBDzGw.roa (hash: 9AQVGhxSXSd9IT7bQVwCvuQJIeCspjGvlwwEhQZYorE=) 10: LCFdxVlAtcLkcKUr0blTTKgZmEw.roa (hash: jGJaxEMPKFGeVP28YWJ4t2xMx4rPzI/ALe0dQ924UAc=) 11: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=) 12: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=) 13: _MGK1j6QTA1nK8AQnjzkVNmr-pw.roa (hash: en9VelGkS9vpx/T5Lf+ohydsIGWl37avTxjPQhTyLi0=) 14: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=) 15: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=) 16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=) 17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: sxXbOg15pbaGJy+KgKuoGqJMpitaZH0m3swQm2+13oY=) 18: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=) 19: nm5emazZKaYdFn8NsWwKL-2TAeM.roa (hash: IiWn3okfwvvDvTro9J82EzSLagveH38lqp19Rv0uJW8=) 20: upMD_pyWDLa0RqOV7xXp4CxsNnk.roa (hash: 9apNb0x19B3wBZFiU4avIAQyrfiAIRhzR+hUXXnJ5ok=) 21: yzHgZlCQT4Y7B8Y00NhRaB47xTk.roa (hash: FPbEBqFmlrQorlve4YibsVGnSYZoskFcy6Qs1bK0kdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 16:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:91:35:84:24:36:37:ec:b6:c4:67:a4:7f:34:2f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Jul 23 20:01:03 2026 GMT Not After : Jul 24 20:01:03 2026 GMT Subject: CN=1dda905303a1ee2d63c3f3d0d78e90e21d5ccbde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d7:fc:ba:62:d7:28:54:fb:39:35:0d:8c:65: 48:91:12:36:4c:ce:c8:ac:b6:32:f9:1f:c0:af:74: 8f:48:5b:b6:86:48:ae:e8:1d:a3:cb:9f:41:f6:73: 70:13:24:9d:93:56:53:92:b0:52:f1:87:5b:f6:30: 84:cd:30:e7:af:21:cb:03:33:a8:47:dc:ae:a9:90: 80:1c:14:31:f1:c3:10:9c:ea:6a:ea:96:a3:9e:59: 79:fa:85:d8:ba:f2:9e:92:d8:26:03:2d:63:f9:b3: 07:f0:0c:bf:4e:24:d0:8b:dd:09:68:d9:a4:b9:e5: 59:02:21:c9:9b:14:15:be:64:bc:57:08:43:f1:4d: 9a:39:83:0b:43:1d:80:ca:11:ba:10:03:00:59:dd: e3:2f:e3:33:3e:a6:f7:12:5a:87:ee:85:d5:5a:39: b7:d1:17:ef:3d:37:95:85:1b:c6:fd:92:c8:3c:bc: 3a:5b:70:e6:8e:f7:2c:8b:79:84:6a:7b:f7:87:6f: bf:ca:1d:da:85:61:30:53:de:28:d4:a8:02:cd:ff: ca:32:0b:bd:ff:70:72:a2:c5:2d:ff:ed:46:70:92: e9:9b:bf:d8:8e:25:23:85:89:10:62:00:16:3e:4e: d4:46:3a:fa:b3:c0:88:5f:19:1f:10:2b:fb:d3:b5: c3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:DA:90:53:03:A1:EE:2D:63:C3:F3:D0:D7:8E:90:E2:1D:5C:CB:DE X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:1c:a0:e7:4e:f5:8c:ce:4f:eb:3b:17:e1:2f:3a:0e:11:0b: e5:0d:38:96:72:a1:18:de:88:ff:95:ca:aa:e6:19:06:de:20: 04:31:69:f0:e0:e3:67:44:7a:7b:51:80:e4:2f:9a:a5:9d:fa: 54:b5:55:10:3f:e1:70:dd:18:64:3a:61:40:af:47:70:ed:c7: ac:b8:0f:3f:ff:da:11:c9:b6:63:9e:cd:c4:61:ef:d5:b2:47: 38:50:85:9e:08:7d:65:17:ad:71:38:76:73:92:7c:83:40:16: b4:76:2d:29:d8:60:3f:bb:27:df:39:05:47:68:f6:5e:09:d9: d2:de:7e:64:03:1c:ba:cf:e1:50:32:9f:62:74:2b:c6:0c:2d: 30:bd:77:26:dc:1a:31:43:89:b4:e3:9b:4a:9b:04:37:78:da: 6e:b5:35:5c:aa:5c:1b:ae:ab:ee:b1:39:3e:12:0c:49:33:a1: f5:7e:ac:ff:e7:54:6d:93:e1:25:24:ee:96:cd:d0:cf:7d:7c: 1d:10:77:49:f0:34:a9:b1:1f:88:6c:be:e3:4c:9c:28:05:61: c8:3e:24:c6:30:78:dc:c1:38:da:89:72:eb:e4:5e:98:a8:8d: 38:64:2b:5f:c3:ca:a8:8a:1e:44:7a:3c:af:13:23:b4:36:42: 41:6f:3f:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QkTWEJDY37LbEZ6R/NC+OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYwNzIzMjAwMTAzWhcNMjYwNzI0MjAwMTAzWjAzMTEwLwYDVQQD EygxZGRhOTA1MzAzYTFlZTJkNjNjM2YzZDBkNzhlOTBlMjFkNWNjYmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9f8umLXKFT7OTUNjGVIkRI2TM7I rLYy+R/Ar3SPSFu2hkiu6B2jy59B9nNwEySdk1ZTkrBS8Ydb9jCEzTDnryHLAzOo R9yuqZCAHBQx8cMQnOpq6pajnll5+oXYuvKektgmAy1j+bMH8Ay/TiTQi90JaNmk ueVZAiHJmxQVvmS8VwhD8U2aOYMLQx2AyhG6EAMAWd3jL+MzPqb3ElqH7oXVWjm3 0RfvPTeVhRvG/ZLIPLw6W3Dmjvcsi3mEanv3h2+/yh3ahWEwU94o1KgCzf/KMgu9 /3ByosUt/+1GcJLpm7/YjiUjhYkQYgAWPk7URjr6s8CIXxkfECv707XDAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB3akFMDoe4tY8Pz0NeOkOIdXMveMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAExyg5071 jM5P6zsX4S86DhEL5Q04lnKhGN6I/5XKquYZBt4gBDFp8ODjZ0R6e1GA5C+apZ36 VLVVED/hcN0YZDphQK9HcO3HrLgPP//aEcm2Y57NxGHv1bJHOFCFngh9ZRetcTh2 c5J8g0AWtHYtKdhgP7sn3zkFR2j2XgnZ0t5+ZAMcus/hUDKfYnQrxgwtML13Jtwa MUOJtOObSpsEN3jabrU1XKpcG66r7rE5PhIMSTOh9X6s/+dUbZPhJSTuls3Qz318 HRB3SfA0qbEfiGy+40ycKAVhyD4kxjB43ME42oly6+RemKiNOGQrX8PKqIoeRHo8 rxMjtDZCQW8/kA== -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:50 2026 by rpki-client