$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json) Hash identifier: Bw0NCEnimYop5Vos0lnzaeSCATOpOBBb+JWVjGDGBbc= Subject key identifier: 54:54:2B:50:41:03:35:ED:4A:3D:14:DB:30:7D:07:46:45:3D:83:D4 Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 019F8F477FFD54C03FAD0BF99FB7FCA692DD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft Manifest number: 1A14 Signing time: Thu 23 Jul 2026 14:00:55 +0000 Manifest this update: Thu 23 Jul 2026 14:00:55 +0000 Manifest next update: Fri 24 Jul 2026 14:00:55 +0000 Files and hashes: 1: 1-Wl5nNIYq_W3pgo34yEVZQdbxyU.roa (hash: G+7+XKaWZcYGhV9Z4DnGNMnW/7HpmVdpN8SBoPugm7A=) 2: 6R28sM8NerO2u18G_AMWCWlWH18.roa (hash: NDy+Juig3WdCXI1JH5AcQ2fEURwLEtaXUjO+rQmeRKY=) 3: NFl71PMJau8OoVT-JEiyhHLSIZE.roa (hash: 3lKUsUjSDTNYTFbKVTbGnC0rr8zeipPM6TGCp1smax4=) 4: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=) 5: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=) 6: XU-lnejjTfdYfkel9cu2qcj3jOg.asa (hash: 162FwGPbBSAqHbgij5iWFOSWYdvU5C2K98+sNPEBfXc=) 7: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: DNrzB73hQ0UHD5e0kmV2kf1/t4GzcFhWF0IWkvfqpbE=) 8: cpt1ugrQd2rHwxe5DoZShXs9qzA.roa (hash: mY1xZ8RVFs4GaD6HtiYmaN9LhtKWxyqpPX89QA8Zdpk=) 9: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=) 10: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:47:7f:fd:54:c0:3f:ad:0b:f9:9f:b7:fc:a6:92:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Jul 23 14:00:55 2026 GMT Not After : Jul 24 14:00:55 2026 GMT Subject: CN=54542b50410335ed4a3d14db307d0746453d83d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:18:00:5c:67:77:87:21:f3:01:49:33:2c:00: 86:8d:fd:1e:29:a1:c5:e2:ba:9c:ad:c3:71:e1:fd: 87:a7:7d:8e:ce:51:6e:ff:bf:a6:19:cb:b8:65:df: 88:0e:0d:5a:32:a4:56:6c:64:c3:d5:3a:d6:6b:22: 6b:f2:ef:48:c6:c5:cb:bb:9d:8a:4b:3d:4d:70:43: 96:80:09:f2:34:30:d0:cd:24:b0:ea:d0:36:16:30: 1b:a7:3f:3b:e3:79:dc:1e:80:39:26:b3:39:9c:a7: 54:99:aa:da:8e:4d:c8:c9:37:43:d5:4c:98:6c:79: 28:d0:7d:43:8b:98:d8:96:6f:19:6a:9a:c5:61:f2: 41:c6:a8:03:45:7a:c7:67:bb:7f:af:39:db:34:97: 85:b7:de:8e:ec:8c:7d:2e:8f:99:1a:e2:b0:03:bf: b8:6c:c5:ed:69:fa:b8:cc:01:ff:93:9d:9d:3e:19: 18:36:fa:e6:b0:0c:fb:18:1d:16:ab:3a:88:60:9a: 88:98:bf:fa:12:e9:1b:02:f1:80:63:0d:4b:9b:c9: c6:5a:ec:e2:8d:ea:bf:e5:9c:d5:8b:f9:fb:7e:a2: ff:54:98:08:7c:2d:a5:88:4b:d1:ca:65:bc:3b:c6: 07:67:1d:3e:46:ca:4a:ba:eb:63:f9:79:11:86:50: 35:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:54:2B:50:41:03:35:ED:4A:3D:14:DB:30:7D:07:46:45:3D:83:D4 X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:1e:bc:ee:0f:96:b3:02:d7:b8:41:b9:8f:e6:dc:b8:84:28: ec:e9:53:07:0b:6c:12:87:f6:ed:bd:5a:ca:40:63:9f:60:9b: f6:39:54:9a:ed:91:27:ad:eb:d8:7f:95:f1:63:28:07:bc:7b: 01:83:93:4e:f5:7e:b4:24:e8:b5:7f:1e:05:2b:85:ee:ed:f0: 1f:2a:7d:0d:e5:e2:65:a8:c8:20:02:eb:70:5a:74:be:2d:1d: 1d:44:6c:d2:d8:0b:c4:87:49:84:17:94:ac:c6:06:29:0e:cc: 0a:fa:4d:ac:6c:47:a7:87:a1:da:7d:c6:95:81:17:59:fe:c7: 32:ad:2a:e8:84:a6:91:39:af:a7:6b:12:ce:d3:7a:dc:90:60: 3e:ea:f2:09:2b:10:e4:13:f2:74:26:53:02:29:2f:8b:2c:a2: 68:09:17:31:81:8a:be:d1:6e:6d:cc:f0:dc:f1:d4:c0:d4:13: 56:31:e5:a6:95:f5:2a:29:00:1b:6c:54:46:3f:65:59:31:9b: 8c:20:c3:78:f8:b4:38:52:bb:90:4b:a5:d0:bf:fb:1f:b7:86: c6:1d:4a:f4:73:a7:40:35:b7:8a:fb:cb:b2:2d:45:ce:92:1d: cd:12:fe:a2:fd:c9:6d:6a:2d:a5:26:03:6b:92:a2:5a:75:cf: 0f:67:9d:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PR3/9VMA/rQv5n7f8ppLdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjYwNzIzMTQwMDU1WhcNMjYwNzI0MTQwMDU1WjAzMTEwLwYDVQQD Eyg1NDU0MmI1MDQxMDMzNWVkNGEzZDE0ZGIzMDdkMDc0NjQ1M2Q4M2Q0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5BgAXGd3hyHzAUkzLACGjf0eKaHF 4rqcrcNx4f2Hp32OzlFu/7+mGcu4Zd+IDg1aMqRWbGTD1TrWayJr8u9IxsXLu52K Sz1NcEOWgAnyNDDQzSSw6tA2FjAbpz8743ncHoA5JrM5nKdUmarajk3IyTdD1UyY bHko0H1Di5jYlm8ZaprFYfJBxqgDRXrHZ7t/rznbNJeFt96O7Ix9Lo+ZGuKwA7+4 bMXtafq4zAH/k52dPhkYNvrmsAz7GB0WqzqIYJqImL/6EukbAvGAYw1Lm8nGWuzi jeq/5ZzVi/n7fqL/VJgIfC2liEvRymW8O8YHZx0+RspKuutj+XkRhlA1twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRUK1BBAzXtSj0U2zB9B0ZFPYPUMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcB687g+W swLXuEG5j+bcuIQo7OlTBwtsEof27b1aykBjn2Cb9jlUmu2RJ63r2H+V8WMoB7x7 AYOTTvV+tCTotX8eBSuF7u3wHyp9DeXiZajIIALrcFp0vi0dHURs0tgLxIdJhBeU rMYGKQ7MCvpNrGxHp4eh2n3GlYEXWf7HMq0q6ISmkTmvp2sSztN63JBgPuryCSsQ 5BPydCZTAikviyyiaAkXMYGKvtFubczw3PHUwNQTVjHlppX1KikAG2xURj9lWTGb jCDDePi0OFK7kEul0L/7H7eGxh1K9HOnQDW3ivvLsi1FzpIdzRL+ov3JbWotpSYD a5KiWnXPD2edJg== -----END CERTIFICATE-----Generated at Thu Jul 23 19:08:45 2026 by rpki-client