$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: zfkIctvbTJUNRYuR4X1x+KUEVMWB7IZT7bktTRhnvvg= Subject key identifier: 25:11:DA:3C:4D:61:48:41:24:37:F6:74:80:90:51:3F:68:B5:42:A9 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 019F8EA252CB2FC4820643EB556CC356E900 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 19D9 Signing time: Thu 23 Jul 2026 11:00:30 +0000 Manifest this update: Thu 23 Jul 2026 11:00:30 +0000 Manifest next update: Fri 24 Jul 2026 11:00:30 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 4: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: QnTACzrM78rkdfBAQvbUNQSX5Cm2aLvsOmpZmTlGAe4=) 5: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 6: WimZdTjw5Lm8MtebopYruWKL5rI.roa (hash: ZsNGt4iJIvs0TYMA8I/lIAfczIzjQsE/8A1JQl2JcVU=) 7: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 8: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 9: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 10: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 11: iKMbSLMsYD3IPy4aFTgWFbR5-7Q.roa (hash: FLy0rWO0Tm6EmloSEokoF4mkm9Xo/LOqQZJUxQFOv+k=) 12: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 13: wK7E2CITjHSS2oNwJxLPpiywZOo.asa (hash: oIOlXpucAgwg2lcnJgT+OLAJmqqKdwc6n/6fCi8en3s=) 14: waZz0IyLkJZ2XZs5mcy2zeGt7KA.roa (hash: PLFFtAchWYCJ5jmh6ddgth619HvoXK3NBze7KzilKF8=) 15: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 11:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8e:a2:52:cb:2f:c4:82:06:43:eb:55:6c:c3:56:e9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Jul 23 11:00:30 2026 GMT Not After : Jul 24 11:00:30 2026 GMT Subject: CN=2511da3c4d6148412437f6748090513f68b542a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9a:49:56:a8:dd:31:16:e1:67:75:53:1c:64: 72:4e:24:60:81:76:78:98:35:bf:0b:0e:56:d8:14: 87:30:3c:32:35:f4:61:c5:85:00:8d:81:8d:fe:69: 06:19:53:dd:41:71:ef:b2:75:7b:a4:35:e8:1e:bc: 0d:e3:53:0b:a1:e8:f7:f7:cc:27:31:7d:04:2f:45: 4a:3a:21:a2:52:20:d3:9f:72:a0:7f:f6:92:49:0b: af:0d:39:5b:5c:48:29:a0:77:15:c6:52:db:d5:22: f2:19:e5:38:65:4a:2c:cc:91:5e:f0:e3:1a:21:80: 11:50:dd:6c:95:3d:f8:e4:e3:ca:8e:2d:fb:6f:fa: 42:b2:5b:83:dd:d6:ce:69:a0:74:3e:63:d4:b6:eb: e6:62:7d:5c:5f:6a:99:66:ba:2b:68:54:f7:b0:05: 43:40:92:03:34:eb:3d:09:55:44:72:c0:d6:64:3a: d5:ca:b3:f8:4e:a9:5a:ef:4d:57:3c:65:e4:2b:3a: 07:c0:4e:22:a9:3a:05:b9:49:7f:9b:0d:78:77:87: 12:62:6f:1a:72:76:36:0e:07:bf:3e:c2:af:19:25: 75:6c:20:b9:92:11:63:b7:83:16:7f:df:54:12:5e: 85:44:f7:70:bb:55:48:5e:54:e1:f1:89:bf:1e:78: 88:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:11:DA:3C:4D:61:48:41:24:37:F6:74:80:90:51:3F:68:B5:42:A9 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:01:c8:2c:ac:b4:fd:e9:12:84:7b:b8:81:2d:0d:44:88:74: 1c:a8:a6:80:47:86:20:8b:ac:cf:ea:d4:d1:b2:5b:e2:4b:a1: 7d:30:71:da:9f:e5:6f:b0:6d:4f:0c:af:46:41:c1:c0:54:ec: 10:07:c6:bd:96:78:2f:f8:eb:11:14:45:18:28:e5:79:ef:51: 7c:d9:d9:83:ef:44:49:2b:8d:0a:35:d2:77:07:9e:8c:64:29: 71:72:8f:26:e0:ae:99:69:c9:8a:8f:85:57:c2:09:08:6c:8e: 24:fb:85:9f:bb:30:1d:02:18:90:4f:55:28:c2:d8:4b:23:23: 57:7f:e1:66:6a:79:ca:b6:e0:c0:2d:41:77:8c:a0:5f:a9:d4: 82:89:f3:bf:c3:11:0f:df:70:92:79:bd:02:6f:56:cc:7c:c1: 6a:54:45:47:49:68:84:3d:37:c0:15:44:72:7c:40:f7:a9:ee: 93:ae:07:88:0a:67:ae:ff:e6:97:1a:ed:2a:ed:b1:80:f0:13: 39:88:76:be:d1:68:68:c0:21:56:5b:2d:7f:4e:ff:a4:ac:38: 60:20:9f:17:d6:71:e5:88:88:5e:3f:e9:77:a1:cc:9b:82:8b: 42:b6:1b:1a:ef:07:af:7b:28:05:8e:dd:1f:60:17:25:ec:00: e5:03:e3:97 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+OolLLL8SCBkPrVWzDVukAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwNzIzMTEwMDMwWhcNMjYwNzI0MTEwMDMwWjAzMTEwLwYDVQQD EygyNTExZGEzYzRkNjE0ODQxMjQzN2Y2NzQ4MDkwNTEzZjY4YjU0MmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZpJVqjdMRbhZ3VTHGRyTiRggXZ4 mDW/Cw5W2BSHMDwyNfRhxYUAjYGN/mkGGVPdQXHvsnV7pDXoHrwN41MLoej398wn MX0EL0VKOiGiUiDTn3Kgf/aSSQuvDTlbXEgpoHcVxlLb1SLyGeU4ZUoszJFe8OMa IYARUN1slT345OPKji37b/pCsluD3dbOaaB0PmPUtuvmYn1cX2qZZroraFT3sAVD QJIDNOs9CVVEcsDWZDrVyrP4Tqla701XPGXkKzoHwE4iqToFuUl/mw14d4cSYm8a cnY2Dge/PsKvGSV1bCC5khFjt4MWf99UEl6FRPdwu1VIXlTh8Ym/HniIxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCUR2jxNYUhBJDf2dICQUT9otUKpMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEQHILKy0 /ekShHu4gS0NRIh0HKimgEeGIIusz+rU0bJb4kuhfTBx2p/lb7BtTwyvRkHBwFTs EAfGvZZ4L/jrERRFGCjlee9RfNnZg+9ESSuNCjXSdweejGQpcXKPJuCumWnJio+F V8IJCGyOJPuFn7swHQIYkE9VKMLYSyMjV3/hZmp5yrbgwC1Bd4ygX6nUgonzv8MR D99wknm9Am9WzHzBalRFR0lohD03wBVEcnxA96nuk64HiApnrv/mlxrtKu2xgPAT OYh2vtFoaMAhVlstf07/pKw4YCCfF9Zx5YiIXj/pd6HMm4KLQrYbGu8Hr3soBY7d H2AXJewA5QPjlw== -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:16 2026 by rpki-client