$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: 3GC/xn3JfsGxpZ23KZCOmk/o9AoLYI9oZ83A/5NZkvI= Subject key identifier: 3D:79:47:4B:59:2D:68:50:F4:A9:BE:41:27:37:46:1E:60:A7:A5:4B Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 019F94377399D697D59352BCC1788100D616 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 188F Signing time: Fri 24 Jul 2026 13:01:29 +0000 Manifest this update: Fri 24 Jul 2026 13:01:29 +0000 Manifest next update: Sat 25 Jul 2026 13:01:29 +0000 Files and hashes: 1: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (hash: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU=) 2: FQ-zr24LwDkwYEmw_FlDbzx5P4s.roa (hash: 72rsnmpdkRSkNBR0uk4zMj5njaCBagS3GBHGnSWVLYw=) 3: h_0cAkv9bRuqII55SmmjCPAtEkY.roa (hash: f3qXMN3stUSn8npXGtiCTxgNOHC/rASxYRfTCA56R9E=) 4: kxHXeC-RgFki1x0jEKzH48eBz8c.roa (hash: E6qamccMc25rG9FxeXNYkNGoky+PcxFg+Xq4GlM3NUs=) 5: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (hash: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk=) 6: plMF4273xJNdefV7r7jo8RJ8QbU.roa (hash: D9odZxGtxbDzG6OiIstvUcJ7z0OpJ5jME5X2lJ31p5A=) 7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: DIgGdU78oXWqUYSn3J/9Et+mOqKkwQS7YzdAbqYE7HM=) 8: un_1tb4ETb7dJsP5Mq8V0llGT80.roa (hash: cP4I0MaCsjRNc87FbMAxnApmXsIjWX9M4UbopOynI2E=) 9: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (hash: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk=) 10: zLCHjeiw_ejDI_VbLsjC7k1DbE4.roa (hash: 5Mti0up92969Oa1c08K/2LG50PP0mj7MqErSz+8DQcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 13:01:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:94:37:73:99:d6:97:d5:93:52:bc:c1:78:81:00:d6:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Jul 24 13:01:29 2026 GMT Not After : Jul 25 13:01:29 2026 GMT Subject: CN=3d79474b592d6850f4a9be412737461e60a7a54b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f2:d1:48:96:1f:db:38:50:3e:aa:c0:fc:4f: 62:c3:09:76:b5:e2:d3:2a:25:5b:fb:be:55:15:c0: fe:07:01:10:a2:3c:aa:16:32:d2:af:87:de:25:d6: f1:d0:b5:4c:1e:97:fc:11:63:7f:cf:b4:d7:2f:07: 05:ca:28:0a:41:ef:77:62:ef:c5:23:c6:6d:e9:ac: e0:ff:dd:e1:70:7c:09:98:33:ab:c6:61:c4:3a:3b: 34:06:2d:b7:1f:ec:6d:c6:ca:ba:61:03:de:8a:da: a8:79:3c:ce:fe:57:02:cb:02:88:6a:df:bd:f9:2b: 3d:27:03:3d:77:88:c6:68:1a:ea:f6:bd:79:05:a2: 32:18:72:62:85:26:3a:d5:b7:07:a2:8e:d1:f3:1c: 76:c5:24:04:e2:b9:bd:8b:17:55:fe:11:da:f6:a5: e8:9b:a1:c5:55:94:cb:d0:82:82:1a:f4:8f:8c:8f: c7:c0:2b:37:b3:ec:00:ca:4d:a3:f7:ac:61:9d:8f: 0b:8d:3b:e7:7d:0e:72:84:0f:67:da:a7:54:b1:e8: 1e:03:71:95:e9:ed:2d:fc:4c:05:56:fc:4b:5d:3d: 0d:44:91:b2:b7:eb:9a:e8:01:82:d9:ad:8a:60:56: 88:06:7f:8f:f4:19:60:9d:97:ce:eb:2c:75:ae:d4: 2b:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:79:47:4B:59:2D:68:50:F4:A9:BE:41:27:37:46:1E:60:A7:A5:4B X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:55:6e:12:ff:9c:05:56:91:ba:85:ac:64:b5:b8:50:81:ae: b3:01:21:36:1a:f3:07:3a:7d:e4:39:0e:33:d8:2a:11:a9:67: e6:d3:b6:37:82:74:ed:1b:bf:6b:29:9f:55:c6:c9:af:da:ab: 7c:91:98:0b:5a:dd:2c:26:e7:ea:0c:61:48:0d:23:0f:0e:c7: 0f:31:5a:e0:12:6c:b9:c1:67:e8:68:a5:48:00:43:c2:27:f8: dd:16:22:4f:2d:16:1b:b0:55:3a:2b:79:aa:f6:83:d8:ec:29: 84:41:70:43:05:36:5d:4a:3e:c9:b3:f4:c1:68:16:60:95:3e: 51:2a:ad:cd:23:00:ac:a9:61:08:20:8f:97:a9:d4:26:76:46: b4:2d:f9:f7:ac:aa:59:1b:8d:7e:e0:46:ab:4d:75:a3:68:c7: 95:11:e0:06:6e:cf:39:09:b8:1a:d2:f1:42:3b:c4:f1:19:56: 57:b4:e6:cd:3a:d6:74:bf:f0:69:53:89:32:58:c2:a2:2c:83: 3c:2a:36:a5:2e:3d:79:fd:f6:df:73:7f:98:7f:64:c8:e6:8e: f0:c8:db:55:45:41:53:5f:ce:de:42:a6:ed:f0:13:6e:36:d0: d1:59:d2:71:90:fb:e1:32:52:6f:6e:00:5b:68:d3:a3:59:8f: 72:d1:11:fd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+UN3OZ1pfVk1K8wXiBANYWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjYwNzI0MTMwMTI5WhcNMjYwNzI1MTMwMTI5WjAzMTEwLwYDVQQD EygzZDc5NDc0YjU5MmQ2ODUwZjRhOWJlNDEyNzM3NDYxZTYwYTdhNTRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvLRSJYf2zhQPqrA/E9iwwl2teLT KiVb+75VFcD+BwEQojyqFjLSr4feJdbx0LVMHpf8EWN/z7TXLwcFyigKQe93Yu/F I8Zt6azg/93hcHwJmDOrxmHEOjs0Bi23H+xtxsq6YQPeitqoeTzO/lcCywKIat+9 +Ss9JwM9d4jGaBrq9r15BaIyGHJihSY61bcHoo7R8xx2xSQE4rm9ixdV/hHa9qXo m6HFVZTL0IKCGvSPjI/HwCs3s+wAyk2j96xhnY8LjTvnfQ5yhA9n2qdUsegeA3GV 6e0t/EwFVvxLXT0NRJGyt+ua6AGC2a2KYFaIBn+P9BlgnZfO6yx1rtQr8wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD15R0tZLWhQ9Km+QSc3Rh5gp6VLMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi1VuEv+c BVaRuoWsZLW4UIGuswEhNhrzBzp95DkOM9gqEaln5tO2N4J07Ru/aymfVcbJr9qr fJGYC1rdLCbn6gxhSA0jDw7HDzFa4BJsucFn6GilSABDwif43RYiTy0WG7BVOit5 qvaD2OwphEFwQwU2XUo+ybP0wWgWYJU+USqtzSMArKlhCCCPl6nUJnZGtC3596yq WRuNfuBGq011o2jHlRHgBm7POQm4GtLxQjvE8RlWV7TmzTrWdL/waVOJMljCoiyD PCo2pS49ef3233N/mH9kyOaO8MjbVUVBU1/O3kKm7fATbjbQ0VnScZD74TJSb24A W2jTo1mPctER/Q== -----END CERTIFICATE-----Generated at Fri Jul 24 20:12:09 2026 by rpki-client