$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: 1cowoIrw/6N1z5Kn2wOr/manrZKeln8qqJakfvGtlGE= Subject key identifier: 64:B2:16:36:80:BE:AD:BA:6F:90:69:7F:4C:32:F7:A4:C4:14:6B:D0 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 019F91A37DEFF28DC4C77A827AB8F6E1B65A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0D7C Signing time: Fri 24 Jul 2026 01:00:38 +0000 Manifest this update: Fri 24 Jul 2026 01:00:38 +0000 Manifest next update: Sat 25 Jul 2026 01:00:38 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: mscp5kAw+zsmAdVRGX2p/h4SC5dvVn5vBFyRMUnmzRA=) 9: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 10: aV15c49lSGl3dteQSHc3IvNZ2Yw.roa (hash: idSDFzUORIOI2C3DdmyZjUWIVKrr2rvoia+URiMKZUk=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 14: jdhRRSqw1KV-OBkZuUAJ-tCWDik.roa (hash: PZnlHT69L4VcU/X0HEwE+Wn3yCWoZ+g03Z4fHifOKPg=) 15: ta9QPHmvElN9LQbU3Ml0S8yt9cs.roa (hash: pWwk3bYPZv/2DLVIuX6tB76kOFRVtUjaqBNqlUqnu+g=) 16: wea1j7CCiOwKhbp9xRs9xEsak8o.roa (hash: hckz/qMoMAZzO9HmBfzADkSbkz16uEss9Ro4N3hyVDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:91:a3:7d:ef:f2:8d:c4:c7:7a:82:7a:b8:f6:e1:b6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Jul 24 01:00:38 2026 GMT Not After : Jul 25 01:00:38 2026 GMT Subject: CN=64b2163680beadba6f90697f4c32f7a4c4146bd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:64:c2:1b:dd:a4:60:7e:66:b9:ce:6f:81: 71:2e:56:27:5f:29:c3:ba:93:24:04:7d:38:79:dc: f1:b2:2a:42:56:73:e4:35:78:70:fb:55:4a:fd:8a: fb:8a:6d:87:ec:52:29:01:64:8f:b7:bc:8b:4a:f4: 86:90:57:2c:70:9c:cc:64:51:6b:b8:42:52:28:1d: 47:f0:f9:de:b3:4a:cf:ab:8c:b0:9d:46:89:6f:1d: a7:fa:89:d9:2c:35:ed:6c:3c:d9:c9:21:67:c2:63: 2d:b2:5a:66:1b:34:e4:80:b0:9f:91:66:04:94:7c: 2d:74:55:5e:03:92:4e:21:f9:96:15:96:17:21:32: 11:b5:1b:b4:b0:75:08:a9:ec:29:00:a6:fb:76:67: f2:9d:63:98:1f:53:de:4d:ca:15:23:c8:79:8a:09: a0:68:bf:07:be:b1:63:8e:e5:8c:d3:60:38:9e:4f: da:80:c0:2b:e1:3a:12:41:a6:57:de:5d:cc:f5:fe: dc:f0:5e:d9:0c:7e:cf:ee:ce:fe:31:3f:7c:32:0b: 6b:75:16:9f:aa:c2:24:af:17:b5:b9:26:18:dd:04: 9c:dc:79:4f:ea:9f:bf:ba:1c:4b:ac:66:f6:9d:1a: a4:cf:6d:f9:b4:40:30:3d:dc:67:eb:d8:0f:03:33: 8a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B2:16:36:80:BE:AD:BA:6F:90:69:7F:4C:32:F7:A4:C4:14:6B:D0 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:5e:e6:77:77:25:70:74:7b:36:99:71:db:2b:12:3a:5d:c6: 32:c8:90:3d:19:5b:01:15:0f:a2:19:08:3c:6d:18:e2:37:da: 2f:c6:40:06:fb:f0:c9:0f:0a:5f:c5:be:52:de:ec:72:76:de: ec:38:09:ad:1c:7c:57:9e:09:90:3c:4a:9a:58:a1:77:50:f9: 73:98:87:aa:52:2d:36:14:50:13:e4:8c:80:c1:5c:d7:77:63: 70:1e:87:f6:dd:e6:3b:e3:2c:90:ef:99:98:52:05:25:45:09: ec:55:48:50:77:e1:a1:42:e3:0c:fb:64:25:ae:b3:84:c5:2f: 3c:b8:ce:42:51:3e:c9:c3:ee:a6:b1:50:f1:f7:36:8b:93:4c: f0:35:d2:25:26:b0:9f:cf:5a:6c:31:86:46:30:d6:18:87:44: 49:b6:55:48:b6:88:ec:9f:02:96:aa:f1:05:4d:f1:26:6c:4c: d2:d4:03:66:b9:88:e8:84:56:17:6b:c0:9f:a1:42:f2:53:9e: 08:c5:3e:9b:ee:3b:af:76:4a:03:ce:34:9f:f0:10:38:47:25: e1:d1:2b:ba:fc:41:af:ec:6f:b4:74:79:8d:8a:26:0f:38:92: 8e:ec:c0:fe:31:b2:48:c1:9a:48:ed:ad:75:64:49:ab:a3:ea: ba:4a:3a:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Ro33v8o3Ex3qCerj24bZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwNzI0MDEwMDM4WhcNMjYwNzI1MDEwMDM4WjAzMTEwLwYDVQQD Eyg2NGIyMTYzNjgwYmVhZGJhNmY5MDY5N2Y0YzMyZjdhNGM0MTQ2YmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYNkwhvdpGB+ZrnOb4FxLlYnXynD upMkBH04edzxsipCVnPkNXhw+1VK/Yr7im2H7FIpAWSPt7yLSvSGkFcscJzMZFFr uEJSKB1H8Pnes0rPq4ywnUaJbx2n+onZLDXtbDzZySFnwmMtslpmGzTkgLCfkWYE lHwtdFVeA5JOIfmWFZYXITIRtRu0sHUIqewpAKb7dmfynWOYH1PeTcoVI8h5igmg aL8HvrFjjuWM02A4nk/agMAr4ToSQaZX3l3M9f7c8F7ZDH7P7s7+MT98MgtrdRaf qsIkrxe1uSYY3QSc3HlP6p+/uhxLrGb2nRqkz235tEAwPdxn69gPAzOKCQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGSyFjaAvq26b5Bpf0wy96TEFGvQMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMV7md3cl cHR7Nplx2ysSOl3GMsiQPRlbARUPohkIPG0Y4jfaL8ZABvvwyQ8KX8W+Ut7scnbe 7DgJrRx8V54JkDxKmlihd1D5c5iHqlItNhRQE+SMgMFc13djcB6H9t3mO+MskO+Z mFIFJUUJ7FVIUHfhoULjDPtkJa6zhMUvPLjOQlE+ycPuprFQ8fc2i5NM8DXSJSaw n89abDGGRjDWGIdESbZVSLaI7J8ClqrxBU3xJmxM0tQDZrmI6IRWF2vAn6FC8lOe CMU+m+47r3ZKA840n/AQOEcl4dEruvxBr+xvtHR5jYomDziSjuzA/jGySMGaSO2t dWRJq6Pquko6mA== -----END CERTIFICATE-----Generated at Fri Jul 24 08:20:22 2026 by rpki-client