$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft File: 6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json) Hash identifier: /1PVQQK7F3Tt09Si51+dJnSgg7Ak+2+1w8yC3Xc06VM= Subject key identifier: E3:8B:A2:4E:96:F7:6E:2E:DB:64:F5:1E:FB:CF:1F:24:54:89:CB:67 Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Certificate serial: 019F8F7E41F9228D8FBEADB1364AF7150A70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft Manifest number: 19DB Signing time: Thu 23 Jul 2026 15:00:44 +0000 Manifest this update: Thu 23 Jul 2026 15:00:44 +0000 Manifest next update: Fri 24 Jul 2026 15:00:44 +0000 Files and hashes: 1: 1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa (hash: xe08thfVWk/Q0PmRvIsVkTS/li36DVR1VhnOJhKWMg4=) 2: 1-LUBueVBqdwiFLK1gsB1AnGbiPQ.asa (hash: L6rsU1pcQ3cdDgJa7jGbs1XAAZhtjuh8eTrAlkKyq8Y=) 3: 3fCUHErbv2WtYx--n4nf1Q6-Ubw.roa (hash: VmDuAyLIouZrOeMJRlVFLUwqzbhKM9CHSnO4kIRdwDo=) 4: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: YshOI10X9FGbTpIAsWNIdie9ySI6OwtfkOPX0hdthrI=) 5: BbRIR3kI21VUGCXjSDWllMbS-8k.roa (hash: EEgGaz+LiLIszuH7ULNxtMHJjtmHM3CUdnjiO3tprKI=) 6: O73kgAQ-kXlFxK4kvQOyEoxMTXA.roa (hash: ETBQDnDgpIBgdAIaW/tfoxKMAV0hJkP0bltM4DA6Q48=) 7: Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa (hash: 4gOrAZeHV5DljjLNX3EiWeFFJsFqa+d+OW/WO4pBac4=) 8: c7YCMDtvilpnAcHhUKUpazLH8YQ.roa (hash: p8eFTJPY5mhYNqyxOeRrt26FdTu0eyXi+YCF788HwNI=) 9: i22LYTAh0PcLuwu7sEyCzT-6xXM.asa (hash: DPM18lmzzP7eVh2MT51XAxQN2uj0C+J8vlqNWZv6bek=) 10: ox_RAZ62BnMtTtsni2E71dlvqdw.roa (hash: +gTLaHfV2T8wDVaZZ2TtzS3DP1Xu6/AIsWNOHGHf3mo=) 11: zbAORhJVXtMoGKcD9VvlKtXQvCM.roa (hash: Dme/MffDzRscTtpOm/eYuLZJmQW4bf9yIlFMyWJha0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:8f:7e:41:f9:22:8d:8f:be:ad:b1:36:4a:f7:15:0a:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Validity Not Before: Jul 23 15:00:44 2026 GMT Not After : Jul 24 15:00:44 2026 GMT Subject: CN=e38ba24e96f76e2edb64f51efbcf1f245489cb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:55:a1:47:84:01:77:d2:f2:fc:59:70:9c:e7: 17:38:53:27:3e:91:5e:51:86:27:5d:bb:19:ff:f4: 0e:f9:7d:70:36:69:11:b8:bb:d8:8c:ea:c8:c2:c0: 6d:f2:26:95:c3:db:b9:e1:fd:73:f9:0e:43:8b:02: 78:f6:d8:9c:c1:47:05:b5:ff:a6:c2:73:17:70:30: 41:0e:b8:44:18:49:a5:f7:7d:39:bd:0b:43:4b:96: 8c:59:fb:c4:1f:7e:50:f0:3f:ea:7f:68:79:30:6d: 14:fb:e7:d7:d8:62:fe:6f:04:89:68:28:5d:9a:f1: b7:fb:a2:60:10:28:4b:d0:7b:ec:78:4f:8e:89:2b: d8:00:e0:81:ad:94:ab:9b:64:88:b9:50:48:a4:eb: 48:4a:81:46:e8:cd:06:9c:3f:3b:3a:f2:2d:e2:f4: a6:67:91:7b:e9:ad:75:b1:4c:bd:81:1b:9d:89:97: ea:10:92:6f:6f:0a:83:b6:0a:60:75:44:7b:5d:7d: 03:d9:f5:a3:cb:ca:cb:e8:28:54:58:4d:72:fe:66: 57:f2:8b:3c:d3:07:0e:aa:60:91:5a:e2:ae:7d:4c: 11:b4:45:d8:ef:0b:01:72:8b:28:69:65:49:3b:eb: be:b1:3b:e2:48:a9:dd:65:0e:51:39:34:a3:7d:de: c3:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8B:A2:4E:96:F7:6E:2E:DB:64:F5:1E:FB:CF:1F:24:54:89:CB:67 X509v3 Authority Key Identifier: keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:09:4a:cc:7e:5f:ca:40:d5:02:6d:16:35:c1:70:02:9f:a8: b8:b1:e7:7b:d2:30:91:c2:e3:47:40:21:32:f0:ef:19:ed:87: 88:ae:f5:62:0f:e8:2d:cb:ec:4a:5a:30:5a:d9:20:68:57:b4: b7:cd:7e:9a:f2:6b:28:e1:6a:f3:41:93:ba:04:23:a9:05:2f: 0a:86:b0:bc:c3:ea:7e:47:ff:c8:c7:81:7c:73:8d:0a:59:da: 55:ad:1c:cd:f2:6a:90:d6:34:ce:6a:a3:a3:e5:2a:a8:17:a5: f0:c5:33:0d:f5:29:60:ff:eb:67:1a:b7:e1:5b:d0:39:f3:0b: fd:7e:e9:c6:8c:66:de:ba:81:75:61:14:e5:9e:7e:f0:11:d0: c3:7e:b1:0a:63:47:5a:82:73:ec:9a:60:2e:b2:8b:2a:95:8f: d5:6c:73:43:fd:bd:40:4f:8f:59:c3:fc:9c:23:6b:ad:07:bd: db:a8:02:11:5c:eb:1b:6f:70:45:35:66:87:96:13:b2:ec:e3: e6:23:c6:8b:fd:db:08:73:9f:91:b1:7a:6c:80:e8:de:ac:bc: 98:75:b9:b7:5a:f6:19:40:a0:c9:c7:51:7f:ae:d4:97:48:9d: aa:35:a4:43:55:70:dc:11:b7:53:a8:52:07:cb:5a:69:10:b3: b6:8e:da:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+PfkH5Io2Pvq2xNkr3FQpwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy M2UzZGIwHhcNMjYwNzIzMTUwMDQ0WhcNMjYwNzI0MTUwMDQ0WjAzMTEwLwYDVQQD EyhlMzhiYTI0ZTk2Zjc2ZTJlZGI2NGY1MWVmYmNmMWYyNDU0ODljYjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1WhR4QBd9Ly/FlwnOcXOFMnPpFe UYYnXbsZ//QO+X1wNmkRuLvYjOrIwsBt8iaVw9u54f1z+Q5DiwJ49ticwUcFtf+m wnMXcDBBDrhEGEml9305vQtDS5aMWfvEH35Q8D/qf2h5MG0U++fX2GL+bwSJaChd mvG3+6JgEChL0HvseE+OiSvYAOCBrZSrm2SIuVBIpOtISoFG6M0GnD87OvIt4vSm Z5F76a11sUy9gRudiZfqEJJvbwqDtgpgdUR7XX0D2fWjy8rL6ChUWE1y/mZX8os8 0wcOqmCRWuKufUwRtEXY7wsBcosoaWVJO+u+sTviSKndZQ5ROTSjfd7DOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOLok6W924u22T1HvvPHyRUictnMB8GA1UdIwQY MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt YTg3MWVjYzIxMmE2LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2 LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkglKzH5f ykDVAm0WNcFwAp+ouLHne9IwkcLjR0AhMvDvGe2HiK71Yg/oLcvsSlowWtkgaFe0 t81+mvJrKOFq80GTugQjqQUvCoawvMPqfkf/yMeBfHONClnaVa0czfJqkNY0zmqj o+UqqBel8MUzDfUpYP/rZxq34VvQOfML/X7pxoxm3rqBdWEU5Z5+8BHQw36xCmNH WoJz7JpgLrKLKpWP1WxzQ/29QE+PWcP8nCNrrQe926gCEVzrG29wRTVmh5YTsuzj 5iPGi/3bCHOfkbF6bIDo3qy8mHW5t1r2GUCgycdRf67Ul0idqjWkQ1Vw3BG3U6hS B8taaRCzto7a3g== -----END CERTIFICATE-----Generated at Thu Jul 23 19:03:26 2026 by rpki-client