$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json) Hash identifier: GZ5WkWZt6eYkuWMqUcJ3rDLRlxUfRt9pWGSxd3WZCsM= Subject key identifier: 14:C4:DC:F9:72:75:02:AE:4B:62:D7:4A:43:69:73:93:1D:41:B4:FE Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 019F909077AD4DACF9CD17A2652C3FC23A29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft Manifest number: 0AFB Signing time: Thu 23 Jul 2026 20:00:14 +0000 Manifest this update: Thu 23 Jul 2026 20:00:14 +0000 Manifest next update: Fri 24 Jul 2026 20:00:14 +0000 Files and hashes: 1: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=) 2: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=) 3: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=) 4: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=) 5: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=) 6: DPMVT21xt_FxJ1sn3UX-_U68dhM.roa (hash: W+9Q7HyRT/GtNJeWW1rH3dBewR4z6axBBAIPrMJ0PUU=) 7: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=) 8: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=) 9: OGHkr0sseqVyPYMaosc0EKOfAbE.roa (hash: wHhBT3+BNkPQLV5c3JD9yLqsApNS0AOyvlFX/QBAowQ=) 10: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=) 11: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: BmPmKlZjf6s0sjnzfZ9icvmIeEy1RQYArsAHfhvOxrk=) 12: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=) 13: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=) 14: WgBBESiMNBhg0ejLbo4ygFVFK_g.roa (hash: fOGX3A1MJMqw5iFjseRV1GnR/NKzbA2c83gmI0QyUAc=) 15: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=) 16: cLp8aoUEerNehAr3h59hozd_gn0.asa (hash: H0H1PRm+pfO0EaD/QilESt/v2w81RZ9KkTdDOLHz0OM=) 17: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=) 18: r-jH3K8gcLw126eQ4FkoGo2cj9Q.roa (hash: WprvCGc4fvgZRtpPYXPu9X3gBWvFU60j9mgBknNXAj8=) 19: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=) 20: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=) 21: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 14:03:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:90:77:ad:4d:ac:f9:cd:17:a2:65:2c:3f:c2:3a:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Jul 23 20:00:14 2026 GMT Not After : Jul 24 20:00:14 2026 GMT Subject: CN=14c4dcf9727502ae4b62d74a436973931d41b4fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:90:cc:93:87:52:90:ed:07:21:5a:8c:11:57: 95:af:1e:d3:2d:02:92:8d:a0:49:47:46:07:76:59: ff:ec:36:3d:ce:6f:ca:1a:88:a1:80:91:2c:4c:1f: 8c:37:46:dc:b1:0c:55:da:92:62:c2:01:be:36:01: 1d:5e:cf:27:65:f1:3d:f1:1a:6a:16:9f:9f:bf:1c: c9:07:f0:cd:e5:d9:02:a1:cf:02:e4:1a:4b:7b:49: 05:d9:f4:b7:45:98:92:27:34:a1:34:f7:df:d3:0a: fb:d3:43:6f:73:dd:66:74:f8:1f:f7:f2:57:f1:29: 9b:c9:88:25:d5:42:ce:5d:67:2e:1e:27:f5:f5:cd: 4d:a6:1c:a4:af:86:dc:2b:ec:e4:8a:21:0a:55:0b: f6:00:ce:49:61:58:ef:a5:c4:5c:56:99:5c:ba:16: 3b:ad:f5:d6:22:9d:db:a5:86:39:0f:df:40:db:44: 20:67:fe:06:12:8d:46:1a:ef:9a:0b:aa:e1:93:d8: 25:53:33:0c:19:eb:3f:0b:33:e3:d7:69:56:34:16: 2b:48:46:e9:8f:c1:b9:52:0e:3f:77:ff:02:7a:8c: 8e:d5:38:74:14:c9:c1:02:38:4d:b4:44:28:42:c7: 8d:d9:12:27:dc:a4:f3:9e:73:a4:ea:bf:65:ca:31: 9f:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:C4:DC:F9:72:75:02:AE:4B:62:D7:4A:43:69:73:93:1D:41:B4:FE X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:08:97:7d:9c:a5:3b:ce:1d:b9:58:4a:4b:c9:88:a6:09:e7: d1:f9:34:cb:25:50:c9:72:a4:42:04:8f:06:36:d6:9c:83:74: 81:4f:2f:29:89:b7:6e:c8:a3:9e:b2:2b:3c:5e:84:57:16:72: 43:bb:6d:2e:29:5e:dc:4d:67:f6:ea:e1:df:76:68:2e:cb:ec: fc:c8:fd:fc:af:4b:51:6b:92:4c:79:39:e7:60:8a:6b:28:49: 0e:57:25:be:17:53:ad:ca:f7:f5:43:8c:34:a2:8b:42:84:77: 48:47:e6:d9:5d:96:be:a3:61:93:5c:90:b7:89:b6:ad:cb:72: 8f:e4:8f:b1:05:cb:dc:8e:6c:1b:25:34:29:b7:1f:ab:4e:8b: 92:7f:55:98:64:8a:d5:59:e8:2a:02:89:c2:88:f8:9d:af:32: a8:00:76:3d:02:39:b7:dc:79:93:8f:56:d2:f5:e8:4d:46:5a: 10:bb:ff:72:14:ad:4f:ee:59:ca:46:69:9e:41:a2:b7:c5:b0: 4d:e6:56:44:7c:36:d8:85:9c:86:0e:8c:4a:e2:56:40:20:4e: 7b:b8:ac:0e:74:ad:9e:72:ce:e0:65:2d:e0:b6:72:df:53:8e: 02:7f:65:e1:66:88:9f:b0:6b:0b:dc:93:f2:aa:06:01:ca:23: 01:e7:84:ba -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+QkHetTaz5zReiZSw/wjopMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwNzIzMjAwMDE0WhcNMjYwNzI0MjAwMDE0WjAzMTEwLwYDVQQD EygxNGM0ZGNmOTcyNzUwMmFlNGI2MmQ3NGE0MzY5NzM5MzFkNDFiNGZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjpDMk4dSkO0HIVqMEVeVrx7TLQKS jaBJR0YHdln/7DY9zm/KGoihgJEsTB+MN0bcsQxV2pJiwgG+NgEdXs8nZfE98Rpq Fp+fvxzJB/DN5dkCoc8C5BpLe0kF2fS3RZiSJzShNPff0wr700Nvc91mdPgf9/JX 8SmbyYgl1ULOXWcuHif19c1Nphykr4bcK+zkiiEKVQv2AM5JYVjvpcRcVplcuhY7 rfXWIp3bpYY5D99A20QgZ/4GEo1GGu+aC6rhk9glUzMMGes/CzPj12lWNBYrSEbp j8G5Ug4/d/8CeoyO1Th0FMnBAjhNtEQoQseN2RIn3KTznnOk6r9lyjGfzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBTE3PlydQKuS2LXSkNpc5MdQbT+MB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgiXfZyl O84duVhKS8mIpgnn0fk0yyVQyXKkQgSPBjbWnIN0gU8vKYm3bsijnrIrPF6EVxZy Q7ttLile3E1n9urh33ZoLsvs/Mj9/K9LUWuSTHk552CKayhJDlclvhdTrcr39UOM NKKLQoR3SEfm2V2WvqNhk1yQt4m2rctyj+SPsQXL3I5sGyU0Kbcfq06Lkn9VmGSK 1VnoKgKJwoj4na8yqAB2PQI5t9x5k49W0vXoTUZaELv/chStT+5ZykZpnkGit8Ww TeZWRHw22IWchg6MSuJWQCBOe7isDnStnnLO4GUt4LZy31OOAn9l4WaIn7BrC9yT 8qoGAcojAeeEug== -----END CERTIFICATE-----Generated at Fri Jul 24 00:00:33 2026 by rpki-client