$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: iX0+uqi7AKD8XGuYZEV7IXK/UmGSLRe7H+YL8zLeaVo= Subject key identifier: 27:AC:F1:D4:45:8A:6D:7A:73:60:1E:AF:49:8B:1C:23:30:6B:A7:06 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 019F935AD928046FE8A51BB1F99E600DA062 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 19ED Signing time: Fri 24 Jul 2026 09:00:32 +0000 Manifest this update: Fri 24 Jul 2026 09:00:32 +0000 Manifest next update: Sat 25 Jul 2026 09:00:32 +0000 Files and hashes: 1: 3Uhad0KFSfjXI_TbydoftNMdE3g.roa (hash: j9tyqYt4el5e/EHBRQPaMKBm+kYVSqQDGKdC5+GV1fw=) 2: EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa (hash: BrnZ+O7PpPP2CgQz6l0MWy62IQSvfZEBI+G8ayJnLRE=) 3: GCKLMhjEZ4tgpahsAAW0b7v-pbY.roa (hash: vfauSOW8KSxhKm84diH34kDOUYgfp1RoadLmCV5cdWc=) 4: W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa (hash: fb2PFmFnYQYmWpVf2HANiiXyOyVRMMcnLRhOHSluDkI=) 5: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: HTeDY6xRV8ELNmE2tH4nB3KiGKSWHLyVAXqeR7oCqYM=) 6: fuQjo-R8V7RgupEifO88mUFsfq4.roa (hash: XgKKf+T/JHflu47fZ8lbK7Ea+coPaRrFsg001BzHny4=) 7: m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa (hash: RVNHVX31tSGpQABOxa6EqSIdwiAZEEfgy9G0c8Rv6CQ=) 8: njVUBNP2pawlmJYfjO-aqV7rHxg.roa (hash: KsrtTqSnlW3K+gpEPkMgT8sO+EsW0Fbd90twROTiMXk=) 9: qSxlathEcN6ZfWcqIYKI4rq_zNk.roa (hash: LYI2xAakIbFGxMC1GmxnDwbT1/w57IsHNS5Uguz6j68=) 10: tA_6j6gquShwOWQHuXqZmv-DGJ8.roa (hash: MBd1V9peNX1ONVT7gAUeTBj/y3gvMH+RO35qWdORDv4=) 11: xrlQxD2aCilEx5MBkW5ICdMkjmI.roa (hash: XyJhHEW8YK45zRLRx/h09ilca39SOfBBhQAfbZq7s3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 25 Jul 2026 08:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:93:5a:d9:28:04:6f:e8:a5:1b:b1:f9:9e:60:0d:a0:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Jul 24 09:00:32 2026 GMT Not After : Jul 25 09:00:32 2026 GMT Subject: CN=27acf1d4458a6d7a73601eaf498b1c23306ba706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5a:e8:f1:a3:a3:73:6b:47:f0:14:41:1f:fb: 1d:75:fe:36:db:7b:f9:fd:73:2f:f2:65:5d:7d:70: b3:2c:2e:f5:e4:13:17:51:ce:58:83:ce:26:36:6e: f2:01:ad:bf:44:28:9a:d4:f4:c1:76:79:4e:36:dc: 2f:26:ac:44:a5:8f:20:a6:ca:66:a4:b8:3a:eb:d3: 0e:1f:c9:d6:aa:ee:a5:0e:18:2a:06:2e:ec:0e:91: 54:8e:d8:6b:fc:2a:6b:04:e7:32:ba:b1:5a:61:f2: 30:f5:bf:7e:7a:fc:0b:0c:9a:93:32:ed:9c:52:d3: 6b:b2:ad:58:2f:69:8e:32:c5:6c:c1:e6:7c:96:fa: d8:ac:6b:dc:f0:9e:3b:35:4f:be:61:df:d3:d3:1b: a7:49:33:54:b2:6d:a4:96:fe:5d:32:66:6d:c8:65: 46:1e:6c:92:5c:84:97:07:0b:4a:8f:f4:94:de:14: 1f:61:d4:dd:d9:01:96:32:2f:8b:e7:08:74:fd:0b: f1:e4:89:9c:01:e5:a4:c0:18:d9:f4:56:1c:e7:9f: 7b:6c:85:89:74:c9:0f:95:82:bb:56:04:ca:c2:84: 0c:1f:a4:43:4f:69:3b:7c:f0:7b:28:60:e7:09:30: 55:ff:ac:38:2f:2c:77:ab:1f:73:98:69:2e:54:23: 8a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AC:F1:D4:45:8A:6D:7A:73:60:1E:AF:49:8B:1C:23:30:6B:A7:06 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:6c:cd:37:99:fc:72:cb:20:87:b2:83:3d:3f:87:7d:3e:97: a8:b4:53:a6:da:89:bf:36:53:b4:29:14:15:40:29:78:20:2b: 92:65:9f:ba:76:24:91:1f:9f:c8:ef:94:ec:4d:b5:50:e0:90: 19:be:1b:30:09:e2:14:2f:14:80:a8:89:d4:49:70:2a:e6:9e: 51:a7:fe:3f:3b:4b:0b:1b:80:3e:3a:39:5a:a6:9b:7f:a6:79: e1:13:72:9f:b6:4e:54:cc:2a:15:2c:60:02:df:3f:80:8c:e1: fe:5e:96:47:2a:0c:0b:f3:f5:5e:e6:f9:9f:49:b9:ad:9e:14: 9e:03:e9:26:30:54:89:ed:65:f6:ef:d8:40:4d:95:5b:e8:a9: 3d:29:a8:0e:cf:43:e1:47:e1:38:47:f7:83:9c:85:9a:97:18: e0:3c:b1:8a:e0:4c:f0:ab:6b:d3:dd:68:c7:d4:77:dc:ed:84: 71:2a:45:bd:12:9e:33:f4:ea:05:ee:e5:72:05:a6:81:cb:49: eb:d1:54:a3:a0:57:f8:ee:31:dc:71:06:31:2f:38:76:12:8d: 66:9b:fa:73:f1:1a:6f:a0:93:3d:ea:38:d8:a7:ed:f4:e6:5f: 78:c6:6b:23:f0:3f:91:c3:0f:17:df:1f:8c:61:b5:1a:fd:76: 78:40:62:e7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+TWtkoBG/opRux+Z5gDaBiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjYwNzI0MDkwMDMyWhcNMjYwNzI1MDkwMDMyWjAzMTEwLwYDVQQD EygyN2FjZjFkNDQ1OGE2ZDdhNzM2MDFlYWY0OThiMWMyMzMwNmJhNzA2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlro8aOjc2tH8BRBH/sddf4223v5 /XMv8mVdfXCzLC715BMXUc5Yg84mNm7yAa2/RCia1PTBdnlONtwvJqxEpY8gpspm pLg669MOH8nWqu6lDhgqBi7sDpFUjthr/CprBOcyurFaYfIw9b9+evwLDJqTMu2c UtNrsq1YL2mOMsVsweZ8lvrYrGvc8J47NU++Yd/T0xunSTNUsm2klv5dMmZtyGVG HmySXISXBwtKj/SU3hQfYdTd2QGWMi+L5wh0/Qvx5ImcAeWkwBjZ9FYc5597bIWJ dMkPlYK7VgTKwoQMH6RDT2k7fPB7KGDnCTBV/6w4Lyx3qx9zmGkuVCOKKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCes8dRFim16c2Aer0mLHCMwa6cGMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiWzNN5n8 cssgh7KDPT+HfT6XqLRTptqJvzZTtCkUFUApeCArkmWfunYkkR+fyO+U7E21UOCQ Gb4bMAniFC8UgKiJ1ElwKuaeUaf+PztLCxuAPjo5Wqabf6Z54RNyn7ZOVMwqFSxg At8/gIzh/l6WRyoMC/P1Xub5n0m5rZ4UngPpJjBUie1l9u/YQE2VW+ipPSmoDs9D 4UfhOEf3g5yFmpcY4DyxiuBM8Ktr091ox9R33O2EcSpFvRKeM/TqBe7lcgWmgctJ 69FUo6BX+O4x3HEGMS84dhKNZpv6c/Eab6CTPeo42Kft9OZfeMZrI/A/kcMPF98f jGG1Gv12eEBi5w== -----END CERTIFICATE-----Generated at Fri Jul 24 16:54:23 2026 by rpki-client