$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json) Hash identifier: KmU+dU2ZQmQAxRKNKib0Imc8cNZmAZ4Japa8QQLE1iE= Subject key identifier: D2:DD:8C:CA:E9:1C:59:16:2C:DD:16:5F:EF:AA:8D:1C:BF:65:4D:71 Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 019F90FEC4D5A3C9409CEAF47D689408BC3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft Manifest number: 19CE Signing time: Thu 23 Jul 2026 22:00:43 +0000 Manifest this update: Thu 23 Jul 2026 22:00:43 +0000 Manifest next update: Fri 24 Jul 2026 22:00:43 +0000 Files and hashes: 1: 2uP2P6fTf1qo4PWRRqgeE7TTacE.roa (hash: 9eSLYCb2FWzNsHTSZC1SEnCMNPegGVcyv6j21qK1mw8=) 2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=) 3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=) 4: AogunF2vY6jwFQqloSaO1hbzpk8.roa (hash: it2LBzN2gPXG+ZsVF9U3YkMRcRGbDQsz+oO4JZZUzeg=) 5: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=) 6: Qi3PbQnrdw7q8NtmLcDOyzuEuok.roa (hash: Ene2M6hdbbKNY0YIKXvUxR9PygRHkyqGW28j+nRBH9E=) 7: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: ZVucTdHc6meCM1aqQ33781JRbitKl/R+qTcKx0k4cyA=) 8: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=) 9: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=) 10: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 24 Jul 2026 22:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:90:fe:c4:d5:a3:c9:40:9c:ea:f4:7d:68:94:08:bc:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Jul 23 22:00:43 2026 GMT Not After : Jul 24 22:00:43 2026 GMT Subject: CN=d2dd8ccae91c59162cdd165fefaa8d1cbf654d71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:7d:fe:e5:6a:a5:3d:16:6b:2e:32:23:fe:c9: 4d:d1:11:ed:02:ee:e5:7a:93:ae:43:85:b5:70:e5: 7b:1b:2b:0c:2d:d5:42:40:c5:d9:18:19:55:4a:5c: f6:2c:ab:66:be:5f:a4:6d:7e:86:b8:a4:bc:af:35: fa:8e:b2:31:ff:ff:b1:c9:dc:f8:08:20:26:57:20: c4:2d:18:74:a4:9e:eb:c6:00:57:9b:0d:93:cf:16: 73:11:21:d5:94:0b:c5:81:29:c2:dd:ed:3c:b1:ef: ad:c9:ad:5a:a3:d4:90:2d:24:f8:4a:b5:03:64:8a: 13:bf:c9:55:b0:2b:0e:11:c5:cc:06:80:5e:ae:15: 98:84:b3:80:1b:0b:d8:19:c4:5a:3f:e6:06:c9:a3: 9b:47:ee:f0:02:db:c0:84:a3:da:5a:13:07:c6:19: cf:c2:da:5a:e9:5b:e9:a4:78:a5:6f:89:c2:f2:21: ef:ab:43:8e:9a:51:b7:6d:e4:f2:e7:98:6d:64:46: 45:eb:28:3b:bc:78:0f:4a:30:32:7e:08:ac:fd:ab: 67:b3:83:42:11:1f:27:a0:25:0a:a7:07:76:4f:7c: 2c:ee:0d:98:8a:48:6c:1c:f6:a5:66:4a:10:d7:7e: b5:88:34:f4:4f:e3:b2:3d:38:ce:9b:c0:89:71:7c: 23:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:DD:8C:CA:E9:1C:59:16:2C:DD:16:5F:EF:AA:8D:1C:BF:65:4D:71 X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:95:58:d8:9e:c2:64:0a:57:e4:d2:aa:39:45:e9:51:dd:a8: 5c:e0:90:54:a2:fd:71:d6:5a:c2:0a:58:c8:6b:82:2b:3d:1b: ce:14:d3:ed:0c:19:33:1e:73:29:c6:7e:e3:f1:50:fe:30:ad: 2d:5b:c0:b4:3d:0d:66:e4:ae:7d:5b:6c:2c:cd:ee:07:f2:9e: c4:d8:80:82:b8:d0:1a:c2:8b:e8:ea:87:98:82:3a:e2:32:c5: 68:25:c6:f2:aa:59:cd:6e:a8:fc:52:14:44:30:ff:8a:4d:e9: 12:cc:5b:9b:16:e2:cf:72:c5:fe:98:f4:ad:a1:13:88:9b:c6: 12:08:25:df:f8:d5:d7:d5:31:ec:f1:fb:d6:90:88:97:19:b5: 80:1f:1e:5b:61:b3:c3:6f:6a:4f:73:4f:54:58:c7:6e:cd:b3: 00:f3:19:ac:31:aa:96:06:43:94:8e:4f:32:72:7c:58:be:d0: 66:14:f7:84:cc:a9:bc:b1:d7:e7:fc:61:3a:38:5c:0c:90:53: 2d:65:6b:f1:6c:ee:5e:94:d3:cc:43:6e:fe:d9:32:de:5a:07: a9:a9:82:ef:bd:a9:99:b8:ad:5f:d7:1b:2a:2e:0f:b9:54:a8: d8:6d:bd:aa:f9:3a:57:dc:8d:b1:8d:3c:09:9b:f1:94:f1:fa: 1d:cd:d5:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+Q/sTVo8lAnOr0fWiUCLw7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjYwNzIzMjIwMDQzWhcNMjYwNzI0MjIwMDQzWjAzMTEwLwYDVQQD EyhkMmRkOGNjYWU5MWM1OTE2MmNkZDE2NWZlZmFhOGQxY2JmNjU0ZDcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj33+5WqlPRZrLjIj/slN0RHtAu7l epOuQ4W1cOV7GysMLdVCQMXZGBlVSlz2LKtmvl+kbX6GuKS8rzX6jrIx//+xydz4 CCAmVyDELRh0pJ7rxgBXmw2TzxZzESHVlAvFgSnC3e08se+tya1ao9SQLST4SrUD ZIoTv8lVsCsOEcXMBoBerhWYhLOAGwvYGcRaP+YGyaObR+7wAtvAhKPaWhMHxhnP wtpa6VvppHilb4nC8iHvq0OOmlG3beTy55htZEZF6yg7vHgPSjAyfgis/atns4NC ER8noCUKpwd2T3ws7g2YikhsHPalZkoQ1361iDT0T+OyPTjOm8CJcXwjxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNLdjMrpHFkWLN0WX++qjRy/ZU1xMB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpVY2J7C ZApX5NKqOUXpUd2oXOCQVKL9cdZawgpYyGuCKz0bzhTT7QwZMx5zKcZ+4/FQ/jCt LVvAtD0NZuSufVtsLM3uB/KexNiAgrjQGsKL6OqHmII64jLFaCXG8qpZzW6o/FIU RDD/ik3pEsxbmxbiz3LF/pj0raETiJvGEggl3/jV19Ux7PH71pCIlxm1gB8eW2Gz w29qT3NPVFjHbs2zAPMZrDGqlgZDlI5PMnJ8WL7QZhT3hMypvLHX5/xhOjhcDJBT LWVr8WzuXpTTzENu/tky3loHqamC772pmbitX9cbKi4PuVSo2G29qvk6V9yNsY08 CZvxlPH6Hc3VXw== -----END CERTIFICATE-----Generated at Fri Jul 24 03:00:13 2026 by rpki-client