$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft File: v4QRNUXZAAdg9mBipCIZM6LpWdg.mft (raw, json) Hash identifier: kVZJmjH6j463fiBOcMaxYV8JAHcELUP32A+4Gg/3UtQ= Subject key identifier: D6:D6:82:3F:31:2E:7C:17:B4:5E:73:23:2C:15:61:D3:E9:02:2F:51 Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8 Certificate serial: 019F848C63E67585CFAE8A972E81CDEE1D47 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft Manifest number: 16C2 Signing time: Tue 21 Jul 2026 12:00:20 +0000 Manifest this update: Tue 21 Jul 2026 12:00:20 +0000 Manifest next update: Wed 22 Jul 2026 12:00:20 +0000 Files and hashes: 1: 0OCOakcDI9m6fmr8VzZ-9Hd4VgU.roa (hash: cTnCK/Fe0k+kOxPdh3z5AeFWC42FsqaaV1sppIVkCH8=) 2: 0kXS2WjCCmGHS0asFcjHjq0ESdA.roa (hash: NcRJslp6Cst9ywqKbBrXM4eKGnOe3QAwekOYiXZ066c=) 3: 0xTXzw65S6SAKbF2ypbnQR8flBY.roa (hash: KPGmo03a7ngvQ5hpXQozCZzOmDre3xu+doPSkJFQPEI=) 4: 2j9VUbHTcDA1b90rifQ58Inn2f8.roa (hash: Lgs88tbxXG61dcN+ofeHaAXMJYWju9945L7ezP0hATg=) 5: 35-RC4YDZpErq0qZEtlrtSl4SMw.roa (hash: FOYizqXKHMLapyQGMwFyEz9qVvs69XW13Uh469YQNIU=) 6: 4sHcg46CKKDvMyDChpwWDh0Egl4.roa (hash: w75qFMjuUV9F/cJXn+EoOEYDQsrts8ozrq3p5+rPA14=) 7: 81eHHbv2rPJYI93isZ476W6B7zM.roa (hash: rilqDOE3ousOR3KDCOC0oQFrfowQVUhBVFfyKLTOWP8=) 8: DNKVTDfCdlLHW9MrVOz_V6C3F8g.roa (hash: uasjkvXg+88xW1j9weGfc4+Lwe8xp4HgPIRySLA8dcs=) 9: EfB0MxJFEM8P-mBHWzWP2g-vuRg.roa (hash: 5I3dde4Z0pGqorT+Es4EH70Wh9X5Be4WVxahJvSkgLw=) 10: JFQGAOGdlBoIozV3Kg-vDWtfVao.roa (hash: Z1+P9csIB0WjKmg8chhTuD4xrRsrTBYnir8esGAQC6M=) 11: K2kXXUMGcaKa7rD6RGsaKEmV9Wg.roa (hash: 4AJJT3KGPCqJR4OBHfMLmZzKwbu+xSqi/JOf68BFrzw=) 12: LmmhI1Z3bNWasqW3KYfLikF4t-g.roa (hash: uSBHG/9Uy3S7auLYGJFCjkn17D9/u94iRRv7BQ0qdiA=) 13: MdUIZIJ4fMdMmnWpGakpfnXUhu8.roa (hash: 0v7DpVyOb9ZenfEj+uZlG8WAK7SkWOmPeuDGZI04ctc=) 14: PY9DCNlwLD7ejVBXpUKsZjzW_qs.roa (hash: WsUPkIgFvWT/RRRySu92Di42VU11w6gI/VSIsfWKIOw=) 15: SPffAYS64U7u27GBmdl07WWErQg.roa (hash: vr6LcPLMe9RSzc82PbDWlTuc7hI9MZj2/NAkezEnd3I=) 16: WZWGYo1-x5iiMmTQB8f7pscBQ5Q.roa (hash: IhIWhgnItgwnoOUYHAHgKAbDJ1m2IH1w4DFw6ZTXRMU=) 17: ZI-MShlThOM7MmKhvKsXH3X5V7o.roa (hash: c+aesfiAR4qnVM9MuqdOghCy4EQQegO3MHfJlwBvics=) 18: _3QnYavnGKdVR8ot9gFC26BVhJw.roa (hash: otGVERCj59KUslBr2RM1j+OVDAaoPU+125tJ6V2gctY=) 19: e-D3VZHxEnpb_XDj-m8FygPLC-s.roa (hash: WK2WT9RvaBwGkJpwbeKYdSX5XZW7KaarQn4kK4Tt/3Q=) 20: f3fqu4tTHl2vcBZdGXPsMyAjKYU.roa (hash: YnhL3R6TQw9jOlB6ezNd4A83xIKsm64Z7pwt9aESzIw=) 21: fjse87W44P51UOVIGX0DCsEjxWY.roa (hash: D/rrQpS+2FkVVqoE2nZZbtPj0yMnQI478zTpRsOTiWY=) 22: gWgAGHArAQssrrGXIRyn4VHTFXU.roa (hash: B6SPcVHep6hBRDtoMqsctR3R17FHDgKNs8lCIVE2720=) 23: h8D1gq051tBYJNb_Y4nlpSpaChc.roa (hash: 1sY2UtAw3qppMv1YMtACKA33nss4PyBDyZbo40TbUgc=) 24: hX8tn5PQD1Q3xnN4zBUDg2Tf8lM.roa (hash: 026nSWMHgQU56Hi3MyG9cbKQuQzStIRUijp25hynlD4=) 25: pP2Eqoq22dtdkWjab3oZAROYYF4.roa (hash: da24Wj5a2cpI62MpsJZPfy8BAzcyJwxfNfWbY87N+KQ=) 26: qzMo16nmO71L2QshypR-MMDDoCo.roa (hash: l9OxB1GKfb3RigjCep1J7ekawkvlh+mNfXTsSVv2Rdo=) 27: v4QRNUXZAAdg9mBipCIZM6LpWdg.crl (hash: Q8qGwHoVXIDLgEMjPA6we1wJJF1Hmj6QITwGyn3W5g8=) 28: vkMFwtq4YF4EVCLGJI8W54e9cDU.roa (hash: fYkoWxoHIoRzoqnLvhuQiUpyD9UJxfV83j77hWPTRPw=) 29: wlK8DH6vvBCSGiPEt6TQ8ln7xrI.roa (hash: 95bSqsPZ8Qh5qUbW4eyvVKJiv3x2zL+UElIQsl4lr1A=) 30: yvCCpk4_0puwnurWWSMz-GRqa9g.roa (hash: plmFtmIHnJ65gF4go6f2ImnNM5YPATO4+CT4TY1gN5c=) 31: zSbJ_zmLsvnYD4Tj3NdHFOYhGs0.roa (hash: DJQ4yfm4mN/el8pVTO9ZIBKqMkmNeH54/xwSWHyykMo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 12:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:84:8c:63:e6:75:85:cf:ae:8a:97:2e:81:cd:ee:1d:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8 Validity Not Before: Jul 21 12:00:20 2026 GMT Not After : Jul 22 12:00:20 2026 GMT Subject: CN=d6d6823f312e7c17b45e73232c1561d3e9022f51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:61:cb:42:19:b1:43:3d:64:ab:93:39:f7:98: 75:cb:d5:4d:8b:09:ef:f4:c4:30:93:8f:49:b3:e4: 6f:15:f8:70:29:6c:0e:9d:30:44:5c:84:33:f0:9c: f2:97:f0:44:be:10:b5:38:68:58:e3:21:f7:51:bd: b9:14:1f:1d:1c:ee:ee:7e:2a:68:c4:db:39:4d:b0: 33:15:c9:9c:37:6e:1f:91:67:ce:c1:36:41:85:26: 22:2f:cc:9c:73:01:2a:2a:2d:88:72:04:65:40:0a: 04:c0:86:0a:9d:8a:91:63:97:37:b8:f2:3c:22:74: c4:ad:48:e9:e4:37:ef:86:e2:35:f3:c8:d1:2c:b4: 6f:f6:e1:de:c5:1c:da:99:ac:df:b0:ef:80:2b:12: b8:fc:f0:58:57:81:40:04:58:a1:85:19:52:be:a3: 12:bf:42:33:74:ec:1e:29:94:73:10:1e:6f:45:df: cb:7f:77:cd:7b:35:5b:c2:ba:7c:0d:8f:c3:6a:06: 48:f3:68:be:9b:c7:87:7d:a8:12:85:13:46:08:20: 49:53:e8:cb:ec:b0:52:c1:bb:85:81:2c:2f:75:5b: fe:33:b0:b2:e6:ea:e3:4b:45:67:f1:ac:3e:bb:34: 6f:72:7f:ae:11:7f:f7:9e:fe:cc:2b:7e:3c:6f:7d: 9c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D6:82:3F:31:2E:7C:17:B4:5E:73:23:2C:15:61:D3:E9:02:2F:51 X509v3 Authority Key Identifier: keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ea:39:5f:86:aa:90:99:fc:c7:09:c9:1a:90:cf:31:37:10: 16:50:91:72:45:d8:eb:48:a5:c7:06:e4:fd:e3:97:9d:3e:bb: 82:82:3b:43:13:b7:a2:48:1f:00:18:b9:bf:9e:c0:c8:e2:80: 27:a0:07:fa:7e:14:31:3a:06:27:97:9d:08:74:e5:b7:e3:e3: 3b:da:d7:e8:41:9e:85:35:6d:28:57:de:bd:c0:84:65:95:14: 1f:cf:38:34:d1:88:38:a1:77:e4:ac:3f:4b:ea:c2:b3:50:1b: 77:f4:c1:ec:1c:a1:a9:f4:47:0d:fa:a5:cc:d4:89:c5:52:95: ad:0a:5b:71:a8:aa:92:51:49:32:e1:9d:0a:60:46:11:5f:9e: 68:9d:e6:1b:7d:6e:02:92:9c:fb:56:7d:7d:7d:99:92:66:a6: 7e:6d:76:4a:51:f9:01:df:59:ef:c0:db:38:37:1e:10:22:3f: a6:46:e4:ae:39:a2:19:05:8b:c6:02:9e:7e:e9:c6:7a:9f:d1: a8:f6:7b:c1:41:1b:3a:3c:9a:12:d5:2e:a7:d2:e9:75:66:5a: e9:95:f8:ec:3a:f7:ef:e7:2b:08:12:96:34:9b:0c:f3:dd:3f: ce:2f:38:cf:88:aa:46:19:42:da:c9:da:e1:58:69:12:1d:fa: 5f:f0:77:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+EjGPmdYXProqXLoHN7h1HMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl OTU5ZDgwHhcNMjYwNzIxMTIwMDIwWhcNMjYwNzIyMTIwMDIwWjAzMTEwLwYDVQQD EyhkNmQ2ODIzZjMxMmU3YzE3YjQ1ZTczMjMyYzE1NjFkM2U5MDIyZjUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWHLQhmxQz1kq5M595h1y9VNiwnv 9MQwk49Js+RvFfhwKWwOnTBEXIQz8Jzyl/BEvhC1OGhY4yH3Ub25FB8dHO7ufipo xNs5TbAzFcmcN24fkWfOwTZBhSYiL8yccwEqKi2IcgRlQAoEwIYKnYqRY5c3uPI8 InTErUjp5DfvhuI188jRLLRv9uHexRzamazfsO+AKxK4/PBYV4FABFihhRlSvqMS v0IzdOweKZRzEB5vRd/Lf3fNezVbwrp8DY/DagZI82i+m8eHfagShRNGCCBJU+jL 7LBSwbuFgSwvdVv+M7Cy5urjS0Vn8aw+uzRvcn+uEX/3nv7MK348b32cLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNbWgj8xLnwXtF5zIywVYdPpAi9RMB8GA1UdIwQY MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt NGJkNjNhZGM3MzU0LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0 LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuo5X4aq kJn8xwnJGpDPMTcQFlCRckXY60ilxwbk/eOXnT67goI7QxO3okgfABi5v57AyOKA J6AH+n4UMToGJ5edCHTlt+PjO9rX6EGehTVtKFfevcCEZZUUH884NNGIOKF35Kw/ S+rCs1Abd/TB7ByhqfRHDfqlzNSJxVKVrQpbcaiqklFJMuGdCmBGEV+eaJ3mG31u ApKc+1Z9fX2Zkmamfm12SlH5Ad9Z78DbODceECI/pkbkrjmiGQWLxgKefunGep/R qPZ7wUEbOjyaEtUup9LpdWZa6ZX47Dr37+crCBKWNJsM890/zi84z4iqRhlC2sna 4VhpEh36X/B3SQ== -----END CERTIFICATE-----Generated at Tue Jul 21 20:51:36 2026 by rpki-client