$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json) Hash identifier: YSOUzxbPquH+Cy5vRrPWz6NAtayfcx05vPsgv+hMIoQ= Subject key identifier: 53:93:4C:E4:50:22:65:59:90:DD:DE:E7:F0:F0:D4:DD:F0:5E:0B:FA Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 019FCAB7CF5862B922F3EB4E5BB3E11A063E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft Manifest number: 13DD Signing time: Tue 04 Aug 2026 03:01:11 +0000 Manifest this update: Tue 04 Aug 2026 03:01:11 +0000 Manifest next update: Wed 05 Aug 2026 03:01:11 +0000 Files and hashes: 1: 1GxQmUTb97UmZv7pfW11O7jdoKQ.roa (hash: FmC4+AN9e0K9c8X4YT0jW6rSPs+y4UOdKxP9qZCnFuc=) 2: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=) 3: BxKZgBdEOXm741z70o-b-8aaZ1U.roa (hash: 9rDM/H8P5h5tG13SRwkUwohyZWN/9GQOe+B0Xl1+fUU=) 4: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=) 5: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=) 6: ZpqqEj-OtTqHMeec7OuBtT0rl_E.roa (hash: 4anR5lz+iPBfqZgtXZg/nhMp2EG3l7fsaSGpS3G04V8=) 7: aMzR14uquK9xRLMlgVieiQnpsL8.roa (hash: LnMZCy9Vc3AkrK23NCsUcwd16nNnZncQK2bQfZFfX7Y=) 8: dYbDdMuBsyQvL7kdUhtnVt9Qq4Q.roa (hash: Uc1pM7+13084KA3rRz3NbQmC1rtfcHSF9LSKdQS99oU=) 9: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: LKx37tZoIheTQ4RCoVabIgrerFwVQHFnC3u/UMeyaRM=) 10: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=) 11: gbf_kkJkJHVfWvhpOZp44zXkSi4.roa (hash: L7TAKQTj5DgzgInyo2Z2o+5W5kIP6WxJWd/ULoNrui4=) 12: izn0gTPOQgQruf6Plz077lbyDvQ.roa (hash: SL5lQV0cHnhG5e9HsORKQLS+k85jrcJmLKm8DFk0UWk=) 13: ltuqnV7zy2DnQsucRbj8arC5CQM.roa (hash: LNO3fd1HW9TV8pQ7/uQgUjVDHYwtyIfoP4cwyPVsgsw=) 14: mBXHe8xwrq_f8wh9M3ZXaWdq8f8.roa (hash: dI8S3nju8gYg5btIsxEkeYY9kQycBzwf9pyizszOFek=) 15: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=) 16: q--OuP_rfB_qdy_7f_RIgPMsU7I.roa (hash: J5d2AOEi0HNsiyJ+nB39gHaVUpXKMLDnfhR+GSmUgHE=) 17: r2wp15RalYZ-BpL4xsNnngK0594.roa (hash: NNjjTsbzbTB3BJf0ScAIqlbHnQQtN/B+x9X2kssrtLQ=) 18: tiWoclLyoubi_eH2eBTEmg_nRPQ.roa (hash: v7vNaiqbe+aP8/SaLVbx8mliFyA9s414yzNmBa2a+SI=) 19: uuy6ECeKU5zPxhagn8FIr283yKQ.roa (hash: OOKXwwUyMmEuY99QE9mTnSKY0ij2Tkkt4XqvRj4K6hc=) 20: vLafL0GwWDvLzC-WXo-ujU2mMjU.roa (hash: WZJnUmwzRASxvhXsgI51USxfQop8j6bDAzzdqadBvsM=) 21: xfzSJZkuJaEFMZbSPNrdm-vtVgk.roa (hash: 03aH6k3XO2w/avcqYf5rOTHSew6NN0Bs9faZ8hBNn0U=) 22: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Aug 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ca:b7:cf:58:62:b9:22:f3:eb:4e:5b:b3:e1:1a:06:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Aug 4 03:01:11 2026 GMT Not After : Aug 5 03:01:11 2026 GMT Subject: CN=53934ce45022655990dddee7f0f0d4ddf05e0bfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:31:83:fd:4b:d3:ec:30:a0:89:a5:a5:78:11: 46:7b:bb:ef:64:75:39:93:8a:c5:4f:ea:b3:3d:8d: ac:c8:67:05:34:8f:09:2e:f9:d5:f0:b6:6b:4a:0b: 59:83:04:81:4d:ac:24:8b:46:ef:bd:48:18:4e:da: 98:47:04:8e:5b:3d:a4:85:b5:84:a1:ba:71:24:3a: 15:26:c0:a1:f8:e9:ed:bd:7e:87:a8:76:72:b8:db: e1:6a:df:80:95:1f:a0:e2:25:3f:a9:96:2d:2f:c1: 79:24:26:75:c6:ef:73:db:00:e6:28:c7:28:0a:c3: b0:a5:b7:1a:68:75:b4:08:7c:e7:d6:fc:a8:6e:d8: 94:7a:3d:f6:e0:26:b0:d6:a7:42:28:af:b6:e9:4e: 09:4d:74:59:78:a2:aa:a6:b5:a4:27:c8:ef:d1:d7: 63:02:5b:87:d6:5f:07:2b:45:a7:7e:8e:e8:5a:25: f2:7c:de:60:00:91:95:ef:8e:18:e8:9f:12:39:40: f6:26:22:2a:97:26:61:24:24:d8:e0:cf:98:75:de: a6:f1:f7:b6:dd:0e:02:3d:69:3f:8e:e0:e2:53:d9: e6:22:7a:fc:70:0b:6d:18:3b:e1:53:9a:f4:c1:40: 04:d5:d3:0e:44:24:77:b6:72:56:49:cd:f4:05:7c: dc:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:93:4C:E4:50:22:65:59:90:DD:DE:E7:F0:F0:D4:DD:F0:5E:0B:FA X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e1:b3:2c:65:07:c1:96:88:7b:8b:75:03:be:cb:6e:75:16: 75:7a:cf:79:e2:d6:42:fd:40:95:0f:fe:ba:3c:93:77:3d:e7: a6:60:28:19:21:18:1b:71:53:48:b3:73:bc:4d:ce:ce:e5:77: c7:7e:f3:f0:2c:5b:78:7b:63:08:9d:4c:6c:64:fc:8c:86:60: df:9f:46:ff:61:d3:c5:83:5c:9c:36:54:10:4f:f3:be:47:a6: 53:58:79:1c:3e:d5:89:4d:93:2a:d2:e3:0b:22:12:72:69:5b: 5b:2d:b2:cc:11:4a:92:fb:30:eb:1e:80:7f:e7:b3:40:71:85: f7:06:6c:bc:20:7d:30:6e:fb:52:c4:61:39:6f:ed:96:c1:94: 00:0a:8e:ac:6d:83:07:7b:17:9a:d0:92:9e:5f:6e:ee:cf:91: 51:e7:6e:d9:f0:60:7f:da:7d:0f:d5:5c:ec:c4:dd:2d:74:50: 2b:c7:cc:46:07:fb:2f:4c:3e:86:8a:77:54:e7:c9:7c:8d:30: a3:16:80:06:a8:52:d6:11:78:2c:71:3b:c5:f4:f0:95:75:03: 01:b3:e8:bd:78:22:55:15:8d:51:8c:fb:78:59:f7:60:88:41: 02:98:1f:71:ee:9a:d0:ce:df:72:2f:c8:be:5a:41:95:67:ac: 3a:15:66:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/Kt89YYrki8+tOW7PhGgY+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjYwODA0MDMwMTExWhcNMjYwODA1MDMwMTExWjAzMTEwLwYDVQQD Eyg1MzkzNGNlNDUwMjI2NTU5OTBkZGRlZTdmMGYwZDRkZGYwNWUwYmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1DGD/UvT7DCgiaWleBFGe7vvZHU5 k4rFT+qzPY2syGcFNI8JLvnV8LZrSgtZgwSBTawki0bvvUgYTtqYRwSOWz2khbWE obpxJDoVJsCh+OntvX6HqHZyuNvhat+AlR+g4iU/qZYtL8F5JCZ1xu9z2wDmKMco CsOwpbcaaHW0CHzn1vyobtiUej324Caw1qdCKK+26U4JTXRZeKKqprWkJ8jv0ddj AluH1l8HK0Wnfo7oWiXyfN5gAJGV744Y6J8SOUD2JiIqlyZhJCTY4M+Ydd6m8fe2 3Q4CPWk/juDiU9nmInr8cAttGDvhU5r0wUAE1dMORCR3tnJWSc30BXzc9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFOTTORQImVZkN3e5/Dw1N3wXgv6MB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuGzLGUH wZaIe4t1A77LbnUWdXrPeeLWQv1AlQ/+ujyTdz3npmAoGSEYG3FTSLNzvE3OzuV3 x37z8CxbeHtjCJ1MbGT8jIZg359G/2HTxYNcnDZUEE/zvkemU1h5HD7ViU2TKtLj CyIScmlbWy2yzBFKkvsw6x6Af+ezQHGF9wZsvCB9MG77UsRhOW/tlsGUAAqOrG2D B3sXmtCSnl9u7s+RUedu2fBgf9p9D9Vc7MTdLXRQK8fMRgf7L0w+hop3VOfJfI0w oxaABqhS1hF4LHE7xfTwlXUDAbPovXgiVRWNUYz7eFn3YIhBApgfce6a0M7fci/I vlpBlWesOhVmGw== -----END CERTIFICATE-----Generated at Tue Aug 4 08:46:19 2026 by rpki-client