$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft File: dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft (raw, json) Hash identifier: 2RKiPCczei89leYqmkPjzmFCPD8ZVCoOgIDP4y9LGcU= Subject key identifier: DE:AC:A9:8B:01:FB:4D:C4:47:83:3D:A3:2F:3D:8F:7D:92:98:9D:00 Authority key identifier: 77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F Certificate issuer: /CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f Certificate serial: 019F830C1E5D8DF30F4E9680C15ECED0E03C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft Manifest number: 39 Signing time: Tue 21 Jul 2026 05:00:37 +0000 Manifest this update: Tue 21 Jul 2026 05:00:37 +0000 Manifest next update: Wed 22 Jul 2026 05:00:37 +0000 Files and hashes: 1: 03W6VIAGhvyNDCUkYDcMfOL6fUI.roa (hash: LtqyJHshXdxCIRk8umeeTouLrWS/Lb07cUMG6sTNxpw=) 2: 9Gkg-Fy1ED79o6foFQlUsqzz4Do.roa (hash: 9L/TKMTwrY2dsT+Id53LzkQVIGh6pvjnNY2nFpdva2A=) 3: 9yhBMbL32EzPTZ90RPTm0ad_9P8.roa (hash: pIiuBqDg+/+pSgcp7wJdJbnux2Rbm81/220r+M/WXqM=) 4: FyDX43spYXNo_rALXQoEHpva-_U.roa (hash: y/HZbciEjAN07/IOJ8MEymame2T5vLFs8tnOac6LlFg=) 5: Rrg2UCoYbcKZlfo-czOzmRaIv3c.roa (hash: fm7bQsAqsz6zSKtaiB4We3D1MtoTKMw/aAwTXUd69G0=) 6: UDIt0dMpDRWbAXnGFKGQO0XL3nM.roa (hash: U103k6kn1IUdxjd22EwMUJn2KmC9fuSGcAXd7ImZFNw=) 7: YDunI5FinLdkmL6kbL4sn70t1mM.roa (hash: I6AA+Ij7Ypxf1FcJt+bTsc41ghBVr1iNUkCNk4yKf5Q=) 8: c8_6fx9na7RPLaZ9nrdFxDgY4xs.roa (hash: t4zaMbAtnS1WUf26/eGpPUF7xAi1NOz7s/c1nr51Mjc=) 9: dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl (hash: f4EIpGrDGEdgHvkP6VE3KkmUdQl7I7GoRBgYTqqmGcI=) 10: jdBlRXTUbp1vXymXz_8bg-ZTfQM.roa (hash: C/G4HU7rJ4t7tqUwqSXG7lRlEn8U9T3tp6gc8Rt2Fz0=) 11: slKxpxUkmNVndEhzM3jrW-WL5AM.roa (hash: meW2as+rSxLDtB+aCwzkCq1sWZZokr1CrQhOnNBfgg4=) 12: vW1_HCUVPJiZsXhTvnOJYpmVuBk.roa (hash: xuxWiMxXBVeK5sdjrw081xO1T2VBxkkfICVoklrLLQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 05:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:83:0c:1e:5d:8d:f3:0f:4e:96:80:c1:5e:ce:d0:e0:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f Validity Not Before: Jul 21 05:00:37 2026 GMT Not After : Jul 22 05:00:37 2026 GMT Subject: CN=deaca98b01fb4dc447833da32f3d8f7d92989d00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:67:f1:f0:47:8c:1b:11:85:f3:40:db:fd:ff: 9c:e3:9c:ba:14:5d:45:f9:a4:32:7f:8f:31:fb:fb: 32:d7:c5:1d:11:2b:ec:cd:d5:60:cb:5d:f2:40:b8: 7a:4c:4c:84:1c:9a:c5:88:b0:18:59:60:ce:5d:fc: 7d:20:c5:94:ea:8a:1e:2a:41:53:c4:44:1c:fd:d6: a3:01:81:42:6e:af:6e:15:b2:a9:c7:b3:26:39:16: b2:42:0d:3a:d1:a6:a8:44:4f:78:11:85:c7:d0:32: b1:a7:52:d6:60:63:cf:fd:db:36:ca:72:b9:c4:bf: 2b:60:9a:3d:c0:e5:39:d3:a6:a4:7c:a8:04:f3:d4: 0d:75:9b:13:6e:51:f3:1f:50:e9:99:45:c6:fe:d1: bc:91:6a:eb:c1:02:b8:b9:80:93:c2:e2:ba:a3:b0: cf:0e:b9:42:52:44:ee:01:7a:89:4a:b5:ef:d7:43: 27:ca:5f:0b:e0:03:2a:bf:ee:cd:2a:0f:37:f5:a8: 7a:57:fe:47:1a:f1:24:a0:5e:81:3c:4f:c4:31:33: b6:ae:83:3a:3b:af:7a:4a:3f:22:39:44:1b:fd:02: db:77:97:15:29:04:26:98:6c:40:7e:77:3c:a5:52: 6f:c6:5a:9f:90:ba:8b:1e:4b:7b:e3:b1:f2:83:57: b7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:AC:A9:8B:01:FB:4D:C4:47:83:3D:A3:2F:3D:8F:7D:92:98:9D:00 X509v3 Authority Key Identifier: keyid:77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:2c:65:19:e8:47:9d:81:5b:bd:fa:96:fe:24:2b:b6:69:75: 8d:92:df:7d:4a:32:d9:80:1f:c3:96:d5:22:1a:44:a0:c7:b9: 6a:7a:97:02:1a:90:3f:d1:e7:53:c5:e0:c4:d8:1b:6f:cc:dc: 02:3c:88:b0:c4:46:72:ec:e1:db:9f:db:c8:71:0d:8d:12:4f: 4c:c1:ac:43:bf:11:a8:9d:80:6a:f1:12:b6:f1:8e:a9:06:c5: 0b:da:4a:68:b9:7d:49:52:30:27:a6:7f:81:fc:ae:20:07:d9: e4:ca:4b:6c:6e:18:b4:1b:57:14:e8:a1:1b:1d:bf:13:43:a0: 85:06:e0:f5:29:b6:9e:40:8d:2b:31:61:a0:ad:95:2d:63:77: 59:01:b9:a5:45:83:83:df:8e:cc:06:2d:a5:95:b2:ad:32:54: 73:c5:70:6c:90:82:00:c4:18:fa:be:60:66:9d:3e:86:42:94: 11:0e:3a:f6:be:67:8d:e0:46:27:3f:13:66:09:e1:fb:ce:97: 50:31:97:18:e2:13:fd:4e:1a:7f:b8:8f:dd:34:43:99:86:a2: 1f:6d:92:65:03:4d:de:a4:c6:f1:b8:5c:d1:b9:f0:ac:e2:b2: 38:96:30:55:31:38:19:c9:8f:f4:87:fc:23:aa:ce:33:19:03: 3a:c7:84:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+DDB5djfMPTpaAwV7O0OA8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MWM3ODk3YzBlZTNiMjY5YTY3ZDJlMWQ2NGUzZmQxYzE1 YTFkNWYwHhcNMjYwNzIxMDUwMDM3WhcNMjYwNzIyMDUwMDM3WjAzMTEwLwYDVQQD EyhkZWFjYTk4YjAxZmI0ZGM0NDc4MzNkYTMyZjNkOGY3ZDkyOTg5ZDAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Gfx8EeMGxGF80Db/f+c45y6FF1F +aQyf48x+/sy18UdESvszdVgy13yQLh6TEyEHJrFiLAYWWDOXfx9IMWU6ooeKkFT xEQc/dajAYFCbq9uFbKpx7MmORayQg060aaoRE94EYXH0DKxp1LWYGPP/ds2ynK5 xL8rYJo9wOU506akfKgE89QNdZsTblHzH1DpmUXG/tG8kWrrwQK4uYCTwuK6o7DP DrlCUkTuAXqJSrXv10Mnyl8L4AMqv+7NKg839ah6V/5HGvEkoF6BPE/EMTO2roM6 O696Sj8iOUQb/QLbd5cVKQQmmGxAfnc8pVJvxlqfkLqLHkt747Hyg1e34QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN6sqYsB+03ER4M9oy89j32SmJ0AMB8GA1UdIwQY MBaAFHcceJfA7jsmmmfS4dZOP9HBWh1fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHh4NGw4RHVPeWFhWjlMaDFrNF8wY0ZhSFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvZHh4NGw4RHVPeWFhWjlMaDFrNF8wY0ZhSFY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvZHh4NGw4RHVPeWFhWjlMaDFrNF8wY0ZhSFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoSxlGehH nYFbvfqW/iQrtml1jZLffUoy2YAfw5bVIhpEoMe5anqXAhqQP9HnU8XgxNgbb8zc AjyIsMRGcuzh25/byHENjRJPTMGsQ78RqJ2AavEStvGOqQbFC9pKaLl9SVIwJ6Z/ gfyuIAfZ5MpLbG4YtBtXFOihGx2/E0OghQbg9Sm2nkCNKzFhoK2VLWN3WQG5pUWD g9+OzAYtpZWyrTJUc8VwbJCCAMQY+r5gZp0+hkKUEQ469r5njeBGJz8TZgnh+86X UDGXGOIT/U4af7iP3TRDmYaiH22SZQNN3qTG8bhc0bnwrOKyOJYwVTE4GcmP9If8 I6rOMxkDOseEPg== -----END CERTIFICATE-----Generated at Tue Jul 21 10:02:36 2026 by rpki-client