$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json) Hash identifier: 2A7IMWVdqzaO7uSbe/k3uwcJbj35aSH/X9g4F+fxzxM= Subject key identifier: D0:9C:11:1A:2D:6A:DA:DC:46:33:4F:E7:EF:89:51:4F:54:B2:1B:D1 Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 019FCA136C3367A3F1869C6BAB150C5065A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft Manifest number: 19F9 Signing time: Tue 04 Aug 2026 00:01:38 +0000 Manifest this update: Tue 04 Aug 2026 00:01:38 +0000 Manifest next update: Wed 05 Aug 2026 00:01:38 +0000 Files and hashes: 1: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=) 2: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=) 3: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=) 4: FQSV18p_T_droUZh08zoIA9Ax8A.roa (hash: znhD3qntwxP0GJzV41Y9fLTZXvTyllhrzmb59F4/qY4=) 5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=) 6: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=) 7: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=) 8: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=) 9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: n4yoiun7HCdgM9P7jLYRzdEgqS5sDiL5ZRF+bFDIMEw=) 10: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=) 11: xGGCf6Hil4Mo0C8TJDJWoZKOtQY.roa (hash: OSJabINQbvYIP/JxqMQjPh9E61hQf/o/MtFixqbU+Rk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Aug 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ca:13:6c:33:67:a3:f1:86:9c:6b:ab:15:0c:50:65:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Aug 4 00:01:38 2026 GMT Not After : Aug 5 00:01:38 2026 GMT Subject: CN=d09c111a2d6adadc46334fe7ef89514f54b21bd1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:9f:18:e7:1d:c7:57:12:18:e0:69:cb:a1:3a: 28:ca:97:71:0e:78:6a:56:e3:71:3b:38:d0:a2:57: 76:42:5c:b9:67:67:8b:3c:36:6b:12:14:09:99:a4: 1a:e2:e3:2c:e9:04:90:72:64:b3:f0:46:7e:f3:44: 82:c1:60:ad:1f:b0:30:5a:37:3d:1a:d2:0b:0b:d6: 24:86:30:32:82:f9:c7:2a:e9:42:63:14:6a:f1:c0: a7:ed:c9:8e:70:c9:8b:63:8a:26:d0:84:b4:52:a2: de:59:22:8a:1d:53:82:66:8c:9e:ab:fe:4e:12:da: 96:c5:7c:ae:c1:27:c1:2f:bb:06:d2:d3:b8:be:7d: a8:fa:8a:23:f2:4a:6f:93:66:3f:16:15:b0:07:ba: 8a:32:7c:78:04:45:b2:21:a9:d2:f0:98:e8:59:1a: d9:4d:52:73:9d:4b:d6:ef:66:7f:2e:45:6c:35:53: 7d:80:b3:61:7a:47:81:47:5f:1d:37:e0:b7:a8:68: 3d:04:6a:8f:40:b8:28:ee:53:e5:33:84:4e:e6:50: 4d:d8:7c:70:02:de:c0:d5:d3:99:ee:b9:ea:9c:75: fd:7f:01:48:20:17:a1:34:c3:ce:dd:32:5e:d8:fb: 90:fe:9f:91:af:74:4b:37:46:5f:16:b0:5a:b8:87: 78:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9C:11:1A:2D:6A:DA:DC:46:33:4F:E7:EF:89:51:4F:54:B2:1B:D1 X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9f:9d:4f:fa:48:33:5b:ec:51:47:96:21:e7:7c:f7:32:c4: 3b:c1:13:fb:1b:00:44:0a:05:67:7e:73:34:34:52:d9:1f:bd: 15:06:b3:fa:1f:44:20:f4:6d:28:c5:19:d4:9f:e5:bd:c1:67: 1a:97:7a:28:97:90:da:b8:e9:81:3c:13:9f:2c:93:4c:40:37: 1c:87:6b:45:0b:29:fe:08:b3:75:70:68:ab:c8:3c:21:36:56: 32:1a:fc:25:d3:36:de:6d:fd:20:a1:94:f3:d7:b2:2e:9e:01: 18:e6:a8:91:64:8c:b4:09:3b:0f:e2:b8:04:4d:18:d1:46:33: 41:d5:8e:c7:bc:88:3d:73:5b:84:c3:da:58:11:80:3c:cd:7a: 50:39:20:75:84:85:89:c3:30:87:7e:1f:77:e3:3c:db:79:5f: f0:a5:fd:c7:22:0b:52:3a:b8:67:91:f1:ec:d2:9e:9e:99:93: d2:d5:52:25:5f:93:b6:3b:23:69:9e:87:7e:20:7c:51:28:f3: 05:11:e2:17:e9:25:d1:d0:f9:30:6f:25:f0:9a:ed:3b:28:3a: 99:c8:f2:f0:9c:ef:32:67:8e:cf:65:94:d6:9a:04:d5:32:2a: 76:c8:72:e8:ff:18:32:0c:1a:15:bb:0e:6e:93:1b:b8:8d:d6: 24:ea:c4:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/KE2wzZ6PxhpxrqxUMUGWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwODA0MDAwMTM4WhcNMjYwODA1MDAwMTM4WjAzMTEwLwYDVQQD EyhkMDljMTExYTJkNmFkYWRjNDYzMzRmZTdlZjg5NTE0ZjU0YjIxYmQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Z8Y5x3HVxIY4GnLoTooypdxDnhq VuNxOzjQold2Qly5Z2eLPDZrEhQJmaQa4uMs6QSQcmSz8EZ+80SCwWCtH7AwWjc9 GtILC9YkhjAygvnHKulCYxRq8cCn7cmOcMmLY4om0IS0UqLeWSKKHVOCZoyeq/5O EtqWxXyuwSfBL7sG0tO4vn2o+ooj8kpvk2Y/FhWwB7qKMnx4BEWyIanS8JjoWRrZ TVJznUvW72Z/LkVsNVN9gLNhekeBR18dN+C3qGg9BGqPQLgo7lPlM4RO5lBN2Hxw At7A1dOZ7rnqnHX9fwFIIBehNMPO3TJe2PuQ/p+Rr3RLN0ZfFrBauId4AQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNCcERotatrcRjNP5++JUU9UshvRMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZJ+dT/pI M1vsUUeWIed89zLEO8ET+xsARAoFZ35zNDRS2R+9FQaz+h9EIPRtKMUZ1J/lvcFn Gpd6KJeQ2rjpgTwTnyyTTEA3HIdrRQsp/gizdXBoq8g8ITZWMhr8JdM23m39IKGU 89eyLp4BGOaokWSMtAk7D+K4BE0Y0UYzQdWOx7yIPXNbhMPaWBGAPM16UDkgdYSF icMwh34fd+M823lf8KX9xyILUjq4Z5Hx7NKenpmT0tVSJV+TtjsjaZ6HfiB8USjz BRHiF+kl0dD5MG8l8JrtOyg6mcjy8JzvMmeOz2WU1poE1TIqdshy6P8YMgwaFbsO bpMbuI3WJOrE8w== -----END CERTIFICATE-----Generated at Tue Aug 4 08:47:00 2026 by rpki-client