$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: YM+EkBxmbc+NrjfXmt6hBNlKnzvFKdndaM5hohbhtiQ= Subject key identifier: 09:D9:74:74:39:BE:84:AA:70:0B:8B:BF:2B:49:34:40:AC:67:04:37 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 019FCC6F774232F3E89F0FE09F06A4ADB9D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 1A41 Signing time: Tue 04 Aug 2026 11:01:24 +0000 Manifest this update: Tue 04 Aug 2026 11:01:24 +0000 Manifest next update: Wed 05 Aug 2026 11:01:24 +0000 Files and hashes: 1: 1-Dw7363-gcZT5BcZS3h3DULOLy8.roa (hash: ycAjWS2LKG3rf+AnuA7L1QjlHbaxU1ClqDSIOlIjNCE=) 2: BiYRVVML9NNTA_8LHQsEIyn-udM.roa (hash: MQi6PP1rzRM1KN1VV4mGhoaMI5G3SPq1bp7SEkx+KmA=) 3: Nc3Qv6HWCUL0coHdhzehCvqorjQ.roa (hash: 1cr7/XMm8bJJ1VGTZJBo+emXZtefD8zXujejZu9BwnE=) 4: RiJbycN_HnEaFdxBy-0QqogHp9w.roa (hash: HrWeheuaH2PNBF70Yz5xTkWSf+oor2QnLluzhSuwnU8=) 5: cd86fuGEpcvGitdJ6j4qmONtrs4.roa (hash: OyWo2jddiuk9oXVabZhwBWcG9HobQGDOXj6VfpvDkjo=) 6: deTEkBZi5H7AIejV16ysjHwAbxY.roa (hash: l0JbGg+HLxrf5Ag/2z2pTojVken0ajBmDjhItX+Hm3I=) 7: hPDJ7bwWMVeeA66R-Nm66UMAI3I.roa (hash: S6FoRCGZ+2A7ou0QqZgDgmiPo527/Z9rU6I1qlBMQXY=) 8: i-f-GFNW7EWY7uYw_DjdHPLZIEc.roa (hash: Lu14Av/K1ThdwY4U86jUJpa6Z2xIOpuEfesYLD//+vY=) 9: oKVovXTv2aNAyZu9y-AHgX6RbJ8.roa (hash: UsgdfjEOvyD+5ioDpDRHljoPckkLzWdsqZQnU51Gug0=) 10: ocHryKy0JCZoZXuWFydbiaPAXvA.roa (hash: VJkfS4R1R0/kVOkQFygl/eqzEOXMlTWCdbkGDaHwbCQ=) 11: pGPZirCKZzbNWc11cAMZui5y53g.roa (hash: x16id1SP+uWE4b9i/PFLiuYNReYseV++lthZDwFfk5U=) 12: pKSlP4qI-iIWoFFAgY7hZYUI5lE.roa (hash: fJiLeKrrQ0jkNTOG3gU1SfB8kCZt5PRpsv9OHklxoM8=) 13: qltZRt6yv2xmd-YFzKK4-T95t70.roa (hash: ouYg4rusjDVFIksWY2y+Jv/jtKdXu+HEE/CHgFLthz4=) 14: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: Tl4yMfM+GLD/OLTWne/01a0JdrXjoG9rrCJaIIJ6/NI=) 15: sQ8qQg5RChJp9JsfMBZ7VZwT8WE.roa (hash: obNWII8S7VxaHifOdhDpl8/q/V3M1i4VuliV8Z+MBow=) 16: u63mZxm52Bw0cBmaKmF45BzPFlY.roa (hash: c10W+dpWSU/XF5AYdPbGADH6C3lQiDG2bdnUuLAZmmw=) 17: wGWwo0E6K55d816ADtVpaqGsYoE.roa (hash: Qv1Am1EocmBUM6XTSjIqfN+fr9y61yBhGrH08ROvpPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cc:6f:77:42:32:f3:e8:9f:0f:e0:9f:06:a4:ad:b9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Aug 4 11:01:24 2026 GMT Not After : Aug 5 11:01:24 2026 GMT Subject: CN=09d9747439be84aa700b8bbf2b493440ac670437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:0a:ae:09:02:c7:12:82:82:6e:a3:fd:fb:13: 08:96:f0:3c:37:b5:3d:01:36:c5:44:d4:73:27:b7: 13:ac:04:ee:74:a7:48:e9:ab:3d:21:5c:ee:2b:e1: 9f:0e:4c:fd:e4:92:02:b5:51:9f:0e:59:18:0f:b4: 79:9f:50:6f:99:51:80:f2:79:06:7d:49:af:42:6c: 7d:66:61:95:7b:6e:89:32:73:cc:26:7c:0c:4b:7a: d7:eb:28:84:70:f8:b2:90:b9:bd:81:b6:1a:ce:86: 00:72:d7:47:de:ef:23:a9:5a:8d:94:7c:60:69:ac: a3:1f:e4:f4:bf:40:34:20:63:59:b9:97:0e:fd:39: 3c:2b:30:3d:fd:48:22:ad:7b:d0:ac:5d:45:ad:9a: 19:cf:59:5d:7f:72:2f:2f:0a:17:57:12:34:0b:8f: e6:2c:60:3c:22:5f:c0:f4:9d:3a:1f:93:08:c3:e1: 7e:ab:f7:7d:10:ee:30:eb:12:e5:6e:c5:f3:bd:4d: ff:6b:91:91:d8:5a:ec:a0:3b:58:b0:ad:a0:ea:36: b9:0c:99:c3:21:4a:30:03:95:9e:68:b2:4a:6b:d0: c7:ba:13:74:f6:b0:c7:7d:81:0d:1e:77:1b:21:bd: 56:b8:25:17:e4:37:80:b4:c3:ae:f9:9d:c7:b5:57: 2b:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:D9:74:74:39:BE:84:AA:70:0B:8B:BF:2B:49:34:40:AC:67:04:37 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:16:e2:ae:b8:44:5a:f6:b8:9b:51:de:92:42:4b:33:7c:f2: 47:96:23:5d:ba:8e:b8:24:9e:23:08:6d:7c:77:d3:ef:00:8c: b7:6c:c5:39:ed:f2:d9:2f:57:2d:ee:cc:29:a7:12:47:21:3f: a6:7e:26:e4:46:30:0b:96:19:33:3e:ce:22:5c:88:74:67:d6: 1c:26:71:9a:90:33:34:9e:aa:32:94:a7:75:9e:fe:ad:53:76: ba:9a:e2:df:51:3a:05:e4:3b:84:b3:9a:c1:84:c1:20:0b:3d: 40:d9:53:a0:8f:1a:02:70:37:bc:04:9d:36:50:d0:9f:f2:53: 8e:ef:16:62:28:38:5f:1a:ed:49:ae:68:cb:23:98:24:22:34: c1:d8:fc:f7:71:58:e2:dc:67:71:9e:28:f5:8f:04:e8:62:98: 45:62:47:ab:a5:0c:d8:af:4f:9f:f3:40:5a:52:ce:47:99:71: 2e:11:f8:9c:c0:f7:f0:bf:ea:f0:4a:87:1e:a4:e3:97:c0:7c: 5e:ac:39:60:4a:21:1e:8f:ce:ea:94:32:84:7f:29:eb:e0:a3: 34:e3:1e:07:07:f2:0b:dc:8b:3e:c4:44:09:2b:15:77:34:a1: 08:56:27:09:08:64:98:73:bc:b1:23:52:b0:cc:3e:52:ab:c2: 7b:ca:7e:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/Mb3dCMvPonw/gnwakrbnWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwODA0MTEwMTI0WhcNMjYwODA1MTEwMTI0WjAzMTEwLwYDVQQD EygwOWQ5NzQ3NDM5YmU4NGFhNzAwYjhiYmYyYjQ5MzQ0MGFjNjcwNDM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmwquCQLHEoKCbqP9+xMIlvA8N7U9 ATbFRNRzJ7cTrATudKdI6as9IVzuK+GfDkz95JICtVGfDlkYD7R5n1BvmVGA8nkG fUmvQmx9ZmGVe26JMnPMJnwMS3rX6yiEcPiykLm9gbYazoYActdH3u8jqVqNlHxg aayjH+T0v0A0IGNZuZcO/Tk8KzA9/UgirXvQrF1FrZoZz1ldf3IvLwoXVxI0C4/m LGA8Il/A9J06H5MIw+F+q/d9EO4w6xLlbsXzvU3/a5GR2FrsoDtYsK2g6ja5DJnD IUowA5WeaLJKa9DHuhN09rDHfYENHncbIb1WuCUX5DeAtMOu+Z3HtVcrtQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAnZdHQ5voSqcAuLvytJNECsZwQ3MB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqxbirrhE Wva4m1HekkJLM3zyR5YjXbqOuCSeIwhtfHfT7wCMt2zFOe3y2S9XLe7MKacSRyE/ pn4m5EYwC5YZMz7OIlyIdGfWHCZxmpAzNJ6qMpSndZ7+rVN2upri31E6BeQ7hLOa wYTBIAs9QNlToI8aAnA3vASdNlDQn/JTju8WYig4XxrtSa5oyyOYJCI0wdj893FY 4txncZ4o9Y8E6GKYRWJHq6UM2K9Pn/NAWlLOR5lxLhH4nMD38L/q8EqHHqTjl8B8 Xqw5YEohHo/O6pQyhH8p6+CjNOMeBwfyC9yLPsRECSsVdzShCFYnCQhkmHO8sSNS sMw+UqvCe8p+7w== -----END CERTIFICATE-----Generated at Tue Aug 4 13:38:25 2026 by rpki-client