$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft File: 520NqzR6OOK4e1oiovfJ4hwYybw.mft (raw, json) Hash identifier: jCy4aPAXxkh94DYhtmpPvE1PT5wkYwFqQbqnDlNONcs= Subject key identifier: 4F:EE:F7:99:CF:11:3C:75:E8:E3:9E:9F:5A:48:CF:98:FC:B5:09:D2 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 019F82680A92201CEF620B9C53D5D6449438 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft Manifest number: 14AC Signing time: Tue 21 Jul 2026 02:01:24 +0000 Manifest this update: Tue 21 Jul 2026 02:01:24 +0000 Manifest next update: Wed 22 Jul 2026 02:01:24 +0000 Files and hashes: 1: 1dfOhFGT4Rz19mHWVabW0kWxTss.roa (hash: Rjg1gNguWYpEwGKvfk1H+hd0eMsqKT2A4N+C2/8Q+uQ=) 2: 520NqzR6OOK4e1oiovfJ4hwYybw.crl (hash: w4Fis+kxBlshyKZ7LqLCh//9aaPCsDCuXehpU67OVEE=) 3: 7EPxlfzuNdNfziGNw3Hj7EoZj1Q.roa (hash: fYUfx118C/cw672kHDWSH3DD1Ik9WuMEeaQ/qAV9tYE=) 4: 9EzrkfCb3685-QENXXhTIl2uZz4.roa (hash: 4o0MB77YQKRQiZHQrZxR1nkb/HsRFN1Kq0iR4K53WZA=) 5: DVIKLwP8b0UVJE_X0Zz4hLCMFmU.roa (hash: 2ROrixfhF0UtgJihhtThPaEztRX+VVHt8WTM1ZfZQ1o=) 6: Fn3txwFOnsHfJqp3dmOvAMcvgHc.roa (hash: 0tFPd6mFP89u9IcgrQmVyEuYoDxe9S4zwwRr4qndNks=) 7: RqZv9lI-beWajs98dICrEK2DwUM.roa (hash: z0DWSEDfb+oWc/lkT9R9ehjWWb2y0A0CPcHglnAYRf8=) 8: Ud0XI3ub85_CL2l55YZW3cXrctA.roa (hash: 2gMJyy7om8/uY1IqvCz0ubvDeUV63nAu6cUom48+3U0=) 9: ao5k8aMHz2Rr-UFohnKN0Vsy0ts.roa (hash: qeXz8tDdKItxGK8qtWsvUAbM0Ooz+MmMiDN8cvBIyTQ=) 10: bbXWGNkALy-ajnXnVwsq6VcslC8.roa (hash: lOmBCerqz+GglurufDI5e+15DQVwzjxcTvAfkACkLYE=) 11: jTMEUhkl6sKPDlW6gGgXZsH4VwQ.roa (hash: bLe2Zk8IquF+7aI/fXPQxZklmLIeFhH3W5DkdYCydQA=) 12: r-NoE_XHTABnwPRM9GdFHoEeHJo.roa (hash: qsD5Rt9CKRxXFQG5JSeN7cqv7sQvsG2HbFGsWmdhdi8=) 13: rIIpXZCn7E3HgJjpCaYYUR4k6ZI.roa (hash: Vvylnj2QqF4AFfq4GCTBxANmDk4TfXB5W5GNlTLI/Qw=) 14: rp3l1DRMo7bxNlcekPEumkx_Cu4.roa (hash: cvH000yVT30CU4NGwC5k2pFAaWGJcYLG4wfqKOyLWIU=) 15: s9E0mrs6RE5G3diI6qJ2dNaQlCY.roa (hash: ALHEFczsxrK3P9zm6czuHQOWsz9Vxib3j6fIwRLXdsA=) 16: smuPovOHBHHaIAv32qcc0ZyhNkQ.roa (hash: HcQ/8p3eoCWjnnKfMtVzm8focRBIq46dCnVV7vdjMxQ=) 17: v94LL-qGGgahldRNvzQc-ZVS3KI.roa (hash: a3YAXYAGQiNiI/eRCe9RKvTaP1hHvgR2d27wk4bq6Cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 02:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:82:68:0a:92:20:1c:ef:62:0b:9c:53:d5:d6:44:94:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Jul 21 02:01:24 2026 GMT Not After : Jul 22 02:01:24 2026 GMT Subject: CN=4feef799cf113c75e8e39e9f5a48cf98fcb509d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:15:46:1c:8a:32:23:f6:6c:ab:e3:76:fc:64: 4f:63:3f:a1:16:98:d7:a8:9a:91:f3:e9:aa:47:9d: 02:bd:6a:d6:5c:25:70:4f:49:e6:39:2e:80:43:bb: cd:43:44:90:89:38:fb:89:ee:91:64:69:d5:8c:04: 5c:2e:6a:bb:ba:15:4b:cf:76:00:95:d3:27:d5:53: ee:c4:69:6e:a2:ce:09:64:00:1c:46:de:ef:cc:b9: 9f:21:10:97:e3:00:2a:b3:c4:6b:6d:b2:f7:91:a1: 5e:ae:a4:e0:a4:04:d6:45:c5:07:be:0f:f9:f7:04: 71:d5:6c:52:e4:0a:2f:98:62:a1:21:3f:7d:5d:94: 07:2d:e4:5b:6b:a2:e6:fd:0a:96:ed:9e:dc:44:42: 75:e0:8d:71:5f:b4:46:69:1a:68:5e:28:f2:c4:21: 89:80:2d:27:d1:88:b3:ef:69:0a:d2:ff:c4:43:0f: a7:61:2c:a5:3e:3f:8c:17:0c:c2:8f:13:68:88:7a: 21:e0:60:d8:35:a3:8f:23:00:f4:38:15:1a:15:f0: 06:93:26:6d:3c:53:28:32:c1:0e:4a:e1:71:91:97: b2:c9:1c:d2:37:55:fe:62:79:35:ec:ba:e9:16:66: 53:b6:5c:cd:09:9f:2f:b5:7a:bb:e0:ac:06:2a:ac: 41:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:EE:F7:99:CF:11:3C:75:E8:E3:9E:9F:5A:48:CF:98:FC:B5:09:D2 X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:4f:23:5e:47:93:62:38:3e:e4:82:0b:9a:14:87:41:88:ce: 36:38:e7:6a:2a:22:34:ba:9e:e0:00:f7:22:e6:c1:fa:e3:ef: 88:00:6f:97:9c:48:6f:84:05:ef:88:11:67:ec:6d:f5:69:ea: ca:21:49:21:30:5d:ed:b6:b2:0d:65:0d:0d:66:23:76:a0:df: 4b:d6:5a:93:56:36:1b:79:b5:70:70:6d:8f:7f:7f:80:c0:0f: 32:79:d9:31:16:bc:ca:5a:37:64:12:13:94:4a:a1:3a:b9:fa: 34:0c:47:a4:6e:37:b8:61:5b:87:9a:27:39:dd:4b:ab:66:f7: e5:24:64:e4:73:1b:ab:d5:98:b4:ce:24:6a:d2:62:74:94:7f: 04:b6:39:00:74:1c:d9:2c:cf:78:dc:a2:2f:b3:6a:06:e1:e1: 0c:1e:25:45:ad:e8:e8:15:85:ec:cf:fb:0a:dc:56:7b:79:75: b4:b2:7f:95:8e:f6:22:33:03:61:72:96:db:c3:19:09:9f:47: f3:21:6c:c7:2b:06:3e:5c:6c:6e:a2:61:5e:ad:fb:18:90:b3: 02:dc:e0:1a:3a:e4:3a:25:36:a9:c8:b7:84:1a:9d:18:a2:5c: f8:a7:b3:9e:88:de:1e:96:c4:a9:1a:fd:c2:1b:33:c0:f6:22: 1b:f7:d4:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+CaAqSIBzvYgucU9XWRJQ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwNzIxMDIwMTI0WhcNMjYwNzIyMDIwMTI0WjAzMTEwLwYDVQQD Eyg0ZmVlZjc5OWNmMTEzYzc1ZThlMzllOWY1YTQ4Y2Y5OGZjYjUwOWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRVGHIoyI/Zsq+N2/GRPYz+hFpjX qJqR8+mqR50CvWrWXCVwT0nmOS6AQ7vNQ0SQiTj7ie6RZGnVjARcLmq7uhVLz3YA ldMn1VPuxGluos4JZAAcRt7vzLmfIRCX4wAqs8RrbbL3kaFerqTgpATWRcUHvg/5 9wRx1WxS5AovmGKhIT99XZQHLeRba6Lm/QqW7Z7cREJ14I1xX7RGaRpoXijyxCGJ gC0n0Yiz72kK0v/EQw+nYSylPj+MFwzCjxNoiHoh4GDYNaOPIwD0OBUaFfAGkyZt PFMoMsEOSuFxkZeyyRzSN1X+Ynk17LrpFmZTtlzNCZ8vtXq74KwGKqxB7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE/u95nPETx16OOen1pIz5j8tQnSMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr08jXkeT Yjg+5IILmhSHQYjONjjnaioiNLqe4AD3IubB+uPviABvl5xIb4QF74gRZ+xt9Wnq yiFJITBd7bayDWUNDWYjdqDfS9Zak1Y2G3m1cHBtj39/gMAPMnnZMRa8ylo3ZBIT lEqhOrn6NAxHpG43uGFbh5onOd1Lq2b35SRk5HMbq9WYtM4katJidJR/BLY5AHQc 2SzPeNyiL7NqBuHhDB4lRa3o6BWF7M/7CtxWe3l1tLJ/lY72IjMDYXKW28MZCZ9H 8yFsxysGPlxsbqJhXq37GJCzAtzgGjrkOiU2qci3hBqdGKJc+KeznojeHpbEqRr9 whszwPYiG/fUHQ== -----END CERTIFICATE-----Generated at Tue Jul 21 09:51:59 2026 by rpki-client