$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: G5cTj/MeCe2vPQ8lAjk4SqGibfd/nxUN9lS2Yota+to= Subject key identifier: 1B:C0:84:56:54:E3:67:BC:73:F9:BE:4D:E4:B3:0B:98:DD:4D:D7:27 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 019FE70B1F43D20758BC73750A2B1B1CDE78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 0706 Signing time: Sun 09 Aug 2026 15:01:33 +0000 Manifest this update: Sun 09 Aug 2026 15:01:33 +0000 Manifest next update: Mon 10 Aug 2026 15:01:33 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: tnHkFyeqidg1M7aakeL0bEi8jGTgXZBRHsmM9AkprAk=) 2: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=) 3: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=) 4: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=) 5: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=) 6: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=) 7: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (hash: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=) 8: fro6TGls5A_k6d-cTWMJbP0QioE.roa (hash: 9eBljoV7C7Gpp7fNoutyzWwHkUabzavd+/jPQySZ6NQ=) 9: o5v2otthTxI9MaotpF4RXsxny8c.roa (hash: 8Fkmii+rqIIBVQH5OTZvGOuhbJRNm26073tjiOdkjrw=) 10: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=) 11: ufJWMAdllEMmIPcuF9xb-uLZ_Ug.roa (hash: WQKwVoqUwSPAOPq2m2hpOUE0h89BiOqZqr9Z2GNDF64=) 12: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=) 13: xrK-gFzKLBW4kF9DuEV9G9NGWek.roa (hash: STi2LtHiMLVYX0A2icVHDyUOaCfzOkKw4aSBJjOIJ3I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 10 Aug 2026 11:12:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:e7:0b:1f:43:d2:07:58:bc:73:75:0a:2b:1b:1c:de:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Aug 9 15:01:33 2026 GMT Not After : Aug 10 15:01:33 2026 GMT Subject: CN=1bc0845654e367bc73f9be4de4b30b98dd4dd727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:a4:07:1d:a2:76:3c:29:08:45:6e:88:3c:05: 04:3c:3b:41:30:de:c1:f9:1b:10:48:15:ff:71:a7: 66:8e:00:48:fb:6f:45:82:5d:84:96:c1:c7:e8:bc: a5:fa:fd:f1:09:d1:5d:bc:2f:45:97:e6:a9:b1:38: d8:fc:55:48:4d:22:de:e3:96:67:bf:59:30:e5:9d: 8d:a1:52:9f:7a:fd:c2:dd:ff:88:68:0c:d1:1b:44: 35:84:b5:83:19:0a:58:8b:dc:09:45:a0:de:75:8f: a9:fe:04:46:48:23:cd:ee:28:d3:36:e0:36:ce:bb: be:94:93:a1:93:eb:52:55:f5:75:b4:03:d0:ba:66: 30:04:8f:db:11:1c:bb:7e:54:8a:cd:c6:72:a7:92: d1:e9:9c:4d:3d:16:75:b5:12:21:0f:7d:c7:5e:a6: 83:9a:18:43:f6:45:67:85:0c:31:58:0e:d2:d3:2b: 62:93:c2:ed:b6:dc:11:ea:1c:6e:cc:1f:74:33:b3: 4e:58:75:14:9c:02:8d:96:77:ec:17:ad:61:d1:f7: 95:16:01:84:3f:1b:ec:f5:c3:20:2c:df:2f:c0:c0: ca:ac:7e:79:05:e2:ca:f0:c2:71:5c:8d:de:71:82: 5c:ea:b3:22:9c:cf:3a:23:79:af:d4:4a:52:d6:38: fb:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C0:84:56:54:E3:67:BC:73:F9:BE:4D:E4:B3:0B:98:DD:4D:D7:27 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:3b:fb:ed:ea:df:d1:c0:df:3d:f6:5f:a3:c2:23:ed:90:1f: 93:b6:9b:8d:b7:39:f4:d4:b8:64:f7:2f:65:18:cf:79:23:6c: 33:a6:f0:78:f4:36:cf:48:33:13:a5:86:7d:86:aa:a7:33:59: d7:dc:fb:f9:94:b0:7d:b7:db:23:9f:23:74:b4:fb:28:7d:7f: ed:d8:84:0b:93:c6:c0:48:3b:f5:d7:c6:32:38:94:a9:6a:8b: 54:d8:79:29:f5:af:b3:19:65:a2:06:be:aa:ec:7a:d5:7b:e7: 94:67:0d:40:55:56:47:b9:b7:5e:17:b8:8e:99:de:6e:ee:8d: bf:e4:c6:cd:e0:49:d8:3a:3d:06:0f:33:a3:7c:c5:53:94:33: 5e:d5:ab:ea:b9:38:b8:5a:cc:c7:3d:87:50:8b:93:ad:55:b6: 05:e7:c0:e6:0c:75:73:89:fd:c9:31:89:52:db:fc:1d:15:b6: 5f:9f:ad:e4:88:22:4f:e2:d0:ce:f0:4b:c2:eb:2c:65:d7:bb: d3:fc:1a:8f:ed:2a:11:97:22:58:7c:1a:ea:a0:94:46:79:ce: 50:3f:97:ee:b2:f5:d7:db:4e:3a:95:87:87:a9:9f:ec:c5:01: 9f:1c:e1:80:af:1c:c1:0a:94:37:9f:74:80:dc:ad:b6:cd:1d: 15:e8:4a:8e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/nCx9D0gdYvHN1CisbHN54MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwODA5MTUwMTMzWhcNMjYwODEwMTUwMTMzWjAzMTEwLwYDVQQD EygxYmMwODQ1NjU0ZTM2N2JjNzNmOWJlNGRlNGIzMGI5OGRkNGRkNzI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKQHHaJ2PCkIRW6IPAUEPDtBMN7B +RsQSBX/cadmjgBI+29Fgl2ElsHH6Lyl+v3xCdFdvC9Fl+apsTjY/FVITSLe45Zn v1kw5Z2NoVKfev3C3f+IaAzRG0Q1hLWDGQpYi9wJRaDedY+p/gRGSCPN7ijTNuA2 zru+lJOhk+tSVfV1tAPQumYwBI/bERy7flSKzcZyp5LR6ZxNPRZ1tRIhD33HXqaD mhhD9kVnhQwxWA7S0ytik8LtttwR6hxuzB90M7NOWHUUnAKNlnfsF61h0feVFgGE Pxvs9cMgLN8vwMDKrH55BeLK8MJxXI3ecYJc6rMinM86I3mv1EpS1jj7twIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBvAhFZU42e8c/m+TeSzC5jdTdcnMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmzv77erf 0cDfPfZfo8Ij7ZAfk7abjbc59NS4ZPcvZRjPeSNsM6bwePQ2z0gzE6WGfYaqpzNZ 19z7+ZSwfbfbI58jdLT7KH1/7diEC5PGwEg79dfGMjiUqWqLVNh5KfWvsxlloga+ qux61XvnlGcNQFVWR7m3Xhe4jpnebu6Nv+TGzeBJ2Do9Bg8zo3zFU5QzXtWr6rk4 uFrMxz2HUIuTrVW2BefA5gx1c4n9yTGJUtv8HRW2X5+t5IgiT+LQzvBLwussZde7 0/waj+0qEZciWHwa6qCURnnOUD+X7rL119tOOpWHh6mf7MUBnxzhgK8cwQqUN590 gNytts0dFehKjg== -----END CERTIFICATE-----Generated at Sun Aug 9 16:34:07 2026 by rpki-client