$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: E7vd0MW1j/OeczkjzQDgO8hf3JDfUlKBoTQ8pkOamL0= Subject key identifier: A7:BF:6D:B0:37:B1:A0:52:CE:F0:20:ED:47:9B:8C:4C:FB:F0:C4:D3 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 019F9F5F57D16988A66D713C7ED4CFD0A1C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1A6D Signing time: Sun 26 Jul 2026 17:00:53 +0000 Manifest this update: Sun 26 Jul 2026 17:00:53 +0000 Manifest next update: Mon 27 Jul 2026 17:00:53 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: nWXYIz8ws/xuj3vG72X4dOBAAY4sAFwtWVw7Kh40fjI=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 3geV6AQmnNE3--gs3xHupJZtVFw.roa (hash: sNT96XO64aXnjNnHk7Dhs9S+Zq3PRzmgEqOTblaXNls=) 6: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 7: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 8: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 9: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 10: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 11: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 12: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 13: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 14: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 15: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 16: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 17: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 18: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 19: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 20: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 21: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 22: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 23: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 24: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 25: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: gdiJRVH83qzM0Hc5PweB6gWC6-8.roa (hash: pgZ+GtjefMqu429BIRcG12cEE/zIXfPx6RFdA+xRHiE=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:5f:57:d1:69:88:a6:6d:71:3c:7e:d4:cf:d0:a1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Jul 26 17:00:53 2026 GMT Not After : Jul 27 17:00:53 2026 GMT Subject: CN=a7bf6db037b1a052cef020ed479b8c4cfbf0c4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:6f:ba:65:8c:74:b9:b3:2d:e2:44:18:2c:9e: 2e:b9:96:82:50:40:f4:8d:ab:66:4c:38:89:45:e8: 65:ab:3e:1d:e8:0f:32:1c:33:22:ea:e2:9e:cf:b1: 4c:b3:57:37:56:e7:d7:f6:0f:7d:c3:e5:1a:2f:dd: 87:6a:12:d4:72:a7:07:cd:9e:1b:f0:93:d9:09:34: 2a:b5:5b:17:91:ad:95:73:82:57:0b:e8:f2:34:e6: 33:67:58:e3:19:8d:ed:9e:02:62:6c:d3:8f:7f:6f: db:a7:7a:51:5f:d7:cd:50:dc:42:f1:4a:97:60:47: a5:66:6e:dc:89:ec:df:9e:5e:bf:f0:92:2f:72:10: 17:76:03:be:a4:83:6a:aa:0a:65:71:6a:74:59:6b: db:de:d4:fd:fe:74:fd:55:3b:ec:81:9a:b6:ec:e3: 12:16:d3:9b:75:fd:97:10:b0:3d:a2:06:3c:f9:d5: ae:43:1f:b9:48:9d:24:e7:27:77:9c:67:e3:57:67: e4:0a:98:d5:41:bb:a8:66:a9:29:50:ed:cc:a3:ef: 81:76:cd:21:d4:7e:ac:9e:a0:dd:70:a9:de:c3:43: 39:18:5e:d2:cd:84:1f:3d:52:c5:82:57:1c:cf:be: 7c:73:b2:4d:f0:4f:2e:fd:fb:91:54:79:b6:ea:2f: 05:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:BF:6D:B0:37:B1:A0:52:CE:F0:20:ED:47:9B:8C:4C:FB:F0:C4:D3 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:88:88:f7:96:cf:5e:c7:48:61:0b:ba:42:96:d5:47:be:ff: 4a:61:d4:8f:50:10:cc:75:94:46:61:2d:84:dc:05:9d:d4:0f: 9e:bb:69:5c:b6:af:ef:1e:c8:e5:4f:68:59:c4:cd:2d:ec:21: 1c:84:88:89:2f:ee:38:88:b6:1c:30:52:d6:bd:51:eb:db:51: 8e:23:1c:5a:9c:fb:cf:77:34:d9:b9:a2:4d:7b:35:a0:f1:67: fb:d5:a5:9f:d6:4a:af:c0:a2:38:be:0f:3f:fa:e6:ed:84:c4: 71:a1:e9:b8:7e:b4:84:10:f0:12:6b:b5:5c:bd:e0:86:1d:8a: 75:e9:6a:10:d5:19:76:f9:f3:1b:02:ba:17:0a:56:3f:80:27: bb:12:bb:73:f1:d6:ff:3e:97:4b:82:71:af:79:ea:69:89:b1: c4:9a:5a:3d:7c:2d:fa:22:2b:cf:b2:e8:b1:24:02:b1:70:3b: b0:5d:f6:7e:4c:3a:bd:48:e0:95:8c:3c:42:03:4b:1a:3f:6f: 05:99:13:10:94:80:01:09:7c:b6:e9:94:a5:8c:07:a7:6b:b4: 70:6c:32:73:ba:56:16:bc:b7:23:27:67:12:f7:57:f2:2e:4c: f5:df:33:08:0b:94:81:d6:66:49:eb:7b:f1:85:c4:06:b1:ce: ec:5f:03:41 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fX1fRaYimbXE8ftTP0KHIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwNzI2MTcwMDUzWhcNMjYwNzI3MTcwMDUzWjAzMTEwLwYDVQQD EyhhN2JmNmRiMDM3YjFhMDUyY2VmMDIwZWQ0NzliOGM0Y2ZiZjBjNGQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0W+6ZYx0ubMt4kQYLJ4uuZaCUED0 jatmTDiJRehlqz4d6A8yHDMi6uKez7FMs1c3VufX9g99w+UaL92HahLUcqcHzZ4b 8JPZCTQqtVsXka2Vc4JXC+jyNOYzZ1jjGY3tngJibNOPf2/bp3pRX9fNUNxC8UqX YEelZm7ciezfnl6/8JIvchAXdgO+pINqqgplcWp0WWvb3tT9/nT9VTvsgZq27OMS FtObdf2XELA9ogY8+dWuQx+5SJ0k5yd3nGfjV2fkCpjVQbuoZqkpUO3Mo++Bds0h 1H6snqDdcKnew0M5GF7SzYQfPVLFglccz758c7JN8E8u/fuRVHm26i8F2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKe/bbA3saBSzvAg7UebjEz78MTTMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHoiI95bP XsdIYQu6QpbVR77/SmHUj1AQzHWURmEthNwFndQPnrtpXLav7x7I5U9oWcTNLewh HISIiS/uOIi2HDBS1r1R69tRjiMcWpz7z3c02bmiTXs1oPFn+9Wln9ZKr8CiOL4P P/rm7YTEcaHpuH60hBDwEmu1XL3ghh2KdelqENUZdvnzGwK6FwpWP4AnuxK7c/HW /z6XS4Jxr3nqaYmxxJpaPXwt+iIrz7LosSQCsXA7sF32fkw6vUjglYw8QgNLGj9v BZkTEJSAAQl8tumUpYwHp2u0cGwyc7pWFry3IydnEvdX8i5M9d8zCAuUgdZmSet7 8YXEBrHO7F8DQQ== -----END CERTIFICATE-----Generated at Sun Jul 26 22:29:37 2026 by rpki-client