$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft File: MH2IfALgfJ5HTR-OIQScqmzj-9M.mft (raw, json) Hash identifier: pp7zIl2OOfW/GOZMiNqX/+HksONHTpjf5j7TO76iJuE= Subject key identifier: 69:A7:2B:6F:21:6E:55:90:98:C4:B7:11:BE:13:39:EA:85:76:A0:DA Authority key identifier: 30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 Certificate issuer: /CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Certificate serial: 019FFAFEED39D9767D5F3A3ABD24A3866E0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft Manifest number: 1A01 Signing time: Thu 13 Aug 2026 12:00:38 +0000 Manifest this update: Thu 13 Aug 2026 12:00:38 +0000 Manifest next update: Fri 14 Aug 2026 12:00:38 +0000 Files and hashes: 1: 0zd4nb5fhm2xTq0WOAi4Xp6bvJc.roa (hash: uMgyt3DoicP5DNjGaZ/5LrHhGzYKFxFylJxozZr11JQ=) 2: 15U-P8KVPY8JhMDqgw8L5oM6fO4.roa (hash: A8TF8Z+NTCSo1JvC6AkpIA17zqlpHZI++mBawEefOjM=) 3: DN1S1WAl_2K3M6Ai-2AoagxMibw.roa (hash: CSPU47hBScO03u7drTuu7JPSF8DLvvXRvBS1TUE4BwI=) 4: MH2IfALgfJ5HTR-OIQScqmzj-9M.crl (hash: k7ScATJ/MmMpOUCVJZNXABiguCsGeQYO+inKO981ZAs=) 5: NA8tG2G3hFFALFYl7Venv99NrVc.roa (hash: bJB0cpk0QWUKw0RjswA5Ubr/IfiAoQmBJm3f3NwKfgQ=) 6: NC0UAgfuyICWUK07pGjses6Gmp4.roa (hash: srG5DwbOiKT6ED23Q54cQarx7hW7qMuLeBg5bvdOCes=) 7: OAN3WdNCBOx9GAH-afVSq5R89fo.roa (hash: /EI4b5flaVJsTGBAEIzkodT4ndbdEXX0V5sGa/1LzJE=) 8: OQ88iyxgykv-UuMoZwpp0BBgiSI.roa (hash: 8tW2X/On0vJs7AepnWjVBDXaTpJx0zYz1Hi+i0/YSxY=) 9: abnIXAgJEhW9VldO5YpGFgSVzcA.roa (hash: XCRB0tR9DLtvsf6qW2UBqKQDVi6//m3IqU34W2mRyLA=) 10: kyDGRd8zbEMUETtukg77Ui7V8qY.roa (hash: devk2rJm/x4h0LaLa8i6gGbkJIFyEo6sNK4CrBpAYrs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 12:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:fa:fe:ed:39:d9:76:7d:5f:3a:3a:bd:24:a3:86:6e:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=307d887c02e07c9e474d1f8e21049caa6ce3fbd3 Validity Not Before: Aug 13 12:00:38 2026 GMT Not After : Aug 14 12:00:38 2026 GMT Subject: CN=69a72b6f216e559098c4b711be1339ea8576a0da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a5:17:a5:c9:90:f8:14:22:4f:b1:94:34:0f: 68:db:ec:30:8b:ca:b2:6d:a7:d4:6d:85:fd:ac:d3: 55:51:b7:8e:b5:f7:1c:38:bb:25:c4:db:46:0b:76: b8:79:d5:b4:31:24:8d:34:9c:79:7f:09:5d:a3:61: 3a:00:ff:be:6d:41:69:1c:bd:26:f9:b6:3e:43:c3: 32:38:12:20:aa:b6:e7:d8:b8:74:72:0a:1a:92:00: ce:b0:4d:02:ac:3a:7f:3c:88:e3:50:32:8c:55:87: df:32:06:a5:b6:56:50:db:0a:14:f1:62:64:ee:bf: bb:c0:d9:5e:3a:7a:7b:69:ef:60:7a:52:64:f4:2f: 54:f6:28:39:4a:f9:df:a8:21:16:b1:8b:95:65:3c: 18:0d:ea:09:66:9f:4b:b8:9b:08:48:b6:a6:ef:ea: 2c:19:44:d1:9a:02:e9:76:41:d8:51:dc:17:3b:21: 5b:e1:a9:24:68:d6:1f:13:6a:5b:54:b2:59:8a:6e: 99:2e:74:e1:31:ce:bf:49:d1:89:80:88:56:2b:1d: e3:68:9c:f2:80:da:96:bf:a6:35:4e:d5:94:4f:d0: 1e:e9:fd:63:64:a4:42:67:f9:9b:35:43:a9:5e:f0: 13:ce:2d:04:bc:62:4f:10:f3:36:54:d0:83:9c:cf: 8f:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A7:2B:6F:21:6E:55:90:98:C4:B7:11:BE:13:39:EA:85:76:A0:DA X509v3 Authority Key Identifier: keyid:30:7D:88:7C:02:E0:7C:9E:47:4D:1F:8E:21:04:9C:AA:6C:E3:FB:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH2IfALgfJ5HTR-OIQScqmzj-9M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b20d83-612c-4b62-97a3-1a5e5f191bfa/1/MH2IfALgfJ5HTR-OIQScqmzj-9M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:2f:4a:14:51:4c:b7:93:81:ab:5b:93:11:4e:fd:49:77:18: a3:ae:ce:02:9c:b1:c0:e0:cb:4f:d1:ef:f2:6a:a5:bd:34:48: 84:9d:44:c2:91:d5:86:a6:d3:9f:ab:ac:20:38:70:1d:22:6e: 80:14:fb:27:e3:bf:cc:c1:33:f6:53:7b:23:a8:6d:39:2c:a4: e8:93:97:22:1e:c2:e0:8b:36:32:9b:ae:20:3a:fb:0b:69:bc: 2d:a1:ac:cb:8d:85:09:34:55:62:34:19:55:e1:4a:58:fa:ca: 22:82:f2:2a:bf:93:25:82:c6:00:06:60:6d:ab:1c:71:0c:a6: 7a:32:45:af:21:2a:e8:c2:05:70:c8:d8:be:19:bd:37:35:95: 35:eb:7d:95:4c:80:27:35:f5:b4:3d:1e:41:76:1e:36:5b:57: 17:3a:24:25:2a:83:ea:55:ad:3b:53:20:8d:32:dc:38:42:76: 20:99:52:5a:6f:14:d8:d6:2e:d5:38:f3:eb:00:b8:08:ac:18: 80:20:40:7b:7a:e6:db:06:6c:86:43:7b:c8:d1:c1:87:30:59: 89:69:e5:d6:e8:f8:77:5c:e9:74:28:2c:f2:6b:a8:94:f9:e4: 60:ed:27:b6:0e:23:34:63:a9:71:a2:86:9f:59:71:e2:3d:e7: fb:59:47:14 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/6/u052XZ9Xzo6vSSjhm4OMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwN2Q4ODdjMDJlMDdjOWU0NzRkMWY4ZTIxMDQ5Y2FhNmNl M2ZiZDMwHhcNMjYwODEzMTIwMDM4WhcNMjYwODE0MTIwMDM4WjAzMTEwLwYDVQQD Eyg2OWE3MmI2ZjIxNmU1NTkwOThjNGI3MTFiZTEzMzllYTg1NzZhMGRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqUXpcmQ+BQiT7GUNA9o2+wwi8qy bafUbYX9rNNVUbeOtfccOLslxNtGC3a4edW0MSSNNJx5fwldo2E6AP++bUFpHL0m +bY+Q8MyOBIgqrbn2Lh0cgoakgDOsE0CrDp/PIjjUDKMVYffMgaltlZQ2woU8WJk 7r+7wNleOnp7ae9gelJk9C9U9ig5SvnfqCEWsYuVZTwYDeoJZp9LuJsISLam7+os GUTRmgLpdkHYUdwXOyFb4akkaNYfE2pbVLJZim6ZLnThMc6/SdGJgIhWKx3jaJzy gNqWv6Y1TtWUT9Ae6f1jZKRCZ/mbNUOpXvATzi0EvGJPEPM2VNCDnM+PFwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGmnK28hblWQmMS3Eb4TOeqFdqDaMB8GA1UdIwQY MBaAFDB9iHwC4HyeR00fjiEEnKps4/vTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMt MWE1ZTVmMTkxYmZhLzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYy9iMjBkODMtNjEyYy00YjYyLTk3YTMtMWE1ZTVmMTkxYmZh LzEvTUgySWZBTGdmSjVIVFItT0lRU2NxbXpqLTlNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAni9KFFFM t5OBq1uTEU79SXcYo67OApyxwODLT9Hv8mqlvTRIhJ1EwpHVhqbTn6usIDhwHSJu gBT7J+O/zMEz9lN7I6htOSyk6JOXIh7C4Is2MpuuIDr7C2m8LaGsy42FCTRVYjQZ VeFKWPrKIoLyKr+TJYLGAAZgbasccQymejJFryEq6MIFcMjYvhm9NzWVNet9lUyA JzX1tD0eQXYeNltXFzokJSqD6lWtO1MgjTLcOEJ2IJlSWm8U2NYu1Tjz6wC4CKwY gCBAe3rm2wZshkN7yNHBhzBZiWnl1uj4d1zpdCgs8muolPnkYO0ntg4jNGOpcaKG n1lx4j3n+1lHFA== -----END CERTIFICATE-----Generated at Thu Aug 13 20:53:21 2026 by rpki-client