$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: lomed3TMhbL5JCsRS2DFq1sXiJV0vMyguFE2jdj3U0w= Subject key identifier: 97:8A:81:5E:58:93:D5:D3:E9:E4:AF:80:7E:0C:30:C7:28:D9:6D:BE Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019F9FCCEBF084CD5776B57B90958288B0F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 13DC Signing time: Sun 26 Jul 2026 19:00:34 +0000 Manifest this update: Sun 26 Jul 2026 19:00:34 +0000 Manifest next update: Mon 27 Jul 2026 19:00:34 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: wv+DdXQK2GmfPu1tTkiEAul25KiOOog5P4YnFzorDhk=) 2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=) 3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=) 4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=) 5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=) 6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=) 7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=) 8: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=) 9: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=) 10: iglmx-ya_CBijqxO6oqYah-MgJk.roa (hash: nW9fmQ0ZJGvfNsh2tiuvFsmSbRN+a3nAUodyjJH9UYE=) 11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=) 12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=) 13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=) 14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=) 15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 19:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:cc:eb:f0:84:cd:57:76:b5:7b:90:95:82:88:b0:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Jul 26 19:00:34 2026 GMT Not After : Jul 27 19:00:34 2026 GMT Subject: CN=978a815e5893d5d3e9e4af807e0c30c728d96dbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:26:ef:6f:a7:2c:c0:19:7d:e7:c5:0b:a4:19: 77:2c:81:25:3b:9f:c8:94:f5:36:2b:8c:3a:08:f0: 00:a4:d9:f9:3c:50:37:d3:e9:59:f3:26:92:83:b8: fd:c7:31:a5:f8:29:c8:c8:88:f6:84:8a:42:dc:5b: 71:ae:05:77:58:31:cd:7a:68:0c:e1:f3:4c:61:8b: 0d:67:df:ad:4b:05:35:8d:17:4a:88:49:b5:85:5d: 7a:21:47:64:34:26:f9:b2:37:e3:25:10:33:65:1e: a7:08:7c:54:4b:31:d3:8a:7a:74:71:24:bb:57:23: 66:e2:28:fb:fe:7e:0d:47:ff:66:36:23:6e:a0:0d: f0:5b:6f:33:63:e1:85:21:fb:70:72:65:c4:7e:76: b3:4f:27:26:c8:3a:68:b3:a3:d8:75:b7:d9:98:32: 84:34:5d:0b:e8:b3:aa:3e:a6:57:4e:a6:3a:b2:af: f6:40:59:60:59:60:18:90:d0:f2:2e:4e:57:61:1e: f8:71:c2:28:e3:58:7e:a8:b9:2a:56:4d:65:05:9e: 4d:48:85:7a:a7:8a:e9:fa:6f:59:2f:7a:31:dc:4b: bf:1b:52:d2:5c:fb:9f:0d:2c:90:28:8a:44:bb:25: ec:06:65:0a:ba:04:92:da:e3:2e:c8:22:96:78:18: 20:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:8A:81:5E:58:93:D5:D3:E9:E4:AF:80:7E:0C:30:C7:28:D9:6D:BE X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:65:81:72:19:6d:8b:a7:9a:32:63:66:5f:33:5e:87:f2:89: 48:74:2f:3b:44:9e:81:a9:66:dd:ae:f5:68:36:87:f4:27:f7: 0e:bc:8b:2e:05:ef:3c:74:fd:0b:00:a8:f6:97:f3:6b:d1:3d: f7:fe:47:9d:bb:a8:03:24:28:46:98:8b:eb:1b:c6:2a:84:a6: 32:2e:80:4a:64:68:44:1b:2b:60:06:b9:a8:cb:18:2a:cf:b8: 2c:7d:c0:22:11:4a:36:68:43:2e:7a:a7:8d:6e:80:22:7a:dd: e2:3a:1c:0c:15:a5:02:64:7b:df:4d:96:7c:f2:b8:38:7f:86: c7:d2:ad:18:86:a2:19:d3:a9:1c:51:3e:51:bd:33:70:37:e5: bb:54:0b:2d:c1:f1:d5:00:39:9b:93:3c:f6:4b:5e:4e:9d:f3: ea:7c:8c:98:f1:07:03:a0:3e:40:02:7b:fc:4a:47:78:f3:21: 83:d0:17:93:f2:e1:db:3a:b1:43:4f:52:d4:6e:25:ad:2b:f1: 2e:04:ed:91:33:9b:e7:9a:70:b9:48:43:4b:87:12:a8:c3:b7: 3a:2d:32:0e:83:d3:ff:55:33:24:6c:f1:1d:bc:a0:b0:ea:e4: 3e:fb:e6:a3:af:8c:ad:d4:ac:1d:cb:00:a1:e6:76:06:31:4c: 7b:da:f1:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fzOvwhM1XdrV7kJWCiLDyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwNzI2MTkwMDM0WhcNMjYwNzI3MTkwMDM0WjAzMTEwLwYDVQQD Eyg5NzhhODE1ZTU4OTNkNWQzZTllNGFmODA3ZTBjMzBjNzI4ZDk2ZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ybvb6cswBl958ULpBl3LIElO5/I lPU2K4w6CPAApNn5PFA30+lZ8yaSg7j9xzGl+CnIyIj2hIpC3FtxrgV3WDHNemgM 4fNMYYsNZ9+tSwU1jRdKiEm1hV16IUdkNCb5sjfjJRAzZR6nCHxUSzHTinp0cSS7 VyNm4ij7/n4NR/9mNiNuoA3wW28zY+GFIftwcmXEfnazTycmyDpos6PYdbfZmDKE NF0L6LOqPqZXTqY6sq/2QFlgWWAYkNDyLk5XYR74ccIo41h+qLkqVk1lBZ5NSIV6 p4rp+m9ZL3ox3Eu/G1LSXPufDSyQKIpEuyXsBmUKugSS2uMuyCKWeBggeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJeKgV5Yk9XT6eSvgH4MMMco2W2+MB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamWBchlt i6eaMmNmXzNeh/KJSHQvO0Segalm3a71aDaH9Cf3DryLLgXvPHT9CwCo9pfza9E9 9/5HnbuoAyQoRpiL6xvGKoSmMi6ASmRoRBsrYAa5qMsYKs+4LH3AIhFKNmhDLnqn jW6AInrd4jocDBWlAmR7302WfPK4OH+Gx9KtGIaiGdOpHFE+Ub0zcDflu1QLLcHx 1QA5m5M89kteTp3z6nyMmPEHA6A+QAJ7/EpHePMhg9AXk/Lh2zqxQ09S1G4lrSvx LgTtkTOb55pwuUhDS4cSqMO3Oi0yDoPT/1UzJGzxHbygsOrkPvvmo6+MrdSsHcsA oeZ2BjFMe9rxdQ== -----END CERTIFICATE-----Generated at Mon Jul 27 01:14:30 2026 by rpki-client