$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: HVT2KHTt2+ibeO0OhrjWG6YHORL44SkRZ0ApyuESCQE= Subject key identifier: 49:CA:E3:29:4C:C4:0E:5F:1B:A4:A3:B5:1D:55:DD:FD:B8:E1:1A:46 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 019FA1BB0DD3291CF6044903AC23D96E58CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 1AD5 Signing time: Mon 27 Jul 2026 04:00:18 +0000 Manifest this update: Mon 27 Jul 2026 04:00:18 +0000 Manifest next update: Tue 28 Jul 2026 04:00:18 +0000 Files and hashes: 1: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (hash: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84=) 2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: e1ddtPXkShbr91wA9VaAfmwyhyuKFp9au2vmvdQ+yWA=) 3: 1xKMTxjcAyTOqPTp48dbyl1IVKs.roa (hash: USplCCSviit7LuwikiCrStcHpPZhldNMRmJaNU4sZJs=) 4: 2WrIc3-SP4DwQkwPJgua1bGNJ8U.roa (hash: 1n+jxmJd5F9eDLk5zWmpaiLv++ZbzD7Fd2FD1jx9EQI=) 5: 2tySjVTQSHiULWpIIHxe3UTXyKc.roa (hash: 11efIhc4jliYz5b7ccbbcBy+lueobimG/f4ImBFKSr4=) 6: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (hash: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE=) 7: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (hash: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE=) 8: 8s9uSzf6TvkzP7AMAwk-J-bBoaI.roa (hash: HhHYyz7/gaXYnl+eOQvtBscobpbKRyobYY7K5LG1gFs=) 9: CW-qcI1ohMNZFrtxwKP6h3IuUsY.roa (hash: Q0m3SYkmGKp057as4cDbrXW6Plo1d3nxk1JPEsbDaPY=) 10: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (hash: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE=) 11: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (hash: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk=) 12: hjwqR_BvVV3igv-VRSRakB0C0gY.roa (hash: dGn15gWRk4S5nvTCswCYk4PnSEMzXrTWJmJ53SFUgxE=) 13: iyfIsG_zCzXslesxdnK347yeiF4.roa (hash: tDXmuusqCyRHX/DQh8nnAapHWqFHXmFSmh6Yr5JKuq0=) 14: lITdQxhmX_QJLHCdZAw823-rxIE.roa (hash: LD1BnadL45zxeXJQFcYTUwoYEdwQD3yyFtEI21xm/MU=) 15: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (hash: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s=) 16: wQvwuyTtVhloyL12ClFe1Tmx_YM.asa (hash: 7C5CFFl7eP926O+5F2qKTmqq4J0LTe8XElvBDea1xIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 04:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:bb:0d:d3:29:1c:f6:04:49:03:ac:23:d9:6e:58:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Jul 27 04:00:18 2026 GMT Not After : Jul 28 04:00:18 2026 GMT Subject: CN=49cae3294cc40e5f1ba4a3b51d55ddfdb8e11a46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e3:2b:7d:ad:16:b4:1a:f7:5a:ba:ac:1e:7c: 79:b0:1c:15:d3:4f:c3:c2:17:14:ac:ad:0f:45:ce: 34:1d:c5:79:12:6c:d7:18:57:2d:42:12:02:99:e8: ce:ad:2f:07:95:d6:7a:d4:06:01:9f:e7:e4:32:ff: a8:2c:19:e6:da:bf:6c:b0:79:ea:eb:6f:77:be:0d: 57:7d:3d:e3:f9:92:6b:98:41:d3:6e:41:02:e6:6c: c3:df:00:bd:cf:35:64:e4:7b:11:89:99:e9:7e:e1: 13:61:a4:f7:5d:3b:dd:04:b7:22:11:65:7b:91:b0: 26:e9:c7:64:dc:78:03:77:5d:22:79:c4:d9:09:7e: 84:85:fc:5d:ab:f1:c8:d6:a7:b8:a4:26:ad:3d:2a: d8:2a:60:ea:c4:a1:17:a0:15:cc:15:cb:6f:34:d4: e7:bc:54:9d:ec:98:5b:55:12:66:3f:3c:50:7c:6b: a3:87:cd:b1:bc:78:01:5d:9f:07:3c:65:2e:8e:52: cd:33:34:d8:a1:b0:0f:03:e7:87:9d:4a:a1:14:73: 58:05:ed:3a:fd:c8:69:1f:72:36:58:02:db:84:02: 95:c6:11:e7:e4:46:9a:3a:96:9a:1d:59:32:35:4e: be:a1:dd:b4:ae:3a:80:b0:89:67:12:b4:50:1a:69: 40:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:CA:E3:29:4C:C4:0E:5F:1B:A4:A3:B5:1D:55:DD:FD:B8:E1:1A:46 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:13:f8:c0:ea:58:6a:0e:18:af:8c:80:2b:16:2b:8f:0d:3d: 0e:eb:a6:21:a9:ef:ed:b0:24:06:ae:72:28:81:c4:00:d2:5b: 55:34:a3:7f:dd:b0:65:a1:92:9e:4d:0c:93:93:2f:f1:39:72: f3:cc:33:9a:eb:fb:94:86:45:3e:d8:d5:41:0a:f1:2e:80:bb: 58:a2:94:94:5b:2f:4f:aa:dc:4f:b4:51:84:7a:66:2d:4d:79: 1d:43:10:8b:ba:39:04:5c:62:55:3c:af:4c:c7:a7:47:d0:93: d7:64:c7:f1:30:22:57:4b:3e:d3:37:3c:02:2a:53:59:45:75: 50:23:9b:b0:b8:e1:48:f5:7a:1f:89:f7:fe:cf:2b:b9:e8:0e: e7:94:fc:3b:e4:2f:21:80:e8:3f:12:f7:2e:a0:b6:4b:84:ab: a3:61:47:8c:5f:96:e6:56:d1:7d:1a:41:69:c0:40:8e:71:28: 52:5d:14:7c:32:c7:f8:d2:ba:41:62:2c:a0:08:21:16:7b:92: 73:4a:5d:52:82:e2:13:e2:08:67:d5:59:47:66:b7:f4:9b:a3: 39:5c:8c:33:d0:dc:30:c5:2c:c7:84:56:9b:4c:13:e5:55:81: 11:83:a5:c6:89:79:ac:d0:db:17:a2:81:1d:aa:ef:cb:66:37: 3a:88:4a:75 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+huw3TKRz2BEkDrCPZbljLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwNzI3MDQwMDE4WhcNMjYwNzI4MDQwMDE4WjAzMTEwLwYDVQQD Eyg0OWNhZTMyOTRjYzQwZTVmMWJhNGEzYjUxZDU1ZGRmZGI4ZTExYTQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuuMrfa0WtBr3WrqsHnx5sBwV00/D whcUrK0PRc40HcV5EmzXGFctQhICmejOrS8HldZ61AYBn+fkMv+oLBnm2r9ssHnq 6293vg1XfT3j+ZJrmEHTbkEC5mzD3wC9zzVk5HsRiZnpfuETYaT3XTvdBLciEWV7 kbAm6cdk3HgDd10iecTZCX6Ehfxdq/HI1qe4pCatPSrYKmDqxKEXoBXMFctvNNTn vFSd7JhbVRJmPzxQfGujh82xvHgBXZ8HPGUujlLNMzTYobAPA+eHnUqhFHNYBe06 /chpH3I2WALbhAKVxhHn5EaaOpaaHVkyNU6+od20rjqAsIlnErRQGmlA2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEnK4ylMxA5fG6SjtR1V3f244RpGMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBP4wOpY ag4Yr4yAKxYrjw09DuumIanv7bAkBq5yKIHEANJbVTSjf92wZaGSnk0Mk5Mv8Tly 88wzmuv7lIZFPtjVQQrxLoC7WKKUlFsvT6rcT7RRhHpmLU15HUMQi7o5BFxiVTyv TMenR9CT12TH8TAiV0s+0zc8AipTWUV1UCObsLjhSPV6H4n3/s8ruegO55T8O+Qv IYDoPxL3LqC2S4Sro2FHjF+W5lbRfRpBacBAjnEoUl0UfDLH+NK6QWIsoAghFnuS c0pdUoLiE+IIZ9VZR2a39JujOVyMM9DcMMUsx4RWm0wT5VWBEYOlxol5rNDbF6KB Harvy2Y3OohKdQ== -----END CERTIFICATE-----Generated at Mon Jul 27 10:38:51 2026 by rpki-client