$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft File: ag4WzCqLkctIP0UegTtniul1grA.mft (raw, json) Hash identifier: Xl8GRhiFwzs36Bi4NqqzIaCk0Be0zOGghKtcD5jbHcY= Subject key identifier: AA:04:37:7B:BA:58:E5:1B:B7:1A:C8:65:7A:64:B9:DC:2B:00:2D:ED Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0 Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0 Certificate serial: 01A021316D365DBD4DB1AA814492535235BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft Manifest number: 8B Signing time: Thu 20 Aug 2026 22:01:22 +0000 Manifest this update: Thu 20 Aug 2026 22:01:22 +0000 Manifest next update: Fri 21 Aug 2026 22:01:22 +0000 Files and hashes: 1: 1-L9_xn5XwFHg99yogQ5P-JRQJno.roa (hash: saknG4EeimO2uKEX00r/busJjcraxx17Sa52KQHrOss=) 2: 1IO7D2ixQ-lvyHRtaxSutQuJrdk.roa (hash: w8VZiMHzBrWoJWSQi1dFm3cARenc5HNcqj8t4FMaUvc=) 3: 1PQllvXnPg1Cq46Iy4Rpg_2dzeE.roa (hash: KYF3xosyzq4vGix6BtHELmM/f2AEyPg2NuKi997fdec=) 4: 82--YWEKcMvIJETSOTv0fBdL6CM.roa (hash: txaVMOY8ninC/G6RFe/UwHhOENX0T290iWUIMYkdnmk=) 5: MHRGHVH_9ryY5YWmrqyOo25Yw-w.roa (hash: p0ZTTiOVdQ6jigzVZJJBkL+3fqMDD1xA2wHogGA9TUQ=) 6: P9YT4wpleippbcH7ySs9yJhewoc.roa (hash: cSxqBMShQEu5xdePejl0TQuouUbtuQWYRC9Of5i3nxw=) 7: PehZN3iXx53NNUUfpGjKtEgbtG0.roa (hash: ZF5FCAasCGxv9d43oiaKd2A5u46kRGpM48JeEUZzsOY=) 8: QcJ1_3me8VKJVSwljpvJ4RRo4bI.roa (hash: oLE/UmjEKWdlluphq/E4JLOUzru3Xt/qp1y2xi32ZuM=) 9: RoQDt4PjdwW0SoiiPvyTsxSfuY8.roa (hash: 1mJogWLp+9JQPWumTmYBS2/tf+nhYhyUXRjcoUUswLw=) 10: RvNLAe_RSP56uzDHYQxY7j2RYDA.roa (hash: 138Cifhmc2WWQk/qLf2plQLxN1qV8R840l4XB+Ds6Qg=) 11: SOdgrNHWpRExOJRc-f9cfWJ4cms.roa (hash: k5GQQCFGnAJdQAMjkz3mMLNhKN0O4TfU790kcOAiuaM=) 12: UqImUVHBq3p8NTSpUZrZaZqeIO0.roa (hash: b0cbtwxFDLQWZmYSn/tfFyO/bdt5kbBtbbVLEmIteZY=) 13: V4QNov5aUVl0kjPoDbGXWUTFf3c.roa (hash: RWwYnwshC1K5yWsQ6bl0FWPq+jSiHD0KLQ+6u/grLQo=) 14: ZXMBfEzRQgZ6XQqYEpUztP_oHuk.roa (hash: CES/AfhEQn2U94y88HLeLxHi0QZ8IQSspRKZIOPxVHU=) 15: ag4WzCqLkctIP0UegTtniul1grA.crl (hash: DZudaAIp43CMu63azhuQYWL1V4eFnsurlg277kTnV1w=) 16: hr6KKW3gkx0Rqd2xi4SSwYOvYAo.roa (hash: AW1B3GU+CHp2dLnlTMaUnh9So+6olkFuGvAvVFpBybo=) 17: nYlDDvhL9ZKod4FxRoAJN8wFPy8.roa (hash: kUW/q0E+5ap6XJqy3o0pzyvq0pN9N7639FqeoHqln7w=) 18: vTCE3_WjlZWEHiUifn-Z3rZn-3g.roa (hash: k0eIUOFWrIqLB7Ha+lzX5IKld1csxUVRrPdDqLcQHmQ=) 19: yde-3lSgZiRr0HU1KS1x7njAoeA.roa (hash: eSGD7O7kwdqNPAeSE2PmhfFGu0OTxONTMV1cXFqWo/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Aug 2026 20:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:21:31:6d:36:5d:bd:4d:b1:aa:81:44:92:53:52:35:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0 Validity Not Before: Aug 20 22:01:22 2026 GMT Not After : Aug 21 22:01:22 2026 GMT Subject: CN=aa04377bba58e51bb71ac8657a64b9dc2b002ded Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:eb:16:c8:55:b1:1b:f8:60:15:67:4e:1c:ec: a5:cd:76:4e:d1:4f:98:f5:67:17:34:44:78:9e:5e: fa:6f:d0:d7:16:e7:1f:b5:1d:e4:fb:69:c8:16:08: d4:09:8a:c2:7a:d1:2e:05:9e:d4:b2:d9:a1:6c:71: 76:22:d5:5f:bf:e4:cf:76:b9:29:87:4f:53:ad:f1: 06:ca:71:df:46:03:75:e4:fe:9d:2b:26:9e:7c:d5: 70:2c:77:7a:32:c1:cb:8f:04:97:cd:a1:5c:24:fe: a3:e6:2a:f2:a1:85:43:bc:dc:2e:2f:93:0d:5e:34: 60:70:90:18:65:1c:53:67:1c:9c:7e:41:ad:ca:98: 72:1e:b3:4f:75:fd:ab:c2:29:60:c6:10:6a:1b:de: f7:7e:9f:36:d7:4e:35:bc:9e:34:8a:2f:79:b7:52: 1d:90:64:22:19:55:1b:18:94:40:61:b5:80:0f:62: 90:c6:58:e8:d2:34:03:1d:01:c1:b9:8d:1c:2d:31: 2c:d6:c0:3c:43:60:00:94:59:34:fe:24:c0:1d:94: ed:a6:a2:e8:08:4a:79:85:a8:1f:c3:1d:a7:22:b4: 0c:90:74:2b:a9:a9:60:f9:ef:cb:e7:c4:2e:e1:73: ab:23:2b:c3:65:d6:f0:a6:c1:61:47:38:23:1a:36: 17:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:04:37:7B:BA:58:E5:1B:B7:1A:C8:65:7A:64:B9:DC:2B:00:2D:ED X509v3 Authority Key Identifier: keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:55:21:09:a2:be:72:37:0a:a1:76:cf:25:c1:a6:b2:20:6f: 02:8e:a1:82:c5:81:54:df:db:e0:6f:2d:7a:c2:76:91:97:98: 56:22:c3:70:a3:1b:4b:39:d6:09:ec:c2:6b:3d:61:eb:3a:dc: 4d:4e:5a:6c:11:6e:b7:fe:67:59:9e:13:c6:86:2b:ab:e0:97: da:61:c2:11:7e:d9:ec:9b:ed:47:fc:5d:ce:12:92:69:72:75: cc:fe:85:8e:c8:53:06:11:4d:af:59:29:e0:31:db:5a:34:71: 5d:ea:76:50:b4:76:09:01:21:81:dc:a7:5f:b6:06:eb:eb:11: 86:b2:ba:fb:15:db:2f:58:c4:df:39:0f:df:21:2e:bf:ae:f6: e5:dc:6b:a5:54:71:98:f6:5c:b8:3a:47:35:c2:d9:41:7c:b8: ae:a1:84:de:5c:ef:c2:61:5a:ee:f6:35:3a:19:52:3a:bb:26: 36:71:fb:3d:e1:e2:99:cd:82:aa:87:4a:76:01:85:7e:6b:9f: a7:2c:4d:c1:f4:26:5a:a9:6c:c4:9c:08:f7:81:8f:bb:46:11: 97:9a:a5:a2:f8:d3:53:ea:45:17:87:d7:75:01:ed:91:d9:8e: 18:28:16:ac:de:14:31:e5:a9:3f:6a:b2:2d:ae:cf:e2:8f:3c: 4d:5f:ff:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAhMW02Xb1NsaqBRJJTUjW7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMGUxNmNjMmE4YjkxY2I0ODNmNDUxZTgxM2I2NzhhZTk3 NTgyYjAwHhcNMjYwODIwMjIwMTIyWhcNMjYwODIxMjIwMTIyWjAzMTEwLwYDVQQD EyhhYTA0Mzc3YmJhNThlNTFiYjcxYWM4NjU3YTY0YjlkYzJiMDAyZGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+sWyFWxG/hgFWdOHOylzXZO0U+Y 9WcXNER4nl76b9DXFucftR3k+2nIFgjUCYrCetEuBZ7UstmhbHF2ItVfv+TPdrkp h09TrfEGynHfRgN15P6dKyaefNVwLHd6MsHLjwSXzaFcJP6j5iryoYVDvNwuL5MN XjRgcJAYZRxTZxycfkGtyphyHrNPdf2rwilgxhBqG973fp821041vJ40ii95t1Id kGQiGVUbGJRAYbWAD2KQxljo0jQDHQHBuY0cLTEs1sA8Q2AAlFk0/iTAHZTtpqLo CEp5hagfwx2nIrQMkHQrqalg+e/L58Qu4XOrIyvDZdbwpsFhRzgjGjYXLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKoEN3u6WOUbtxrIZXpkudwrAC3tMB8GA1UdIwQY MBaAFGoOFswqi5HLSD9FHoE7Z4rpdYKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaVUhCaK+ cjcKoXbPJcGmsiBvAo6hgsWBVN/b4G8tesJ2kZeYViLDcKMbSznWCezCaz1h6zrc TU5abBFut/5nWZ4TxoYrq+CX2mHCEX7Z7JvtR/xdzhKSaXJ1zP6FjshTBhFNr1kp 4DHbWjRxXep2ULR2CQEhgdynX7YG6+sRhrK6+xXbL1jE3zkP3yEuv6725dxrpVRx mPZcuDpHNcLZQXy4rqGE3lzvwmFa7vY1OhlSOrsmNnH7PeHimc2CqodKdgGFfmuf pyxNwfQmWqlsxJwI94GPu0YRl5qlovjTU+pFF4fXdQHtkdmOGCgWrN4UMeWpP2qy La7P4o88TV//YA== -----END CERTIFICATE-----Generated at Fri Aug 21 04:28:41 2026 by rpki-client