$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft File: 9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json) Hash identifier: 8WpuYSZB39IK+SiYSUQMOPbFmyxsvSm00otSx7bbbh0= Subject key identifier: 17:1F:F1:96:E9:61:7A:32:AD:D4:F9:5C:16:24:03:D0:D5:2C:A3:38 Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Certificate serial: 019FFCB701DEE419BF04CAD4EE7AF206248C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft Manifest number: 1022 Signing time: Thu 13 Aug 2026 20:01:19 +0000 Manifest this update: Thu 13 Aug 2026 20:01:19 +0000 Manifest next update: Fri 14 Aug 2026 20:01:19 +0000 Files and hashes: 1: 1-TEmL5jbsK3PrKD8j52WhCZ0qeI.roa (hash: VGXlZbSa6lTTDzWoioV4bwS7txIXqiiihar6C8uT+sc=) 2: 7C0V1hBB2j4Z0mWBIUgnztA_FKo.roa (hash: NHdUGwrw8MVcwcj4xNyKJAEIGlAjm+SSRTtlFS7q5aU=) 3: 7HQY9fTNwYAKnHQdVkUdWkP7cMo.roa (hash: 02qwEv7GDGKTAQsJKIO+MBvgNnjaQx6u58d0cZrljtQ=) 4: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: tvdr6nN/YO7JksDt3PUzFI+UDCd8n0+D6APZlXJNS7I=) 5: DvDmZHxr7NLVC2ShFbjqDWMVPSU.roa (hash: HGxEJ7LQfFiHhcT+DYcnCzFrTwYKp05D1m1E5DMnD6I=) 6: OUHOzLFqtWz2bbGyeYwSXrj00Uk.roa (hash: nlfqukJpNrtb/c5u87BSEisv1zmW8J3zLBOfs6U7Nrw=) 7: RZj6Q6dbNwuwz_b4LiYbYjt7s0Q.roa (hash: rZ5431yDGBLhE9MGa187xIN7yECgb8/EV3ZIyUsR8Xg=) 8: WSPBUC21vET1uaZZlnbFvCFRchE.roa (hash: 3N3I5TdJSWNVy1VYKwR1h9RK2xmp3aVZDnmQUt1fbBg=) 9: WzC3ng1LgvNoGeAWK-E4mAth79c.roa (hash: in7OVP806sec7BG3P2bRg0+XxW/GuztBYg8LKPCWtFc=) 10: b-KOOCgewsVhwidcvQfpRRWqU7I.roa (hash: X+AfcL5bK9mDooKI7JczwqJxSPkb+6057fPwNRB9rIo=) 11: sp7cckHOAVZ1urLLSuO5BmgV-dQ.roa (hash: YprGBhX6AZyr1/u6kF21WaMH+OCGQvlx5wwg1Z8Rfhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 15:03:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:fc:b7:01:de:e4:19:bf:04:ca:d4:ee:7a:f2:06:24:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Validity Not Before: Aug 13 20:01:19 2026 GMT Not After : Aug 14 20:01:19 2026 GMT Subject: CN=171ff196e9617a32add4f95c162403d0d52ca338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:2e:4f:6d:4d:57:76:bb:c9:fb:e5:3f:34:ef: b8:73:75:30:78:63:a2:fe:2b:a4:2f:45:60:1e:9f: 24:6f:d9:14:6f:42:5d:d8:eb:b4:84:0b:97:35:47: e3:ed:bb:fd:f2:e5:23:7a:36:01:a6:f8:e9:80:91: f1:9b:ce:a0:cb:af:4f:bf:28:19:df:5f:06:04:52: 77:0b:a4:98:61:8e:84:14:de:49:2d:76:6a:de:37: 7e:1f:9b:6f:fa:0c:f3:2b:e2:a3:89:77:f5:20:02: f4:fb:41:5d:ef:85:ca:3c:d5:51:58:94:7d:b5:84: 84:ea:80:08:33:02:f2:f6:92:02:58:67:33:13:ca: 04:20:0e:38:e3:fd:39:35:7c:84:ad:0f:a0:ed:92: ff:75:ec:23:b1:62:2a:bb:c7:15:4b:84:c0:58:5c: 7c:b5:53:ee:19:c5:39:d7:27:3e:f0:c3:8c:61:32: 6e:dd:b3:29:a5:ab:2f:6b:6b:fb:66:f0:ec:5c:74: e7:74:90:19:9e:4a:97:dd:bd:57:21:9e:d4:6f:ca: 08:43:fe:d2:3b:35:c8:59:24:34:1d:96:39:e7:b0: 42:da:9a:fb:4c:14:4f:2b:af:72:51:e8:ae:c5:2b: 2d:24:43:30:7a:59:10:a0:b4:84:ea:3d:c4:77:0c: a0:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1F:F1:96:E9:61:7A:32:AD:D4:F9:5C:16:24:03:D0:D5:2C:A3:38 X509v3 Authority Key Identifier: keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:1f:7b:ad:dd:24:1b:f2:c1:c9:c0:ff:d9:1c:a3:cb:37:dd: a3:06:e0:5b:73:e5:b4:51:bb:14:dc:c8:bd:63:76:be:3d:d6: 88:60:58:79:f6:25:ed:f0:09:11:da:cd:e9:f2:b5:f5:6e:68: ae:38:c4:6e:71:a4:0d:52:3d:8c:5d:d5:9e:b0:36:2a:d0:34: 0b:e0:16:ee:fd:bd:3b:9d:8d:09:f9:30:db:cb:52:84:71:ee: 1e:22:6c:10:c2:36:6e:2a:78:43:b5:72:d9:a5:ee:7f:6f:2c: 11:46:c7:f7:0b:a4:20:05:b4:d1:8d:67:bf:29:c8:90:d6:2d: c0:a6:1b:20:4e:17:1e:a0:ba:82:d8:28:7f:22:67:06:ff:3f: 85:46:71:20:d7:03:19:d4:a7:0f:f1:37:4c:80:5a:08:64:f4: f7:9d:17:c1:d2:cb:5d:fe:30:66:8d:13:53:90:b9:91:ac:63: a7:09:6a:95:38:32:b0:d0:23:3e:fe:7d:43:6f:76:4c:48:20: 51:9a:75:3a:a9:e3:95:f8:03:cd:61:d5:bb:84:e6:2b:19:bb: c7:5b:48:59:b3:45:8b:c9:9d:7a:ab:7c:55:ca:73:61:9f:cb: 71:f3:ee:98:52:ca:dc:04:39:a3:f2:5a:10:49:12:15:5f:f0: 6c:78:d9:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/8twHe5Bm/BMrU7nryBiSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1 ODg4MjcwHhcNMjYwODEzMjAwMTE5WhcNMjYwODE0MjAwMTE5WjAzMTEwLwYDVQQD EygxNzFmZjE5NmU5NjE3YTMyYWRkNGY5NWMxNjI0MDNkMGQ1MmNhMzM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAti5PbU1XdrvJ++U/NO+4c3UweGOi /iukL0VgHp8kb9kUb0Jd2Ou0hAuXNUfj7bv98uUjejYBpvjpgJHxm86gy69PvygZ 318GBFJ3C6SYYY6EFN5JLXZq3jd+H5tv+gzzK+KjiXf1IAL0+0Fd74XKPNVRWJR9 tYSE6oAIMwLy9pICWGczE8oEIA444/05NXyErQ+g7ZL/dewjsWIqu8cVS4TAWFx8 tVPuGcU51yc+8MOMYTJu3bMppasva2v7ZvDsXHTndJAZnkqX3b1XIZ7Ub8oIQ/7S OzXIWSQ0HZY557BC2pr7TBRPK69yUeiuxSstJEMwelkQoLSE6j3EdwygYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcf8ZbpYXoyrdT5XBYkA9DVLKM4MB8GA1UdIwQY MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct OGNmNDFjYWZkY2UyLzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARh97rd0k G/LBycD/2RyjyzfdowbgW3PltFG7FNzIvWN2vj3WiGBYefYl7fAJEdrN6fK19W5o rjjEbnGkDVI9jF3VnrA2KtA0C+AW7v29O52NCfkw28tShHHuHiJsEMI2bip4Q7Vy 2aXuf28sEUbH9wukIAW00Y1nvynIkNYtwKYbIE4XHqC6gtgofyJnBv8/hUZxINcD GdSnD/E3TIBaCGT0950XwdLLXf4wZo0TU5C5kaxjpwlqlTgysNAjPv59Q292TEgg UZp1OqnjlfgDzWHVu4TmKxm7x1tIWbNFi8mdeqt8VcpzYZ/LcfPumFLK3AQ5o/Ja EEkSFV/wbHjZ/A== -----END CERTIFICATE-----Generated at Fri Aug 14 00:18:05 2026 by rpki-client