$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft File: J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft (raw, json) Hash identifier: +6r0PYaiy/VzVQkYUsXsm0HwEu32oRP60yIthZ2QbpQ= Subject key identifier: 79:62:87:1C:C5:7F:48:34:19:67:61:9D:2B:D5:A8:92:D8:A4:1B:96 Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Certificate serial: 019FA184118CE4BAA96FBEBFD90188B7CBAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft Manifest number: 1AF4 Signing time: Mon 27 Jul 2026 03:00:14 +0000 Manifest this update: Mon 27 Jul 2026 03:00:14 +0000 Manifest next update: Tue 28 Jul 2026 03:00:14 +0000 Files and hashes: 1: 0EAd0NIVQFpYF8Sfry0-sg27DIU.roa (hash: AM+vkkVy+PRlTYsSrmQEunL3834jj/6I3kNZmcTiVSQ=) 2: 1-3OySvVtg6j55zm7RvKKKD2txc4.roa (hash: NIlV04qTE8fz3k+qGrSn4IT9heA3wwx6JbYylqq6SPI=) 3: 1AlxxMUZolJLdZHPVyV2UoSe358.roa (hash: 9ehijIeVwQp7RL+YUW6sio1uU2Yn7VaTLU6Oe4mOvfE=) 4: 3WBdory9XqQbfC4TyXJx63N3UFw.roa (hash: nahNFLPGEU3gQRtFtbIkO4bhI0n9GpvfWrrSsEPAAWY=) 5: D7n5z-X4QhT0cqePH5_ymEPmodc.roa (hash: o8sKCnE2zp0a9Xj0y7an5x9MEDGoNlR5ZqyI5pidfw0=) 6: EugaGmrAg66bJHbDR050z2x8ppM.roa (hash: l112VfNQG03RqXUG4DN5iFKyE8XjBnUNtDrz/Dolok0=) 7: F5NbQDwuDql8YpH3L-ZJg9ShqS0.roa (hash: mjnepbUc5lCxSNEcHUqBuIxj9G2yoTLDmwdW50NPFrU=) 8: FFLikyFmH-Abpg8kwz_BXxHfNCU.roa (hash: cMgG0SrLZjSK1IoPjyUitd4xe4z4i4cE22ZF/9OmiC0=) 9: H3GT4590I-wlLcRehIEn90WLp0w.roa (hash: 9Fh6QD3KXc86AyaAkfv2S/ORqPuK9LKKtkaebRdEzQ0=) 10: HzNF72M-JUjvY2auMIhPMaZbcu4.roa (hash: jIE8nOAj+oK6NNaSyEYskPrjUE0ya5pmThUjASHeDg0=) 11: J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl (hash: rl20bnmEDNYArdi/K+0gOgMyWobjhvxqBz26gGU0Xqs=) 12: Jt5kJ6zglKuHSt2O9KyF4xbzBHg.roa (hash: f53J/UsPl50nlO0PDJi0nDqUWowY7qlvBpfHPm2wNVo=) 13: KAwmeFKkJNecLC_dhlCgmutRBdg.roa (hash: 4iHI08OHJ2NSksCBP3bSg9muJPVbkbXbMCBVzC/LIqU=) 14: LPhThbsTW9RteYTnU5fllHszvgw.roa (hash: Lr7N0csN9qpepByS3CiyJwbJBLIH11PFa4xdBV/iINk=) 15: MjQcicBRkl2ilK5k2Pj8MfAGk7c.roa (hash: owxcLAA7ehhKXpfItnOOd54/kefAYWqbpCPsXKgpLSI=) 16: Q1vTPTsAyiBhd4B6ICPubVT5RAA.roa (hash: QYiqA7g6apA/hS3xz4OT+/HBNbSOo0h0b476zf/bHvU=) 17: R91CcPNkUtu6XE-ZUwryAs6c8dA.roa (hash: lK0bjp1+iJCnWnbzkCHfNgNGHNMPkAnpfr0Ad8hVlWw=) 18: Tc5xm-6wNZTyj1dJnc4HQrGeS-o.roa (hash: vIzC9sIZH6YUu+Ppt3sLWqdbfBwlSwyCWej1tNmuxcU=) 19: U-qi4IuWNyY_2ScOGuO5wDkIP5g.roa (hash: vLUhnxRWvdCmmMvb1mJXW0MVOezf9HqsIWcCip83cUs=) 20: U8RgryHUq2JAAsgHSpUUEEa9flU.roa (hash: e5+nqmhm/ol/qrImk3F60PKlgocSXFLw4tFumPg6bGE=) 21: XkCpQ4xWLE9dlV83IDE1saD3b2k.roa (hash: bDYpXnq431ghla3lAMtwBrRxAdHF9JaPOSyXTvPRRR4=) 22: aHs-rF7InSlshvWZMPlqLeGf8BQ.roa (hash: cnpHyXi6Xup8rUbntENTMIwHeI0OtwJDt5zJW7zxTYM=) 23: dorf3vXiF8po1xw2yVEc19fH3qg.roa (hash: aKIMUfFNrtICIbFoumkp4rd3G4RSV0nPoRkpF++bDVw=) 24: dt_sesUw1jCIshOtSv8VduDtfqM.roa (hash: +LfBzD6Ek6GfCiZXW1OnTJegtkF9IIfufLlAfANB8ls=) 25: eQteGe3dUsvEvumdMFEyVqvLcUI.roa (hash: i/PVqNV8H6klhROm0PX4mdNPbEa+iKND/8anAmOUj6s=) 26: k70Hscj98f7iu-7lS91WJLMOGOg.roa (hash: qZAml61fc9EJPJ+5idHBkUiuoGzsk6xQwJ2qpPlbpFU=) 27: m7gY7tgEZEhnmCq-HkAcQ1-8HbE.roa (hash: xODHFAEs2OHYrHZKfEYMuN4r2rdZ9JfZ6XFxFdIMEYo=) 28: nJIWhXF5E_3OsKvezQcMuvFTje4.roa (hash: ysclIta5Nb4QhQEFGOS+ZWWgIylyZJMATCIjNw5UY0s=) 29: oDrrwj_J2YbGDvH96R1q32wibOg.roa (hash: enzCHScTPelD74ea898lsenkjGHLvXoRBcBQQihmhlo=) 30: qMkLAoNAUe9q8gfWdZ7a_wzUGvg.roa (hash: qos4wdFa7iSz40bF0wQ8pxahdxfqI9hUbUKo1P2JNYQ=) 31: sWfqkNHPcPkhA5a8aSQtoMjSk1g.roa (hash: g17baIMwzbfRDSr/hcX2JdloXizpSVyiXSiXvc7mu2Y=) 32: uhwMHBy0T1Zz_2CZbx4pD5TsJB4.roa (hash: QGGnLHX611kdCZRgFJS0ABfsrwzGsKy+hT++rsHa4HM=) 33: vkLy7286dxrhKN8_vNXJRiO43tI.roa (hash: zEYD3rV5MA0KRfFUZNuyB8fBP2X5IdnwsvbIbCutsO4=) 34: zeDR4o_SfBOszT4AEUW1U8duE-E.roa (hash: DV7X0NS//RjfJsh5Wd8yUdRAZCxK0Mc4AEjjwna5jWA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 03:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:84:11:8c:e4:ba:a9:6f:be:bf:d9:01:88:b7:cb:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5 Validity Not Before: Jul 27 03:00:14 2026 GMT Not After : Jul 28 03:00:14 2026 GMT Subject: CN=7962871cc57f48341967619d2bd5a892d8a41b96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:4c:d3:e3:5d:55:0d:fc:e3:6a:bc:aa:6c:37: cd:6e:c7:f7:6c:b1:88:59:5b:67:06:2f:90:23:2a: c8:d8:b3:42:41:a6:4c:fc:48:7b:e3:1c:0f:09:a4: 65:02:0b:5e:d7:dd:df:e1:51:9a:39:03:98:1b:3e: 61:e8:19:9e:42:98:08:c6:0c:16:1d:cc:7d:32:8a: f9:40:33:1c:47:f4:cb:28:34:fd:6c:44:54:3e:98: a3:f9:53:6f:aa:5e:ae:ec:d5:bc:f4:c7:67:b3:be: 41:9c:d9:18:ab:55:8c:55:56:2f:b4:15:b2:53:66: 36:54:59:73:99:3a:19:d0:c3:68:0c:3b:00:3f:a3: dc:09:dc:bf:24:44:15:d5:75:92:05:4f:05:07:25: 11:e9:e6:b7:74:34:17:4a:e9:69:a5:af:42:60:2b: c7:ce:b1:e0:97:82:86:ea:cf:ed:e6:9e:43:f6:eb: c4:75:17:75:3c:3d:ba:2e:e3:bb:66:b2:c1:ae:70: b2:6b:0e:62:33:79:56:ff:fb:9d:9d:4d:29:04:6b: b7:5f:55:32:cc:b9:2e:79:a4:f2:48:d5:d4:ab:d4: c5:59:60:52:10:13:e0:f7:97:d1:39:ea:cd:d9:84: 89:ed:4c:bd:61:01:90:ed:75:31:59:bc:bb:cf:ba: 40:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:62:87:1C:C5:7F:48:34:19:67:61:9D:2B:D5:A8:92:D8:A4:1B:96 X509v3 Authority Key Identifier: keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:eb:fb:50:4e:bf:d6:ee:f2:8d:fa:3e:dd:c9:ef:aa:90:d3: 9f:bd:7e:b7:4c:2b:d8:73:f6:f8:53:a8:2f:93:31:57:8d:2d: d8:0e:39:fc:03:b4:84:13:f5:c8:f6:1a:6e:50:c4:a5:c3:94: e1:8b:eb:f6:77:56:fc:c1:5b:61:8e:7f:1a:c5:1e:b1:51:e9: 97:dd:f1:eb:f1:ba:87:cd:a3:1f:73:3c:33:ae:eb:ff:ff:ea: 38:3a:a3:f9:70:1b:b7:fa:0d:d5:f3:05:05:6b:e3:bf:91:96: 48:20:cb:eb:7f:7b:f8:d2:ec:3c:fb:65:13:8b:4b:b2:4d:12: 5f:1f:e4:23:c7:e0:dc:74:d8:44:11:91:5f:cc:05:c6:a8:a0: df:a3:99:d1:7c:dc:c7:c8:b4:cb:a9:33:87:b5:89:1d:3f:6d: 79:9b:42:d0:1b:1f:bd:f5:43:59:2b:37:86:d1:b3:ed:8f:7a: 95:fa:7a:b7:f6:2d:58:86:51:ca:0c:29:6e:59:df:56:76:e0: 6a:f8:b9:4e:75:31:db:9b:f9:48:2d:93:72:50:0c:79:97:e1: 1e:81:78:ec:51:8f:b9:61:e8:19:52:64:75:07:45:f3:08:3e: af:9b:f8:4d:41:12:aa:a1:c9:69:f8:3e:8b:c3:87:18:a2:07: ce:e9:1e:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hhBGM5Lqpb76/2QGIt8usMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YTM5ZTQ3OTRjMzQ2MTJlN2YyMjU2OWIxYTZhODE3MTAy NjBhZTUwHhcNMjYwNzI3MDMwMDE0WhcNMjYwNzI4MDMwMDE0WjAzMTEwLwYDVQQD Eyg3OTYyODcxY2M1N2Y0ODM0MTk2NzYxOWQyYmQ1YTg5MmQ4YTQxYjk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtEzT411VDfzjaryqbDfNbsf3bLGI WVtnBi+QIyrI2LNCQaZM/Eh74xwPCaRlAgte193f4VGaOQOYGz5h6BmeQpgIxgwW Hcx9Mor5QDMcR/TLKDT9bERUPpij+VNvql6u7NW89Mdns75BnNkYq1WMVVYvtBWy U2Y2VFlzmToZ0MNoDDsAP6PcCdy/JEQV1XWSBU8FByUR6ea3dDQXSulppa9CYCvH zrHgl4KG6s/t5p5D9uvEdRd1PD26LuO7ZrLBrnCyaw5iM3lW//udnU0pBGu3X1Uy zLkueaTySNXUq9TFWWBSEBPg95fROerN2YSJ7Uy9YQGQ7XUxWby7z7pA7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlihxzFf0g0GWdhnSvVqJLYpBuWMB8GA1UdIwQY MBaAFCejnkeUw0YS5/IlabGmqBcQJgrlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMt Zjc0ZDk1MTg1NzZjLzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80MC8zOGZjMzMtMDZjMS00MDA2LTllMjMtZjc0ZDk1MTg1NzZj LzEvSjZPZVI1VERSaExuOGlWcHNhYW9GeEFtQ3VVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOOv7UE6/ 1u7yjfo+3cnvqpDTn71+t0wr2HP2+FOoL5MxV40t2A45/AO0hBP1yPYablDEpcOU 4Yvr9ndW/MFbYY5/GsUesVHpl93x6/G6h82jH3M8M67r///qODqj+XAbt/oN1fMF BWvjv5GWSCDL6397+NLsPPtlE4tLsk0SXx/kI8fg3HTYRBGRX8wFxqig36OZ0Xzc x8i0y6kzh7WJHT9teZtC0BsfvfVDWSs3htGz7Y96lfp6t/YtWIZRygwpblnfVnbg avi5TnUx25v5SC2TclAMeZfhHoF47FGPuWHoGVJkdQdF8wg+r5v4TUESqqHJafg+ i8OHGKIHzukeow== -----END CERTIFICATE-----Generated at Mon Jul 27 09:23:36 2026 by rpki-client