$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json) Hash identifier: Sbdj2qRdiHWIk507vRJyk04Lz1dONSKiR9qF84XgXb0= Subject key identifier: 87:B0:A8:10:0B:4C:5A:40:7E:49:52:3C:CA:9D:E8:53:BA:D6:DA:78 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 019FA606642596EA7AFC179AF385EFBAA8AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft Manifest number: 19DE Signing time: Tue 28 Jul 2026 00:01:04 +0000 Manifest this update: Tue 28 Jul 2026 00:01:04 +0000 Manifest next update: Wed 29 Jul 2026 00:01:04 +0000 Files and hashes: 1: 0cWx-DBEWXofQGq4uONjR9-bH4Y.roa (hash: pTkOoFQAT359monWmVl8M1BT8bJvgYKuEr63L6+DXH0=) 2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: fXwa/sJjlsGVuppeeIDQJQReHz+nW8B+VKogVKib/vQ=) 3: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (hash: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0=) 4: Bcd1BhwhrloaAtNtyP-2iXTXB5A.roa (hash: dwpLC5kz/iKWj1XEBoyZJZ2yN/0XmLy1ykd/NJpK0sU=) 5: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (hash: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE=) 6: MP5IdtDl7YEwuRNByyv8kDyAVco.roa (hash: vqDoHpH/1+pER1chx+gV6UvPLCxswhMzI5LmhtQHsu4=) 7: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (hash: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM=) 8: UNIm3YXiMDOMkRxhMMlo6vVHArk.roa (hash: Tj2pYqF/A8kH66w2NIt64SQxibERr8EqlG3Fz5Bjgag=) 9: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (hash: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0=) 10: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (hash: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA=) 11: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (hash: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w=) 12: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (hash: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ=) 13: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (hash: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=) 14: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (hash: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME=) 15: q7ctECBBEGOXl7uVauozGHraScs.roa (hash: gH9pmibDk4Ofnm2E38XD3fGrNK+1ocC6xSl5pld1ojw=) 16: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (hash: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ=) 17: vhCKx6YE6UZfYQ_y2if0T0sJx9A.roa (hash: 4GxEPZps/hQabeBQl+bTu8j92zD3sd9eABLT3Mr/M3g=) 18: x0r6XLUbiGOM5wv_gPZskGbu2oc.roa (hash: cdp8ZKRLyyEX1Hh8O5VsarJhdWV3a3wqBRxkXALsMf0=) 19: z1vIHaPgOEf1CFFXxVhQ7UIS68w.roa (hash: rFdz4/+higPiFTrvJsOTs2dDOqXP1ja44+BB/HAKISI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 21:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a6:06:64:25:96:ea:7a:fc:17:9a:f3:85:ef:ba:a8:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Jul 28 00:01:04 2026 GMT Not After : Jul 29 00:01:04 2026 GMT Subject: CN=87b0a8100b4c5a407e49523cca9de853bad6da78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3e:b5:29:aa:4a:02:ea:b0:e2:32:d8:33:e7: 64:13:26:d8:2b:d3:07:eb:18:27:69:a4:f6:e3:88: 80:00:a6:94:0f:f7:7f:33:0c:3c:f1:ae:d9:44:f3: 24:ce:2c:fe:f3:98:9d:e3:3c:94:e5:e9:97:60:84: 9b:53:11:3c:c4:34:68:24:b5:0b:2a:1e:7d:9c:b2: 49:6b:bb:4e:b5:aa:d4:a2:7f:ab:42:ca:43:f6:41: 8c:53:47:71:72:0e:be:00:01:d9:54:b6:61:43:3d: b2:0a:8f:2e:9d:91:7a:f0:5d:85:e1:54:43:f6:7c: 75:fe:0a:50:f4:36:49:ac:d5:1e:ac:fc:4e:a9:cf: de:49:6d:1d:59:69:f7:81:02:3c:fc:3d:a2:f0:ed: c8:c0:84:95:38:b8:f8:4b:7f:69:45:e6:93:8d:cf: 14:69:c4:25:bb:64:77:f5:d1:d0:15:df:20:e4:85: 4f:5d:9c:ed:0a:d3:dd:6d:54:07:87:e2:21:37:b8: 9a:09:c2:f9:c5:46:95:fd:89:d5:2c:93:f3:f4:5b: c2:f7:50:b3:8a:a7:49:3a:b3:0e:5e:da:86:1c:50: 92:1b:46:a4:17:50:60:97:37:28:e9:36:a3:70:3e: c6:bf:8d:b3:ca:63:93:0f:23:44:1a:07:9f:98:d2: ff:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B0:A8:10:0B:4C:5A:40:7E:49:52:3C:CA:9D:E8:53:BA:D6:DA:78 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:80:11:71:45:96:a0:13:17:dd:fd:e9:69:96:47:65:89:38: c6:f8:3a:60:98:81:7b:07:54:b8:3b:fe:06:2f:91:1e:86:5a: f0:7a:74:b2:b3:a0:24:0c:81:05:61:fc:03:5d:49:04:99:b7: ac:41:48:2a:a0:1d:25:78:55:d3:38:89:90:92:9e:3b:56:26: 02:42:20:46:72:b1:07:0a:2f:8e:dd:81:4e:d0:cf:e3:50:38: 3d:ec:9f:84:e6:ee:57:a6:0b:4d:5f:4d:79:38:33:6f:16:b9: 9f:ef:2d:7e:a8:b5:c3:d4:da:22:ac:07:38:38:79:f1:0d:77: c3:d8:79:1c:74:f3:06:fa:a6:80:d5:ed:28:32:3e:c8:31:95: 8c:bd:47:d5:db:b8:91:49:41:d7:88:1b:e9:2f:b2:92:65:c6: 60:e0:48:c0:bc:ef:c4:d8:7f:ea:c9:cf:5c:2b:47:f2:8a:3c: 46:86:dd:35:72:ad:c8:99:a1:18:7a:93:94:af:c1:e2:21:ae: 13:93:97:3b:54:b7:f8:b4:e0:3b:4e:68:9b:c6:61:45:11:c8: b8:22:23:cb:9e:4d:ac:88:cd:34:52:fe:65:f1:69:25:cc:3f: ff:6b:22:81:e8:24:a1:17:5b:12:66:3f:e1:08:a8:3e:a3:b1: dc:b3:b6:17 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ+mBmQllup6/Bea84XvuqitMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjYwNzI4MDAwMTA0WhcNMjYwNzI5MDAwMTA0WjAzMTEwLwYDVQQD Eyg4N2IwYTgxMDBiNGM1YTQwN2U0OTUyM2NjYTlkZTg1M2JhZDZkYTc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6D61KapKAuqw4jLYM+dkEybYK9MH 6xgnaaT244iAAKaUD/d/Mww88a7ZRPMkziz+85id4zyU5emXYISbUxE8xDRoJLUL Kh59nLJJa7tOtarUon+rQspD9kGMU0dxcg6+AAHZVLZhQz2yCo8unZF68F2F4VRD 9nx1/gpQ9DZJrNUerPxOqc/eSW0dWWn3gQI8/D2i8O3IwISVOLj4S39pReaTjc8U acQlu2R39dHQFd8g5IVPXZztCtPdbVQHh+IhN7iaCcL5xUaV/YnVLJPz9FvC91Cz iqdJOrMOXtqGHFCSG0akF1Bglzco6TajcD7Gv42zymOTDyNEGgefmNL/qwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFIewqBALTFpAfklSPMqd6FO61tp4MB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3 YWEvMS8xLTVoeVJHRWJVakJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALYAR cUWWoBMX3f3paZZHZYk4xvg6YJiBewdUuDv+Bi+RHoZa8Hp0srOgJAyBBWH8A11J BJm3rEFIKqAdJXhV0ziJkJKeO1YmAkIgRnKxBwovjt2BTtDP41A4PeyfhObuV6YL TV9NeTgzbxa5n+8tfqi1w9TaIqwHODh58Q13w9h5HHTzBvqmgNXtKDI+yDGVjL1H 1du4kUlB14gb6S+ykmXGYOBIwLzvxNh/6snPXCtH8oo8RobdNXKtyJmhGHqTlK/B 4iGuE5OXO1S3+LTgO05om8ZhRRHIuCIjy55NrIjNNFL+ZfFpJcw//2sigegkoRdb EmY/4QioPqOx3LO2Fw== -----END CERTIFICATE-----Generated at Tue Jul 28 04:42:00 2026 by rpki-client