$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft File: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft (raw, json) Hash identifier: 9Q0cDPYgoDR2DfQBz1IPXLih1dmxNi4jyCCCcnGHOR0= Subject key identifier: 99:E9:0F:1C:43:29:84:9D:D7:1B:32:0B:E4:59:61:AA:E2:F7:1B:36 Authority key identifier: F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E Certificate issuer: /CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Certificate serial: 019F84FA421AF98B91C7378CA93D05F86985 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft Manifest number: 19C7 Signing time: Tue 21 Jul 2026 14:00:21 +0000 Manifest this update: Tue 21 Jul 2026 14:00:21 +0000 Manifest next update: Wed 22 Jul 2026 14:00:21 +0000 Files and hashes: 1: 1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl (hash: tHrrsYzaQ41uHMYSDDyoZlnBW/ha3PnSF/ZjJEc02Gg=) 2: Ao4MbaZG9c-QguWfgi3_65omXS8.roa (hash: S3ppKNcefv9jQMNAYTBjG6T2ZcBIubvshiWmN6cEp/8=) 3: IaHDBU7cqXMsetfiX2V98tBbzQ0.roa (hash: aSIfbQJ1s+03WYJQC/BEFCyDvq1e4lEKVIPKT8xRj5U=) 4: cyPt3U8MJxx2O8Gu_nAjxme3veM.roa (hash: dV2szaez9MAXq7GDDnq9o/U1fwaDRDnU84jID4xsjVg=) 5: f6Ax4OW8pptafrcB2Q3m_1jzDBI.roa (hash: egPj0/WWhG1KzeeOZW9kIeKIxG162Clkej5fleUo7YA=) 6: k1kjtWhfi3liyX8iFQRZl2D24O8.roa (hash: FnHmLVNImgUYL2pZsEuxgg3wkTC9/TTxiO/Pam+ZNU0=) 7: kPF9QYImDQ8SjVCJLj3L6j0wQQI.roa (hash: waaiuuNITP+3U2hyTT1tilYciSOM0S3B84ifw1ZVvyc=) 8: pTwEVEq8lsnikbVPE7gddvIm5IY.asa (hash: LWjHycnNu+2zFdDZjCo9dzUAFT1k8vR2dW8r+7ivikA=) 9: p_2QswK0tfCmIfiQf4KGVocaP0k.roa (hash: yu/G9KWpPBYXD0gOpNQ+e9+3i6QBlbxRYQF7XZvUA6E=) 10: qZFCiUxell2FKSjDa_U0AngZipY.asa (hash: 9ILwTknvcVjTEi7mBGnm8X+aT4WlXd+eb3GpaxquWNg=) 11: xnIV9lSRlUBIwsXt0rhBAj2FpKc.roa (hash: cvHuJPxiNYfhnN5IvufGhGrZKzw6FzUojqlP7L5juw4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 Jul 2026 14:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:84:fa:42:1a:f9:8b:91:c7:37:8c:a9:3d:05:f8:69:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f8a966664ec96edbd12e8e82e940bfb9faec105e Validity Not Before: Jul 21 14:00:21 2026 GMT Not After : Jul 22 14:00:21 2026 GMT Subject: CN=99e90f1c4329849dd71b320be45961aae2f71b36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:9a:d4:00:24:e8:39:2a:f1:e2:67:a7:4b:e1: 7a:d0:84:4c:d8:12:7f:69:0e:5b:17:51:9c:50:4a: aa:42:2c:0d:a6:16:bd:2e:34:40:4e:65:0a:2a:75: 38:2e:f5:28:d5:25:3b:7c:5e:72:5a:29:5d:e2:86: a3:28:40:2f:ac:a1:a0:cd:76:fa:e4:54:03:3b:bc: b4:a1:03:73:3e:59:fe:a7:27:41:c2:12:1b:3b:75: 9d:b3:18:9c:39:cd:57:98:9d:81:9f:e6:5c:b0:9c: 18:dc:82:0d:d0:96:4b:9d:40:78:da:c8:76:ce:4b: 56:a7:3c:8a:a0:09:5e:09:f0:28:82:44:3b:21:18: 5a:87:e5:85:18:34:b3:2f:0d:93:4d:da:65:f9:ee: a7:52:4a:6f:fb:36:37:b0:f4:0b:f6:47:f9:57:46: 28:90:f6:5c:b5:01:cb:2c:6f:e5:af:fc:ce:52:92: 18:14:7f:54:f9:31:df:ed:04:2a:8e:bf:93:64:6c: 03:59:a1:6e:69:6b:8c:b2:bb:74:11:b2:cc:d2:f1: 92:b6:6d:0e:5d:28:05:2a:31:e2:b5:8d:43:92:8f: 7b:2c:29:f1:c0:8d:d1:28:99:45:df:9e:b9:fe:6a: 4b:3d:2e:f9:73:60:03:b0:40:11:bd:28:f1:a1:10: 67:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:E9:0F:1C:43:29:84:9D:D7:1B:32:0B:E4:59:61:AA:E2:F7:1B:36 X509v3 Authority Key Identifier: keyid:F8:A9:66:66:4E:C9:6E:DB:D1:2E:8E:82:E9:40:BF:B9:FA:EC:10:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/45/64ab99-49aa-4aae-8dd5-382355fc2ff1/1/1-KlmZk7JbtvRLo6C6UC_ufrsEF4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:dd:b2:03:38:2c:51:94:88:b9:e0:8c:d4:7c:65:ef:64:38: 7b:0d:d1:08:0c:07:ab:84:1a:e7:80:eb:ee:d8:21:73:ae:31: 68:e7:51:22:07:c4:68:bc:c4:09:3e:39:0c:6c:93:c6:95:67: a5:09:01:d0:cb:9f:7b:49:a2:6f:4a:70:01:48:dc:3c:9b:42: 5d:43:15:25:d8:42:9a:e2:d2:80:62:44:ee:d3:ab:d4:64:e1: a4:2a:4a:e1:19:50:82:65:00:ba:83:45:ee:95:e3:31:f2:82: 84:37:06:4e:e5:82:5e:3a:b7:7e:ef:26:d2:49:ee:53:33:7b: fb:28:de:27:95:34:4d:25:ce:62:6e:b6:f5:e8:4f:db:a5:2f: 44:65:a7:59:ec:06:34:6d:9e:87:be:ba:81:5d:20:b7:e9:99: e4:a1:8f:a8:48:8d:db:ad:a5:99:1f:cd:2f:2e:38:ee:58:a3: 5a:3a:57:1f:6a:74:88:01:bf:b4:69:02:61:b7:4d:41:14:6d: 86:e9:b7:7e:90:68:2f:5b:39:06:75:7f:96:3e:2f:72:ed:9c: 9e:f6:4b:f0:ae:25:c1:7e:36:f3:a4:53:96:a4:ea:8e:02:b7: e3:e5:a8:61:d6:f2:10:4a:86:e6:de:b4:4c:8e:c2:22:54:81: a0:d1:e2:ff -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAZ+E+kIa+YuRxzeMqT0F+GmFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4YTk2NjY2NGVjOTZlZGJkMTJlOGU4MmU5NDBiZmI5ZmFl YzEwNWUwHhcNMjYwNzIxMTQwMDIxWhcNMjYwNzIyMTQwMDIxWjAzMTEwLwYDVQQD Eyg5OWU5MGYxYzQzMjk4NDlkZDcxYjMyMGJlNDU5NjFhYWUyZjcxYjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoprUACToOSrx4menS+F60IRM2BJ/ aQ5bF1GcUEqqQiwNpha9LjRATmUKKnU4LvUo1SU7fF5yWild4oajKEAvrKGgzXb6 5FQDO7y0oQNzPln+pydBwhIbO3WdsxicOc1XmJ2Bn+ZcsJwY3IIN0JZLnUB42sh2 zktWpzyKoAleCfAogkQ7IRhah+WFGDSzLw2TTdpl+e6nUkpv+zY3sPQL9kf5V0Yo kPZctQHLLG/lr/zOUpIYFH9U+THf7QQqjr+TZGwDWaFuaWuMsrt0EbLM0vGStm0O XSgFKjHitY1Dko97LCnxwI3RKJlF3565/mpLPS75c2ADsEARvSjxoRBn3QIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFJnpDxxDKYSd1xsyC+RZYari9xs2MB8GA1UdIwQY MBaAFPipZmZOyW7b0S6OgulAv7n67BBeMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1LbG1aazdKYnR2UkxvNkM2VUNfdWZyc0VGNC5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDUvNjRhYjk5LTQ5YWEtNGFhZS04ZGQ1 LTM4MjM1NWZjMmZmMS8xLzEtS2xtWms3SmJ0dlJMbzZDNlVDX3VmcnNFRjQubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ1LzY0YWI5OS00OWFhLTRhYWUtOGRkNS0zODIzNTVmYzJm ZjEvMS8xLUtsbVprN0pidHZSTG82QzZVQ191ZnJzRUY0LmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFN2y AzgsUZSIueCM1Hxl72Q4ew3RCAwHq4Qa54Dr7tghc64xaOdRIgfEaLzECT45DGyT xpVnpQkB0Mufe0mib0pwAUjcPJtCXUMVJdhCmuLSgGJE7tOr1GThpCpK4RlQgmUA uoNF7pXjMfKChDcGTuWCXjq3fu8m0knuUzN7+yjeJ5U0TSXOYm629ehP26UvRGWn WewGNG2eh766gV0gt+mZ5KGPqEiN262lmR/NLy447lijWjpXH2p0iAG/tGkCYbdN QRRthum3fpBoL1s5BnV/lj4vcu2cnvZL8K4lwX4286RTlqTqjgK34+WoYdbyEEqG 5t60TI7CIlSBoNHi/w== -----END CERTIFICATE-----Generated at Tue Jul 21 17:41:25 2026 by rpki-client