$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: u2WtZ8lSmE8HkPfdgya1K9Pcl1GhL7IsRy3ZRbta37M= Subject key identifier: A7:C8:52:9E:04:4E:71:96:E9:01:AF:43:1D:F2:D6:5A:CA:66:4B:42 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 019FA07195B646974C01900EF72EABF958D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 16AD Signing time: Sun 26 Jul 2026 22:00:26 +0000 Manifest this update: Sun 26 Jul 2026 22:00:26 +0000 Manifest next update: Mon 27 Jul 2026 22:00:26 +0000 Files and hashes: 1: 0inTqtkV7aRdA0poVknUSc5weqM.roa (hash: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8=) 2: 6TbA_Za4Eowieja7n7niJ7Rt1gs.roa (hash: scQ2AMr4c5KWoojUsMClo/2J+rhonxe/8Y7reFR2/oA=) 3: F0ubE8ZoOIcH6EOeRRsm7BjDGv0.roa (hash: jxUQ0KKcc1cvSdaRZ9vh81k1iQSpuyreVGWce3iIfz4=) 4: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (hash: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw=) 5: KOWxSmH0_bapiUsF2I5NvMk2mAE.roa (hash: qlla291EA5iael/7BwH1F/97Ya9GRn26shYvkPQjZ4Q=) 6: OYUqnwa8yQK0vig2w6Um7A1Wcg4.roa (hash: vSXWDq1SS7TbMrb96ytcbFUS3oNQ6vxE3t+U54lGeWc=) 7: _qefhBTX4GrLHAKY0SuGouHYv88.roa (hash: ZZ2WFS7hoXoz7ExsxVHk1ghS6uAk+/8jwy793fgoALQ=) 8: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (hash: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc=) 9: cYegkqTDRQkQYBG0QAGLC43ERoE.roa (hash: Jj0rGclcjFrkbXAtvfPBQZbVxQ41VQry0fjFc8pn/lw=) 10: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (hash: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM=) 11: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: 3kFNR55wqQdaUZKJ6+Lpd9LnwG8T5u2XLzd7sa7pkxI=) 12: roVhJvLE3W-3AVNXrvbfZb_XPPo.roa (hash: 6LQ91r1uUm0MXEXzntSjw9cSGp9nmQGmFVNHFHmb1Zw=) 13: thPKVIAn4Mtb5x7VAf0Ti0_MWKQ.roa (hash: U0wPlIAv75ZKpiMwZqpBCEwATCl9LCbwg1gs4MzHORI=) 14: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (hash: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 22:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a0:71:95:b6:46:97:4c:01:90:0e:f7:2e:ab:f9:58:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Jul 26 22:00:26 2026 GMT Not After : Jul 27 22:00:26 2026 GMT Subject: CN=a7c8529e044e7196e901af431df2d65aca664b42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6a:db:0b:32:6c:aa:5f:c0:f7:9a:3d:dd:17: 55:13:9e:df:a0:23:82:c0:a6:4b:64:11:3c:27:a7: 16:8a:d9:32:f5:d5:b2:05:a4:6e:bf:21:14:e4:d3: 90:6d:5d:03:de:c7:4a:17:cc:ae:b9:aa:67:77:0c: 5b:1e:e7:54:f1:70:b3:13:6f:7a:cc:21:b8:52:6a: 19:37:d4:cc:13:8e:18:de:03:3f:6e:ab:76:17:fb: 5e:7c:63:16:7d:06:4c:fa:b6:57:ba:b2:94:ee:3e: c4:36:2b:d6:c7:79:18:90:f5:f1:93:85:9a:5e:64: e4:dc:f2:d3:c5:90:7c:18:a0:13:ec:08:8a:78:78: ee:76:bd:d2:b5:4e:67:63:6b:6b:7c:96:fa:5d:3f: e8:c9:5e:0d:c1:a1:9f:d6:12:03:b9:82:ea:f1:4d: d2:9a:77:74:f7:5a:a8:7a:9b:f1:29:be:f2:e6:f0: de:51:34:a2:3c:a8:38:9a:ad:fd:ce:3f:a0:96:53: c7:f3:a9:2f:62:60:f2:b8:cb:e0:ab:88:26:65:3b: 0f:0c:36:65:44:25:62:7d:db:9c:e9:ad:79:85:53: e8:27:eb:35:0b:23:39:61:1f:bf:5a:17:be:e4:e9: 9f:78:71:ef:b9:b7:5e:a4:30:c4:5a:44:ad:07:15: 16:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C8:52:9E:04:4E:71:96:E9:01:AF:43:1D:F2:D6:5A:CA:66:4B:42 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:65:f8:e7:57:7a:e3:0f:b6:5b:89:7c:f9:14:fc:8c:4b:42: 06:be:a7:6e:ec:33:d9:f5:e7:92:4e:33:76:f3:6f:62:24:40: 52:76:7f:6e:80:e8:3b:de:6b:05:3e:a7:31:66:27:a9:a0:75: 93:73:ee:d9:5f:6c:a3:e9:00:4b:d5:25:7d:41:83:ab:d8:8b: 18:5c:89:d6:fa:a7:a5:8d:4e:8b:62:a9:65:64:43:3b:a2:6b: b6:20:5d:d1:dd:71:3d:af:2f:9c:11:47:5f:28:1a:d0:8c:a6: ec:e7:79:cb:30:5b:06:44:6b:6d:4e:78:b0:98:cb:56:a8:c3: 92:ea:e9:0b:3e:b8:22:68:34:14:37:48:87:c5:65:94:03:12: c6:3c:ec:89:47:6c:9b:d5:bc:e6:95:44:b7:bb:87:00:a7:6a: e9:c7:10:e3:09:db:19:a1:18:6d:f7:45:a4:27:b2:86:9e:e3: 3a:c3:0d:db:89:59:23:32:24:25:92:df:ac:72:ce:22:3c:17: 61:f7:80:14:40:8b:1d:b7:88:e7:5a:a5:0b:06:1d:ed:e0:ec: 98:e1:47:f5:16:d3:ef:3d:f6:ea:3a:3b:22:e7:70:af:dc:1a: 04:94:ff:8f:d6:23:b0:b9:40:7d:17:05:e9:de:ca:dc:b9:bf: b5:09:7c:a4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+gcZW2RpdMAZAO9y6r+VjSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwNzI2MjIwMDI2WhcNMjYwNzI3MjIwMDI2WjAzMTEwLwYDVQQD EyhhN2M4NTI5ZTA0NGU3MTk2ZTkwMWFmNDMxZGYyZDY1YWNhNjY0YjQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlWrbCzJsql/A95o93RdVE57foCOC wKZLZBE8J6cWitky9dWyBaRuvyEU5NOQbV0D3sdKF8yuuapndwxbHudU8XCzE296 zCG4UmoZN9TME44Y3gM/bqt2F/tefGMWfQZM+rZXurKU7j7ENivWx3kYkPXxk4Wa XmTk3PLTxZB8GKAT7AiKeHjudr3StU5nY2trfJb6XT/oyV4NwaGf1hIDuYLq8U3S mnd091qoepvxKb7y5vDeUTSiPKg4mq39zj+gllPH86kvYmDyuMvgq4gmZTsPDDZl RCVifduc6a15hVPoJ+s1CyM5YR+/Whe+5OmfeHHvubdepDDEWkStBxUWFQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKfIUp4ETnGW6QGvQx3y1lrKZktCMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGX451d6 4w+2W4l8+RT8jEtCBr6nbuwz2fXnkk4zdvNvYiRAUnZ/boDoO95rBT6nMWYnqaB1 k3Pu2V9so+kAS9UlfUGDq9iLGFyJ1vqnpY1Oi2KpZWRDO6JrtiBd0d1xPa8vnBFH Xyga0Iym7Od5yzBbBkRrbU54sJjLVqjDkurpCz64Img0FDdIh8VllAMSxjzsiUds m9W85pVEt7uHAKdq6ccQ4wnbGaEYbfdFpCeyhp7jOsMN24lZIzIkJZLfrHLOIjwX YfeAFECLHbeI51qlCwYd7eDsmOFH9RbT7z326jo7Iudwr9waBJT/j9YjsLlAfRcF 6d7K3Lm/tQl8pA== -----END CERTIFICATE-----Generated at Mon Jul 27 06:59:21 2026 by rpki-client