$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft File: _0TbrKVtrDGUAfaKUNkX9UJGEa0.mft (raw, json) Hash identifier: 5q7fnXfzM8IQKf4jMepLqFtkIOdCwbowagIVLlF5XRA= Subject key identifier: C2:DB:A1:99:D5:BB:6F:15:28:95:39:7B:DE:9C:5F:71:BF:27:CB:27 Authority key identifier: FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD Certificate issuer: /CN=ff44dbaca56dac319401f68a50d917f5424611ad Certificate serial: 019FCB25DDAD7184855E930FE394CDF6A949 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft Manifest number: 1200 Signing time: Tue 04 Aug 2026 05:01:24 +0000 Manifest this update: Tue 04 Aug 2026 05:01:24 +0000 Manifest next update: Wed 05 Aug 2026 05:01:24 +0000 Files and hashes: 1: Bs4-wDTWZhdrUJPjnmHAAhFT9Xg.roa (hash: 6OMArpIsIaojsmbebqPGL9yNN2iOhKDqxEQ3VsEqyz4=) 2: C4GFPQJi7p8x697vDEqdYSForok.roa (hash: x37lAGnggrFkEEQihLvJsXhXtDeedMO3diP0XULMgKY=) 3: FXRjYZvbpR4kI47t-xbWMZKIpXs.roa (hash: f82R7m8nlKkGC17z2MB1wjV2cD02/YvewqP02lzhH/g=) 4: Y86-7VoZ9wBef5cWLikD9_Ljr8k.roa (hash: z3nMVwgxO8XPuogFL8nI49fcwAsx7sg67DXBALxMAF0=) 5: ZPQxZyBJh2Vw2t_b2vNEAiLh99k.roa (hash: NDs1Vf1mQ8nJ5oBooS0cBClzynoCDC8zG6mfNnpUvhE=) 6: _0TbrKVtrDGUAfaKUNkX9UJGEa0.crl (hash: 51lPRAuTytu/8I01W9dKUqvSIgIM+kNp+gTJ+Pr/icY=) 7: eoCcRd3DQ06osUmaj6wTPXbyx3M.roa (hash: Bag32wKiY/ZwSFfm1YHrZ2XH/ziquJ1Nmz4VoaY0zzY=) 8: fTRd6a2e9a4zdY4aiMmXVi3rTBk.roa (hash: LGoayc9lL7Dki+Uazuk2b50wtihbszvXNSKK6s8wfAs=) 9: olOemexvNklicqxW22C_r27x8hI.roa (hash: 2dnChKIBxGz8/vhWpAScmxia3nvUYfjWbr3Rrc8iUoE=) 10: xsJo78LDkaISlChjyH-2Lz_93IE.roa (hash: tgsGAsA9YCYcT/WEizNrURkq8kTG96nlX8C9C14wWrM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 04 Aug 2026 23:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cb:25:dd:ad:71:84:85:5e:93:0f:e3:94:cd:f6:a9:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff44dbaca56dac319401f68a50d917f5424611ad Validity Not Before: Aug 4 05:01:24 2026 GMT Not After : Aug 5 05:01:24 2026 GMT Subject: CN=c2dba199d5bb6f152895397bde9c5f71bf27cb27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:fc:24:42:8e:53:ce:a4:24:a6:01:3e:ca:70: cf:f0:4a:f2:1f:88:a9:d2:43:7f:76:3e:1c:54:3c: 09:72:3c:9b:9c:f2:52:38:14:42:0b:31:77:4e:7c: d2:e0:5a:bd:f2:61:05:a2:9a:4d:bc:fc:8a:d1:7d: 70:58:fb:32:68:b6:8f:bb:be:00:dd:81:f3:7d:fc: b3:04:a7:d0:a7:80:b6:59:91:c6:38:5b:05:ca:95: 38:40:72:94:72:05:5e:98:1a:1f:1d:a3:e4:f6:f7: 0b:df:09:7e:ce:a7:a1:52:09:80:d1:44:e0:70:5d: 91:f1:c1:54:91:6d:2b:5d:a7:3f:cd:51:da:44:3f: f7:15:2c:ae:8b:03:03:51:38:0e:89:4a:71:fa:b8: 9a:a1:04:a2:2b:15:c6:21:4d:3d:44:a9:29:4d:3d: be:5f:3f:a5:33:fe:0b:35:f4:ff:26:10:9d:81:63: 2a:06:95:77:e5:ad:04:6b:d8:50:2d:1b:5f:b8:c9: 71:03:6c:82:72:27:39:24:b8:fd:98:d4:1b:83:12: 44:b6:c7:26:4c:2f:23:31:ee:49:2c:cd:0c:f8:f1: 43:8c:46:d5:59:71:8b:53:6e:20:0c:e0:98:e8:af: 9e:2a:77:ab:25:a0:46:36:f1:84:d3:62:c9:67:37: 1e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DB:A1:99:D5:BB:6F:15:28:95:39:7B:DE:9C:5F:71:BF:27:CB:27 X509v3 Authority Key Identifier: keyid:FF:44:DB:AC:A5:6D:AC:31:94:01:F6:8A:50:D9:17:F5:42:46:11:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_0TbrKVtrDGUAfaKUNkX9UJGEa0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/53a947-fd03-4014-9827-c5d8950818ec/1/_0TbrKVtrDGUAfaKUNkX9UJGEa0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:a1:e9:20:4e:96:8b:04:ca:ce:f8:50:2d:a7:50:85:25:4a: cc:73:af:0e:fc:12:db:c6:78:7e:56:f1:e6:3a:95:9e:be:8a: 31:0b:6e:56:b4:38:e4:6d:bb:e7:1d:b0:ef:2c:58:be:11:43: b8:8d:64:ab:ac:20:bd:12:51:04:7e:cc:0c:c7:2a:fb:8d:c2: 62:b0:80:4b:17:5f:a6:c4:32:43:c9:ee:be:f6:aa:18:45:85: 71:2c:e8:14:f6:cf:89:bb:03:ec:4a:79:ac:14:d8:25:a5:6a: 19:66:2c:24:46:70:10:b5:1a:14:b3:85:0e:66:72:e5:b3:f2: 65:c5:27:03:11:70:f8:94:b7:22:be:1f:1d:bb:0a:b5:a0:9b: 36:d6:73:5d:c2:f2:3d:cf:bd:88:7b:6f:3f:fc:73:fa:0a:52: db:05:89:6c:35:07:91:1a:16:d7:6e:87:d6:f4:c9:fe:37:f0: 0e:6e:24:87:1d:48:fc:ea:3d:44:c9:f8:9f:34:cf:0b:38:20: 1d:c0:c5:d2:c7:f8:38:08:e2:4a:78:c9:9c:fa:48:68:66:e6: fd:a8:2d:25:7a:69:f4:78:ab:cf:99:1b:6c:2b:de:d0:62:7e: dc:4e:68:57:2a:74:34:fc:6a:c9:77:da:34:78:96:df:ae:93: cb:0d:67:ec -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/LJd2tcYSFXpMP45TN9qlJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNDRkYmFjYTU2ZGFjMzE5NDAxZjY4YTUwZDkxN2Y1NDI0 NjExYWQwHhcNMjYwODA0MDUwMTI0WhcNMjYwODA1MDUwMTI0WjAzMTEwLwYDVQQD EyhjMmRiYTE5OWQ1YmI2ZjE1Mjg5NTM5N2JkZTljNWY3MWJmMjdjYjI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfwkQo5TzqQkpgE+ynDP8EryH4ip 0kN/dj4cVDwJcjybnPJSOBRCCzF3TnzS4Fq98mEFoppNvPyK0X1wWPsyaLaPu74A 3YHzffyzBKfQp4C2WZHGOFsFypU4QHKUcgVemBofHaPk9vcL3wl+zqehUgmA0UTg cF2R8cFUkW0rXac/zVHaRD/3FSyuiwMDUTgOiUpx+riaoQSiKxXGIU09RKkpTT2+ Xz+lM/4LNfT/JhCdgWMqBpV35a0Ea9hQLRtfuMlxA2yCcic5JLj9mNQbgxJEtscm TC8jMe5JLM0M+PFDjEbVWXGLU24gDOCY6K+eKnerJaBGNvGE02LJZzcebQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMLboZnVu28VKJU5e96cX3G/J8snMB8GA1UdIwQY MBaAFP9E26ylbawxlAH2ilDZF/VCRhGtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4Mjct YzVkODk1MDgxOGVjLzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Zi81M2E5NDctZmQwMy00MDE0LTk4MjctYzVkODk1MDgxOGVj LzEvXzBUYnJLVnRyREdVQWZhS1VOa1g5VUpHRWEwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmKHpIE6W iwTKzvhQLadQhSVKzHOvDvwS28Z4flbx5jqVnr6KMQtuVrQ45G275x2w7yxYvhFD uI1kq6wgvRJRBH7MDMcq+43CYrCASxdfpsQyQ8nuvvaqGEWFcSzoFPbPibsD7Ep5 rBTYJaVqGWYsJEZwELUaFLOFDmZy5bPyZcUnAxFw+JS3Ir4fHbsKtaCbNtZzXcLy Pc+9iHtvP/xz+gpS2wWJbDUHkRoW126H1vTJ/jfwDm4khx1I/Oo9RMn4nzTPCzgg HcDF0sf4OAjiSnjJnPpIaGbm/agtJXpp9Hirz5kbbCve0GJ+3E5oVyp0NPxqyXfa NHiW366Tyw1n7A== -----END CERTIFICATE-----Generated at Tue Aug 4 09:02:14 2026 by rpki-client