$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: +rxrequo9Z9vffhY01tii/wyHvjVLoFLI7aHK6c8qNs= Subject key identifier: 36:88:03:89:B3:06:F0:1D:6D:73:69:EB:DD:86:D4:70:23:67:41:5C Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 019F9F9649AC50786BA29EE0347F4F850839 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0C04 Signing time: Sun 26 Jul 2026 18:00:54 +0000 Manifest this update: Sun 26 Jul 2026 18:00:54 +0000 Manifest next update: Mon 27 Jul 2026 18:00:54 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: aMeYqQZfJ+yaRfsBvmiYtI48SZ53QeryOIEA/EV9+xc=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 8: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 9: SAA7qyjcW84McQBC6YBfHzblJfA.roa (hash: dbjWwV6RFntCa8n+N5y1CE7UmL5X6zdxSBIazMuF9gY=) 10: SAOjAfmVta9T_Ls7ykRFr8U5SYI.roa (hash: r10sWadtpWdod9WG4HGHqPD7qRwz46PwcZV2+I/tlNM=) 11: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 12: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 13: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 14: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 15: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 16: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 17: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 18: zFqREBgVNzI2E15fdQInesLKPTw.roa (hash: NsrPAKNCirfx6K/YKvvDtbYP5Q+iM+dl/3GgSwcg4O8=) 19: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 18:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:96:49:ac:50:78:6b:a2:9e:e0:34:7f:4f:85:08:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Jul 26 18:00:54 2026 GMT Not After : Jul 27 18:00:54 2026 GMT Subject: CN=36880389b306f01d6d7369ebdd86d4702367415c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:fc:00:5d:e6:92:39:f8:7b:ce:fe:3f:5f:ca: 5e:a1:c2:53:30:7d:d2:4e:03:2e:6c:79:1f:b5:ea: 79:5c:01:70:19:25:ef:16:d6:5d:2e:41:0c:47:57: 36:e4:df:82:21:40:ba:c2:17:05:7e:6e:0e:d8:85: c8:1a:23:a0:07:7d:ae:e7:15:80:91:c5:65:c3:09: 09:bf:a1:2a:86:a5:4a:35:5f:8a:9f:9e:98:70:75: 1c:49:47:df:03:66:7d:d8:cb:2c:63:42:0d:c4:4a: 17:aa:b5:b3:d9:ce:79:83:a9:4b:5a:7d:66:33:e5: 9a:71:44:c4:8d:b0:fc:21:26:80:5d:65:8a:f3:9f: 7c:29:76:07:b4:ed:35:7c:1f:7f:98:fc:31:c0:84: 31:45:16:f3:6c:90:1c:e6:60:ca:fb:15:7c:8a:4c: 41:55:0a:9c:0b:ee:99:0e:e1:5f:6d:41:fb:5d:20: 22:56:6b:8b:9d:88:3f:1d:94:2b:39:d1:62:7c:c8: 4f:e3:8c:b1:67:48:00:c7:ad:3e:96:bb:d6:5e:15: 74:f4:c1:a3:76:cc:bc:b7:21:97:bb:40:2f:db:9a: 74:75:d3:ea:3f:30:d8:40:0f:4d:e8:e4:93:08:5e: 10:84:ad:45:1b:c2:c4:49:4f:47:25:8d:65:f7:b8: 04:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:88:03:89:B3:06:F0:1D:6D:73:69:EB:DD:86:D4:70:23:67:41:5C X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:32:b0:66:34:66:e1:e7:cf:81:05:41:a6:a5:6b:78:3a:74: cb:1f:3b:0a:22:de:4c:65:d6:ce:9c:88:3e:0e:f8:0e:6c:31: a6:2d:77:45:ea:c3:9f:aa:70:5a:a6:55:c9:da:a2:42:9a:d8: 7e:7c:ff:a2:1d:fd:88:d7:77:cb:d8:00:e0:d7:29:19:8a:50: 2b:b6:ab:df:b3:46:97:56:76:48:fd:5a:ef:59:68:6a:56:78: a4:81:ac:9b:62:4d:75:ba:e5:c4:f0:09:ff:c8:9d:da:ba:2d: 44:ad:32:2c:b0:f2:50:8f:f7:29:36:6e:93:dd:81:df:b8:15: a4:f6:69:5f:4b:e9:cf:b2:dd:b0:90:77:4a:48:63:15:ed:c1: 91:1a:d1:61:0b:cb:15:36:ac:c3:8f:6b:77:43:22:ef:e6:b5: e4:5b:04:8c:9b:46:ba:fd:02:5a:f7:cd:de:29:bd:c8:28:5f: b6:be:07:00:22:2e:e6:18:f7:a3:54:57:a4:6e:b0:1f:78:5c: 9f:4a:94:6f:52:cd:7a:51:85:9d:6d:13:4b:35:e5:72:ca:a3: ca:e8:7c:fc:1d:05:cf:74:b1:d2:6f:d8:a7:88:2a:5e:eb:95: bc:d5:1f:f9:41:79:12:4f:5d:69:28:d6:5e:54:cf:87:1e:4b: 9f:01:c9:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+flkmsUHhrop7gNH9PhQg5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwNzI2MTgwMDU0WhcNMjYwNzI3MTgwMDU0WjAzMTEwLwYDVQQD EygzNjg4MDM4OWIzMDZmMDFkNmQ3MzY5ZWJkZDg2ZDQ3MDIzNjc0MTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/wAXeaSOfh7zv4/X8peocJTMH3S TgMubHkftep5XAFwGSXvFtZdLkEMR1c25N+CIUC6whcFfm4O2IXIGiOgB32u5xWA kcVlwwkJv6EqhqVKNV+Kn56YcHUcSUffA2Z92MssY0INxEoXqrWz2c55g6lLWn1m M+WacUTEjbD8ISaAXWWK8598KXYHtO01fB9/mPwxwIQxRRbzbJAc5mDK+xV8ikxB VQqcC+6ZDuFfbUH7XSAiVmuLnYg/HZQrOdFifMhP44yxZ0gAx60+lrvWXhV09MGj dsy8tyGXu0Av25p0ddPqPzDYQA9N6OSTCF4QhK1FG8LESU9HJY1l97gE3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDaIA4mzBvAdbXNp692G1HAjZ0FcMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEjKwZjRm 4efPgQVBpqVreDp0yx87CiLeTGXWzpyIPg74Dmwxpi13RerDn6pwWqZVydqiQprY fnz/oh39iNd3y9gA4NcpGYpQK7ar37NGl1Z2SP1a71loalZ4pIGsm2JNdbrlxPAJ /8id2rotRK0yLLDyUI/3KTZuk92B37gVpPZpX0vpz7LdsJB3SkhjFe3BkRrRYQvL FTasw49rd0Mi7+a15FsEjJtGuv0CWvfN3im9yChftr4HACIu5hj3o1RXpG6wH3hc n0qUb1LNelGFnW0TSzXlcsqjyuh8/B0Fz3Sx0m/Yp4gqXuuVvNUf+UF5Ek9daSjW XlTPhx5LnwHJ9g== -----END CERTIFICATE-----Generated at Mon Jul 27 02:02:32 2026 by rpki-client