$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft File: 6kaWPMR52tvjxSI0q5-rqoEi0ls.mft (raw, json) Hash identifier: OhyxRFynmr9VtZI39tppkSJzTzgr4r3yIDR1UuGHaec= Subject key identifier: DF:63:4F:13:AF:95:58:F1:94:ED:09:A2:F4:FE:6A:FD:F4:43:36:D0 Authority key identifier: EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B Certificate issuer: /CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Certificate serial: 019FCC02188D691C3B6DA3545D0098ABF8ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft Manifest number: 1A0D Signing time: Tue 04 Aug 2026 09:01:57 +0000 Manifest this update: Tue 04 Aug 2026 09:01:57 +0000 Manifest next update: Wed 05 Aug 2026 09:01:57 +0000 Files and hashes: 1: 1-V2f5BIvAjoxWtMfXiOEdpxut6E.roa (hash: D7oyZz1oHRszroBqObV23g+p70gyyYzI6HwkfnsCOpU=) 2: 6kaWPMR52tvjxSI0q5-rqoEi0ls.crl (hash: jntyEbTbdz4IEcyILuR7gFwGo4yRmd+uv/4R0KnrZaQ=) 3: 7hi7Ah4iY_QQeOlVJayptAGSNSQ.roa (hash: 91eReMLkF+2CXAAIZp2KhXfLlZYAztOnwmcmPnVUzXo=) 4: 9R90z_RXFkZAiwMA8btLrqNKc5k.roa (hash: qB3OSrsx3CWWt5hbnFdtOpLb0xWqshoihPM7A2OR0ZI=) 5: 9cn7oO0iiJOK2Jrlawx7PDY1feo.roa (hash: j5TG1qDIuGwfkqIJMBOyK7GFpL9NpA8P1Hsl6lon4S8=) 6: JDTZDW6AYWQ-yj7N5Zoenz19vXY.roa (hash: aJ6VAzk0xVWZ+1DH33f1NLSDcnI/7+vJFB3jbl7CnPc=) 7: QaR40Du4QHojtPoMdpOj--q01WU.roa (hash: eIGnLm0U97IrEJBoUThT3XNpPhCvMXo7GasLn6DQpoQ=) 8: _iw4-UbxRcpMoWsfFn6G2aiGN-s.roa (hash: 2naXiACb6/BywUEITZo6HGPyiSxLs5Zs4g1/62TMQcU=) 9: burJ78lKaBi9GwpclBHxJ1tt3J8.roa (hash: 7zKgA0U3yskpNhBj2DmX/6y6Luj79ABkwPUXMuxefqU=) 10: h2gp67O50OZSa1oqQZXjN2SNpx4.roa (hash: Pa+pjoEKIMF2XBf3tbxUYkCZYzHfL5nJuwgyvpsFLdw=) 11: mtubXUlBQXjcnE7fuf616NzQiL8.roa (hash: ZPi+7TMbUx5kPi5sDdlZQektqLQyg5jCkWs9e2Cya6g=) 12: sLcjP0MexoJKRfJdT7_XekWEx5g.roa (hash: 81Gv1gjQe+8o8rD8eLhttbKdZxs2A/IOu9hlnmcGBtM=) 13: tEVXcAqmFhkbtGLmUdbLn_80yig.roa (hash: 9MErMfs8Nn0borG1HaQK08aY1yTDK65zdP9huz/FJ9g=) 14: wFIC1mkSpA0e2UovbVVh_Scnn38.roa (hash: gvnZu9oBw0R11C5ZwnQeTQrVmEIlj6ltv4xIOtBZ5cQ=) 15: wbkCFCpGOAFv3gQa4dX5dSBrtR8.roa (hash: nYzqM3na5q/wwfaIOmk+FxvcOctc4P9IAUI7PFRpl7k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 05 Aug 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:cc:02:18:8d:69:1c:3b:6d:a3:54:5d:00:98:ab:f8:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ea46963cc479dadbe3c52234ab9fabaa8122d25b Validity Not Before: Aug 4 09:01:57 2026 GMT Not After : Aug 5 09:01:57 2026 GMT Subject: CN=df634f13af9558f194ed09a2f4fe6afdf44336d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:da:fb:ff:53:65:93:26:a5:2e:0b:af:fa:da: cf:df:79:d3:5c:fa:61:de:59:3e:fa:07:0b:66:10: 05:6a:de:d9:a2:92:6a:e0:da:4e:2b:87:4f:77:8c: 41:91:25:2d:88:8f:37:30:a1:4a:ec:57:00:a7:84: 9f:cf:51:aa:d7:b9:0f:8c:aa:b3:4a:03:96:cc:95: 6d:e4:2b:f2:d8:2b:17:05:97:e7:c3:6f:a2:90:49: 8e:b0:3d:87:39:ab:d3:53:26:fd:15:b8:de:19:95: 8d:11:5f:d7:0e:57:d8:50:13:5e:f7:4f:04:71:ad: 55:50:b5:53:3c:d0:c0:b2:00:a0:db:97:22:b6:d9: 6a:0f:14:4e:de:4a:35:98:10:f8:a0:3a:0b:dc:93: ad:52:83:1e:e0:86:37:1d:84:86:b3:98:13:86:11: 01:d3:01:c6:b1:59:eb:37:15:6e:aa:54:ab:3c:55: 3d:23:62:96:e5:e1:bd:bc:d5:3e:be:84:a2:1a:c2: 5d:61:2a:9a:31:b0:bf:66:03:10:62:10:d2:91:b0: eb:a8:73:55:65:08:12:0a:a0:f4:b5:77:23:8d:17: 6f:a8:2b:10:40:a9:d8:fc:41:58:fc:1b:ac:ff:c2: 0a:3e:40:4b:e6:10:6d:cd:18:22:11:e4:a8:3d:a1: b8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:63:4F:13:AF:95:58:F1:94:ED:09:A2:F4:FE:6A:FD:F4:43:36:D0 X509v3 Authority Key Identifier: keyid:EA:46:96:3C:C4:79:DA:DB:E3:C5:22:34:AB:9F:AB:AA:81:22:D2:5B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6kaWPMR52tvjxSI0q5-rqoEi0ls.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e862de-c46c-4f21-b38e-eb5bc7d97aa0/1/6kaWPMR52tvjxSI0q5-rqoEi0ls.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f7:73:fe:8c:31:77:f0:1f:70:25:5f:32:19:36:02:8b:61: f9:03:97:56:1b:2a:34:01:ee:39:82:e4:3e:bb:7d:19:a1:c2: 03:65:76:08:32:4d:c9:d6:29:ba:70:a2:24:bf:23:2f:01:42: 25:bc:b2:99:50:cb:78:97:36:cb:e9:f7:c9:42:b2:36:06:07: d6:eb:95:35:ef:40:37:c1:d0:5a:a7:8d:67:be:cf:45:08:2f: 56:2c:38:13:50:2b:fa:37:85:b5:53:72:85:e2:fd:b3:43:43: 3a:3a:0f:26:dc:41:51:5c:d1:31:a3:d4:a2:6b:4c:46:51:b8: 04:ef:5e:80:d7:96:6f:4c:0c:82:3d:f5:fc:67:bc:db:60:64: b3:76:c1:9a:9d:88:80:08:0f:4d:ff:33:36:46:6e:f8:b3:94: a0:cc:c1:22:0e:3a:b2:b7:3a:d5:6d:aa:01:55:5c:28:f8:82: 3c:a5:70:03:e1:17:98:a8:a9:91:27:b2:f4:3d:39:bc:c1:17: 03:a3:25:e5:0b:7d:5f:f3:8f:49:e0:f7:ba:9f:31:a8:9f:20: d0:b3:c8:6c:2c:14:4a:00:bc:ec:13:56:7b:b5:50:93:06:e4: 41:ff:cc:65:36:df:4b:36:ea:be:17:b1:fe:d3:9f:09:3a:8a: b3:4c:6e:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/MAhiNaRw7baNUXQCYq/jtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVhNDY5NjNjYzQ3OWRhZGJlM2M1MjIzNGFiOWZhYmFhODEy MmQyNWIwHhcNMjYwODA0MDkwMTU3WhcNMjYwODA1MDkwMTU3WjAzMTEwLwYDVQQD EyhkZjYzNGYxM2FmOTU1OGYxOTRlZDA5YTJmNGZlNmFmZGY0NDMzNmQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9r7/1NlkyalLguv+trP33nTXPph 3lk++gcLZhAFat7ZopJq4NpOK4dPd4xBkSUtiI83MKFK7FcAp4Sfz1Gq17kPjKqz SgOWzJVt5Cvy2CsXBZfnw2+ikEmOsD2HOavTUyb9FbjeGZWNEV/XDlfYUBNe908E ca1VULVTPNDAsgCg25cittlqDxRO3ko1mBD4oDoL3JOtUoMe4IY3HYSGs5gThhEB 0wHGsVnrNxVuqlSrPFU9I2KW5eG9vNU+voSiGsJdYSqaMbC/ZgMQYhDSkbDrqHNV ZQgSCqD0tXcjjRdvqCsQQKnY/EFY/Bus/8IKPkBL5hBtzRgiEeSoPaG4VQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN9jTxOvlVjxlO0JovT+av30QzbQMB8GA1UdIwQY MBaAFOpGljzEedrb48UiNKufq6qBItJbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUt ZWI1YmM3ZDk3YWEwLzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Yi9lODYyZGUtYzQ2Yy00ZjIxLWIzOGUtZWI1YmM3ZDk3YWEw LzEvNmthV1BNUjUydHZqeFNJMHE1LXJxb0VpMGxzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPdz/owx d/AfcCVfMhk2Aoth+QOXVhsqNAHuOYLkPrt9GaHCA2V2CDJNydYpunCiJL8jLwFC JbyymVDLeJc2y+n3yUKyNgYH1uuVNe9AN8HQWqeNZ77PRQgvViw4E1Ar+jeFtVNy heL9s0NDOjoPJtxBUVzRMaPUomtMRlG4BO9egNeWb0wMgj31/Ge822Bks3bBmp2I gAgPTf8zNkZu+LOUoMzBIg46src61W2qAVVcKPiCPKVwA+EXmKipkSey9D05vMEX A6Ml5Qt9X/OPSeD3up8xqJ8g0LPIbCwUSgC87BNWe7VQkwbkQf/MZTbfSzbqvhex /tOfCTqKs0xuIw== -----END CERTIFICATE-----Generated at Tue Aug 4 13:58:39 2026 by rpki-client