$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: 0Y8nkrMBnXe11/EyFW5BNt4km5JMgkzWfteRo1Qi8cc= Subject key identifier: D1:D2:2E:12:63:91:BC:D4:1C:B3:7C:3B:D8:6E:86:84:2A:7E:E0:6C Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 019F9FCDD6FEB85D9BB90927B50D604D3DD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 138E Signing time: Sun 26 Jul 2026 19:01:34 +0000 Manifest this update: Sun 26 Jul 2026 19:01:34 +0000 Manifest next update: Mon 27 Jul 2026 19:01:34 +0000 Files and hashes: 1: 30_2SrrQt3xLpXgztAf1BYLj6dc.roa (hash: NTrKpnKBqVn0bitR0Jwanme0JvSKtMI3Yu9OWoAC8F0=) 2: 30posY3TsM2Fh--sfGLYSxzt9Oc.roa (hash: i0NTnZ+KyqqJwh0JnlpuYIHLq99sFP6hfH0tju3c/hs=) 3: 92kon1ZbPqRU1ojElvwcbSZFCJg.roa (hash: JDix+gTyhf3eCiMPRUDwwuH51sP+i0fI6zPIxZOfd6g=) 4: 9I6L8TRP3qtz3CYYh3ww5T352z8.roa (hash: 1gf4QeHFa9dKbCRpBcjsV/snv/t5NnmR9Bj8FONPgak=) 5: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: 654S5SuHNC9d62MmBs97YpGmmJ5vUQIcR9UIPyY+XSA=) 6: ADT8NHavskB_f-QX_biQB6s3hjM.roa (hash: g7mT0bM8U1tBgaCrO9JeZJLHUsM1LBUnAA963U3MJWE=) 7: CYj7mZQ9dKeMc_-N6UL6LjIi3lk.roa (hash: JDVFtyDyR/x/eL6c4P6MCJwlsUYUOK+LfbQasczNpvA=) 8: Cp5yS6CVdtI_QBkILVp1ijYMyLE.roa (hash: YPwRTq6Ianr0pyiyDMEVnQhaRfOWjLxD4nQBsuUMiJ8=) 9: J6A_hF4O7cxI8QJluboyBCe16v0.roa (hash: edsf8OO27RWYtOi702k6Qhe7cJI0t15sATzZb5sCsJ8=) 10: MdXllBZP0mMZ0dXI6p75TCwhxPo.roa (hash: 4XNUO6DsPpBG+M6Ws/hUL/dm11Zqlvo8pLHd9xOnlHo=) 11: PayA9942Pu3PEwdgbc9zI085M7A.roa (hash: pkpsKDUMLuKxSQ8sea1A1XeztsAXtWdezuYMLOySqF4=) 12: T13-btYFEN1DdC5NbUMiJr9ac-A.roa (hash: 7W8mRW5nKO5O7mdnYOqF5XjMLJFncda9PmRuXwHgrFw=) 13: i7jxo6_GB1o_OmBl3PrmVS4XnPA.roa (hash: 8NhSbKhEfu8jyqD1wovs3TRW3fNcgXTNne21hQm9qN4=) 14: lBbPrenKlA3Sq-uIUKDdAiDokxs.roa (hash: 8cnNfRffd7F/oZoq0DdI1sFhx5I9K/eiWM52AqJzzeI=) 15: sVAk55K1bjvD6NWoqyy6bpvKPNM.roa (hash: PMewucLZTeF6kJJLzoads50StAWlilqhYdIQchwQaB0=) 16: sysq58LMYKdBhx-ibBYNHAxQl8g.roa (hash: HwICsnv3lm+NXgLT5+1pkn50yR1pj2hwdaS9hW8jkA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:cd:d6:fe:b8:5d:9b:b9:09:27:b5:0d:60:4d:3d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Jul 26 19:01:34 2026 GMT Not After : Jul 27 19:01:34 2026 GMT Subject: CN=d1d22e126391bcd41cb37c3bd86e86842a7ee06c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:df:7d:a1:6f:64:d3:eb:a3:6b:21:25:a3:eb: da:bd:28:2a:df:03:1a:5b:9d:88:fc:77:af:92:93: ae:e3:02:23:e2:d3:9e:0e:32:b3:66:54:4f:f6:1d: e8:f3:1b:1a:bb:ae:15:e2:b1:9d:0d:a4:1a:52:5e: 7d:58:0b:2d:a5:51:4c:11:7b:1b:53:2c:e8:c6:5d: 2d:18:ca:0e:7c:fd:0d:01:c4:26:45:f4:8b:d4:17: bb:23:d9:d7:a6:8b:98:f4:1a:85:38:d5:33:2b:48: 99:d2:34:e1:2b:0b:98:48:61:a6:7f:22:81:01:f5: 66:64:7d:57:0e:49:8d:40:87:c3:99:b2:b2:28:ef: 5f:3c:47:7e:de:6d:26:26:32:e5:31:53:2d:3c:bf: 21:02:0b:6b:dc:eb:4b:48:a6:c5:55:e6:14:b4:83: 52:99:9b:87:fb:a1:49:73:c4:c7:af:44:db:bc:1e: 0c:04:1c:1f:58:c1:21:96:26:26:91:cc:16:cb:ba: 8a:a9:92:5e:f7:52:6b:c2:30:0b:ac:1c:38:76:24: 76:df:fa:5d:80:63:01:ef:55:a0:35:78:54:a5:1c: 1e:02:0f:32:42:c1:c6:d7:01:dd:f4:20:9c:2a:6b: ab:2a:fb:48:18:e0:82:f6:96:38:5d:d3:31:89:ef: 10:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D2:2E:12:63:91:BC:D4:1C:B3:7C:3B:D8:6E:86:84:2A:7E:E0:6C X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e0:1e:ac:1d:75:e0:1d:94:94:04:b7:f8:37:a5:cd:1b:a2:9f: 16:f3:bb:24:cc:a3:34:3e:28:a3:d8:b0:b3:4b:8d:53:76:ab: 4b:fd:63:a3:b6:e4:9c:0d:95:07:de:ef:63:59:2a:c1:84:5d: 49:e0:31:ee:67:7d:59:c1:1d:bd:75:44:d0:50:c6:e9:1f:90: 99:5a:a3:23:35:7e:be:f7:a2:43:c3:52:50:4c:89:33:4d:a1: b2:8f:63:20:31:23:59:cc:77:97:7a:c0:d9:5e:02:1c:47:94: 62:e3:fb:fb:db:fb:06:87:c0:9d:f0:94:33:57:68:dc:3c:9a: d6:3c:b5:31:c9:11:78:1c:e2:7c:85:05:0f:ae:b0:59:90:78: e4:c9:fa:17:1c:0f:63:3b:f4:19:3c:73:eb:5b:19:ae:1c:b8: ba:48:ed:97:71:af:be:00:1e:f0:ea:06:c4:da:11:63:ec:38: 70:db:f5:6e:db:43:dd:17:bd:f8:5d:8e:ef:b1:ee:f1:ff:b5: 81:bd:d0:21:b7:1d:74:38:7f:9a:4e:e1:6d:3b:5a:11:a5:94: 73:69:26:82:33:ba:34:31:d1:65:4e:61:9c:c4:5a:a2:a8:38: 9c:13:69:36:39:07:7a:3f:b2:3c:49:15:86:a0:57:6f:b8:6b: ab:e4:21:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fzdb+uF2buQkntQ1gTT3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwNzI2MTkwMTM0WhcNMjYwNzI3MTkwMTM0WjAzMTEwLwYDVQQD EyhkMWQyMmUxMjYzOTFiY2Q0MWNiMzdjM2JkODZlODY4NDJhN2VlMDZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoN99oW9k0+ujayElo+vavSgq3wMa W52I/HevkpOu4wIj4tOeDjKzZlRP9h3o8xsau64V4rGdDaQaUl59WAstpVFMEXsb Uyzoxl0tGMoOfP0NAcQmRfSL1Be7I9nXpouY9BqFONUzK0iZ0jThKwuYSGGmfyKB AfVmZH1XDkmNQIfDmbKyKO9fPEd+3m0mJjLlMVMtPL8hAgtr3OtLSKbFVeYUtINS mZuH+6FJc8THr0TbvB4MBBwfWMEhliYmkcwWy7qKqZJe91JrwjALrBw4diR23/pd gGMB71WgNXhUpRweAg8yQsHG1wHd9CCcKmurKvtIGOCC9pY4XdMxie8QmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHSLhJjkbzUHLN8O9huhoQqfuBsMB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4B6sHXXg HZSUBLf4N6XNG6KfFvO7JMyjND4oo9iws0uNU3arS/1jo7bknA2VB97vY1kqwYRd SeAx7md9WcEdvXVE0FDG6R+QmVqjIzV+vveiQ8NSUEyJM02hso9jIDEjWcx3l3rA 2V4CHEeUYuP7+9v7BofAnfCUM1do3Dya1jy1MckReBzifIUFD66wWZB45Mn6FxwP Yzv0GTxz61sZrhy4ukjtl3GvvgAe8OoGxNoRY+w4cNv1bttD3Re9+F2O77Hu8f+1 gb3QIbcddDh/mk7hbTtaEaWUc2kmgjO6NDHRZU5hnMRaoqg4nBNpNjkHej+yPEkV hqBXb7hrq+Qhkw== -----END CERTIFICATE-----Generated at Sun Jul 26 20:33:18 2026 by rpki-client