$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft File: 1KdSLSfmKuI6RgFD66ZzO3myRHc.mft (raw, json) Hash identifier: ljmbZG7oAhMSzoQVGVYcJp7FsHR/t7eRGRvyLZ60sKk= Subject key identifier: EE:4B:E0:A6:D9:26:3B:EE:F7:EF:AC:70:14:8D:7B:E7:C8:A7:31:4D Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477 Certificate serial: 019F4051D16C8F80D42D587DE028A7E0EC76 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft Manifest number: 16 Signing time: Wed 08 Jul 2026 06:02:11 +0000 Manifest this update: Wed 08 Jul 2026 06:02:11 +0000 Manifest next update: Thu 09 Jul 2026 06:02:11 +0000 Files and hashes: 1: 1-N-2fC6tfa1s0LvlFU9jMbLrhuE.roa (hash: RE3o5Zu1XdF9S+04ylutP3QqzKtcsQWMmIT7k6SNN/Y=) 2: 1KdSLSfmKuI6RgFD66ZzO3myRHc.crl (hash: duYnmHOxMtRVx6jDE9uGeT5viorrkvsUWCucAYItO3U=) 3: AhMkHazE-91WYq1pzL4rD-YgpOY.roa (hash: N7RR15LWLaA1GWhDaUwnFbFOrZQPw3IJjIesRqmsD5I=) 4: CBhFxYlbZteyN6PZ-Vmyl3AaymU.roa (hash: cEqju8RXsbFDyu/dW9+z6y7ODNyFcVjrj9eawVPTsVE=) 5: FkByO5VyomUSANjFcmnEdvz3Cko.roa (hash: z10lQ6g3SDPSArAHievRO6Z2mqsSExBrr1d205CDUP4=) 6: IJAySIrj88My47LJGVkAc9rZDtY.roa (hash: an1H6uRWsmTvyleV0pswewslnipkuBrqpFXZ8x8RXI4=) 7: K7O0xdV18ha5dPNdq-y0BPQgffc.roa (hash: GEqEkzuoCanIwB018rtlec4WErFm2E3DumXI3txV98E=) 8: TqDntdHJZddaYt_ZyotBF9-hm14.roa (hash: VjSEFTxxCdGkCwFWGpwHDnoo4e0X5kbRBsmPmmTPxWI=) 9: WvAmQJBuWNK-A1dgFB9mFwv86Gk.roa (hash: i6VXTVtK2u+Sa4dxw7J/aRal1n9vO5pWlCr6D3BmpWo=) 10: XhZYqo-93sizkFwJq1Oc8KABtwQ.roa (hash: FFax2+o10DIFWYK/5aiR6THgjmcFiIwVqFNYjJSFM+w=) 11: bPSazfrJEoM_auhnCGJjDI29Zwk.roa (hash: pMTZbr0m442O8974ozmFdKCgEYF3GhKq7mIvRyWA1Yc=) 12: jlnRp7Jr9ytnSH4nVGSVmBf_k6o.roa (hash: 7kRo5njKROlYBvZ0FU20K/hBTNAanIB/DZh3W6WgLMY=) 13: q-BhPuQnM-Q-h6hN62IefM9bmG4.roa (hash: OIcCu5qI8ffXeo2TrrcMk7ECFhZnyqwj4znnE1b0z/Y=) 14: wZMooB7OVcFLzuI4NUrersbqikQ.roa (hash: pEN10g0qlhvjBHq9CVkl9+QR6Ky5ASwHfrEgR03oriI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 09 Jul 2026 06:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:40:51:d1:6c:8f:80:d4:2d:58:7d:e0:28:a7:e0:ec:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477 Validity Not Before: Jul 8 06:02:11 2026 GMT Not After : Jul 9 06:02:11 2026 GMT Subject: CN=ee4be0a6d9263beef7efac70148d7be7c8a7314d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:97:ab:cc:c3:ca:71:57:3e:eb:97:41:97:46: 52:77:42:04:41:9a:35:df:0a:91:75:2b:28:e4:cf: 79:d0:63:74:08:d6:98:c6:78:b3:66:3d:c3:13:7a: 26:c3:46:6f:f4:ed:8b:e5:fe:a9:5c:3a:9e:7f:7a: c9:ee:cd:13:f7:64:3b:db:8c:6d:80:ba:8b:1f:51: 63:03:e5:38:52:da:be:19:f9:60:5d:63:55:a2:63: 5c:2b:de:db:e6:75:ae:35:27:2f:ee:e3:41:b2:5e: 7d:75:54:1d:be:e5:ce:c9:ad:fd:28:3d:59:41:41: c6:fd:68:f1:9f:5f:a0:90:72:13:2a:d4:38:47:62: a7:2d:67:43:6b:1e:8c:12:63:b4:3a:f9:df:84:de: ac:21:1e:04:2a:02:72:ab:31:ee:c5:dc:c4:33:bb: 20:3a:e8:06:0d:e8:84:b7:28:20:fd:97:6c:4f:a3: 71:44:cd:e7:57:99:68:de:fc:50:45:86:0f:ca:67: ab:34:6c:ea:f4:07:92:34:2e:4d:d6:c5:bb:1e:a7: 38:6f:fa:ba:81:38:d8:c5:42:31:25:03:fc:f2:1e: 04:a1:ca:51:bd:03:fd:2a:f4:cf:87:a5:47:6c:b4: 5a:f8:82:e0:02:8e:94:98:5c:35:6f:ba:b8:91:dc: f2:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:4B:E0:A6:D9:26:3B:EE:F7:EF:AC:70:14:8D:7B:E7:C8:A7:31:4D X509v3 Authority Key Identifier: keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:e5:3d:fa:ba:e8:c7:3f:73:e6:bf:5e:f1:f6:78:b5:77:17: 27:af:54:1e:43:9c:29:fa:af:ab:f9:f5:4d:4d:9f:90:61:46: 11:d2:ad:ff:2d:24:ec:b9:e0:a5:3a:58:30:f2:92:ba:e2:59: 15:33:02:9d:0f:cc:0c:b5:e4:8a:0c:9b:71:91:fc:67:6b:8e: d3:67:7c:88:3c:18:1d:8d:fa:82:1c:ea:36:92:98:ae:ff:46: d6:a5:2b:51:77:cb:37:49:3c:f6:25:05:4a:58:d7:fd:34:f0: 93:4c:5c:42:0e:ed:30:4e:f5:c9:3a:22:02:1c:6e:63:cc:13: 7d:30:06:45:0b:cc:41:c3:9f:86:b5:ae:5f:54:36:cd:20:23: 66:de:66:ea:cf:4c:8a:cd:51:4e:33:71:d9:50:02:6f:d0:4b: 1a:cc:dc:29:19:6c:56:7c:60:10:11:6b:62:a6:a4:12:6d:99: 3b:67:c4:e9:e6:a5:96:b5:18:fb:c3:55:29:f5:c3:c2:b7:f1: b9:7a:5e:47:f8:2e:b1:4a:a1:c2:61:59:c1:b8:5b:9c:49:a6: ec:c2:ee:16:33:e5:a0:89:60:48:65:0f:73:b2:c1:13:5b:d3: 72:b5:b3:00:3a:7c:50:4f:fc:ee:23:58:2f:89:99:05:50:02: 7e:c4:c6:11 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ9AUdFsj4DULVh94Cin4Ox2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YTc1MjJkMjdlNjJhZTIzYTQ2MDE0M2ViYTY3MzNiNzli MjQ0NzcwHhcNMjYwNzA4MDYwMjExWhcNMjYwNzA5MDYwMjExWjAzMTEwLwYDVQQD EyhlZTRiZTBhNmQ5MjYzYmVlZjdlZmFjNzAxNDhkN2JlN2M4YTczMTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5erzMPKcVc+65dBl0ZSd0IEQZo1 3wqRdSso5M950GN0CNaYxnizZj3DE3omw0Zv9O2L5f6pXDqef3rJ7s0T92Q724xt gLqLH1FjA+U4Utq+GflgXWNVomNcK97b5nWuNScv7uNBsl59dVQdvuXOya39KD1Z QUHG/Wjxn1+gkHITKtQ4R2KnLWdDax6MEmO0OvnfhN6sIR4EKgJyqzHuxdzEM7sg OugGDeiEtygg/ZdsT6NxRM3nV5lo3vxQRYYPymerNGzq9AeSNC5N1sW7Hqc4b/q6 gTjYxUIxJQP88h4EocpRvQP9KvTPh6VHbLRa+ILgAo6UmFw1b7q4kdzy6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO5L4KbZJjvu9++scBSNe+fIpzFNMB8GA1UdIwQY MBaAFNSnUi0n5iriOkYBQ+umczt5skR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVeU9+rro xz9z5r9e8fZ4tXcXJ69UHkOcKfqvq/n1TU2fkGFGEdKt/y0k7LngpTpYMPKSuuJZ FTMCnQ/MDLXkigybcZH8Z2uO02d8iDwYHY36ghzqNpKYrv9G1qUrUXfLN0k89iUF SljX/TTwk0xcQg7tME71yToiAhxuY8wTfTAGRQvMQcOfhrWuX1Q2zSAjZt5m6s9M is1RTjNx2VACb9BLGszcKRlsVnxgEBFrYqakEm2ZO2fE6eallrUY+8NVKfXDwrfx uXpeR/gusUqhwmFZwbhbnEmm7MLuFjPloIlgSGUPc7LBE1vTcrWzADp8UE/87iNY L4mZBVACfsTGEQ== -----END CERTIFICATE-----Generated at Wed Jul 8 13:12:38 2026 by rpki-client