$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft File: Ka7sqK_wmbK64FeB3KjdkCfw2is.mft (raw, json) Hash identifier: oHMS7FNvdrMMPdr0GrmZXa6nAtv/fw+UyCnzOwckK54= Subject key identifier: BF:3A:0E:2A:25:17:15:93:7D:79:DB:F5:F7:8D:4D:89:5D:71:F6:BF Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b Certificate serial: 019F9EF13C6928064ACB0BECE88BC435C5D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft Manifest number: 47 Signing time: Sun 26 Jul 2026 15:00:37 +0000 Manifest this update: Sun 26 Jul 2026 15:00:37 +0000 Manifest next update: Mon 27 Jul 2026 15:00:37 +0000 Files and hashes: 1: 1q_wYD9UWOnoJzVrOoUZdi0ptKs.roa (hash: VrKJCQshMNsRpRS3xMtIqZM3UIX0Rv/9TMlKh43+0eE=) 2: 41i4ev5edbKVJwvdRc7UmMCrvCg.roa (hash: m9BCRj3y94R37HOuPnWLtwP7M0mYu2TFW0DGKzHM/Z8=) 3: 50FgNVwdKIXZBSoi9_tx_m369VY.roa (hash: ECrdWmJHCoSD4ehG05AezfCmwTDPcEay5D7cVyccxQw=) 4: 7yrgfzbw8vVRPOjj7HWXtxyf49Q.roa (hash: md2tHitigyecVuWcaFRQgwV0T+xTsDPtPKLbeAD5RVI=) 5: BdOjrY77wFG1RfqnZLrdZFMXaRg.roa (hash: bODeK0rFTfjBKeuHpe99mPxykv44Z0oBibXlE79cC5U=) 6: CMNbNRcCvJYta4I3SR690vGlcIk.roa (hash: UlA+tY+RKmri+LmE5xkXLgOH7gr/Xqc/aktVpD7DYlE=) 7: FLDisamNsDJXm_1lT92yfeRj3fw.roa (hash: WM25J4c59hU5SI4kz6OM2HoWYEmKXTDdKjYCSlG2JzI=) 8: GS38DtcRNFiCDgomRRGuYwhjhtk.roa (hash: vhy5Ct6d/4AD2NqH7XvOO/NEboMBe6M9200o1l76a98=) 9: IDFQmB2_BNbe8TZvBZB6pYkqhGU.roa (hash: dE0Z7qv5NDY7r0/9XxQ9jfsrqbdxqd+FO+WrhOi5Glg=) 10: Jj70oOtEM3MPYlWgVX1aJYN3MXw.roa (hash: xzFEEvPbBuccgBOT1CsatLmHtV69WRilCT0khWKpwtQ=) 11: Jk_N7QSRVi_cTxcu3qy15ogPA68.roa (hash: Rmy9FhhubCl3WFg5IP5VOAwqyczxSE6B2MhGe3ccsM0=) 12: Ka7sqK_wmbK64FeB3KjdkCfw2is.crl (hash: 26jmU+iSzz5Vmu1G0ZpXwGaoDifmk7NJ9OUAg4EiLHg=) 13: NklB14-VXLI3MM6lJe389quYPZU.roa (hash: D2ILNVHNm82CCp8tZk+B53IKie8TqikfqpmmGRxzs5M=) 14: Nm4xRZFoUQYgfkribm27I-ia0A4.roa (hash: +WfDXeUOKEI8eZzwDRsNxLfNhVA9PG5muieZGc5CPQI=) 15: VOA0hCAmccn3JFjBj1YG73p2_z4.roa (hash: fdiyK2e1RDodBjjbIJyeBT4dY1npNcatRvvQ4NjK3Go=) 16: WFW6qhbNTOwNvMn1wBdtZc0maBc.roa (hash: 4FeYT4PmqlfqsjKx24dhNEkHWmZbQRRBE78LWYeUekw=) 17: ZOUpcJbmawhfKT6X9vbpqXgFbzE.roa (hash: t1IEQIm5R7nnAL2Bg46AN21+xubthTU7oKqD6v54mRI=) 18: _WY29sxvL7eTgbKFEoCzs5DGbWk.roa (hash: 0n3QlO/r3sjWRk/sTTbpZIaERpyILu3lDPLbKxDkXXE=) 19: h-EWcWkmbvgj39jkxm-JcD4jNys.roa (hash: 5gX5iFM/ehmHTHBUKpjDT1zVGwl4cU31igc51yeX2UU=) 20: j4Fd2DjxWr_xPGcMiuUhdZLMc30.roa (hash: KhwmTUHddEmqeMPHDyYX5yKpCm2bT7FKBk70Iu6qVsU=) 21: kA7PdZv1BHY99jFpYu5rnXF5Gpw.roa (hash: cX0Aca9kGYKiN/9m9sBSvjG37vCXXVdWtb4rGx97cf8=) 22: lUlD9gbYsyOLr3r0s3Uaa4KVupU.roa (hash: Bx05tts8mxf//4522K5SFSuxKCitbQyyOHV0CHxYOm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9e:f1:3c:69:28:06:4a:cb:0b:ec:e8:8b:c4:35:c5:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b Validity Not Before: Jul 26 15:00:37 2026 GMT Not After : Jul 27 15:00:37 2026 GMT Subject: CN=bf3a0e2a251715937d79dbf5f78d4d895d71f6bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:56:82:f4:06:06:4a:1d:9c:78:72:95:c6:d5: e9:8a:44:4e:a0:73:4f:f2:1f:11:44:bc:ec:a9:0e: 11:2e:6f:28:12:5b:05:22:25:fb:3f:74:72:94:5f: f3:5a:c4:38:c2:a9:00:b4:68:1a:1d:17:78:ed:b8: ab:09:99:1f:23:ac:42:3b:c2:23:19:18:df:4d:4f: e1:53:c5:84:11:77:88:ad:2c:95:6d:fa:b0:8b:87: 04:76:76:d2:92:3b:91:e4:57:97:bb:72:df:3f:60: bb:58:d7:66:8f:05:7a:57:ca:0e:7c:a3:9e:8f:4d: fc:7c:f3:49:e8:b1:94:bb:f3:06:04:d5:7d:b0:d1: 6f:a2:e3:66:e2:63:19:7d:93:25:ff:77:53:9e:51: 66:7a:bf:94:36:1c:73:ce:df:98:13:52:6c:fc:e7: 70:35:ea:f2:06:dc:31:21:df:88:82:24:2f:b7:95: 2d:1e:fc:0a:8b:2a:2c:6e:82:e8:73:43:ec:af:29: a1:d5:39:55:96:76:d9:bb:1f:bf:59:d5:e7:a5:17: 35:be:70:1c:10:ed:b6:4c:30:43:27:56:a8:a7:ff: 3b:c5:b2:c7:88:37:be:dc:09:95:c6:4b:c5:7b:79: 88:da:4f:7f:d6:37:24:72:89:a3:de:ad:35:3e:f8: a8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:3A:0E:2A:25:17:15:93:7D:79:DB:F5:F7:8D:4D:89:5D:71:F6:BF X509v3 Authority Key Identifier: keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:cc:80:01:bf:b6:00:42:cb:d5:5d:c2:cb:6d:75:89:66:6e: 25:27:29:aa:c1:af:1c:c8:ef:07:89:75:d6:13:11:cc:55:6e: 42:e6:51:35:dc:36:08:97:2d:44:ef:13:a4:34:3d:4e:a9:08: 6a:f6:fc:4d:fe:af:5e:2c:9b:47:5d:b9:4d:13:de:2d:25:33: d7:0d:41:07:31:38:68:cf:a1:16:04:ac:80:76:35:43:7c:77: a3:1a:7c:f9:65:05:4a:93:b3:ba:45:e8:91:e1:8f:8e:30:a4: 75:fe:3e:f3:c9:c1:73:a8:7a:a3:e8:54:33:bf:9a:8a:b6:a9: b1:72:6b:e7:30:4a:8e:eb:fc:9a:17:05:b1:1a:d0:2a:c1:13: 32:fa:98:12:62:8e:0f:be:d8:bd:c0:53:69:93:dc:2e:fe:08: 4a:06:a1:d5:8c:38:7d:5c:b4:c8:55:42:64:25:9d:0c:9f:3d: 79:52:d5:8f:ce:31:d6:8e:9f:de:5d:cc:17:84:ae:26:60:ed: ae:26:d7:2e:e2:1d:1a:e5:ce:39:a5:5a:be:aa:8e:4b:12:c1: 7e:92:78:e1:97:99:30:b5:74:db:c3:0c:46:e4:42:67:6b:01: c4:56:27:d0:45:09:2e:e7:eb:f3:b0:36:0a:7c:ce:74:79:4c: 6d:01:b3:83 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+e8TxpKAZKywvs6IvENcXWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YWVlY2E4YWZmMDk5YjJiYWUwNTc4MWRjYThkZDkwMjdm MGRhMmIwHhcNMjYwNzI2MTUwMDM3WhcNMjYwNzI3MTUwMDM3WjAzMTEwLwYDVQQD EyhiZjNhMGUyYTI1MTcxNTkzN2Q3OWRiZjVmNzhkNGQ4OTVkNzFmNmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVaC9AYGSh2ceHKVxtXpikROoHNP 8h8RRLzsqQ4RLm8oElsFIiX7P3RylF/zWsQ4wqkAtGgaHRd47birCZkfI6xCO8Ij GRjfTU/hU8WEEXeIrSyVbfqwi4cEdnbSkjuR5FeXu3LfP2C7WNdmjwV6V8oOfKOe j038fPNJ6LGUu/MGBNV9sNFvouNm4mMZfZMl/3dTnlFmer+UNhxzzt+YE1Js/Odw NeryBtwxId+IgiQvt5UtHvwKiyosboLoc0Psrymh1TlVlnbZux+/WdXnpRc1vnAc EO22TDBDJ1aop/87xbLHiDe+3AmVxkvFe3mI2k9/1jckcomj3q01PvioRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL86DiolFxWTfXnb9feNTYldcfa/MB8GA1UdIwQY MBaAFCmu7Kiv8JmyuuBXgdyo3ZAn8NorMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdcyAAb+2 AELL1V3Cy211iWZuJScpqsGvHMjvB4l11hMRzFVuQuZRNdw2CJctRO8TpDQ9TqkI avb8Tf6vXiybR125TRPeLSUz1w1BBzE4aM+hFgSsgHY1Q3x3oxp8+WUFSpOzukXo keGPjjCkdf4+88nBc6h6o+hUM7+airapsXJr5zBKjuv8mhcFsRrQKsETMvqYEmKO D77YvcBTaZPcLv4ISgah1Yw4fVy0yFVCZCWdDJ89eVLVj84x1o6f3l3MF4SuJmDt ribXLuIdGuXOOaVavqqOSxLBfpJ44ZeZMLV028MMRuRCZ2sBxFYn0EUJLufr87A2 CnzOdHlMbQGzgw== -----END CERTIFICATE-----Generated at Mon Jul 27 00:38:19 2026 by rpki-client