$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft File: tOgroXFdaurlsBAnJf_gyDRzXX0.mft (raw, json) Hash identifier: WgoddaYrRMpx8kD2alQdIacqFtDTvXIALUYMGYkxe/8= Subject key identifier: F1:33:36:8E:56:79:E7:CC:14:5D:A1:A9:E0:60:D1:D4:70:8E:11:FB Authority key identifier: B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D Certificate issuer: /CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Certificate serial: 01A00F98EE4989ED405FB249234AFA4275E8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft Manifest number: 1208 Signing time: Mon 17 Aug 2026 12:01:15 +0000 Manifest this update: Mon 17 Aug 2026 12:01:15 +0000 Manifest next update: Tue 18 Aug 2026 12:01:15 +0000 Files and hashes: 1: 1-qgyilt4mW5S7R3DpKdq7Oz7i3g.roa (hash: p4IRMRrJZgnKi2WdlcOaJkOpKGoVzi49HMW6WN0NrJ8=) 2: 7YLSJcQGBA653iyy1fHxIGb92P0.roa (hash: h4RVKl8L8VOgh9a6P3PTZvMiWUsau7R0BpqtJhT+8/Y=) 3: 8lzOqg36QfNkeg8Q6Az_2mhb-pY.roa (hash: W0oPaRSAv7Mlqt/bxzWLXb0GBYOFj3ar/XeEXfhCbx8=) 4: LgR3McOgyTpzCVXi0apdiSU4UhY.roa (hash: O6hm7PXUeVsbsroLDw55f/gk3SNtDWgRnBz2fnXsCuw=) 5: QViCpxHL7TeWgNCiZk4rKUO-8KU.roa (hash: lHQxRnJhPCjs1WHfqXj6jxi3Fa+6Jf53oEHyU2j2aik=) 6: iy1Tvz9vWB_OyKw6kX0SPKuwaMg.roa (hash: f91SOkfNEhx8xn/tAVUdyzoJrhGRQTUbnnTsdxKuQ64=) 7: qI_-6h3iudeXwj_KCEW7jVNBeSs.roa (hash: VCf8NA7/YCd9pNMoP3NeZ5lHDYrKSJzJ143pwqaxHAQ=) 8: tOgroXFdaurlsBAnJf_gyDRzXX0.crl (hash: 4G2KzF6LyWm5apWHRsysyHa4JOw6NssdMoVIjPZHd88=) 9: ws_lvviOWiUn6-n1_mvWXNHp31I.roa (hash: 3Nbd+pvEno+PaE0bZIzANyUWQU5DEYEW5i11jMtE2XI=) 10: x8JpwXfRjntSd4pmuLKwDDhw_i4.roa (hash: OFNInH/Vi9/sinG5vzHXVvidAVrgK9tFLxn9nt+UYfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 18 Aug 2026 12:01:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:0f:98:ee:49:89:ed:40:5f:b2:49:23:4a:fa:42:75:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4e82ba1715d6aeae5b0102725ffe0c834735d7d Validity Not Before: Aug 17 12:01:15 2026 GMT Not After : Aug 18 12:01:15 2026 GMT Subject: CN=f133368e5679e7cc145da1a9e060d1d4708e11fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6a:d4:0c:0d:4a:6d:87:c2:8c:00:9d:52:a9: b6:7b:68:12:31:a5:0f:09:54:e7:76:b6:e0:dc:48: 19:e3:0c:5d:74:0e:f4:aa:da:2f:4d:6a:5b:78:be: 66:4e:9c:59:65:b7:b0:28:83:47:e5:70:f2:ba:35: 24:f8:06:85:b3:47:18:05:d9:34:17:7d:f3:66:f6: f1:c3:cb:51:2a:3c:6e:c3:69:56:3d:cb:98:05:1a: c1:4b:ea:81:60:48:87:3e:34:3f:42:40:9d:51:01: 1e:14:46:c6:f1:53:31:ca:7e:66:bb:7a:ad:3b:bc: 77:1d:dd:08:da:ec:78:9e:b3:84:3f:6b:96:37:25: ce:3f:f6:77:96:f9:e5:1a:f1:5d:0c:13:06:ee:2e: c2:34:d9:70:e6:62:55:af:76:57:10:d7:b7:df:de: 1c:87:1c:35:a9:cc:9c:9d:16:9e:51:e7:86:10:49: b5:7b:b5:4c:5f:49:d4:46:27:cb:e8:da:2a:01:6d: db:0e:fe:88:95:ba:87:2a:25:86:05:85:40:d4:38: 85:60:cc:df:0b:2d:28:be:40:3f:06:8a:2a:14:b3: bd:92:dd:e8:de:63:01:77:10:93:89:d4:36:6c:2e: 39:3e:e9:ce:4a:06:44:d0:39:02:36:0f:4a:69:98: d4:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:33:36:8E:56:79:E7:CC:14:5D:A1:A9:E0:60:D1:D4:70:8E:11:FB X509v3 Authority Key Identifier: keyid:B4:E8:2B:A1:71:5D:6A:EA:E5:B0:10:27:25:FF:E0:C8:34:73:5D:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tOgroXFdaurlsBAnJf_gyDRzXX0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/9151c0-3326-4801-9363-c7d19930d66d/1/tOgroXFdaurlsBAnJf_gyDRzXX0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:27:b2:04:82:d5:50:09:b0:e1:2f:0a:f8:58:4c:a2:c9:7a: 4f:e6:5d:d0:b4:85:be:9a:5d:d4:e3:da:35:81:65:5f:b1:54: 27:56:af:2f:94:56:41:a9:d6:a1:bd:10:8d:31:20:08:d6:18: de:78:de:2e:27:92:8a:6d:d1:b2:12:2f:0f:71:f5:f2:23:d8: 80:62:d6:2b:c6:e4:17:25:e0:4d:d4:de:17:4f:2c:a8:b9:a4: 0c:ee:44:29:4b:4b:71:c9:0d:ed:b3:84:84:e4:12:f7:0c:94: 46:40:90:6b:80:f5:35:13:6f:f9:ae:56:f5:fc:2e:3a:f6:69: 8d:92:7f:56:00:99:91:88:30:d7:6a:0f:4a:4e:97:92:67:c8: 74:2a:7e:6c:39:d8:a6:85:e6:35:86:76:6c:cd:6d:c3:a5:db: 9d:75:02:24:76:e4:f2:ab:b8:99:e0:de:e7:c9:da:22:41:51: 0c:74:8d:72:46:77:d6:f9:1f:67:35:8f:c9:7c:01:be:4a:aa: a6:97:4c:88:00:be:24:47:8c:42:3b:2c:10:e1:b2:5b:a3:d5: d2:87:a3:b6:59:6b:9d:50:a2:ca:ff:e8:09:13:b1:92:c5:20: a6:87:8d:f0:a2:88:8a:a2:c9:2c:50:f3:6f:7e:4a:6e:13:94: 46:31:36:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAPmO5Jie1AX7JJI0r6QnXoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI0ZTgyYmExNzE1ZDZhZWFlNWIwMTAyNzI1ZmZlMGM4MzQ3 MzVkN2QwHhcNMjYwODE3MTIwMTE1WhcNMjYwODE4MTIwMTE1WjAzMTEwLwYDVQQD EyhmMTMzMzY4ZTU2NzllN2NjMTQ1ZGExYTllMDYwZDFkNDcwOGUxMWZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGrUDA1KbYfCjACdUqm2e2gSMaUP CVTndrbg3EgZ4wxddA70qtovTWpbeL5mTpxZZbewKINH5XDyujUk+AaFs0cYBdk0 F33zZvbxw8tRKjxuw2lWPcuYBRrBS+qBYEiHPjQ/QkCdUQEeFEbG8VMxyn5mu3qt O7x3Hd0I2ux4nrOEP2uWNyXOP/Z3lvnlGvFdDBMG7i7CNNlw5mJVr3ZXENe3394c hxw1qcycnRaeUeeGEEm1e7VMX0nURifL6NoqAW3bDv6IlbqHKiWGBYVA1DiFYMzf Cy0ovkA/BooqFLO9kt3o3mMBdxCTidQ2bC45PunOSgZE0DkCNg9KaZjUiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPEzNo5WeefMFF2hqeBg0dRwjhH7MB8GA1UdIwQY MBaAFLToK6FxXWrq5bAQJyX/4Mg0c119MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMt YzdkMTk5MzBkNjZkLzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy85MTUxYzAtMzMyNi00ODAxLTkzNjMtYzdkMTk5MzBkNjZk LzEvdE9ncm9YRmRhdXJsc0JBbkpmX2d5RFJ6WFgwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSeyBILV UAmw4S8K+FhMosl6T+Zd0LSFvppd1OPaNYFlX7FUJ1avL5RWQanWob0QjTEgCNYY 3njeLieSim3RshIvD3H18iPYgGLWK8bkFyXgTdTeF08sqLmkDO5EKUtLcckN7bOE hOQS9wyURkCQa4D1NRNv+a5W9fwuOvZpjZJ/VgCZkYgw12oPSk6XkmfIdCp+bDnY poXmNYZ2bM1tw6XbnXUCJHbk8qu4meDe58naIkFRDHSNckZ31vkfZzWPyXwBvkqq ppdMiAC+JEeMQjssEOGyW6PV0oejtllrnVCiyv/oCROxksUgpoeN8KKIiqLJLFDz b35KbhOURjE2IQ== -----END CERTIFICATE-----Generated at Mon Aug 17 21:15:58 2026 by rpki-client