$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft File: pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft (raw, json) Hash identifier: 8P6C6VCnzrdFHB2277R9pqIt0qpiS8qeCkyjkPWYj1s= Subject key identifier: B6:56:2A:61:BD:55:CF:4A:25:B4:8B:BC:D0:D4:1C:53:51:12:C9:85 Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2 Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2 Certificate serial: 019F389822986EEA1BCDF047AA85BA161D37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft Manifest number: 12 Signing time: Mon 06 Jul 2026 18:02:02 +0000 Manifest this update: Mon 06 Jul 2026 18:02:02 +0000 Manifest next update: Tue 07 Jul 2026 18:02:02 +0000 Files and hashes: 1: 2OM9F-ynYI7nKV68vz7MKBmoAcA.roa (hash: p55w46f06nkZCeBDXOOnXNkrx6MfMkBzLizXi7yr8Fo=) 2: 8eWn-LZ8SHda6Hq0PZ8MjLvheII.roa (hash: t0Q9JGg0FFkCyUnnAjxlIairjnAp1fGIhWq7kxGfNJg=) 3: E2z6-aE0lSQ3PEiEzxW-JiraDEE.roa (hash: KsnALsa02zQjMMj5q5msrnek1tk5/ZfIcaQoMmke+mE=) 4: EFeoepCweNchcY3yfWtwGD_ZuaI.roa (hash: pYKBI/KFA8wkQgixMUY8skRW5VKXK8M6e31dK0HwAis=) 5: G_cJpHD_tLUwCg2RMVO24zq3Grw.roa (hash: xNL/dYNyvvIlOS2j+6Eyo8zzNd4uG3W4GbIaOCiKFl4=) 6: HAt__vrw52VuZkpPDGhyJ1Sqq6U.roa (hash: j9XKjBk7nFDWQWKVzLFTasY9jD5D/3qYwK+3ZpEzpj0=) 7: I4AgYPx6q-AXqCOLfyv2qdwV6wU.roa (hash: 8y1qmodCTXEdWfudBIOg5DrmRpEF6FezAaUs7Ropbsg=) 8: JEVNWQm_Cx4mWqq5f1Vg9xZ9JzQ.roa (hash: suXL0V83sdkLjwTY6BS/4DMQepDMTnnLPjHsyUslYPM=) 9: JpbDWGlEPEX32kqGhGQOeWSYx5Q.roa (hash: JNJaUsPN0pZohEeyDrNgCF5tl5YPCYCRSpC1PRT7kZo=) 10: MlxaAHik4Irhhg2pDV_s_Rvf7bI.roa (hash: 3NA/JBsu3EKmNF330/KjUrrDVxnecTt8Q2GPQT4XUMo=) 11: O1gPaiiuHk3Ynoh8wcqM-XkdraY.roa (hash: suwi7xOa2pEQsq5Ilao9i/obnAr3R24ZSt95W5s3w8g=) 12: QOM15JeN0LuoBWCIcbxrvBihxTo.roa (hash: RgmDFHjBWCEG8nuyIsqAeoRJCFfCkfWjGGmoJpZMo70=) 13: R26ho8RD5wA-FJFM2n4H8lCIMDU.roa (hash: K8bV/6TdZ6xy+XDttrJ2eOGl3w4V8h8EbfrCk8vy/rQ=) 14: SirBpcdRe0m-u_7kALpPCFiPrPs.roa (hash: Z3DSwVfj4GWtECnzKi66mFueac7BJgJGEnZh6Zx4AQg=) 15: UNcrdBCA_IAi--0l3IsFosaU7lY.roa (hash: 8FZC4gbje388SsnaqTJsrZ50Gofq4vRkK1UBtNYlK+4=) 16: X4pU60oDGJrdQI6mIHlAf5rK9qE.roa (hash: pOrJ7LztgT1wu4oDyjOGr9iWSnnOAH4w2AcPvFhqBnA=) 17: Xy2lL2DYT88B5SmizPLux-GXV3Q.roa (hash: Mh0mK933Nfyx6zsgugTVc4TLaFDjax/ayFtH6UHp1oo=) 18: ak2Qp1unBPBGGKshocpx5pL8uig.roa (hash: mOmd1/1RN87KSSOrhLIJgH1FH+upMs+93rOqXUD4go4=) 19: g4bMCR1I2A-6CXSx0W_2l3WKHNg.roa (hash: W5QhjY/Vw7lnM6k8E56FkxoOhrKCflFe48p21g7wGsM=) 20: i5MOqIaSyXP0Wf307JZ-H9fPCU8.roa (hash: WqvJAJL4M1ePBiSqQQISn5kDX+foal+qOH30XzgeJBs=) 21: n5NcxiT9PS0KRcc3R-BBqbuxAco.roa (hash: bz9bpUxzgrZqP4jqMtfZiRv9Qka9ZHViEEqOfmNETJA=) 22: os3bcu3roUzbLBzHQwm9bp3nxZ8.roa (hash: lfz697NMPxlXy6wIBOMRer/mHkvfB1xMD+9SuaGfDyQ=) 23: pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl (hash: 3RxAwM//VWG+NDIyfkxRF54Li1YpkzLBtl4OnJPMHo0=) 24: wyD5rZUYnotDvDLBTn1HvdDE-sg.roa (hash: LP8H59Ja7nr0y53p7ISvyJuUcJ0QD06m9kkaSrByJHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 07 Jul 2026 14:46:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:38:98:22:98:6e:ea:1b:cd:f0:47:aa:85:ba:16:1d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2 Validity Not Before: Jul 6 18:02:02 2026 GMT Not After : Jul 7 18:02:02 2026 GMT Subject: CN=b6562a61bd55cf4a25b48bbcd0d41c535112c985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1e:be:59:c2:d0:9f:7e:b3:ef:88:63:e2:c5: 75:ec:1d:c4:8e:ed:64:98:d0:e4:d2:02:f5:11:e9: 33:a2:31:94:ce:db:19:0b:80:3b:b1:e8:5b:58:79: b8:d0:d5:78:3f:50:35:5c:ba:99:c3:7a:da:78:6b: d4:97:c1:8d:02:5e:ad:84:7a:30:25:9c:a8:2b:ad: 53:5e:67:0c:1b:fd:a0:6f:c4:29:5d:50:32:f2:8f: ee:db:ef:b4:98:53:dd:e5:f7:5c:da:7f:a9:82:b7: d0:ae:48:aa:e4:e7:9f:a0:ac:9d:de:ee:fe:cf:fd: 15:7e:1e:bd:37:7d:ac:e2:ce:25:10:7f:9f:97:ff: 96:d5:55:b1:ec:14:7d:f0:e7:3e:00:b9:10:dc:4d: 51:a5:73:4e:a0:b2:f9:fb:85:c1:92:8f:3d:c6:f5: 9b:ee:67:e0:83:a7:6a:64:99:91:80:44:13:14:45: 3d:25:22:14:c5:a8:46:30:2b:fd:e8:1a:09:2c:09: fd:9a:9c:83:32:66:31:d7:27:34:9d:45:39:51:87: 41:6e:97:7c:87:e7:04:50:be:90:89:82:ae:f3:aa: 9b:28:54:10:01:84:bb:b1:b3:7d:7d:d0:ae:16:2a: 23:00:e8:a1:30:d1:88:3b:30:af:53:62:8c:b0:8b: 8b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:56:2A:61:BD:55:CF:4A:25:B4:8B:BC:D0:D4:1C:53:51:12:C9:85 X509v3 Authority Key Identifier: keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:77:34:0d:36:44:0f:b1:0e:b6:13:6d:30:61:65:c4:dd:fe: e0:01:b3:e8:e0:c7:cb:79:20:8f:8d:d8:c7:d0:89:1f:7e:8d: 02:5d:75:94:97:00:3a:fa:b7:de:3b:f8:cd:2b:71:70:0d:db: dd:2c:a9:92:b4:b6:35:36:b5:8d:95:e6:c3:0c:1b:9b:92:29: 98:89:55:16:7e:45:14:80:0e:bc:29:02:5a:d5:ed:5b:9f:28: 28:25:70:3f:90:64:ec:74:c9:ac:e5:26:3f:15:0c:6f:7e:36: bc:a0:1c:c6:aa:49:b1:42:3d:42:6b:a6:42:60:e0:0c:76:c5: 13:e9:24:9f:74:3c:f5:31:88:b6:b4:2d:f2:35:be:1c:ab:e2: 40:a1:bb:c5:48:6c:cc:4f:ad:12:91:c2:5a:ba:0b:4c:df:ce: 80:40:e9:f3:66:ed:21:e3:c3:41:6b:da:6d:a5:85:c7:9d:d7: 71:3d:e5:18:fe:b7:45:4f:de:09:09:0c:b0:72:af:83:74:ba: 6b:f4:3a:d1:03:b7:45:2b:42:21:f0:d6:17:57:6f:f4:86:f4: fa:24:d9:99:bb:8b:5a:93:d5:a6:17:34:57:80:d3:5f:ff:8a: 4b:ea:b9:eb:31:65:5a:f5:36:c4:54:3d:ed:cd:fe:53:c6:8e: cb:b6:1f:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ84mCKYbuobzfBHqoW6Fh03MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3 ZDE3ZTIwHhcNMjYwNzA2MTgwMjAyWhcNMjYwNzA3MTgwMjAyWjAzMTEwLwYDVQQD EyhiNjU2MmE2MWJkNTVjZjRhMjViNDhiYmNkMGQ0MWM1MzUxMTJjOTg1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqB6+WcLQn36z74hj4sV17B3Eju1k mNDk0gL1EekzojGUztsZC4A7sehbWHm40NV4P1A1XLqZw3raeGvUl8GNAl6thHow JZyoK61TXmcMG/2gb8QpXVAy8o/u2++0mFPd5fdc2n+pgrfQrkiq5OefoKyd3u7+ z/0Vfh69N32s4s4lEH+fl/+W1VWx7BR98Oc+ALkQ3E1RpXNOoLL5+4XBko89xvWb 7mfgg6dqZJmRgEQTFEU9JSIUxahGMCv96BoJLAn9mpyDMmYx1yc0nUU5UYdBbpd8 h+cEUL6QiYKu86qbKFQQAYS7sbN9fdCuFiojAOihMNGIOzCvU2KMsIuLwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLZWKmG9Vc9KJbSLvNDUHFNREsmFMB8GA1UdIwQY MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQHc0DTZE D7EOthNtMGFlxN3+4AGz6ODHy3kgj43Yx9CJH36NAl11lJcAOvq33jv4zStxcA3b 3SypkrS2NTa1jZXmwwwbm5IpmIlVFn5FFIAOvCkCWtXtW58oKCVwP5Bk7HTJrOUm PxUMb342vKAcxqpJsUI9QmumQmDgDHbFE+kkn3Q89TGItrQt8jW+HKviQKG7xUhs zE+tEpHCWroLTN/OgEDp82btIePDQWvabaWFx53XcT3lGP63RU/eCQkMsHKvg3S6 a/Q60QO3RStCIfDWF1dv9Ib0+iTZmbuLWpPVphc0V4DTX/+KS+q56zFlWvU2xFQ9 7c3+U8aOy7Yf/w== -----END CERTIFICATE-----Generated at Mon Jul 6 23:16:52 2026 by rpki-client