$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft File: pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft (raw, json) Hash identifier: 3Qtg3sCl3gU7LbcBJT43c7ZrQi6pRt0lXbKTfKVST2Y= Subject key identifier: 36:5D:75:EB:D0:64:6A:33:08:D7:D9:F7:81:D0:BF:58:7A:B6:77:EA Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2 Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2 Certificate serial: 01A020F9FCBE1048D1A9D44FFB7ED2E3506D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft Manifest number: 8B Signing time: Thu 20 Aug 2026 21:00:48 +0000 Manifest this update: Thu 20 Aug 2026 21:00:48 +0000 Manifest next update: Fri 21 Aug 2026 21:00:48 +0000 Files and hashes: 1: 8eWn-LZ8SHda6Hq0PZ8MjLvheII.roa (hash: t0Q9JGg0FFkCyUnnAjxlIairjnAp1fGIhWq7kxGfNJg=) 2: Dl8kjWnig9EJLu_V18bsJwWgThI.roa (hash: l/ftiedkdOtevwG6rB8zoiK5YC04kv/8SOqTEc+HzIM=) 3: E2z6-aE0lSQ3PEiEzxW-JiraDEE.roa (hash: KsnALsa02zQjMMj5q5msrnek1tk5/ZfIcaQoMmke+mE=) 4: EFeoepCweNchcY3yfWtwGD_ZuaI.roa (hash: pYKBI/KFA8wkQgixMUY8skRW5VKXK8M6e31dK0HwAis=) 5: G_cJpHD_tLUwCg2RMVO24zq3Grw.roa (hash: xNL/dYNyvvIlOS2j+6Eyo8zzNd4uG3W4GbIaOCiKFl4=) 6: HAt__vrw52VuZkpPDGhyJ1Sqq6U.roa (hash: j9XKjBk7nFDWQWKVzLFTasY9jD5D/3qYwK+3ZpEzpj0=) 7: I4AgYPx6q-AXqCOLfyv2qdwV6wU.roa (hash: 8y1qmodCTXEdWfudBIOg5DrmRpEF6FezAaUs7Ropbsg=) 8: JEVNWQm_Cx4mWqq5f1Vg9xZ9JzQ.roa (hash: suXL0V83sdkLjwTY6BS/4DMQepDMTnnLPjHsyUslYPM=) 9: JpbDWGlEPEX32kqGhGQOeWSYx5Q.roa (hash: JNJaUsPN0pZohEeyDrNgCF5tl5YPCYCRSpC1PRT7kZo=) 10: MlxaAHik4Irhhg2pDV_s_Rvf7bI.roa (hash: 3NA/JBsu3EKmNF330/KjUrrDVxnecTt8Q2GPQT4XUMo=) 11: O1gPaiiuHk3Ynoh8wcqM-XkdraY.roa (hash: suwi7xOa2pEQsq5Ilao9i/obnAr3R24ZSt95W5s3w8g=) 12: QOM15JeN0LuoBWCIcbxrvBihxTo.roa (hash: RgmDFHjBWCEG8nuyIsqAeoRJCFfCkfWjGGmoJpZMo70=) 13: R26ho8RD5wA-FJFM2n4H8lCIMDU.roa (hash: K8bV/6TdZ6xy+XDttrJ2eOGl3w4V8h8EbfrCk8vy/rQ=) 14: SirBpcdRe0m-u_7kALpPCFiPrPs.roa (hash: Z3DSwVfj4GWtECnzKi66mFueac7BJgJGEnZh6Zx4AQg=) 15: UNcrdBCA_IAi--0l3IsFosaU7lY.roa (hash: 8FZC4gbje388SsnaqTJsrZ50Gofq4vRkK1UBtNYlK+4=) 16: X4pU60oDGJrdQI6mIHlAf5rK9qE.roa (hash: pOrJ7LztgT1wu4oDyjOGr9iWSnnOAH4w2AcPvFhqBnA=) 17: Xy2lL2DYT88B5SmizPLux-GXV3Q.roa (hash: Mh0mK933Nfyx6zsgugTVc4TLaFDjax/ayFtH6UHp1oo=) 18: ak2Qp1unBPBGGKshocpx5pL8uig.roa (hash: mOmd1/1RN87KSSOrhLIJgH1FH+upMs+93rOqXUD4go4=) 19: g4bMCR1I2A-6CXSx0W_2l3WKHNg.roa (hash: W5QhjY/Vw7lnM6k8E56FkxoOhrKCflFe48p21g7wGsM=) 20: i5MOqIaSyXP0Wf307JZ-H9fPCU8.roa (hash: WqvJAJL4M1ePBiSqQQISn5kDX+foal+qOH30XzgeJBs=) 21: n5NcxiT9PS0KRcc3R-BBqbuxAco.roa (hash: bz9bpUxzgrZqP4jqMtfZiRv9Qka9ZHViEEqOfmNETJA=) 22: os3bcu3roUzbLBzHQwm9bp3nxZ8.roa (hash: lfz697NMPxlXy6wIBOMRer/mHkvfB1xMD+9SuaGfDyQ=) 23: pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl (hash: JdUmLurOuHC5rOCMp+ljYg9LRnp2vMFPwQQpJ03cOXY=) 24: wyD5rZUYnotDvDLBTn1HvdDE-sg.roa (hash: LP8H59Ja7nr0y53p7ISvyJuUcJ0QD06m9kkaSrByJHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Aug 2026 20:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:20:f9:fc:be:10:48:d1:a9:d4:4f:fb:7e:d2:e3:50:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2 Validity Not Before: Aug 20 21:00:48 2026 GMT Not After : Aug 21 21:00:48 2026 GMT Subject: CN=365d75ebd0646a3308d7d9f781d0bf587ab677ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:43:ae:44:ac:53:91:7d:82:d0:77:a6:d6:e6: f4:e6:29:c6:ae:72:ef:8f:0d:82:a3:09:bd:3a:4f: a2:44:c0:b2:f9:61:6c:75:63:e6:19:f1:2c:f3:94: 1b:06:25:c0:e8:86:c4:4e:05:a4:81:c2:5c:a0:5c: 1c:62:f9:18:6e:8e:9f:f7:ae:6c:e6:34:65:46:55: 75:11:9f:4d:cd:94:ed:f8:74:79:75:e4:42:5f:f4: 53:0a:3e:d6:22:18:d3:d4:1e:3b:9a:ae:28:79:b5: 5f:c3:ea:59:0f:56:a2:de:7f:b2:34:71:c8:38:ec: 0d:ec:0e:51:5d:a9:8b:7e:aa:47:1d:60:6c:d9:fe: 3a:b6:32:46:f7:ea:b0:e4:75:0f:04:b5:e4:58:5c: 84:97:72:0c:9b:4e:1f:33:74:92:fe:a1:80:1a:5c: 80:49:48:86:d0:d7:81:1a:4a:97:ff:1e:a4:60:d3: 78:85:8d:b6:2a:68:e9:9b:a8:6f:09:19:88:7c:f8: 17:0d:f9:89:00:79:43:16:47:37:a1:47:3f:d6:bc: e1:21:9a:08:50:24:66:57:24:40:bb:7e:64:eb:cd: d7:5b:72:29:e7:9e:ff:7e:91:57:64:a0:ac:2a:4d: a2:25:b9:30:85:fd:3e:5c:3b:92:0f:74:21:7d:64: 0e:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:5D:75:EB:D0:64:6A:33:08:D7:D9:F7:81:D0:BF:58:7A:B6:77:EA X509v3 Authority Key Identifier: keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:39:ae:3c:09:41:50:1d:33:86:ef:c4:9d:17:eb:ea:ee:80: 4f:64:55:89:2b:c8:bd:fd:fa:97:61:34:4f:34:bf:23:cd:7d: 63:d5:8c:cd:b9:c7:4a:c4:af:39:7d:99:3b:73:8d:3b:8b:8f: 9c:cd:dd:34:32:79:cc:c3:fa:3d:6a:48:ad:41:05:80:05:76: 05:c1:06:b8:0f:9c:00:49:ae:f2:84:48:2e:83:e4:05:58:7a: 76:c8:bb:53:e4:21:67:7f:a4:e6:bb:10:d6:88:ca:a3:6e:97: e7:bc:2f:50:e1:b9:b6:6c:d3:80:b2:fc:e0:96:3f:25:83:3f: 95:b4:92:d7:ac:00:18:85:b0:7e:6b:b5:2a:2a:0a:19:c3:db: a8:83:4c:d0:85:a2:84:96:2a:aa:b2:90:dc:98:0f:77:23:f5: a6:8c:f0:68:ab:af:53:89:7a:f8:cc:49:d0:7a:52:86:07:47: 6a:42:92:24:65:9f:09:eb:df:88:35:cd:b7:af:fb:0d:4c:59: 82:7f:b6:7b:7f:a7:ec:dd:a9:7b:00:87:1a:19:92:1a:51:e6: 26:dd:47:a8:0e:5e:8e:39:29:53:fd:4b:8a:b2:f4:53:67:fc: 1c:41:77:de:a0:44:11:62:12:53:ad:f2:0f:90:09:0e:7c:cb: 6e:bc:9c:7a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAg+fy+EEjRqdRP+37S41BtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3 ZDE3ZTIwHhcNMjYwODIwMjEwMDQ4WhcNMjYwODIxMjEwMDQ4WjAzMTEwLwYDVQQD EygzNjVkNzVlYmQwNjQ2YTMzMDhkN2Q5Zjc4MWQwYmY1ODdhYjY3N2VhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkEOuRKxTkX2C0Hem1ub05inGrnLv jw2Cowm9Ok+iRMCy+WFsdWPmGfEs85QbBiXA6IbETgWkgcJcoFwcYvkYbo6f965s 5jRlRlV1EZ9NzZTt+HR5deRCX/RTCj7WIhjT1B47mq4oebVfw+pZD1ai3n+yNHHI OOwN7A5RXamLfqpHHWBs2f46tjJG9+qw5HUPBLXkWFyEl3IMm04fM3SS/qGAGlyA SUiG0NeBGkqX/x6kYNN4hY22Kmjpm6hvCRmIfPgXDfmJAHlDFkc3oUc/1rzhIZoI UCRmVyRAu35k683XW3Ip557/fpFXZKCsKk2iJbkwhf0+XDuSD3QhfWQOeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDZddevQZGozCNfZ94HQv1h6tnfqMB8GA1UdIwQY MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArjmuPAlB UB0zhu/EnRfr6u6AT2RViSvIvf36l2E0TzS/I819Y9WMzbnHSsSvOX2ZO3ONO4uP nM3dNDJ5zMP6PWpIrUEFgAV2BcEGuA+cAEmu8oRILoPkBVh6dsi7U+QhZ3+k5rsQ 1ojKo26X57wvUOG5tmzTgLL84JY/JYM/lbSS16wAGIWwfmu1KioKGcPbqINM0IWi hJYqqrKQ3JgPdyP1pozwaKuvU4l6+MxJ0HpShgdHakKSJGWfCevfiDXNt6/7DUxZ gn+2e3+n7N2pewCHGhmSGlHmJt1HqA5ejjkpU/1LirL0U2f8HEF33qBEEWISU63y D5AJDnzLbryceg== -----END CERTIFICATE-----Generated at Fri Aug 21 03:58:55 2026 by rpki-client