$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: /tWkrZwe0RJ/8YWkadhzGJi6ZUOKDYNYWh8lngJiAkY= Subject key identifier: 21:2E:D5:79:78:9B:D0:ED:2D:0C:AE:01:A7:48:6E:4D:94:98:00:3A Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 019FF97F2B70106051EF24D1BE39169A7F12 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 1A27 Signing time: Thu 13 Aug 2026 05:01:28 +0000 Manifest this update: Thu 13 Aug 2026 05:01:28 +0000 Manifest next update: Fri 14 Aug 2026 05:01:28 +0000 Files and hashes: 1: 0ld9oICrjkM9PiOBYi7PkCMaP7g.roa (hash: 7pPoPeKMxfAld72vWaWuaU3WiGoLWbNKS8HJfbCj2GY=) 2: 1BFQM936y9WGcLJKwy60Wg2ag-8.roa (hash: NTbQFXMY5QSvW0BgWqBt3HeqiX8tXZPRJi0IS+SKq2s=) 3: DT8TXPB7Zoh4Y9JFFdsSZ2RIgLg.roa (hash: cdCtaCnFbbokb4IxB6SbsLXr+yswcQckTbmvZnS/sJA=) 4: H3d0QP653F6Jo-epVSXBiVH1h6k.roa (hash: B2NZF4jz4UwnLzA3KbDxjNp0EF7Qv4Th+B09WImKi2I=) 5: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: phHmQxiFBG0TVehCgxJNhAFfShm45sDpoML46hDidAE=) 6: O2mRnCNeDokP5q-PUWLd28D1SG8.roa (hash: XL7s2EUC28zeBKoJlmCFsu+5IjkYrbxfH3a9YMWon60=) 7: XPPuMgWRNY1QAnjWn2LftTc8cH4.roa (hash: LqWi3Xbli/jxxlx74n8O7L6EJtxaJ1UA0GYHmPMDyEU=) 8: ZRr2QwcqGgt_EOiTtMFoE-lkmow.roa (hash: SIg3ToChfd1+8YW/rxSI4oA419Stw5Sb9StcFL22beM=) 9: dY6eqUD4ykA92I5VKqHmYTX3q88.roa (hash: uvlx5CXBvfA8EWdxrFvclZnKJJH1HmhxtH5z6Fa+fBo=) 10: hCjWTJUhp9C-lxxCdRV4Jwzm4mk.roa (hash: ECwHPN5lxdIugX2ttk1L3l/uci2ps9CeCy1VAcBMeQs=) 11: lERL5Mrj2Bt3hRDr7br_N3d-JkE.roa (hash: /A5fyVRtCeR1gSok1lWq8T+wbRAaNz8PoEuYxSfdZSU=) 12: lWQXyxEJYv9OPJsRSSX1CCPbFb8.roa (hash: qyL/Gv6WkVcsE18337JVKs2VK9z6GTYDQ6GMJ2m3/WQ=) 13: whyP5FxoblHoIHhMTAeqWb1jp8w.roa (hash: a7SodNhSARcbHydA3wymHLN4IRqMOWIhBwT2PU/EoPc=) 14: zd2dqaKa6O4wz9TxJzSxhbKbteU.roa (hash: Sv1+bPBughIj/le0hfMKADppbA91Co/u0NeJGW/Uifs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 14 Aug 2026 05:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f9:7f:2b:70:10:60:51:ef:24:d1:be:39:16:9a:7f:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Aug 13 05:01:28 2026 GMT Not After : Aug 14 05:01:28 2026 GMT Subject: CN=212ed579789bd0ed2d0cae01a7486e4d9498003a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:54:cc:ab:b4:67:cc:e5:a4:2a:76:01:01:a4: 4b:6c:16:0e:e0:9b:df:fa:d9:15:df:a1:4a:bc:d6: 82:8c:0f:48:56:d6:4b:d2:78:95:ef:c5:fe:31:34: b9:2f:0d:ab:ea:fd:1a:ac:66:07:84:1a:03:64:4d: f4:e5:c8:44:03:84:67:82:0e:c3:ff:b5:48:dc:b3: 10:b8:90:d8:7e:42:95:21:fc:e9:65:4f:ad:92:bd: 1f:ab:1b:06:b6:b6:5e:63:03:ed:1c:62:9a:d7:93: 5c:14:cd:59:53:d4:6f:7a:9a:b2:ab:ee:20:4d:13: 46:e8:26:bf:2b:3a:60:e7:82:85:f5:6d:1f:30:d5: 0a:5b:6a:d7:01:8d:d7:bb:b9:4a:3c:3f:ed:e8:04: fa:a5:75:9b:c2:5f:cf:99:9c:75:04:dc:ac:d5:ad: 82:11:31:73:16:d9:20:a0:b4:93:72:cd:df:82:46: 29:c8:8f:2b:a0:e2:84:20:f0:45:64:4a:00:7b:c7: 77:2a:25:e8:7a:b9:59:25:73:ee:c7:ea:ce:24:4a: 58:81:1e:b1:73:f7:69:4f:b3:75:22:4b:14:13:5b: 25:72:fa:5e:8a:25:5b:f7:ea:45:e5:b6:58:20:b9: 7f:88:6c:78:17:ec:4c:d7:34:c4:27:eb:8d:7a:02: 9b:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:2E:D5:79:78:9B:D0:ED:2D:0C:AE:01:A7:48:6E:4D:94:98:00:3A X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:31:3b:08:41:6a:e9:46:07:10:15:6f:b9:f9:d3:90:e5:eb: 09:12:e7:e3:55:3d:6b:35:b8:30:32:b0:8e:f6:18:75:9c:a2: 9b:50:1b:9e:13:d4:d4:9c:aa:00:e2:2a:e6:78:64:55:d2:da: 34:d6:be:30:db:d2:d1:2e:6b:08:04:fc:cf:a7:27:3c:e6:d9: 5a:8c:fc:e5:8d:3e:75:17:67:5f:c2:0c:f8:59:85:16:0b:9d: 2f:58:cd:11:b3:63:6f:db:f6:09:73:cd:34:01:28:43:1c:42: 3b:d6:84:64:06:64:ff:30:91:de:f2:53:2f:e7:7c:76:1c:28: 69:f5:ec:67:17:a5:06:81:65:9e:57:a1:78:9f:49:fd:1e:28: d3:cf:ad:06:8e:36:f1:27:8e:b1:59:2d:b3:40:12:76:57:da: ca:b7:39:97:5e:f1:5b:11:df:5b:94:38:90:26:68:38:74:ee: cf:a2:65:9a:d8:9f:b1:54:db:43:82:41:8f:24:0e:3a:bb:db: 6f:29:cc:96:2c:84:64:4b:f0:a9:c1:8a:00:e1:9e:cc:07:27: 25:09:16:5d:e8:c3:44:1c:57:66:89:a1:45:fc:64:8c:7e:d9: 78:44:24:8f:f2:6f:ee:e7:72:9d:38:47:a8:33:10:97:b9:c0: 05:67:ef:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/5fytwEGBR7yTRvjkWmn8SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwODEzMDUwMTI4WhcNMjYwODE0MDUwMTI4WjAzMTEwLwYDVQQD EygyMTJlZDU3OTc4OWJkMGVkMmQwY2FlMDFhNzQ4NmU0ZDk0OTgwMDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxlTMq7RnzOWkKnYBAaRLbBYO4Jvf +tkV36FKvNaCjA9IVtZL0niV78X+MTS5Lw2r6v0arGYHhBoDZE305chEA4Rngg7D /7VI3LMQuJDYfkKVIfzpZU+tkr0fqxsGtrZeYwPtHGKa15NcFM1ZU9Rvepqyq+4g TRNG6Ca/Kzpg54KF9W0fMNUKW2rXAY3Xu7lKPD/t6AT6pXWbwl/PmZx1BNys1a2C ETFzFtkgoLSTcs3fgkYpyI8roOKEIPBFZEoAe8d3KiXoerlZJXPux+rOJEpYgR6x c/dpT7N1IksUE1slcvpeiiVb9+pF5bZYILl/iGx4F+xM1zTEJ+uNegKbEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCEu1Xl4m9DtLQyuAadIbk2UmAA6MB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuTE7CEFq 6UYHEBVvufnTkOXrCRLn41U9azW4MDKwjvYYdZyim1AbnhPU1JyqAOIq5nhkVdLa NNa+MNvS0S5rCAT8z6cnPObZWoz85Y0+dRdnX8IM+FmFFgudL1jNEbNjb9v2CXPN NAEoQxxCO9aEZAZk/zCR3vJTL+d8dhwoafXsZxelBoFlnleheJ9J/R4o08+tBo42 8SeOsVkts0ASdlfayrc5l17xWxHfW5Q4kCZoOHTuz6JlmtifsVTbQ4JBjyQOOrvb bynMliyEZEvwqcGKAOGezAcnJQkWXejDRBxXZomhRfxkjH7ZeEQkj/Jv7udynThH qDMQl7nABWfvqA== -----END CERTIFICATE-----Generated at Thu Aug 13 13:10:50 2026 by rpki-client