$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: WwvWRn+xVjPDuXlsliHqi3+lSKmLP2Ilp4ReARtzyN4= Subject key identifier: 0C:23:E7:D4:00:F1:87:53:9E:C9:32:7A:1D:CF:7D:27:22:6E:6C:02 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019FA184698CA2A0C3712E8A8CF6D9BC3DA1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 19F3 Signing time: Mon 27 Jul 2026 03:00:37 +0000 Manifest this update: Mon 27 Jul 2026 03:00:37 +0000 Manifest next update: Tue 28 Jul 2026 03:00:37 +0000 Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=) 2: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=) 3: FpZLKm-2HuyBs9RMbUcbmbopMuU.roa (hash: 3TSsOddEtljGL8cZUDm9jJjfR573z1TKNPv7WQMwWsE=) 4: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=) 5: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=) 6: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=) 7: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: V2xb9NnM+/ttQiJR8t8faTVRiXqWPn81VeVypM0BRjk=) 8: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=) 9: dKLrGCnnWV06iolZrHx2nh4vWJg.roa (hash: IGn7SudG+KQQ8pkrK3hPDPOgmXUuAfTQAKdCH2IyL6I=) 10: mEhn-x7tkmLGeYlMpZdP2RjzVPY.roa (hash: YARnW3hK0MAvwIlgDRpM5wiqLHphA51kgJTHfm2NanQ=) 11: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=) 12: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=) 13: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=) 14: xo5ef4fORQSrFnpripZPBF58N8I.roa (hash: aCdvWOjY4qGUoKbWAQNLbpPN1m3wpKJ6hfeG6RHAKCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 23:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a1:84:69:8c:a2:a0:c3:71:2e:8a:8c:f6:d9:bc:3d:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Jul 27 03:00:37 2026 GMT Not After : Jul 28 03:00:37 2026 GMT Subject: CN=0c23e7d400f187539ec9327a1dcf7d27226e6c02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:5b:b4:61:a4:0f:e1:55:d0:84:96:a4:b6: df:ed:39:eb:0c:9c:08:1d:20:1f:63:d2:2e:6f:78: 11:e8:9f:f7:93:10:4d:1f:e8:71:03:c0:9b:1b:e4: e5:6f:05:78:ea:3d:2d:fc:05:2d:74:c7:d5:da:d1: 1a:84:79:db:f1:bc:16:db:3f:bf:e7:14:db:83:93: 81:27:70:75:24:74:86:05:be:f4:1b:7c:4c:59:7b: a5:f7:61:c8:af:08:c5:2e:6e:97:46:72:36:51:1d: 96:93:d2:ac:cc:b7:e0:04:d0:25:94:09:13:1d:c8: a4:98:0a:8a:ec:2e:83:f3:b3:df:0d:40:49:7d:5d: 20:67:ef:8c:f2:c0:a5:90:f1:79:f8:4b:04:4b:5a: 1e:d5:51:56:78:e5:14:0f:c4:3f:04:57:b0:21:47: e9:52:c9:f6:35:60:73:f7:ac:19:bc:b3:7b:ce:6b: 52:a3:d1:73:8f:ba:0d:6d:8c:b9:1b:8f:cb:46:5a: f4:59:98:15:98:fd:d6:e4:75:e2:d3:c5:b2:bb:58: a4:74:ff:b1:53:8a:e2:d4:5d:e7:cd:36:09:b9:ed: de:50:04:a7:37:eb:d1:8d:34:d0:52:c5:c4:a9:5f: ca:21:2a:b5:b2:1f:12:76:19:8f:c3:f8:f3:51:b6: 8e:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:23:E7:D4:00:F1:87:53:9E:C9:32:7A:1D:CF:7D:27:22:6E:6C:02 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:22:a5:3d:48:17:43:3d:dc:ca:86:cf:dc:0f:87:84:80:bd: 4d:1b:c6:56:72:aa:d8:97:4e:5a:5a:3d:67:df:e7:9e:66:e3: 19:08:7f:6a:b6:8c:22:c9:6d:3d:06:90:49:f9:2a:5d:98:17: 2b:f5:a6:b8:4a:dd:3e:c2:88:3b:8f:f5:d9:04:55:64:da:5d: 6e:41:cb:27:86:21:8c:0d:7b:c7:ba:73:d4:99:d8:78:f6:a7: f8:12:68:83:41:5d:03:39:80:e8:de:39:fd:8a:31:aa:a7:be: a1:fd:fa:72:3b:74:4f:bc:7c:9a:4e:d7:b6:a0:57:0b:b2:9a: 95:d2:d6:24:c3:25:4c:2a:f9:ec:e0:65:de:0d:60:23:85:bb: 44:24:36:8e:25:10:cb:b1:7a:c2:16:f2:6d:a4:d0:7a:1e:a6: 9b:0b:52:46:ca:91:17:dd:28:f3:26:72:f5:f3:3d:d0:2b:c9: 80:6d:ae:3c:65:f9:06:e1:d4:ff:5b:98:4c:19:dd:fb:cc:8e: ea:b2:f5:c3:f0:cc:30:84:fd:96:f7:25:1b:02:97:70:76:cb: b4:51:9a:ea:d2:b1:7c:8d:07:c5:cf:82:56:f7:be:bb:33:08: 83:4b:84:a5:6c:27:58:2a:f7:94:08:62:32:21:87:b6:dc:a5: 98:fe:89:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+hhGmMoqDDcS6KjPbZvD2hMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwNzI3MDMwMDM3WhcNMjYwNzI4MDMwMDM3WjAzMTEwLwYDVQQD EygwYzIzZTdkNDAwZjE4NzUzOWVjOTMyN2ExZGNmN2QyNzIyNmU2YzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2dbtGGkD+FV0ISWpLbf7TnrDJwI HSAfY9Iub3gR6J/3kxBNH+hxA8CbG+TlbwV46j0t/AUtdMfV2tEahHnb8bwW2z+/ 5xTbg5OBJ3B1JHSGBb70G3xMWXul92HIrwjFLm6XRnI2UR2Wk9KszLfgBNAllAkT HcikmAqK7C6D87PfDUBJfV0gZ++M8sClkPF5+EsES1oe1VFWeOUUD8Q/BFewIUfp Usn2NWBz96wZvLN7zmtSo9Fzj7oNbYy5G4/LRlr0WZgVmP3W5HXi08Wyu1ikdP+x U4ri1F3nzTYJue3eUASnN+vRjTTQUsXEqV/KISq1sh8SdhmPw/jzUbaONwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAwj59QA8YdTnskyeh3PfScibmwCMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYSKlPUgX Qz3cyobP3A+HhIC9TRvGVnKq2JdOWlo9Z9/nnmbjGQh/araMIsltPQaQSfkqXZgX K/WmuErdPsKIO4/12QRVZNpdbkHLJ4YhjA17x7pz1JnYePan+BJog0FdAzmA6N45 /Yoxqqe+of36cjt0T7x8mk7XtqBXC7KaldLWJMMlTCr57OBl3g1gI4W7RCQ2jiUQ y7F6whbybaTQeh6mmwtSRsqRF90o8yZy9fM90CvJgG2uPGX5BuHU/1uYTBnd+8yO 6rL1w/DMMIT9lvclGwKXcHbLtFGa6tKxfI0Hxc+CVve+uzMIg0uEpWwnWCr3lAhi MiGHttylmP6J+A== -----END CERTIFICATE-----Generated at Mon Jul 27 05:46:41 2026 by rpki-client