$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: 7lm8rGmyu96i+KqE/q3dIF05PQGRwSd76UFJE2Nt12E= Subject key identifier: 38:E8:6F:7A:F2:EF:9B:90:A1:F2:6A:03:87:C3:AD:53:44:EB:1B:BE Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 019F9F5F6F4A880940F9E7C2D82A1EAF60FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 19EE Signing time: Sun 26 Jul 2026 17:00:59 +0000 Manifest this update: Sun 26 Jul 2026 17:00:59 +0000 Manifest next update: Mon 27 Jul 2026 17:00:59 +0000 Files and hashes: 1: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: krgrY4/yDPrKue7uAGw5zoZc9wDXLCALgop+N/R8Iqc=) 2: 3gBGUy3u0kv0cMFfYhefm1zv6V4.roa (hash: wbVQO0NG95NJdUKsQ+Wjm9lVf3DsbDyNxF0jF2IdjBg=) 3: 6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa (hash: 1JXCVihKxq73Qe1ncqplSKlgiZyg5/rbL6k+wZhdDKo=) 4: 7DBa_6nBybw3J8T8dr7yX7ebiwU.roa (hash: 9lkcVj8pg/THlhFClMP/jc7G+HKyv/jKnpXVV+mQkS4=) 5: 9VcWKWB5puA52wsDDDkNDjxeGR4.roa (hash: GlsIfnVs54CADMaRa3Sk/1oPA7tZtu4TEPhze/G9m8w=) 6: B7nfsbI7vpYat2Veoezdf_TcIy8.roa (hash: ZifWcufC5UurQhjWI81wwKVDTfPl5QEDU7f59ef2yA4=) 7: Daz8bhqhbaAz3OEyLaZDp_txPzA.roa (hash: FM1qUTL0CvrCixQ27I0/1ARdD95NXI7GlqZPBu6d9FA=) 8: KZXfDjuE-PvJiBRVRI6B8WHyooo.roa (hash: OMT2qoqGQOn2tlDcwwNCQQxD6FlT7A94fPogcjgcLoY=) 9: MAbKsaJixjU16-YxviDdUW3E9O0.roa (hash: G7uQcrymoMNiTSNS0GkaRs7zRkNHWrcTl4RG77CdYN0=) 10: RVfXd-D1ecB560CRD5YifVCpd1s.roa (hash: VBLJ7mxpiyU44wmUNd5IC/WX+1HbYUo9OBJtin4d0Sc=) 11: SRWh4DySnbPbtUqnKudLh37LWmk.roa (hash: 3VUWYpD5nskw9fhQcV0TB/lPM9InR0vwQ+h1mvelWpc=) 12: TLi5DNB1nha4h6YESMgyGrCORWo.roa (hash: EUg1KiZtD+nVctjCGIesOCkqRzlFdgvGJVlZhMuO3Jw=) 13: a4e-5HcXuyyRW82YjyXKassrVo8.roa (hash: LjIo0mjkPTCoI0owtR5lNhwGCbcbFzLDlXxT76bUTMg=) 14: j4OaetARNIVx-9EsgUUwBCsDjoA.roa (hash: 4DqJXihPNyacK6qcrUCR2jeCbK8fq/Etn5AHTyGsM5g=) 15: wUccj_rDqcMS5f6rHGM1S82tXw8.roa (hash: Am0yB5T/uFMdaWWU3crSox2wHqF23olZ6K+6iaufknI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 14:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:5f:6f:4a:88:09:40:f9:e7:c2:d8:2a:1e:af:60:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Jul 26 17:00:59 2026 GMT Not After : Jul 27 17:00:59 2026 GMT Subject: CN=38e86f7af2ef9b90a1f26a0387c3ad5344eb1bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:37:a5:ab:53:19:d2:69:06:37:af:a2:d8:24: 34:6f:bf:dd:4e:d3:42:07:ba:c2:8b:0e:30:ba:6f: a6:d0:74:ce:c8:f9:64:d7:f6:3f:25:5c:41:c5:6c: 69:bc:da:39:c4:c9:46:93:54:8d:a5:84:0b:00:32: 5e:6e:3e:81:24:65:48:0d:3b:7b:08:77:cc:48:4f: 56:29:2f:ac:8a:8a:6d:4d:b3:59:e4:50:6f:31:0d: 9e:1c:19:e4:93:53:d6:f9:3d:cc:7a:df:a1:c1:05: 63:27:15:ba:d3:ea:58:3b:57:ee:84:8b:8b:89:7d: 10:93:9b:58:de:f6:e9:72:fc:c8:a2:79:65:49:c1: 1c:48:45:57:7e:3b:65:4a:9c:3e:a4:9b:8e:4d:fb: cf:b4:2f:90:fc:3d:52:7e:ac:aa:fc:c1:31:9d:bc: e3:8a:ef:ec:d9:15:e4:1e:16:76:a1:c6:e3:f7:60: 0f:44:99:d1:30:2e:bd:6c:02:c8:6d:5d:70:3b:65: e0:21:01:86:62:af:fa:33:b5:59:d6:57:69:65:48: 37:19:14:02:e6:a7:27:24:88:a3:63:83:be:af:0e: cc:01:8c:40:6b:c0:b3:6b:12:9b:d1:57:da:ac:e8: 05:4c:16:97:52:a2:09:58:54:52:8c:3c:83:f3:92: fb:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E8:6F:7A:F2:EF:9B:90:A1:F2:6A:03:87:C3:AD:53:44:EB:1B:BE X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:f0:9d:9e:22:00:38:a4:a1:a2:34:a4:33:67:83:8f:5d:74: 03:f2:ab:62:94:9e:be:0d:71:8c:63:fa:3d:2d:71:29:67:03: 6b:3a:d0:48:83:d0:17:fd:40:67:60:ba:09:33:fa:e7:9c:50: d9:10:a1:5f:bd:8f:83:e0:46:fa:b2:0b:31:de:95:b2:1c:fa: db:aa:ef:2e:8e:05:d3:a0:d6:76:a7:f5:ea:a0:c0:47:03:03: 59:b8:68:5d:59:92:e8:5e:70:58:b9:73:5a:d5:01:c4:c9:15: 25:57:b2:a9:c8:aa:8a:b9:81:a7:5c:9a:7c:cb:2f:4c:b6:2c: cd:39:59:42:c0:67:b5:98:ea:94:d5:ca:ac:fe:3d:e0:65:fa: c8:fb:92:0a:19:2c:25:3f:0f:1d:38:64:86:e2:e3:56:40:ac: 06:de:f3:3a:74:42:80:d1:e8:86:c4:53:de:80:bb:07:24:85: 00:d7:4b:74:86:10:d1:c2:ee:e4:ce:16:f9:61:3c:8b:71:2a: 44:32:6c:95:cf:fc:8c:fa:4d:00:cf:07:9d:22:33:20:f1:d0: 9a:db:94:bf:56:cb:a9:be:5a:35:14:8f:76:99:23:d9:10:62: 95:df:0a:af:f4:c3:35:74:b0:af:b9:f5:55:f7:d4:28:c2:45: 3b:4a:0b:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fX29KiAlA+efC2Coer2D7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYwNzI2MTcwMDU5WhcNMjYwNzI3MTcwMDU5WjAzMTEwLwYDVQQD EygzOGU4NmY3YWYyZWY5YjkwYTFmMjZhMDM4N2MzYWQ1MzQ0ZWIxYmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTelq1MZ0mkGN6+i2CQ0b7/dTtNC B7rCiw4wum+m0HTOyPlk1/Y/JVxBxWxpvNo5xMlGk1SNpYQLADJebj6BJGVIDTt7 CHfMSE9WKS+sioptTbNZ5FBvMQ2eHBnkk1PW+T3Met+hwQVjJxW60+pYO1fuhIuL iX0Qk5tY3vbpcvzIonllScEcSEVXfjtlSpw+pJuOTfvPtC+Q/D1Sfqyq/MExnbzj iu/s2RXkHhZ2ocbj92APRJnRMC69bALIbV1wO2XgIQGGYq/6M7VZ1ldpZUg3GRQC 5qcnJIijY4O+rw7MAYxAa8CzaxKb0VfarOgFTBaXUqIJWFRSjDyD85L7fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjob3ry75uQofJqA4fDrVNE6xu+MB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAffCdniIA OKShojSkM2eDj110A/KrYpSevg1xjGP6PS1xKWcDazrQSIPQF/1AZ2C6CTP655xQ 2RChX72Pg+BG+rILMd6Vshz626rvLo4F06DWdqf16qDARwMDWbhoXVmS6F5wWLlz WtUBxMkVJVeyqciqirmBp1yafMsvTLYszTlZQsBntZjqlNXKrP494GX6yPuSChks JT8PHThkhuLjVkCsBt7zOnRCgNHohsRT3oC7BySFANdLdIYQ0cLu5M4W+WE8i3Eq RDJslc/8jPpNAM8HnSIzIPHQmtuUv1bLqb5aNRSPdpkj2RBild8Kr/TDNXSwr7n1 VffUKMJFO0oLZQ== -----END CERTIFICATE-----Generated at Sun Jul 26 23:37:36 2026 by rpki-client