$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: aYI0E4PJzulhMOKRn2byRBsPa9k4b1IZEHAa+cwQTfE= Subject key identifier: 7F:F7:2C:90:1C:A2:12:D4:C9:7D:D6:B1:3D:ED:7F:FC:C2:2F:EF:AA Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 01A001A5CF75113429AA0F9EC6173D6ED98F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0DB6 Signing time: Fri 14 Aug 2026 19:00:38 +0000 Manifest this update: Fri 14 Aug 2026 19:00:38 +0000 Manifest next update: Sat 15 Aug 2026 19:00:38 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: EBNBA0/f33mCMBc4fd2sbXd25s+DEgRXmjUi4deHfXM=) 9: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 10: aV15c49lSGl3dteQSHc3IvNZ2Yw.roa (hash: idSDFzUORIOI2C3DdmyZjUWIVKrr2rvoia+URiMKZUk=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 14: jdhRRSqw1KV-OBkZuUAJ-tCWDik.roa (hash: PZnlHT69L4VcU/X0HEwE+Wn3yCWoZ+g03Z4fHifOKPg=) 15: ta9QPHmvElN9LQbU3Ml0S8yt9cs.roa (hash: pWwk3bYPZv/2DLVIuX6tB76kOFRVtUjaqBNqlUqnu+g=) 16: wea1j7CCiOwKhbp9xRs9xEsak8o.roa (hash: hckz/qMoMAZzO9HmBfzADkSbkz16uEss9Ro4N3hyVDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 15 Aug 2026 18:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:01:a5:cf:75:11:34:29:aa:0f:9e:c6:17:3d:6e:d9:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Aug 14 19:00:38 2026 GMT Not After : Aug 15 19:00:38 2026 GMT Subject: CN=7ff72c901ca212d4c97dd6b13ded7ffcc22fefaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:39:2e:27:3c:c9:30:b0:b4:83:27:f0:90: 84:fc:44:5c:bd:44:d0:19:25:b3:48:52:05:80:56: 35:53:0f:58:2a:35:6b:d9:c7:89:b1:25:58:68:2b: b2:7b:65:86:b0:2b:a9:b4:30:88:09:5c:4b:17:eb: 80:c2:5b:2c:77:5a:c1:bb:c0:65:23:07:71:79:90: f0:a4:8f:41:af:89:2a:8a:65:d4:0b:d7:ff:f9:16: 37:27:c2:a1:4d:2f:39:46:85:7f:c5:be:e0:ee:76: 52:33:e3:d7:e2:f5:b2:e3:b8:8a:be:9b:ff:02:aa: 8e:2e:c9:5b:ba:03:1b:6b:55:a8:a2:51:45:23:f1: bf:7f:cb:5f:cb:6b:90:b2:75:c8:77:84:0f:2d:8f: 2f:7d:cb:30:94:30:e4:4c:b1:f2:5a:ca:82:ff:26: fc:88:9f:10:3b:ab:19:68:86:6a:2e:9d:3c:d5:8d: 6a:19:2e:6e:b0:77:01:72:21:93:39:ec:bf:81:62: ec:bd:b5:f7:c4:40:2c:77:6c:da:cf:98:2d:31:99: 4a:ce:77:cc:3e:a5:5c:20:71:6d:eb:05:49:b4:8e: 3a:c2:2d:ae:a7:51:96:7f:49:7e:d2:fa:c9:de:fe: 20:73:9a:02:48:b7:2e:f4:b9:33:1f:aa:37:c1:35: b1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F7:2C:90:1C:A2:12:D4:C9:7D:D6:B1:3D:ED:7F:FC:C2:2F:EF:AA X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:0b:9d:89:e0:be:93:c0:4a:4f:97:9c:e3:7d:bf:55:ee:18: 96:61:70:0e:7c:dc:72:69:6f:ea:b0:8e:db:62:c0:d2:c7:bb: 5d:3d:47:71:01:8f:45:da:45:5f:6b:a0:c4:cc:dc:4a:9c:fd: 3e:90:97:d1:b6:25:e2:a0:8c:2b:ad:5e:89:5e:0a:17:8d:84: 63:6f:f8:9f:17:31:c9:6d:8d:05:ca:ae:bd:19:af:8c:b0:18: 0e:4d:2d:58:12:28:e9:79:a3:70:6b:1c:99:43:50:1f:20:32: 1e:35:58:85:35:21:a3:21:cc:af:5d:c5:ca:77:58:29:0b:c5: 36:dd:a4:82:db:40:80:d7:3d:79:b7:e2:14:35:57:43:09:60: e6:e3:6b:f2:9a:3a:c5:a3:3f:7f:0b:9e:a9:cf:6e:54:3a:a3: 2a:53:a3:15:1a:14:c4:00:9f:5d:fe:38:3c:37:71:8e:cb:cf: fe:26:2e:87:36:e0:1a:1c:3b:9d:a0:4a:ae:7f:04:ca:52:c2: e8:25:6c:5e:27:01:c9:60:37:f6:e2:7b:ec:b7:9e:9f:f7:7b: 84:68:7c:f0:81:4e:8b:90:97:0c:2e:4c:9f:78:c7:7d:95:7c: a9:68:fc:90:43:c0:55:16:c6:96:a0:bf:5a:93:da:83:24:84: dd:f6:f0:29 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaABpc91ETQpqg+exhc9btmPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwODE0MTkwMDM4WhcNMjYwODE1MTkwMDM4WjAzMTEwLwYDVQQD Eyg3ZmY3MmM5MDFjYTIxMmQ0Yzk3ZGQ2YjEzZGVkN2ZmY2MyMmZlZmFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGU5Lic8yTCwtIMn8JCE/ERcvUTQ GSWzSFIFgFY1Uw9YKjVr2ceJsSVYaCuye2WGsCuptDCICVxLF+uAwlssd1rBu8Bl IwdxeZDwpI9Br4kqimXUC9f/+RY3J8KhTS85RoV/xb7g7nZSM+PX4vWy47iKvpv/ AqqOLslbugMba1WoolFFI/G/f8tfy2uQsnXId4QPLY8vfcswlDDkTLHyWsqC/yb8 iJ8QO6sZaIZqLp081Y1qGS5usHcBciGTOey/gWLsvbX3xEAsd2zaz5gtMZlKznfM PqVcIHFt6wVJtI46wi2up1GWf0l+0vrJ3v4gc5oCSLcu9LkzH6o3wTWxbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH/3LJAcohLUyX3WsT3tf/zCL++qMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAogudieC+ k8BKT5ec432/Ve4YlmFwDnzccmlv6rCO22LA0se7XT1HcQGPRdpFX2ugxMzcSpz9 PpCX0bYl4qCMK61eiV4KF42EY2/4nxcxyW2NBcquvRmvjLAYDk0tWBIo6XmjcGsc mUNQHyAyHjVYhTUhoyHMr13FyndYKQvFNt2kgttAgNc9ebfiFDVXQwlg5uNr8po6 xaM/fwueqc9uVDqjKlOjFRoUxACfXf44PDdxjsvP/iYuhzbgGhw7naBKrn8EylLC 6CVsXicByWA39uJ77Leen/d7hGh88IFOi5CXDC5Mn3jHfZV8qWj8kEPAVRbGlqC/ WpPagySE3fbwKQ== -----END CERTIFICATE-----Generated at Sat Aug 15 02:27:35 2026 by rpki-client