$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: bk64HkTEnTyTILXUrv20eY22jpICT2ToIj4xZLCWfCI= Subject key identifier: E6:B7:4C:D7:8B:E9:31:D2:10:91:BE:3E:11:71:AD:70:4C:28:EE:A3 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 019F9F28A79965C1503AFC737A70E0E06AF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 1989 Signing time: Sun 26 Jul 2026 16:01:09 +0000 Manifest this update: Sun 26 Jul 2026 16:01:09 +0000 Manifest next update: Mon 27 Jul 2026 16:01:09 +0000 Files and hashes: 1: 1RXLSMCQxm6vHzpOwWgDUAInFdg.roa (hash: tiFDxiab3e0Tsjr6KVenyf0JU8F/yU/38yIyF4rjX4k=) 2: 1VWiLulxOxhHgQKw7IEXoo5ATg8.roa (hash: x6H4n3WYeW4YeYZUn/i7tLDaV8onmgp0QC27YOXzSKw=) 3: 1_TfKdEbyh0omy6djnyJdvYrEqc.roa (hash: EO8vxhqwUI30VFIImFKNsM60MhZca7K8cHIToGyX7Ks=) 4: 3k_DXo4ofAXcZYPDcNLzBletpVk.roa (hash: ziaq+fvQdyZn6u+jlF4Bvlh3Rp/2kXUfv41qFJFnMKU=) 5: 55iMg0IqIvTTTaaD18TQWd53G8U.roa (hash: hkh5sXfYdaVp6m20oi5m27sE7i3ZzTQje8FmNlvZJcU=) 6: 6fueTwx89YJUS6Dpp5Y2h_u_XrU.roa (hash: lzYvahX3CMPBOibhapx+4QK+QwG3tziddPkBj6Q8iy8=) 7: Cy393HmMTcAn60r5mHO2k2Dg17k.roa (hash: r8l9XvoJeBvAXNolGJ2W46Taz9bFIMoIIMpX642FPsI=) 8: JHXRcwdGLV-x0tFgIpk_GdvVv9E.roa (hash: 3yZYckxEFNC5HpjyWQ7bKTfulKrPrYVmR0yC4V1+t6Q=) 9: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: c301fLDQeiD+k+VsQ0sQWNqC66zgn+8kCZXqnJEMWtE=) 10: MzS0a-if8StAwGvSc_KLQZwctYA.roa (hash: Ih3ENOBKFmZrJm9qAmqbuLfexG64Qa2fws7qqr9UsAE=) 11: PMzy_qV1UY_0ZKB9kdOVuYWTmmc.roa (hash: TRI6XfkqHbFEpL8yBzCDgc2XJwsdsYj0moGkucrDeNs=) 12: TjyKjzgVxClAneVTofUpEpODO4c.roa (hash: P6CkJUB0bWvv80EbY764u+5wuiSaj13NOmKLygDqt9w=) 13: Tq4nexBl7Bhl88T7x0Q2h2tatk4.roa (hash: pFK6MA84kt09PJZi3gnwpQ1THUutVL/OXU5GSC2uBmo=) 14: c7t6wQUV-ONFA6vcvfwHnvEUxNk.roa (hash: 716daOJ6FBCxynQboT89eYOdyvqH+pTwI+F2BmxRbnA=) 15: ifM73hFNDS-HrpzAXJZiRxf-Neo.roa (hash: k9cUGDKroPZ+BsMFJtunA+HgnGfK8aKvAASRzcpd1hE=) 16: ijRESvjuFsPkeA-Kyvc-Amtbhmw.roa (hash: vfx7UefHLR8jxOzWuroODVBFFWPo5JW3hdLXsh9WZmo=) 17: m9gc2-3kvu1ECXe8zpu0Ico1Ebo.roa (hash: 1h9SEvwGU1RX/xwx1Rkt4nh0FAFsqK4wE3FVRKxswsI=) 18: p9Ga5zssyIhFHrJi5MZ47Pyznvo.roa (hash: Ott2sOPVA987hz4zVP2oRFvzjlidIeKw8Px9ILdJfjs=) 19: r-29DfcBFqtrQoxy43Ck9AGvEJA.roa (hash: Vf08Uzf29by4OovXTt6InS//E1CSQstRVYxDVQ9TYww=) 20: xsyFP3WB5Usaew7SGQRO9fW_v3w.roa (hash: LxeGCJgt6lWaEJ/RMO1YX/wb1GOfng/XVidChMvRHe0=) 21: yzKmZsge7trUv4Txs2kYPlL6-RE.roa (hash: wcxVH/6cau217WxdwHGYfj7PaYBWv7RknCW4wcCZPgM=) 22: zNK-oPXBuxp1H51GnlCM2lcNtzk.roa (hash: Vmb62CjMyELzaU8/TRy0Rr8Z0jw/kF2X0pLfeCoCANU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 27 Jul 2026 16:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:9f:28:a7:99:65:c1:50:3a:fc:73:7a:70:e0:e0:6a:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Jul 26 16:01:09 2026 GMT Not After : Jul 27 16:01:09 2026 GMT Subject: CN=e6b74cd78be931d21091be3e1171ad704c28eea3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:1e:04:33:f5:d5:06:42:cb:4b:58:23:d7:dc: c1:a4:e7:c7:45:06:d4:3a:3d:2d:3a:5f:5a:42:54: 7a:6d:82:c9:08:fb:25:8c:64:c8:d9:34:ad:ec:23: e7:62:a6:37:ff:fb:3e:ea:10:2e:01:e9:9f:d5:cf: e2:10:4a:86:6e:1f:ff:28:e3:f8:30:98:24:6f:7a: cb:95:49:13:9a:61:65:55:86:2a:54:b8:7d:4e:4f: 0d:50:3e:57:09:09:48:2e:4d:c6:e7:e7:3b:91:86: 14:1b:ba:c4:ce:18:7f:94:bc:c5:c1:67:e2:db:10: 4f:fb:5a:0a:e5:be:c9:78:94:88:d9:93:18:c3:e1: a6:02:0c:37:b1:a3:38:dc:c3:5a:59:6d:31:11:49: cc:35:ea:d5:65:ec:11:00:61:29:a5:2b:b1:1b:07: 2f:58:39:f5:3b:68:78:eb:df:d2:42:e9:d2:ca:af: 99:73:47:ac:b8:83:35:9f:9e:09:62:b6:14:cd:2f: 46:2e:7a:87:ed:a7:8e:8b:3e:1f:f1:b7:d3:09:4e: 50:0b:ce:c0:5c:74:52:00:04:bf:a9:f9:96:78:94: 0c:35:ed:9c:e3:7c:19:91:4e:69:8d:fd:cf:d6:b1: 64:7d:3f:87:e1:47:45:2f:c1:6d:04:d6:d4:bd:f5: 28:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:B7:4C:D7:8B:E9:31:D2:10:91:BE:3E:11:71:AD:70:4C:28:EE:A3 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:63:4a:62:a9:98:6c:cc:95:b2:a5:f4:8d:ac:30:d6:b7:03: af:98:48:35:71:f1:d2:1a:51:96:13:3a:1f:42:0e:71:82:2d: 36:63:bd:20:54:e5:d7:16:cf:30:3e:65:1b:d7:4b:d3:b0:4b: 14:9e:f1:2f:ab:52:42:86:5d:c1:e2:e4:25:3a:97:67:8d:f5: 8e:f4:f8:ad:d3:ec:b9:74:e3:03:2e:d1:c9:8c:de:36:c4:da: 7a:5c:f9:c8:41:28:43:44:65:3a:46:b6:5d:04:48:ad:50:a1: 08:4b:3a:2b:18:0a:0f:d4:11:f4:44:8d:69:03:53:8e:37:9d: 17:5a:7d:dd:b0:03:50:aa:9a:47:64:bc:5d:a1:91:85:4f:8e: 97:a4:59:9d:6b:11:cb:60:b6:ea:18:3e:2d:14:ba:e0:fb:33: 7e:da:26:51:80:ce:70:9a:a2:6e:0d:42:f7:ad:a8:64:c4:1b: 1d:1f:2b:ad:53:ac:db:a3:e2:41:29:b2:84:24:a1:02:4e:eb: 8c:bd:ac:f0:b6:aa:dd:d9:59:a2:90:8b:6b:cf:48:74:8c:b1: ef:89:f1:90:bb:ef:b8:84:a9:84:a1:2b:2d:d7:1c:46:c1:aa: 6f:01:77:95:b2:63:ee:e9:c1:0c:6d:17:f8:0d:9e:f6:da:c0: e9:44:26:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+fKKeZZcFQOvxzenDg4Gr5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjYwNzI2MTYwMTA5WhcNMjYwNzI3MTYwMTA5WjAzMTEwLwYDVQQD EyhlNmI3NGNkNzhiZTkzMWQyMTA5MWJlM2UxMTcxYWQ3MDRjMjhlZWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmh4EM/XVBkLLS1gj19zBpOfHRQbU Oj0tOl9aQlR6bYLJCPsljGTI2TSt7CPnYqY3//s+6hAuAemf1c/iEEqGbh//KOP4 MJgkb3rLlUkTmmFlVYYqVLh9Tk8NUD5XCQlILk3G5+c7kYYUG7rEzhh/lLzFwWfi 2xBP+1oK5b7JeJSI2ZMYw+GmAgw3saM43MNaWW0xEUnMNerVZewRAGEppSuxGwcv WDn1O2h469/SQunSyq+Zc0esuIM1n54JYrYUzS9GLnqH7aeOiz4f8bfTCU5QC87A XHRSAAS/qfmWeJQMNe2c43wZkU5pjf3P1rFkfT+H4UdFL8FtBNbUvfUo2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOa3TNeL6THSEJG+PhFxrXBMKO6jMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQWNKYqmY bMyVsqX0jaww1rcDr5hINXHx0hpRlhM6H0IOcYItNmO9IFTl1xbPMD5lG9dL07BL FJ7xL6tSQoZdweLkJTqXZ431jvT4rdPsuXTjAy7RyYzeNsTaelz5yEEoQ0RlOka2 XQRIrVChCEs6KxgKD9QR9ESNaQNTjjedF1p93bADUKqaR2S8XaGRhU+Ol6RZnWsR y2C26hg+LRS64PszftomUYDOcJqibg1C962oZMQbHR8rrVOs26PiQSmyhCShAk7r jL2s8Laq3dlZopCLa89IdIyx74nxkLvvuISphKErLdccRsGqbwF3lbJj7unBDG0X +A2e9trA6UQmjA== -----END CERTIFICATE-----Generated at Mon Jul 27 01:50:38 2026 by rpki-client