$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json) Hash identifier: 29Dy6upBt1Faw/9B0+W+mV2afzfupGig4KyLD8939/0= Subject key identifier: 71:96:E2:2C:37:D8:B1:9F:02:04:55:CA:FD:38:A2:C3:32:EF:BA:9B Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 019FA372E8F6A5C924684DE4A9711EB45A50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft Manifest number: 1895 Signing time: Mon 27 Jul 2026 12:00:44 +0000 Manifest this update: Mon 27 Jul 2026 12:00:44 +0000 Manifest next update: Tue 28 Jul 2026 12:00:44 +0000 Files and hashes: 1: 8ZTbVFN88ElJOvnxpynWkBywvcU.roa (hash: Zi7aMmYsFeMT6y4m/OMRvzAw9FlwVPNAsEeEWMyssQs=) 2: 9gyIdfYx-vxaH69AuzYIu8sS7ec.roa (hash: vsh4e/kwYxBt1mO0Ld2w2nU9VsbUvL0v+cSn3CZdKv4=) 3: D4HmthbydYoqExoa56VFIbe7J5A.roa (hash: 1gmVpoixHN/Zn+8HJ6YdrukA3JeRxcEeBWZ/2aGh+ps=) 4: DKZJyriLpkX0P03xQILHD2FwZEo.roa (hash: x6vx2AQsWgf7sMGXLXxiRwrb7PArAVgKRPBlJd4ah10=) 5: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: pq2Etu1iF9zoQqd4EFKaNDuhzQwR1RNtRx6Dm5wggk0=) 6: HRwCntz8pHEtM7UJXh-KwEbXi3w.roa (hash: CKUDXMyXov9Gbf/ygH+HewYMwNtReJO+UQotN2JyBXQ=) 7: Haim4aY9ShmCS1epcJRa3-rRRmM.roa (hash: AQeMZQUR+w1eyhT+kYpVEnNYoo0tXgoBt1LUUZT+/W4=) 8: Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa (hash: HTLBGDTB6awokEWRy6DjReQvfOLjCmwPODXPDvHGn+A=) 9: LdJkopqk4m9ubmHzk4T29FnhG7o.roa (hash: Qx8FwqyP4Rxw7vIMwqfqa4V2zeYK7+dz+yeOugc8QVI=) 10: S3K9bo4j9NjF6L9mhwIsz-LYyHg.roa (hash: FX7C0FNczXeRPZms4zyJ1OukTZNK4zd0GhG7vBTsBvg=) 11: UWgtqXah3liJx-awsYUK3XIS54c.roa (hash: nisX/PCjG49hPGc2ySAUn3J0MxV+pv8+T78d4GdNMSs=) 12: _d7ohj2Ako_tiSFSE9-jnGs0uoI.roa (hash: mf32LDbJ2Su5F5H62P0/F/PId5oq7GFGgkD8WKRwmPw=) 13: f5svUnEK1n30wRVLtixbJDS7pZM.roa (hash: sILbepz7GhK0jGMQ48sIN5LBYx9eYZB9voFGWkXvx60=) 14: iK87eJg7y-_rcG1D3z4FzaXgRNE.roa (hash: uVYEVS9koySJoZQhAK0q3w5qAE9/nwHY2ro0Er3WEZY=) 15: mcS4SdpuWVbabfdpCB_tOwct_TA.roa (hash: hcfOoUJHvls1DL90VCIcUIUdeQTL2YjVgbYPY6TdJAA=) 16: nXrADfBP6wNtRforv4w6KFdo1Ns.roa (hash: PAoowx6zHYeOj9TxBp8LwY6JFAj6/p0gXZ/G0XMc/dg=) 17: tDoaGy6SLh3swARR-izxiYVQMmU.roa (hash: lZCnqmwKcNoIj9hNP0txhfT3ExuUcH8dWLkUpGjDKzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 Jul 2026 12:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:a3:72:e8:f6:a5:c9:24:68:4d:e4:a9:71:1e:b4:5a:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Jul 27 12:00:44 2026 GMT Not After : Jul 28 12:00:44 2026 GMT Subject: CN=7196e22c37d8b19f020455cafd38a2c332efba9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:47:75:cc:1f:ff:c7:91:56:84:89:3f:db:82: 04:6a:46:47:68:c7:8e:a6:27:07:f6:ae:9d:5b:d0: 62:84:01:1e:7d:ca:2a:e4:2a:ba:aa:69:be:cb:d7: 99:79:a3:0f:09:37:29:e2:2c:02:30:a7:56:7c:6b: 87:c5:ab:0c:08:ec:ed:2c:b9:00:0c:fd:aa:e2:86: cb:31:e3:2e:5a:05:e4:46:8e:63:09:a0:bb:6f:f0: 88:f4:5c:ca:39:2d:87:fb:4d:fd:fc:f8:67:36:79: 49:6e:c7:ef:7c:f7:2f:3e:3f:7f:b0:4a:3a:ee:e5: 98:f8:95:69:c0:a3:31:65:80:01:29:c7:09:22:8c: 08:cf:fc:06:a4:8c:14:35:60:ee:e6:24:ff:a6:b6: 89:9e:c0:18:a0:50:81:ba:14:16:32:dc:93:96:27: 8a:29:8f:82:b0:a1:33:3b:64:ac:ca:05:8f:32:82: 32:bd:3b:4b:ff:ad:57:34:b3:cf:81:a8:ee:f2:d5: 0b:90:fb:96:b5:d4:65:77:ae:36:fc:e3:8a:dc:29: 5e:86:7d:71:b7:4b:a4:17:ae:a7:c3:c7:05:bc:33: 23:6e:f3:75:36:06:48:52:5e:31:a3:79:b8:b5:ea: 90:68:74:60:4a:c6:bc:6f:a8:03:d8:8d:16:96:4f: 71:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:96:E2:2C:37:D8:B1:9F:02:04:55:CA:FD:38:A2:C3:32:EF:BA:9B X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:e6:67:8a:39:1d:3d:3b:9a:42:7a:24:b4:d1:e5:54:05:fd: a8:73:dc:06:7f:e3:42:b4:cd:79:a0:cc:f8:27:34:82:80:96: cf:1e:ac:ac:c8:26:23:1e:1e:ad:78:ef:16:37:6d:7d:49:c4: ef:77:c8:3d:06:01:c2:f6:06:ba:2f:74:05:b9:29:2b:7b:df: c9:15:f1:1e:91:f2:57:e5:15:4d:71:44:2b:ba:d9:93:22:3f: 48:87:ba:95:d3:72:b8:6d:bf:82:b0:9c:ba:04:49:55:4e:0a: c1:29:03:9e:08:6d:c3:f4:bb:90:09:83:b2:0f:e9:c4:82:be: 2a:27:f9:3b:68:ed:87:74:08:ff:c0:a0:77:22:ec:c3:37:14: d5:95:38:2f:61:53:e6:9c:86:9c:7d:a3:ad:f0:a9:d4:64:32: f7:5a:15:dc:2e:f1:28:21:9d:1a:80:c1:72:10:38:66:71:f7: 9d:92:32:62:ee:dd:d0:79:b6:09:73:04:93:62:26:d8:f9:d1: 12:5e:7d:f0:9a:94:95:90:7c:ca:05:38:09:23:ed:2b:bc:cb: 31:59:81:9a:75:3d:33:e1:ea:04:33:b9:8e:37:43:cf:04:e2: 38:01:a0:2c:46:f2:58:0a:de:09:a9:fd:f4:9c:29:58:4d:c0: b2:3c:e3:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ+jcuj2pckkaE3kqXEetFpQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwNzI3MTIwMDQ0WhcNMjYwNzI4MTIwMDQ0WjAzMTEwLwYDVQQD Eyg3MTk2ZTIyYzM3ZDhiMTlmMDIwNDU1Y2FmZDM4YTJjMzMyZWZiYTliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Ed1zB//x5FWhIk/24IEakZHaMeO picH9q6dW9BihAEefcoq5Cq6qmm+y9eZeaMPCTcp4iwCMKdWfGuHxasMCOztLLkA DP2q4obLMeMuWgXkRo5jCaC7b/CI9FzKOS2H+039/PhnNnlJbsfvfPcvPj9/sEo6 7uWY+JVpwKMxZYABKccJIowIz/wGpIwUNWDu5iT/praJnsAYoFCBuhQWMtyTlieK KY+CsKEzO2SsygWPMoIyvTtL/61XNLPPgaju8tULkPuWtdRld642/OOK3Clehn1x t0ukF66nw8cFvDMjbvN1NgZIUl4xo3m4teqQaHRgSsa8b6gD2I0Wlk9xfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHGW4iw32LGfAgRVyv04osMy77qbMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATuZnijkd PTuaQnoktNHlVAX9qHPcBn/jQrTNeaDM+Cc0goCWzx6srMgmIx4erXjvFjdtfUnE 73fIPQYBwvYGui90BbkpK3vfyRXxHpHyV+UVTXFEK7rZkyI/SIe6ldNyuG2/grCc ugRJVU4KwSkDnghtw/S7kAmDsg/pxIK+Kif5O2jth3QI/8CgdyLswzcU1ZU4L2FT 5pyGnH2jrfCp1GQy91oV3C7xKCGdGoDBchA4ZnH3nZIyYu7d0Hm2CXMEk2Im2PnR El598JqUlZB8ygU4CSPtK7zLMVmBmnU9M+HqBDO5jjdDzwTiOAGgLEbyWAreCan9 9JwpWE3Asjzj9Q== -----END CERTIFICATE-----Generated at Mon Jul 27 14:21:06 2026 by rpki-client