$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json) Hash identifier: I4QU40WR8PzRQrZi4/2W0wv2wnxJ3rSXw54zvrMsVhw= Subject key identifier: D1:D3:8E:15:E0:B7:FC:4B:34:1E:66:23:88:27:43:C0:79:FC:6E:50 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 01A0BD9E649501055FF9EB816DCBC2E06938 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft Manifest number: 1980 Signing time: Sun 20 Sep 2026 07:01:08 +0000 Manifest this update: Sun 20 Sep 2026 07:01:08 +0000 Manifest next update: Mon 21 Sep 2026 07:01:08 +0000 Files and hashes: 1: 55lTuhAI20BHIf-zeSdkeAFaMAg.roa (hash: 6WOjfM5Zbb9/cs9Lu29lst5KqtNeJQ6bLtoEOKJiPTQ=) 2: 7NA2LegCljPM-6ilz2F5cnaoBJw.roa (hash: qjOTsmyHG6MOUTIadkX/zmkZDlAkqPzHJKetzF1R3ds=) 3: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=) 4: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=) 5: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=) 6: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=) 7: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=) 8: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=) 9: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=) 10: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=) 11: OOZCU9RDZbWm90IHhggbkADAyok.roa (hash: yzkJaDkuzS/Q97fyxLhVwM/SdV10qs3BxmQUOzU77kU=) 12: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=) 13: X3TOXxPWXzlBaEZ6x5xVJV0GN2g.roa (hash: lAKtM50aILYHfyj/dnL/G2PsJlkpfMmR8vppwS3z8KU=) 14: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=) 15: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: DTTGwRK3j0TzXPtfu5JcOqVwzR+ZUY8PCJpFL4680sw=) 16: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=) 17: e9owlvY-NY5qGBDhXZ7WFxeggIc.roa (hash: QGa2zFUrPTeR+OERG79pTeFCAO6qtUgwUx98rjXhrvE=) 18: jVvCjidFfK-8IL92OyEeuSlStW0.roa (hash: 95JD6YEa33c2IW5jEGSMsvaX4Vq46tjO1+Oed4maTyw=) 19: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=) 20: twRPR7YMxdedDnIoOoDSSMLLV5I.roa (hash: iG5iFiWGGZ1ctfdvgUYVkBJLEXDfn4PbykZkkKVwlz8=) 21: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (hash: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM=) 22: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=) 23: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bd:9e:64:95:01:05:5f:f9:eb:81:6d:cb:c2:e0:69:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Sep 20 07:01:08 2026 GMT Not After : Sep 21 07:01:08 2026 GMT Subject: CN=d1d38e15e0b7fc4b341e6623882743c079fc6e50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:ec:46:e6:18:e2:fa:ca:61:df:d7:71:c1:7d: 48:19:69:1f:07:f7:69:46:f4:b0:8f:65:e4:58:97: 88:12:09:31:ba:14:36:f0:c2:5b:22:73:e1:98:86: 61:0f:2a:aa:b1:fe:3d:86:81:65:ca:b8:b2:d9:7a: 7f:14:40:5e:e1:52:65:25:59:54:0b:80:c8:62:b1: a8:be:3a:ec:e9:65:16:d9:39:c9:c5:5d:52:13:6b: 26:52:5f:63:87:d1:45:57:2f:57:ed:2d:ee:c2:87: 5c:4f:b1:3d:18:eb:56:c9:86:98:1c:3f:ad:65:d3: d6:2f:88:66:5c:9c:3e:b8:a3:98:65:f0:c3:b4:61: b1:01:74:96:6c:0b:a7:d5:31:2d:2f:f4:da:2d:2c: d8:c6:dd:e7:7e:0a:0b:6c:1e:19:00:64:38:30:f3: 42:74:d6:83:24:67:ed:fa:af:c8:33:ad:7c:f1:88: 37:88:4d:5b:e2:e0:ae:fa:5c:a3:f0:c0:fb:a1:91: de:e3:43:bf:0e:5b:83:5b:ef:d3:d6:91:e5:9c:01: 4a:f1:c9:44:d5:b6:06:82:72:32:65:09:c7:0a:97: 7f:7d:c8:64:cf:68:5c:1f:9e:33:4a:62:41:d8:4d: 87:85:74:d0:1e:e6:40:48:8a:6a:38:19:f3:50:8d: 44:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D3:8E:15:E0:B7:FC:4B:34:1E:66:23:88:27:43:C0:79:FC:6E:50 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:78:c3:f6:6c:b3:cf:87:2b:b0:f6:e8:9c:a7:2f:4c:eb:77: 7b:e6:36:60:2a:e6:9d:54:08:50:01:8f:8d:e2:37:d8:5c:ad: d5:5c:ec:8a:54:9b:91:9d:84:66:74:fe:3d:3b:90:e5:40:c3: 14:25:14:10:42:b4:03:b7:84:3a:28:fd:c4:e2:9c:6a:24:a3: b6:9c:f2:02:c7:25:b2:5d:ed:e5:a5:66:41:47:7a:2e:2b:49: 06:67:e2:f7:7e:aa:4c:39:d3:aa:5a:52:01:08:9f:16:3a:b0: 2d:7f:b0:b3:d6:be:28:5a:7f:1b:e2:45:1d:0d:40:7d:b5:66: ba:8c:e0:a8:d3:7c:c2:eb:b7:74:2a:a3:4d:d7:ad:72:dc:ab: 2e:78:30:11:7a:43:88:6b:fc:f9:69:06:d4:24:5d:de:dd:1c: d9:7b:f2:3b:19:6a:75:59:7d:1e:b3:83:7b:e0:1e:8f:09:93: ca:60:00:c9:ea:ac:21:a7:df:8b:07:1b:de:c2:28:b0:60:22: e9:52:5d:14:f5:a3:2b:e3:f2:d3:ca:c2:06:e2:26:55:16:33: 79:7c:c4:f2:9f:a9:2b:5d:ed:39:d5:c0:4f:4e:a3:3a:3e:3e: b9:d1:7a:d7:b2:d0:5f:da:da:b6:7a:ed:ee:41:d0:ef:62:f7: 74:f3:98:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC9nmSVAQVf+euBbcvC4Gk4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwOTIwMDcwMTA4WhcNMjYwOTIxMDcwMTA4WjAzMTEwLwYDVQQD EyhkMWQzOGUxNWUwYjdmYzRiMzQxZTY2MjM4ODI3NDNjMDc5ZmM2ZTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOxG5hji+sph39dxwX1IGWkfB/dp RvSwj2XkWJeIEgkxuhQ28MJbInPhmIZhDyqqsf49hoFlyriy2Xp/FEBe4VJlJVlU C4DIYrGovjrs6WUW2TnJxV1SE2smUl9jh9FFVy9X7S3uwodcT7E9GOtWyYaYHD+t ZdPWL4hmXJw+uKOYZfDDtGGxAXSWbAun1TEtL/TaLSzYxt3nfgoLbB4ZAGQ4MPNC dNaDJGft+q/IM6188Yg3iE1b4uCu+lyj8MD7oZHe40O/DluDW+/T1pHlnAFK8clE 1bYGgnIyZQnHCpd/fchkz2hcH54zSmJB2E2HhXTQHuZASIpqOBnzUI1E9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNHTjhXgt/xLNB5mI4gnQ8B5/G5QMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM3jD9myz z4crsPbonKcvTOt3e+Y2YCrmnVQIUAGPjeI32Fyt1VzsilSbkZ2EZnT+PTuQ5UDD FCUUEEK0A7eEOij9xOKcaiSjtpzyAsclsl3t5aVmQUd6LitJBmfi936qTDnTqlpS AQifFjqwLX+ws9a+KFp/G+JFHQ1AfbVmuozgqNN8wuu3dCqjTdetctyrLngwEXpD iGv8+WkG1CRd3t0c2XvyOxlqdVl9HrODe+AejwmTymAAyeqsIaffiwcb3sIosGAi 6VJdFPWjK+Py08rCBuImVRYzeXzE8p+pK13tOdXAT06jOj4+udF617LQX9ratnrt 7kHQ72L3dPOYqg== -----END CERTIFICATE-----Generated at Sun Sep 20 12:40:17 2026 by rpki-client