$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json) Hash identifier: WlcHRcUpPvZNBmB7klq+ch6TlHsdBRWBpTS6TcTcwxo= Subject key identifier: 54:CA:91:97:8C:6A:6C:54:4B:64:49:CB:39:C6:D8:BD:E1:95:7C:D2 Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Certificate serial: 01A0BE42422FBFAACA104CB6DA2C3ABD12B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft Manifest number: 12C9 Signing time: Sun 20 Sep 2026 10:00:08 +0000 Manifest this update: Sun 20 Sep 2026 10:00:08 +0000 Manifest next update: Mon 21 Sep 2026 10:00:08 +0000 Files and hashes: 1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=) 2: 5tQrTl4ImzQdNGlHAgT-IuX1vY8.roa (hash: GxBCnowP4ZtGzuuaVaDDg4RHg88+PQm56YQPyTz22qs=) 3: AVqIsvmEjZSiT_RRCLhHWqXRj8E.roa (hash: bLqmsGK7/2ZHL3HZwqfJ+vP8kGQVsSwKiV5n2kXAj5s=) 4: BZcnD-tmErBEiB7QcJrqQ989pOo.roa (hash: cUC9ZHrkqmNKaBOeR4eTnUCwVEP+4beM1Gn8IQ8IXNI=) 5: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=) 6: KXKwXtnGwfLE6ooLIlB7sW-zWiA.roa (hash: 868y7iV5bE2GlzbPUF2PQ4zfQ8eO7CYYKpck7+qNj00=) 7: NcRF1eojyuc4J2Qe4PiTr1CaXTk.roa (hash: aViSA/HDXPYiP0oiBue47ud2Jb/yeLRTWtG0amjMQnw=) 8: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=) 9: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=) 10: ZOnph3q2WtDrgVbQvKechjGXvdo.roa (hash: mqSglzZHwuU9kYmNDMKPxX1vq6m9qHBB/8zS+STdMB4=) 11: Z_zuqvMRPvpefT3OEi-qCPipGXo.roa (hash: 7LwZjvv6rQTVsN12z5AMTE+LxA5Zh9KFfsjLkX5+wWY=) 12: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: DcWYjbzFOqTUpiyRwRXVg/qRAdCLokkejjJKu3dAfng=) 13: gFnSYExosWORufIRtLpKLOHGnuw.roa (hash: 3yvPJUqSbLs/JITNOHoGmZnrzFIDl+3H/JB4K+j8KTA=) 14: jEnUatV1_SEhSjb3lDhT-OJx_y4.roa (hash: aVu8qJMaxfh7cIHUjfKGtBtrMLn+MJI16CoDMroLUGY=) 15: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=) 16: qM93UF_5cbChcOUVot8OLZ6-sP8.roa (hash: yvZ4rCsGHbSUv2j2btQgGFEN/qR7LuIWsmgIOXsHjNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:42:42:2f:bf:aa:ca:10:4c:b6:da:2c:3a:bd:12:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Validity Not Before: Sep 20 10:00:08 2026 GMT Not After : Sep 21 10:00:08 2026 GMT Subject: CN=54ca91978c6a6c544b6449cb39c6d8bde1957cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ce:e1:a5:8d:c1:cc:6e:95:7c:44:7e:bd:97: 72:da:64:b3:c1:7a:18:6a:35:83:2d:6c:e5:4a:ba: 0e:eb:ce:58:18:b9:25:36:4f:63:c0:c9:37:e6:a5: d1:cb:e5:4a:d1:e6:52:32:6b:d2:7a:91:ea:9d:7a: e9:07:e5:d8:45:b0:94:16:d5:a0:43:de:c5:0c:1c: 97:8c:3a:ce:f3:6f:4b:d7:c2:8c:df:bb:b0:70:c4: 4b:8f:0b:d5:b4:db:66:62:17:b8:29:cf:a4:81:d5: 41:ca:31:34:31:c1:1a:ec:5f:08:58:84:e6:3c:73: 80:9c:6f:78:96:37:28:7e:75:14:70:f6:8c:ed:f8: b3:a6:c9:08:63:b1:b8:bc:3f:86:78:f5:41:6c:ec: d3:ae:8b:00:9e:bb:1d:5c:90:95:fc:09:5a:bf:a1: ec:fd:7d:b4:87:c3:b4:64:75:f6:50:ee:36:4f:28: d5:31:3d:4c:00:78:ca:e5:a2:fd:47:0b:13:62:a4: f0:1c:2c:42:bc:3b:a3:79:f8:98:dd:a1:42:4a:0f: db:78:8f:f7:bc:c7:38:d6:62:21:a3:2b:4b:7b:a7: c1:ed:30:4c:03:45:47:34:57:19:d6:06:3f:97:f9: 40:63:e8:96:cd:84:7a:6b:20:c8:4d:51:09:a3:fc: 58:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:CA:91:97:8C:6A:6C:54:4B:64:49:CB:39:C6:D8:BD:E1:95:7C:D2 X509v3 Authority Key Identifier: keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:c6:b6:02:85:af:6a:b1:23:47:ec:7c:8b:9d:95:b6:44:4c: 61:e9:aa:72:e6:5f:b6:28:b0:00:bc:23:e8:78:a4:1f:0a:71: 3e:99:12:99:c9:19:ad:06:68:14:aa:75:29:2d:e8:a6:57:de: 24:d5:03:93:ab:d4:ba:b2:72:26:4a:c4:16:31:63:80:ec:d2: 88:d1:ad:da:da:e9:59:b3:c9:5a:61:8f:36:c9:a4:5e:1f:e3: 4c:43:1f:5c:68:32:0a:14:4d:c7:9d:a3:dd:99:51:f1:71:61: 5a:8a:b8:d6:3f:28:01:39:6c:02:43:74:92:56:4e:31:43:90: 42:05:86:03:a1:c2:24:ad:6b:ec:d6:35:9c:0e:84:eb:92:f0: 8e:03:34:96:d5:9d:bf:8c:31:52:44:ae:68:79:cc:b1:fa:e5: cc:22:95:05:96:dc:9b:d7:83:b4:7b:40:37:bc:65:93:50:cc: 00:db:1b:be:b3:ae:b3:e6:fc:6f:8d:c8:b1:62:5c:d9:e0:fc: 3a:ad:15:51:9f:fd:b6:e0:b2:2a:d2:c8:49:0f:da:bf:1f:10: 23:ec:72:0b:56:8b:ef:70:06:b7:df:fb:b0:49:81:cb:b1:7b: 69:bd:6f:27:95:20:0f:52:f3:d4:98:e6:0c:19:ce:98:e1:0c: a8:17:12:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+QkIvv6rKEEy22iw6vRK5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz OGM4ZTEwHhcNMjYwOTIwMTAwMDA4WhcNMjYwOTIxMTAwMDA4WjAzMTEwLwYDVQQD Eyg1NGNhOTE5NzhjNmE2YzU0NGI2NDQ5Y2IzOWM2ZDhiZGUxOTU3Y2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAys7hpY3BzG6VfER+vZdy2mSzwXoY ajWDLWzlSroO685YGLklNk9jwMk35qXRy+VK0eZSMmvSepHqnXrpB+XYRbCUFtWg Q97FDByXjDrO829L18KM37uwcMRLjwvVtNtmYhe4Kc+kgdVByjE0McEa7F8IWITm PHOAnG94ljcofnUUcPaM7fizpskIY7G4vD+GePVBbOzTrosAnrsdXJCV/Alav6Hs /X20h8O0ZHX2UO42TyjVMT1MAHjK5aL9RwsTYqTwHCxCvDujefiY3aFCSg/beI/3 vMc41mIhoytLe6fB7TBMA0VHNFcZ1gY/l/lAY+iWzYR6ayDITVEJo/xY2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFTKkZeMamxUS2RJyznG2L3hlXzSMB8GA1UdIwQY MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlsa2AoWv arEjR+x8i52VtkRMYemqcuZftiiwALwj6HikHwpxPpkSmckZrQZoFKp1KS3oplfe JNUDk6vUurJyJkrEFjFjgOzSiNGt2trpWbPJWmGPNsmkXh/jTEMfXGgyChRNx52j 3ZlR8XFhWoq41j8oATlsAkN0klZOMUOQQgWGA6HCJK1r7NY1nA6E65LwjgM0ltWd v4wxUkSuaHnMsfrlzCKVBZbcm9eDtHtAN7xlk1DMANsbvrOus+b8b43IsWJc2eD8 Oq0VUZ/9tuCyKtLISQ/avx8QI+xyC1aL73AGt9/7sEmBy7F7ab1vJ5UgD1Lz1Jjm DBnOmOEMqBcS+g== -----END CERTIFICATE-----Generated at Sun Sep 20 16:03:16 2026 by rpki-client