$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json) Hash identifier: 4xNWg4XAtlhnPWoteuArzPx8xAjjeC49/L9t9FjPOnY= Subject key identifier: 43:9E:13:EE:0C:19:8E:88:68:A3:34:9F:98:96:25:A7:8A:6C:9B:40 Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 01A0C5C4E94289908953017AF308FADCDC14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft Manifest number: 145F Signing time: Mon 21 Sep 2026 21:00:11 +0000 Manifest this update: Mon 21 Sep 2026 21:00:11 +0000 Manifest next update: Tue 22 Sep 2026 21:00:11 +0000 Files and hashes: 1: 1GxQmUTb97UmZv7pfW11O7jdoKQ.roa (hash: FmC4+AN9e0K9c8X4YT0jW6rSPs+y4UOdKxP9qZCnFuc=) 2: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=) 3: BxKZgBdEOXm741z70o-b-8aaZ1U.roa (hash: 9rDM/H8P5h5tG13SRwkUwohyZWN/9GQOe+B0Xl1+fUU=) 4: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=) 5: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=) 6: ZpqqEj-OtTqHMeec7OuBtT0rl_E.roa (hash: 4anR5lz+iPBfqZgtXZg/nhMp2EG3l7fsaSGpS3G04V8=) 7: aMzR14uquK9xRLMlgVieiQnpsL8.roa (hash: LnMZCy9Vc3AkrK23NCsUcwd16nNnZncQK2bQfZFfX7Y=) 8: dYbDdMuBsyQvL7kdUhtnVt9Qq4Q.roa (hash: Uc1pM7+13084KA3rRz3NbQmC1rtfcHSF9LSKdQS99oU=) 9: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: q1IyG2IRGjBr0zUUx3QGTk0bQNL55B/3nYf9r90rsMw=) 10: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=) 11: gbf_kkJkJHVfWvhpOZp44zXkSi4.roa (hash: L7TAKQTj5DgzgInyo2Z2o+5W5kIP6WxJWd/ULoNrui4=) 12: izn0gTPOQgQruf6Plz077lbyDvQ.roa (hash: SL5lQV0cHnhG5e9HsORKQLS+k85jrcJmLKm8DFk0UWk=) 13: ltuqnV7zy2DnQsucRbj8arC5CQM.roa (hash: LNO3fd1HW9TV8pQ7/uQgUjVDHYwtyIfoP4cwyPVsgsw=) 14: mBXHe8xwrq_f8wh9M3ZXaWdq8f8.roa (hash: dI8S3nju8gYg5btIsxEkeYY9kQycBzwf9pyizszOFek=) 15: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=) 16: q--OuP_rfB_qdy_7f_RIgPMsU7I.roa (hash: J5d2AOEi0HNsiyJ+nB39gHaVUpXKMLDnfhR+GSmUgHE=) 17: r2wp15RalYZ-BpL4xsNnngK0594.roa (hash: NNjjTsbzbTB3BJf0ScAIqlbHnQQtN/B+x9X2kssrtLQ=) 18: tiWoclLyoubi_eH2eBTEmg_nRPQ.roa (hash: v7vNaiqbe+aP8/SaLVbx8mliFyA9s414yzNmBa2a+SI=) 19: uuy6ECeKU5zPxhagn8FIr283yKQ.roa (hash: OOKXwwUyMmEuY99QE9mTnSKY0ij2Tkkt4XqvRj4K6hc=) 20: vLafL0GwWDvLzC-WXo-ujU2mMjU.roa (hash: WZJnUmwzRASxvhXsgI51USxfQop8j6bDAzzdqadBvsM=) 21: xfzSJZkuJaEFMZbSPNrdm-vtVgk.roa (hash: 03aH6k3XO2w/avcqYf5rOTHSew6NN0Bs9faZ8hBNn0U=) 22: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:c4:e9:42:89:90:89:53:01:7a:f3:08:fa:dc:dc:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Sep 21 21:00:11 2026 GMT Not After : Sep 22 21:00:11 2026 GMT Subject: CN=439e13ee0c198e8868a3349f989625a78a6c9b40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f0:57:14:a4:d9:be:0e:25:15:1e:25:66:d4: ed:bc:2e:cf:f4:6b:7a:3d:88:15:10:c5:94:c0:7e: 62:56:5f:b5:e3:d4:eb:e3:b1:70:33:45:74:c1:b2: 95:1b:7f:8a:0a:85:e5:06:aa:df:3d:f0:26:86:b0: ee:3b:1b:ba:53:3b:11:20:b5:bd:4a:30:34:e3:c4: 83:94:b6:e7:6f:4b:7f:da:ee:12:b4:71:21:c6:98: 37:9a:97:5a:b2:8d:78:34:3a:76:2d:aa:26:42:7e: e8:0e:f3:42:9f:90:ed:1e:36:e1:68:65:91:f2:65: 3e:19:6a:15:e8:30:52:bb:74:ca:3f:77:df:3a:79: be:5e:84:58:8b:fe:c7:c1:2f:37:c9:4d:10:b5:74: 80:07:f6:b7:7d:f5:4b:08:8f:89:3b:30:36:24:84: bb:18:2a:16:58:8d:a7:f3:0b:63:27:09:f3:85:9e: fb:16:75:f3:8d:bc:43:76:2e:0c:ab:ce:e2:69:41: 97:0b:2a:49:53:7a:e0:44:91:b8:df:e8:e9:2b:21: a2:9c:b2:d5:66:e6:81:1b:ec:7f:7c:a7:63:53:da: bc:bf:ad:5f:87:13:37:be:d1:a5:89:42:a5:2f:50: 47:1a:e6:c8:f5:ca:87:a9:0e:04:62:7e:e8:e2:07: 7f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9E:13:EE:0C:19:8E:88:68:A3:34:9F:98:96:25:A7:8A:6C:9B:40 X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:60:62:73:75:89:f6:d3:97:b6:13:84:8e:85:c6:16:17:4d: 03:45:63:2c:29:da:9f:54:90:93:89:3e:83:31:59:02:2f:c3: 47:2c:b2:47:d6:28:62:08:42:0c:cf:e9:34:fc:c4:61:e5:a7: 63:bc:36:47:c7:87:7d:7b:c6:39:24:83:44:c7:fe:bf:4b:b1: 1b:14:de:a9:f6:b2:dd:1c:1e:f0:72:0e:d5:dd:0e:79:ac:09: 5d:9c:00:f6:e4:90:00:f7:71:07:54:d5:79:a4:65:27:f4:13: 0e:b9:3b:c6:74:51:4d:0e:8a:30:d4:11:b7:60:5b:49:be:bc: 33:9e:3a:b8:88:c4:b6:5f:ce:2a:4d:7e:3b:39:d4:8c:18:c4: 82:b4:58:c8:31:44:ce:32:94:2e:b2:21:f5:2f:3a:48:7a:b3: 64:b4:6b:6c:db:aa:19:57:cf:38:3e:a9:0f:1f:80:d0:c9:86: 54:2a:a4:69:d3:6d:4e:79:b8:00:59:88:83:3d:94:70:33:4f: e7:81:f5:3d:82:8a:3e:05:d9:23:ad:df:75:4a:55:67:4c:e6: 15:03:4a:2b:a6:f5:a8:3a:3e:b3:ae:73:88:b6:a8:23:b4:a9: 00:f1:1e:c1:59:32:3a:2c:34:c2:f8:9a:22:6d:0a:5d:84:f0: b3:87:25:80 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFxOlCiZCJUwF68wj63NwUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjYwOTIxMjEwMDExWhcNMjYwOTIyMjEwMDExWjAzMTEwLwYDVQQD Eyg0MzllMTNlZTBjMTk4ZTg4NjhhMzM0OWY5ODk2MjVhNzhhNmM5YjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfBXFKTZvg4lFR4lZtTtvC7P9Gt6 PYgVEMWUwH5iVl+149Tr47FwM0V0wbKVG3+KCoXlBqrfPfAmhrDuOxu6UzsRILW9 SjA048SDlLbnb0t/2u4StHEhxpg3mpdaso14NDp2LaomQn7oDvNCn5DtHjbhaGWR 8mU+GWoV6DBSu3TKP3ffOnm+XoRYi/7HwS83yU0QtXSAB/a3ffVLCI+JOzA2JIS7 GCoWWI2n8wtjJwnzhZ77FnXzjbxDdi4Mq87iaUGXCypJU3rgRJG43+jpKyGinLLV ZuaBG+x/fKdjU9q8v61fhxM3vtGliUKlL1BHGubI9cqHqQ4EYn7o4gd/UQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEOeE+4MGY6IaKM0n5iWJaeKbJtAMB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGBic3WJ 9tOXthOEjoXGFhdNA0VjLCnan1SQk4k+gzFZAi/DRyyyR9YoYghCDM/pNPzEYeWn Y7w2R8eHfXvGOSSDRMf+v0uxGxTeqfay3Rwe8HIO1d0OeawJXZwA9uSQAPdxB1TV eaRlJ/QTDrk7xnRRTQ6KMNQRt2BbSb68M546uIjEtl/OKk1+OznUjBjEgrRYyDFE zjKULrIh9S86SHqzZLRrbNuqGVfPOD6pDx+A0MmGVCqkadNtTnm4AFmIgz2UcDNP 54H1PYKKPgXZI63fdUpVZ0zmFQNKK6b1qDo+s65ziLaoI7SpAPEewVkyOiw0wvia Im0KXYTws4clgA== -----END CERTIFICATE-----Generated at Tue Sep 22 02:11:27 2026 by rpki-client