$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json) Hash identifier: HTvd8jdFBrJ6roJGv4mBtlyhQAveDZs9l8//NczZYv0= Subject key identifier: 75:5E:45:9D:CD:1B:52:F5:38:70:A3:23:FC:F5:6E:A2:AB:08:72:2A Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 01A0C88FC68EB355DB3B5C692A3CE5C7CC72 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft Manifest number: 1A7E Signing time: Tue 22 Sep 2026 10:01:00 +0000 Manifest this update: Tue 22 Sep 2026 10:01:00 +0000 Manifest next update: Wed 23 Sep 2026 10:01:00 +0000 Files and hashes: 1: 1A0OgYXG3iVS7dYyDn-eVIhO8eM.roa (hash: FrUEKKMZAguXIpXWScc68qO/IKUabeFzGLn6njmAiyg=) 2: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=) 3: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=) 4: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=) 5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=) 6: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=) 7: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=) 8: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=) 9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: EihxreAd4N6l0ttcUtNre/fTCbZ6vEgrz9QJNI4NEd4=) 10: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=) 11: x0ebLIn0t6JXubFvQS7oR3d-wBo.roa (hash: ZkNINB/VjvBW0O1ekeXPpLo6DfUsQAyBCtiUYgei5OI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 10:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:8f:c6:8e:b3:55:db:3b:5c:69:2a:3c:e5:c7:cc:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Sep 22 10:01:00 2026 GMT Not After : Sep 23 10:01:00 2026 GMT Subject: CN=755e459dcd1b52f53870a323fcf56ea2ab08722a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fa:2e:7d:b7:e7:19:7a:da:4b:79:f3:36:e7: 40:ea:d0:2f:ec:78:3d:14:71:52:2f:0e:c7:7e:22: be:38:14:ae:8e:e3:a8:ea:33:79:84:98:1d:f6:8d: 05:a5:a6:9d:90:c4:e9:35:ef:55:da:46:4e:cb:22: f1:58:7c:1e:03:0b:3e:e9:32:95:5a:10:35:7f:87: 3e:f4:30:9f:dc:65:17:cf:a4:9e:45:8d:ba:04:f0: 80:da:1d:4c:dc:ed:fc:31:84:61:be:74:02:f3:19: b3:de:58:50:bb:80:bf:ce:06:c3:a7:69:ab:6f:c2: de:1a:64:f4:9a:6c:e0:f5:b2:f5:92:ef:fa:41:24: 2d:f4:0d:bf:3b:83:f8:91:5b:d8:25:30:ef:e6:06: d6:59:0d:80:38:96:01:2e:ec:a1:86:0f:f5:68:7a: b1:e6:f1:3a:3c:57:db:6a:a7:e3:41:56:e3:f4:7f: 55:81:ba:86:4d:64:ae:03:de:e9:53:0d:a8:04:30: ec:f3:d3:96:ee:7a:b4:db:20:be:db:ba:9f:d4:9f: 73:99:2f:29:15:be:36:52:b1:75:fd:d8:a2:90:58: 0a:95:c8:23:a7:5e:55:1c:04:0e:7a:fb:06:aa:3d: ea:12:f4:69:ca:49:15:25:e8:4f:38:6e:4c:48:e6: be:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:5E:45:9D:CD:1B:52:F5:38:70:A3:23:FC:F5:6E:A2:AB:08:72:2A X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ca:34:83:61:f5:06:bd:8f:d9:d8:95:a4:f4:14:88:b1:19: 7a:b8:7a:4c:dd:7d:86:21:34:f1:a3:6f:61:98:35:87:6c:4c: 59:7e:4a:bd:53:95:ba:b2:3a:ea:a0:5c:fe:4a:99:dd:00:54: b7:a5:de:cc:7a:40:84:e3:c6:25:b3:7d:9b:17:09:f2:ad:c8: c5:5a:f1:36:67:c0:5a:98:4c:b2:06:90:c1:33:17:d3:cb:e9: f1:c7:90:44:d3:ac:89:2a:66:b6:b7:a6:82:a9:44:c0:6d:2d: 3c:d6:d1:1b:63:c8:86:32:e2:0d:c6:12:0c:10:9b:27:36:30: c1:23:35:6e:02:c8:07:e4:bd:ee:0d:d8:53:c5:d6:a7:0a:2e: 5e:04:86:03:71:02:ce:6b:3b:49:58:be:ca:f4:d4:11:00:5b: 6f:88:32:61:06:a2:02:4d:99:d2:3b:8c:6d:53:9e:7e:d2:d5: b7:4c:cc:6f:a2:43:ab:a4:4d:55:84:c8:dd:36:e6:b0:e3:3b: 64:3b:f2:d8:00:8a:cc:c0:8c:db:64:18:31:f5:d2:32:d5:8a: 57:cd:32:76:2f:2f:fe:64:ca:1c:34:2d:5c:45:0e:15:28:11: b0:19:86:d2:c3:8e:32:a4:f8:69:d9:02:4c:b6:48:0b:d5:30: 8e:66:77:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIj8aOs1XbO1xpKjzlx8xyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwOTIyMTAwMTAwWhcNMjYwOTIzMTAwMTAwWjAzMTEwLwYDVQQD Eyg3NTVlNDU5ZGNkMWI1MmY1Mzg3MGEzMjNmY2Y1NmVhMmFiMDg3MjJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7foufbfnGXraS3nzNudA6tAv7Hg9 FHFSLw7HfiK+OBSujuOo6jN5hJgd9o0FpaadkMTpNe9V2kZOyyLxWHweAws+6TKV WhA1f4c+9DCf3GUXz6SeRY26BPCA2h1M3O38MYRhvnQC8xmz3lhQu4C/zgbDp2mr b8LeGmT0mmzg9bL1ku/6QSQt9A2/O4P4kVvYJTDv5gbWWQ2AOJYBLuyhhg/1aHqx 5vE6PFfbaqfjQVbj9H9VgbqGTWSuA97pUw2oBDDs89OW7nq02yC+27qf1J9zmS8p Fb42UrF1/diikFgKlcgjp15VHAQOevsGqj3qEvRpykkVJehPOG5MSOa+8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHVeRZ3NG1L1OHCjI/z1bqKrCHIqMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABMo0g2H1 Br2P2diVpPQUiLEZerh6TN19hiE08aNvYZg1h2xMWX5KvVOVurI66qBc/kqZ3QBU t6XezHpAhOPGJbN9mxcJ8q3IxVrxNmfAWphMsgaQwTMX08vp8ceQRNOsiSpmtrem gqlEwG0tPNbRG2PIhjLiDcYSDBCbJzYwwSM1bgLIB+S97g3YU8XWpwouXgSGA3EC zms7SVi+yvTUEQBbb4gyYQaiAk2Z0juMbVOeftLVt0zMb6JDq6RNVYTI3TbmsOM7 ZDvy2ACKzMCM22QYMfXSMtWKV80ydi8v/mTKHDQtXEUOFSgRsBmG0sOOMqT4adkC TLZIC9UwjmZ3lA== -----END CERTIFICATE-----Generated at Tue Sep 22 17:20:26 2026 by rpki-client