$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: J8wTEn7gcImhlnk0B1LRJyS25oe8Mox7ANfI90rtJ/U= Subject key identifier: DD:42:52:C8:07:04:1C:27:3B:3F:1F:8A:E5:33:EE:BC:28:E2:EB:01 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 01A0C821701437DB938445605B658EFDDEB5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 1AC8 Signing time: Tue 22 Sep 2026 08:00:29 +0000 Manifest this update: Tue 22 Sep 2026 08:00:29 +0000 Manifest next update: Wed 23 Sep 2026 08:00:29 +0000 Files and hashes: 1: 1-Dw7363-gcZT5BcZS3h3DULOLy8.roa (hash: ycAjWS2LKG3rf+AnuA7L1QjlHbaxU1ClqDSIOlIjNCE=) 2: BiYRVVML9NNTA_8LHQsEIyn-udM.roa (hash: MQi6PP1rzRM1KN1VV4mGhoaMI5G3SPq1bp7SEkx+KmA=) 3: Nc3Qv6HWCUL0coHdhzehCvqorjQ.roa (hash: 1cr7/XMm8bJJ1VGTZJBo+emXZtefD8zXujejZu9BwnE=) 4: UBIi44YElhqYA3_XPQMiMHY33Ug.roa (hash: oMX079Hs0rsRW/ukFok6HicF7IaxGAO9FzHNhpkuS/A=) 5: cd86fuGEpcvGitdJ6j4qmONtrs4.roa (hash: OyWo2jddiuk9oXVabZhwBWcG9HobQGDOXj6VfpvDkjo=) 6: deTEkBZi5H7AIejV16ysjHwAbxY.roa (hash: l0JbGg+HLxrf5Ag/2z2pTojVken0ajBmDjhItX+Hm3I=) 7: i-f-GFNW7EWY7uYw_DjdHPLZIEc.roa (hash: Lu14Av/K1ThdwY4U86jUJpa6Z2xIOpuEfesYLD//+vY=) 8: oKVovXTv2aNAyZu9y-AHgX6RbJ8.roa (hash: UsgdfjEOvyD+5ioDpDRHljoPckkLzWdsqZQnU51Gug0=) 9: ocHryKy0JCZoZXuWFydbiaPAXvA.roa (hash: VJkfS4R1R0/kVOkQFygl/eqzEOXMlTWCdbkGDaHwbCQ=) 10: our5ihUuGcgcU0KjT-Q2_hJRSYY.roa (hash: fFr4tZX1VGxnmEddwX1C01U/hs/f3oFzPhvXVoAW6YQ=) 11: pGPZirCKZzbNWc11cAMZui5y53g.roa (hash: x16id1SP+uWE4b9i/PFLiuYNReYseV++lthZDwFfk5U=) 12: pKSlP4qI-iIWoFFAgY7hZYUI5lE.roa (hash: fJiLeKrrQ0jkNTOG3gU1SfB8kCZt5PRpsv9OHklxoM8=) 13: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: 4KoqN4o668RsQqca8WIuTUuI/9+kqZBJ5goafUzwQ6g=) 14: sQ8qQg5RChJp9JsfMBZ7VZwT8WE.roa (hash: obNWII8S7VxaHifOdhDpl8/q/V3M1i4VuliV8Z+MBow=) 15: vfuime7XKLq_IMU4DAnX4Nx6jzE.roa (hash: kg5X5HNbnuBqdxjeSjsj/XEZpdxo6lTx2YGUed/0woM=) 16: wGWwo0E6K55d816ADtVpaqGsYoE.roa (hash: Qv1Am1EocmBUM6XTSjIqfN+fr9y61yBhGrH08ROvpPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 08:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:21:70:14:37:db:93:84:45:60:5b:65:8e:fd:de:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Sep 22 08:00:29 2026 GMT Not After : Sep 23 08:00:29 2026 GMT Subject: CN=dd4252c807041c273b3f1f8ae533eebc28e2eb01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:21:09:cf:0c:e6:f7:74:e4:77:a0:73:e6:4c: af:4c:30:a4:9f:ea:8a:42:aa:be:f7:f0:7a:f9:0a: 55:0f:2c:73:1e:fd:1c:ad:c8:fb:13:4b:1a:03:30: 97:76:4e:7e:57:15:3c:c9:49:29:33:93:d5:d0:7c: fd:65:62:17:03:77:e7:6e:a2:63:18:c3:c9:6f:0e: 0d:67:25:b1:db:de:ab:3e:0b:79:79:f9:f7:90:f2: b0:bc:6e:e4:7a:db:80:84:8b:98:cc:f5:14:c6:cd: 27:7c:0b:b7:55:27:44:2e:59:86:e6:6c:d7:f3:d7: 08:e2:62:0f:c3:4a:db:d6:34:62:50:7e:fd:97:da: d5:6c:3a:9e:1c:86:aa:80:c2:9e:ee:bb:25:c0:66: 99:dc:0f:21:e0:af:80:15:76:4f:ef:d5:81:47:5c: 15:ef:2a:94:00:08:77:ed:ec:92:b0:79:73:87:90: 71:d0:34:be:c9:4e:0d:ea:d4:60:55:c2:86:64:b9: f5:d1:89:8e:f8:d7:05:25:d9:8a:6a:1a:a0:14:3a: 0d:54:c3:fc:7a:7c:c8:57:f7:ea:1d:80:a5:fc:b4: 59:87:3c:94:f9:34:c6:76:4f:05:c7:53:34:99:10: 40:2c:0d:ef:2f:fd:12:ed:a6:7b:52:8c:57:8b:eb: 1b:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:42:52:C8:07:04:1C:27:3B:3F:1F:8A:E5:33:EE:BC:28:E2:EB:01 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:0b:4e:70:a3:38:5c:65:43:72:a3:2d:d9:14:cf:d3:e4:e3: 86:fe:ab:c0:25:7a:72:96:2f:4e:e3:0c:a4:62:ed:f9:4f:f0: 50:3d:a8:15:86:76:ce:d4:46:d2:c6:0f:58:e4:8a:50:52:f6: a2:bf:7d:41:33:88:0c:b4:20:30:d3:69:6b:6a:47:1f:37:cc: 91:b2:11:7d:b7:88:1a:67:8c:3a:00:e1:12:30:af:9d:c1:02: 62:ea:ab:e4:46:4c:bf:6d:51:b7:4e:af:99:48:df:9c:d5:99: 47:04:70:12:63:d0:60:61:67:88:f5:dc:f9:fd:10:1b:18:d2: 7e:3a:2b:45:92:9b:e5:69:1f:7a:44:e0:7b:e8:2b:d9:2f:ea: 60:fe:53:d2:45:48:3f:81:f3:66:a1:1f:c9:ee:5d:c8:5a:00: 90:f0:68:1f:ed:c9:08:67:37:b3:46:77:84:3d:db:67:e2:59: 7e:46:d0:d2:28:b4:03:ff:32:ae:7f:50:84:3f:67:62:1d:d6: c3:46:82:5f:fd:c8:d1:9f:72:3b:30:aa:c5:77:2b:ac:d0:0d: af:c5:40:a9:3f:45:f0:ef:46:3e:85:3b:17:40:c1:d7:7c:86: bd:b2:ca:02:80:85:64:f5:53:80:3a:f8:54:9e:95:40:1a:f7: a8:76:09:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIIXAUN9uThEVgW2WO/d61MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwOTIyMDgwMDI5WhcNMjYwOTIzMDgwMDI5WjAzMTEwLwYDVQQD EyhkZDQyNTJjODA3MDQxYzI3M2IzZjFmOGFlNTMzZWViYzI4ZTJlYjAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyEJzwzm93Tkd6Bz5kyvTDCkn+qK Qqq+9/B6+QpVDyxzHv0crcj7E0saAzCXdk5+VxU8yUkpM5PV0Hz9ZWIXA3fnbqJj GMPJbw4NZyWx296rPgt5efn3kPKwvG7ketuAhIuYzPUUxs0nfAu3VSdELlmG5mzX 89cI4mIPw0rb1jRiUH79l9rVbDqeHIaqgMKe7rslwGaZ3A8h4K+AFXZP79WBR1wV 7yqUAAh37eySsHlzh5Bx0DS+yU4N6tRgVcKGZLn10YmO+NcFJdmKahqgFDoNVMP8 enzIV/fqHYCl/LRZhzyU+TTGdk8Fx1M0mRBALA3vL/0S7aZ7UoxXi+sbwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN1CUsgHBBwnOz8fiuUz7rwo4usBMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqQtOcKM4 XGVDcqMt2RTP0+Tjhv6rwCV6cpYvTuMMpGLt+U/wUD2oFYZ2ztRG0sYPWOSKUFL2 or99QTOIDLQgMNNpa2pHHzfMkbIRfbeIGmeMOgDhEjCvncECYuqr5EZMv21Rt06v mUjfnNWZRwRwEmPQYGFniPXc+f0QGxjSfjorRZKb5WkfekTge+gr2S/qYP5T0kVI P4HzZqEfye5dyFoAkPBoH+3JCGc3s0Z3hD3bZ+JZfkbQ0ii0A/8yrn9QhD9nYh3W w0aCX/3I0Z9yOzCqxXcrrNANr8VAqT9F8O9GPoU7F0DB13yGvbLKAoCFZPVTgDr4 VJ6VQBr3qHYJew== -----END CERTIFICATE-----Generated at Tue Sep 22 16:44:40 2026 by rpki-client