$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: hZ6CS/XYChsK1OVazjOSEw0FLTJalfzuQM7Km6/HxlQ= Subject key identifier: 1D:BA:10:B6:1A:EA:6A:37:51:3E:28:2F:85:02:71:DC:9F:02:AF:CC Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 01A0C633045974DFFF482F32C2FAABD7EBE0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 1AC7 Signing time: Mon 21 Sep 2026 23:00:27 +0000 Manifest this update: Mon 21 Sep 2026 23:00:27 +0000 Manifest next update: Tue 22 Sep 2026 23:00:27 +0000 Files and hashes: 1: 1-Dw7363-gcZT5BcZS3h3DULOLy8.roa (hash: ycAjWS2LKG3rf+AnuA7L1QjlHbaxU1ClqDSIOlIjNCE=) 2: BiYRVVML9NNTA_8LHQsEIyn-udM.roa (hash: MQi6PP1rzRM1KN1VV4mGhoaMI5G3SPq1bp7SEkx+KmA=) 3: Nc3Qv6HWCUL0coHdhzehCvqorjQ.roa (hash: 1cr7/XMm8bJJ1VGTZJBo+emXZtefD8zXujejZu9BwnE=) 4: UBIi44YElhqYA3_XPQMiMHY33Ug.roa (hash: oMX079Hs0rsRW/ukFok6HicF7IaxGAO9FzHNhpkuS/A=) 5: cd86fuGEpcvGitdJ6j4qmONtrs4.roa (hash: OyWo2jddiuk9oXVabZhwBWcG9HobQGDOXj6VfpvDkjo=) 6: deTEkBZi5H7AIejV16ysjHwAbxY.roa (hash: l0JbGg+HLxrf5Ag/2z2pTojVken0ajBmDjhItX+Hm3I=) 7: i-f-GFNW7EWY7uYw_DjdHPLZIEc.roa (hash: Lu14Av/K1ThdwY4U86jUJpa6Z2xIOpuEfesYLD//+vY=) 8: oKVovXTv2aNAyZu9y-AHgX6RbJ8.roa (hash: UsgdfjEOvyD+5ioDpDRHljoPckkLzWdsqZQnU51Gug0=) 9: ocHryKy0JCZoZXuWFydbiaPAXvA.roa (hash: VJkfS4R1R0/kVOkQFygl/eqzEOXMlTWCdbkGDaHwbCQ=) 10: our5ihUuGcgcU0KjT-Q2_hJRSYY.roa (hash: fFr4tZX1VGxnmEddwX1C01U/hs/f3oFzPhvXVoAW6YQ=) 11: pGPZirCKZzbNWc11cAMZui5y53g.roa (hash: x16id1SP+uWE4b9i/PFLiuYNReYseV++lthZDwFfk5U=) 12: pKSlP4qI-iIWoFFAgY7hZYUI5lE.roa (hash: fJiLeKrrQ0jkNTOG3gU1SfB8kCZt5PRpsv9OHklxoM8=) 13: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: /tg0ayMKBLgD685SEkuYqDKs2LlcCg3pM8QoXYMO2rw=) 14: sQ8qQg5RChJp9JsfMBZ7VZwT8WE.roa (hash: obNWII8S7VxaHifOdhDpl8/q/V3M1i4VuliV8Z+MBow=) 15: vfuime7XKLq_IMU4DAnX4Nx6jzE.roa (hash: kg5X5HNbnuBqdxjeSjsj/XEZpdxo6lTx2YGUed/0woM=) 16: wGWwo0E6K55d816ADtVpaqGsYoE.roa (hash: Qv1Am1EocmBUM6XTSjIqfN+fr9y61yBhGrH08ROvpPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c6:33:04:59:74:df:ff:48:2f:32:c2:fa:ab:d7:eb:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Sep 21 23:00:27 2026 GMT Not After : Sep 22 23:00:27 2026 GMT Subject: CN=1dba10b61aea6a37513e282f850271dc9f02afcc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:52:11:bc:91:2b:fa:31:42:13:05:b1:2e: 15:c8:e2:e3:89:24:7b:ff:3c:47:cc:47:87:97:05: a3:2a:8f:cc:9e:ba:25:0d:5b:d2:42:c7:47:0a:70: 45:6c:a0:9d:a8:20:f9:5a:aa:03:c4:d4:41:78:bb: b3:e0:80:a9:da:26:e4:3b:ce:b4:38:07:e0:a3:0e: f8:18:6b:37:2d:b8:69:d0:8c:03:b4:ce:b7:cd:0a: 03:30:e6:23:74:1f:85:07:80:76:ab:ae:c1:f7:3b: 4f:65:56:53:da:20:d1:c8:f4:00:c7:3f:b6:b5:c0: 38:81:0a:3a:b4:91:80:32:ad:67:e8:e8:2b:b3:e7: b4:d2:8c:f8:1b:03:c1:15:2e:7a:93:01:09:e3:14: 07:14:73:fd:04:23:bf:7a:b1:7e:9a:94:cf:fb:d1: 2b:bf:73:7c:aa:1b:d2:d1:00:26:9a:57:c1:77:2b: 82:a9:96:62:78:69:27:07:88:8b:df:e5:e1:df:2e: 44:9a:56:25:91:81:9b:ab:cc:67:b4:05:16:3f:98: 9a:09:4d:47:bc:e3:70:e8:31:c7:79:9c:12:0e:1e: 08:98:a3:91:e7:73:21:7c:7d:10:b3:e2:b6:f8:1e: 00:db:f9:a3:e6:0a:f5:d0:14:29:b7:6c:ba:87:22: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:BA:10:B6:1A:EA:6A:37:51:3E:28:2F:85:02:71:DC:9F:02:AF:CC X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f3:29:ad:2e:bd:15:43:10:4d:d1:a2:da:37:a9:d7:62:41: d5:b4:da:f8:a9:26:ae:4a:be:23:e4:ae:32:23:c5:8c:35:83: e9:ec:d8:e5:86:5b:b8:ec:9f:97:b4:c2:6b:38:52:75:76:03: 0b:3a:18:8a:84:7c:46:02:46:82:4b:51:a7:9c:0f:74:fc:aa: 9f:ef:7c:64:a7:a2:25:1a:6e:e8:dd:a9:c3:a1:fa:79:e7:92: 5f:01:5e:80:e1:bb:b5:ae:df:26:d4:74:a3:01:fc:6e:0b:89: 15:12:a7:43:bd:06:b4:b8:3c:e8:31:67:a1:99:8a:1f:7c:ce: b8:15:ed:cd:cf:32:ee:1d:0b:69:1f:83:b4:fc:9b:cf:ca:f6: c0:e5:32:2a:ad:54:dc:2f:db:52:49:25:26:86:6e:fe:b5:b8: 2d:df:7f:52:b4:56:62:3d:70:ef:cc:1a:be:dd:db:d7:01:69: fc:7a:b5:39:1f:fa:e1:7d:ff:8c:25:89:25:ab:a0:b7:05:f7: 4c:18:a2:c8:0c:b5:5f:dd:d7:86:ac:ad:ff:64:dd:e9:d3:9f: 93:83:f1:35:df:0e:5f:ad:ad:43:af:40:f1:4d:4a:df:b6:3a: 2a:d8:18:ed:ba:99:80:98:e1:70:52:0e:f5:ae:0a:5a:d7:a5: 9d:63:20:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDGMwRZdN//SC8ywvqr1+vgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwOTIxMjMwMDI3WhcNMjYwOTIyMjMwMDI3WjAzMTEwLwYDVQQD EygxZGJhMTBiNjFhZWE2YTM3NTEzZTI4MmY4NTAyNzFkYzlmMDJhZmNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7RSEbyRK/oxQhMFsS4VyOLjiSR7 /zxHzEeHlwWjKo/MnrolDVvSQsdHCnBFbKCdqCD5WqoDxNRBeLuz4ICp2ibkO860 OAfgow74GGs3Lbhp0IwDtM63zQoDMOYjdB+FB4B2q67B9ztPZVZT2iDRyPQAxz+2 tcA4gQo6tJGAMq1n6Ogrs+e00oz4GwPBFS56kwEJ4xQHFHP9BCO/erF+mpTP+9Er v3N8qhvS0QAmmlfBdyuCqZZieGknB4iL3+Xh3y5EmlYlkYGbq8xntAUWP5iaCU1H vONw6DHHeZwSDh4ImKOR53MhfH0Qs+K2+B4A2/mj5gr10BQpt2y6hyIOGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB26ELYa6mo3UT4oL4UCcdyfAq/MMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfMprS69 FUMQTdGi2jep12JB1bTa+Kkmrkq+I+SuMiPFjDWD6ezY5YZbuOyfl7TCazhSdXYD CzoYioR8RgJGgktRp5wPdPyqn+98ZKeiJRpu6N2pw6H6eeeSXwFegOG7ta7fJtR0 owH8bguJFRKnQ70GtLg86DFnoZmKH3zOuBXtzc8y7h0LaR+DtPybz8r2wOUyKq1U 3C/bUkklJoZu/rW4Ld9/UrRWYj1w78wavt3b1wFp/Hq1OR/64X3/jCWJJaugtwX3 TBiiyAy1X93Xhqyt/2Td6dOfk4PxNd8OX62tQ69A8U1K37Y6KtgY7bqZgJjhcFIO 9a4KWtelnWMg3A== -----END CERTIFICATE-----Generated at Tue Sep 22 08:34:21 2026 by rpki-client