$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: 5QyIaQ/+1rU7LA+f+WChSu/9LVtXP5pfykbnjsWFDDI= Subject key identifier: 63:8C:A5:EA:AC:2C:43:CF:6E:19:02:9D:E6:52:E7:C9:69:58:A4:7D Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 01A0E7097957E4BE86600C2EB141EF517F3B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 0793 Signing time: Mon 28 Sep 2026 08:02:32 +0000 Manifest this update: Mon 28 Sep 2026 08:02:32 +0000 Manifest next update: Tue 29 Sep 2026 08:02:32 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: PkzMPvaR/c5mLC73Drqz1QTZ7kciuzEMfUXot8t4bo8=) 2: 7Pp8VbVpyOqLvs1kKzvwfwhRkGo.roa (hash: 6Ks2LS2FCnPCE4CsuFiuAe1Op8O0mGMtouDqQZpDygY=) 3: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=) 4: Bwqkw8hQYoLkRSGSy5raojcWLEM.roa (hash: s1cp6dxJOLvgMnvUq9xTUKfWPnoAGmbO9eTZnTJu10c=) 5: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=) 6: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=) 7: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=) 8: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=) 9: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (hash: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=) 10: gWq9l39B760m8BwJ6FnVCEx3RYw.roa (hash: xDFQoaIioQRvVfbb2XuMIMFADpDMmuQXWxpgyLuFXOs=) 11: o5v2otthTxI9MaotpF4RXsxny8c.roa (hash: 8Fkmii+rqIIBVQH5OTZvGOuhbJRNm26073tjiOdkjrw=) 12: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=) 13: tX8g4ysst6UayyhKxWn9caeZ6q8.roa (hash: qur0XBVBl5kmixRG1CpBlc3VfyHSfeNNM+Fvm2r43zc=) 14: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 08:02:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e7:09:79:57:e4:be:86:60:0c:2e:b1:41:ef:51:7f:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Sep 28 08:02:32 2026 GMT Not After : Sep 29 08:02:32 2026 GMT Subject: CN=638ca5eaac2c43cf6e19029de652e7c96958a47d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:e5:de:b6:c2:59:a4:3a:74:b4:dc:8f:19: a4:50:7f:a3:1b:e8:5b:55:d1:09:79:c3:b0:f5:af: 7c:ec:b9:ce:7d:d7:e4:8b:18:fc:d8:83:aa:24:73: ce:d2:0b:71:94:05:e4:af:de:4d:78:5a:a5:ad:64: 2f:df:65:a5:eb:e2:91:66:7d:45:f3:81:a1:3e:dc: d7:f2:d2:31:ec:ab:64:2c:cd:29:fb:f1:6c:c9:86: d7:79:2e:d8:88:25:85:e5:1f:d2:fc:db:e0:c0:c6: 26:34:a9:05:b5:c1:9d:75:bb:fa:bc:1e:85:1b:97: 33:75:fd:70:01:a7:0f:40:55:33:af:b7:9f:4f:ef: 5d:b7:ff:55:ac:a7:75:c7:10:07:c3:d2:aa:69:12: 0b:87:38:ae:e6:74:2b:d0:ff:0d:32:fa:74:9b:d1: 39:2f:f8:82:7e:4d:aa:e7:f7:3f:39:0a:39:a9:7d: 23:23:32:7d:ad:a3:f8:05:b9:af:d9:e7:1d:d9:a6: 0b:49:f3:31:76:8c:bc:e4:ac:15:e1:dd:17:62:53: 3f:59:eb:ab:e8:d1:d4:4a:4b:02:3f:7c:b6:78:cd: 7f:7a:74:88:f2:92:6f:2d:0a:2e:24:cf:d3:63:69: ee:f4:25:c4:29:d2:fa:1d:3b:97:47:99:c4:38:1c: e5:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8C:A5:EA:AC:2C:43:CF:6E:19:02:9D:E6:52:E7:C9:69:58:A4:7D X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:23:33:0a:93:14:d8:41:ce:4a:71:d2:3e:ba:af:98:a5:7a: 32:cf:11:ed:81:06:5e:db:f4:6f:3d:cd:8b:77:29:ff:f3:f8: f7:72:5a:fd:29:0f:85:24:7a:6d:8f:01:c9:0a:d7:4e:ed:48: 58:83:40:c1:a0:07:cf:2c:a2:f2:fb:8d:fd:43:9a:97:29:9c: fa:3b:47:68:8c:fe:0a:1a:8a:01:87:17:3c:63:40:aa:af:6e: fc:13:01:c9:4e:5d:4a:25:ec:b6:a0:2f:5b:c8:f9:cf:4f:a5: c2:8a:6f:88:82:94:94:fa:d8:14:48:7d:9c:8e:2b:35:72:52: 24:8d:d5:a4:b9:66:93:c3:8d:91:93:30:3a:37:d5:c2:0c:c7: 0b:3a:f0:92:c0:04:7e:d3:ab:36:6f:a6:e1:2c:23:a4:c5:28: e4:9b:27:ef:41:fc:e1:97:26:81:e1:87:42:c8:e9:9d:f1:69: 87:69:72:a6:f2:d4:3d:70:1f:e2:f8:6b:85:af:ce:05:98:6e: 43:99:52:a1:37:a0:d3:86:1e:b1:4c:c0:fb:78:2a:a8:15:2e: e1:44:fb:8c:b3:53:d3:9d:e2:1c:2d:a3:55:12:d2:a3:fb:47: 7b:58:5e:0e:d4:64:da:2d:8d:11:c5:a1:03:9b:09:4b:bf:50: 35:f5:9c:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDnCXlX5L6GYAwusUHvUX87MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwOTI4MDgwMjMyWhcNMjYwOTI5MDgwMjMyWjAzMTEwLwYDVQQD Eyg2MzhjYTVlYWFjMmM0M2NmNmUxOTAyOWRlNjUyZTdjOTY5NThhNDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLbl3rbCWaQ6dLTcjxmkUH+jG+hb VdEJecOw9a987LnOfdfkixj82IOqJHPO0gtxlAXkr95NeFqlrWQv32Wl6+KRZn1F 84GhPtzX8tIx7KtkLM0p+/FsyYbXeS7YiCWF5R/S/NvgwMYmNKkFtcGddbv6vB6F G5czdf1wAacPQFUzr7efT+9dt/9VrKd1xxAHw9KqaRILhziu5nQr0P8NMvp0m9E5 L/iCfk2q5/c/OQo5qX0jIzJ9raP4Bbmv2ecd2aYLSfMxdoy85KwV4d0XYlM/Weur 6NHUSksCP3y2eM1/enSI8pJvLQouJM/TY2nu9CXEKdL6HTuXR5nEOBzlvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGOMpeqsLEPPbhkCneZS58lpWKR9MB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAyMzCpMU 2EHOSnHSPrqvmKV6Ms8R7YEGXtv0bz3Ni3cp//P493Ja/SkPhSR6bY8ByQrXTu1I WINAwaAHzyyi8vuN/UOalymc+jtHaIz+ChqKAYcXPGNAqq9u/BMByU5dSiXstqAv W8j5z0+lwopviIKUlPrYFEh9nI4rNXJSJI3VpLlmk8ONkZMwOjfVwgzHCzrwksAE ftOrNm+m4SwjpMUo5Jsn70H84ZcmgeGHQsjpnfFph2lypvLUPXAf4vhrha/OBZhu Q5lSoTeg04YesUzA+3gqqBUu4UT7jLNT053iHC2jVRLSo/tHe1heDtRk2i2NEcWh A5sJS79QNfWcLA== -----END CERTIFICATE-----Generated at Mon Sep 28 19:36:26 2026 by rpki-client