$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft File: 34laPuIhG27i33IC8JpCZoDWYmk.mft (raw, json) Hash identifier: d/wqUaYbcu41g7jpJsDkwKibK6wb5SdTdVYXwlse4Io= Subject key identifier: 57:A8:41:02:8C:AA:FC:4B:B3:9F:88:07:20:01:D9:BD:EF:4E:72:A7 Authority key identifier: DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 Certificate issuer: /CN=df895a3ee2211b6ee2df7202f09a426680d66269 Certificate serial: 01A0BEE78FCD7E5DAF8C18048D1E9D363D50 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft Manifest number: 0957 Signing time: Sun 20 Sep 2026 13:00:41 +0000 Manifest this update: Sun 20 Sep 2026 13:00:41 +0000 Manifest next update: Mon 21 Sep 2026 13:00:41 +0000 Files and hashes: 1: 0XLwdTu4nRGxVAQOFOgi-F-CPp8.roa (hash: pak6BtTzWa98W3dJFCCof2yZ3EkBaahZi9HG5ewTysQ=) 2: 34laPuIhG27i33IC8JpCZoDWYmk.crl (hash: xIcIapPT0ojG7JQWLl6UphVQDZM9Xw5Mi0UbJM45m0U=) 3: JbC08AZZ4yXpMlH-fCQSdJypEsk.roa (hash: dv25QT/BTHr/Vmlb0AXRPmd0ZYYxQm5AHmzhJRYqsHI=) 4: aDmk7bmr7GaG3aSI9qiX-uXwSWg.roa (hash: PRIIqS3HIlOlOVEL7UW8zij6bOh1J2Z1Qs2Esv77scQ=) 5: cw-KXeWioyTYbIA1vAnNwGD9GhY.roa (hash: EbcWuoOspeZih7eQTLeYWoRHq4YiGEsO0VMZUGNEFB0=) 6: e5CgRNX8DO6ZSqQ9MJH71FE7_jc.roa (hash: V4ZA2YkMaTT1slmusEGl0z9gt2912EuUoJMbm9ZyTsM=) 7: j-PFBiL03S6WRSrBU8S47xwyndA.roa (hash: K7P+QUsdp4yG+ErvjouO0SB+AUJcFrNu/1BLrwwoCmk=) 8: mHlUc70rNMbtkPfKuvhCKEylgkY.roa (hash: h1dT3/iB5II0F3sw3D3rAshjNyDRMEmfsyBcGUSBbMs=) 9: onJwIsBG_TlNzJPQVYzWvXnQYTU.roa (hash: CF4OHpZC0xd0XR18QoBgWTx8t9RwFhji6OFqhQG0Qog=) 10: tDWgVsxN09kg7oAdG68IGAVT8Zg.roa (hash: 92PHhhSbJSKdw93N+YcB/DCcsP8fP/+3+zAHfz750FA=) 11: wNRTB3A2q9f-yV1rTSijUO5gEB8.roa (hash: Mvkmn5/K4C/vX+W0bmirSKlojMyVfTuv4C+eRU2oTlU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:e7:8f:cd:7e:5d:af:8c:18:04:8d:1e:9d:36:3d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=df895a3ee2211b6ee2df7202f09a426680d66269 Validity Not Before: Sep 20 13:00:41 2026 GMT Not After : Sep 21 13:00:41 2026 GMT Subject: CN=57a841028caafc4bb39f88072001d9bdef4e72a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:95:ca:65:76:b2:9b:94:6d:05:87:0e:64:65: 2b:8d:64:a4:9e:bc:cd:e8:37:08:48:e0:bf:74:f2: c4:02:c8:83:4c:b8:9d:2f:67:5c:e4:41:15:4a:c9: 0b:9e:b7:68:56:9b:76:09:38:84:12:b0:65:7e:dc: bd:33:97:33:48:dd:78:7c:60:6c:20:84:f1:f8:c7: 48:4c:bc:03:a2:23:2e:f6:95:77:ea:e4:2b:10:fe: 46:7c:6d:70:a4:02:01:36:6a:b8:52:0e:94:84:67: c3:dc:58:f7:40:cb:8d:97:5a:2b:4d:24:d3:82:b9: 6b:ca:6a:d4:8b:35:e2:ee:a0:44:ac:3e:13:bb:68: e8:ef:a1:ae:74:74:2c:8f:b8:b7:bb:8a:c1:7c:1a: 96:bf:21:fb:3a:ea:24:20:77:db:be:d2:14:f0:a3: 2a:bd:34:3c:71:7a:73:0a:17:72:67:27:a3:f0:f2: 76:45:76:6f:bc:59:8c:77:11:32:32:70:23:42:05: a2:04:9f:6f:2f:e7:be:03:bd:e8:35:b6:fd:5d:7f: 06:8c:f2:34:a4:f9:e4:f4:01:79:8f:1f:eb:dc:0d: c1:a4:19:f4:7a:7f:3a:98:61:87:81:44:25:94:4b: e5:58:e1:40:5b:ec:a1:9e:08:c2:cb:94:12:2c:0b: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A8:41:02:8C:AA:FC:4B:B3:9F:88:07:20:01:D9:BD:EF:4E:72:A7 X509v3 Authority Key Identifier: keyid:DF:89:5A:3E:E2:21:1B:6E:E2:DF:72:02:F0:9A:42:66:80:D6:62:69 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34laPuIhG27i33IC8JpCZoDWYmk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/1a72a7-277d-44f5-87de-70b2ebd51438/1/34laPuIhG27i33IC8JpCZoDWYmk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:a2:6c:48:b6:86:93:b2:38:fa:be:d5:c8:52:a0:12:87:13: 88:2d:b0:c1:d7:27:18:54:db:2a:3b:f9:62:e2:74:c0:a9:f8: f3:f1:40:46:f8:54:9a:b2:e9:c7:ce:e5:81:5b:85:cb:c9:34: 43:0f:b7:91:dc:74:a8:51:e1:f2:d8:ff:9b:a5:ee:32:7e:d2: 2f:17:ec:df:5f:2c:64:93:48:5e:a6:fc:95:b5:9a:05:20:28: 37:db:05:e5:f4:17:78:8c:6d:11:de:71:df:61:fe:96:12:a9: 2e:92:45:6a:06:95:b7:fd:f6:a0:77:b3:8f:7f:eb:2d:96:69: 8c:12:39:05:ef:ef:70:6c:7b:6b:03:5d:c6:4e:19:da:7e:a0: 7f:ad:9a:0a:8f:50:ee:6b:aa:a5:42:bf:59:74:6d:2d:f0:75: 35:8a:8b:ad:7f:59:fe:19:09:7f:d1:f9:0a:f6:f5:3e:77:be: 38:dc:03:05:a5:37:f6:3f:d8:76:35:89:39:1b:7c:52:e8:a9: f5:57:cd:6d:b7:ea:46:16:6e:15:a0:2c:e1:1f:44:43:ea:44: 50:c0:df:f0:02:cd:9e:77:82:a5:da:bc:a3:fc:57:fd:79:28: 8a:1d:88:f5:26:e9:e9:fb:74:ab:59:7f:74:6c:de:60:1f:94: 74:d5:f3:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+54/Nfl2vjBgEjR6dNj1QMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmODk1YTNlZTIyMTFiNmVlMmRmNzIwMmYwOWE0MjY2ODBk NjYyNjkwHhcNMjYwOTIwMTMwMDQxWhcNMjYwOTIxMTMwMDQxWjAzMTEwLwYDVQQD Eyg1N2E4NDEwMjhjYWFmYzRiYjM5Zjg4MDcyMDAxZDliZGVmNGU3MmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzpXKZXaym5RtBYcOZGUrjWSknrzN 6DcISOC/dPLEAsiDTLidL2dc5EEVSskLnrdoVpt2CTiEErBlfty9M5czSN14fGBs IITx+MdITLwDoiMu9pV36uQrEP5GfG1wpAIBNmq4Ug6UhGfD3Fj3QMuNl1orTSTT grlrymrUizXi7qBErD4Tu2jo76GudHQsj7i3u4rBfBqWvyH7OuokIHfbvtIU8KMq vTQ8cXpzChdyZyej8PJ2RXZvvFmMdxEyMnAjQgWiBJ9vL+e+A73oNbb9XX8GjPI0 pPnk9AF5jx/r3A3BpBn0en86mGGHgUQllEvlWOFAW+yhngjCy5QSLAsYEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeoQQKMqvxLs5+IByAB2b3vTnKnMB8GA1UdIwQY MBaAFN+JWj7iIRtu4t9yAvCaQmaA1mJpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUt NzBiMmViZDUxNDM4LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8xYTcyYTctMjc3ZC00NGY1LTg3ZGUtNzBiMmViZDUxNDM4 LzEvMzRsYVB1SWhHMjdpMzNJQzhKcENab0RXWW1rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfaJsSLaG k7I4+r7VyFKgEocTiC2wwdcnGFTbKjv5YuJ0wKn48/FARvhUmrLpx87lgVuFy8k0 Qw+3kdx0qFHh8tj/m6XuMn7SLxfs318sZJNIXqb8lbWaBSAoN9sF5fQXeIxtEd5x 32H+lhKpLpJFagaVt/32oHezj3/rLZZpjBI5Be/vcGx7awNdxk4Z2n6gf62aCo9Q 7muqpUK/WXRtLfB1NYqLrX9Z/hkJf9H5Cvb1Pne+ONwDBaU39j/YdjWJORt8Uuip 9VfNbbfqRhZuFaAs4R9EQ+pEUMDf8ALNnneCpdq8o/xX/Xkoih2I9Sbp6ft0q1l/ dGzeYB+UdNXzFQ== -----END CERTIFICATE-----Generated at Sun Sep 20 20:19:56 2026 by rpki-client