$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: mpNhdKfWkG26wWiL7yOcrUcizSntnLDCtlIaXIR7+qM= Subject key identifier: 66:32:47:22:02:E9:5C:83:03:13:DA:CF:EA:CF:2A:39:2A:3A:DE:4C Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 01A0C4E9307B90F728246DEDC084BF80FA97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1B05 Signing time: Mon 21 Sep 2026 17:00:11 +0000 Manifest this update: Mon 21 Sep 2026 17:00:11 +0000 Manifest next update: Tue 22 Sep 2026 17:00:11 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: QImtNzBfyFVKGGFDd90M++5dd00rmzLj53ypSYqJ/yM=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 3geV6AQmnNE3--gs3xHupJZtVFw.roa (hash: sNT96XO64aXnjNnHk7Dhs9S+Zq3PRzmgEqOTblaXNls=) 6: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 7: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 8: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 9: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 10: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 11: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 12: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 13: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 14: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 15: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 16: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 17: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 18: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 19: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 20: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 21: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 22: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 23: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 24: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 25: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: gdiJRVH83qzM0Hc5PweB6gWC6-8.roa (hash: pgZ+GtjefMqu429BIRcG12cEE/zIXfPx6RFdA+xRHiE=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:e9:30:7b:90:f7:28:24:6d:ed:c0:84:bf:80:fa:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Sep 21 17:00:11 2026 GMT Not After : Sep 22 17:00:11 2026 GMT Subject: CN=6632472202e95c830313dacfeacf2a392a3ade4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:51:e3:14:91:ef:cc:c5:60:5a:d6:3e:1e:bf: 7f:4d:b9:c6:77:78:ff:df:41:fc:dd:ef:64:7d:76: 49:0c:f2:06:b4:6e:9a:63:15:0d:19:ce:22:13:95: fa:97:57:7b:26:41:d5:8b:3f:69:26:23:90:e2:c6: d7:6a:23:15:ce:e4:6e:55:43:bf:ed:68:e8:02:14: 65:e1:93:6c:1d:a4:6c:75:6c:82:07:79:91:f3:da: 5c:34:7d:e2:c6:98:7b:ce:53:1c:b4:00:0a:b3:08: e0:6e:fc:d3:ab:19:48:04:7d:64:3c:b2:e7:d6:59: 90:71:d3:3f:e7:7e:13:db:80:55:4f:d8:7f:50:80: da:18:6a:1c:cc:d7:33:e6:87:ef:fc:d2:b1:67:1b: 83:8c:c4:7c:3e:15:5f:29:39:84:7c:07:72:d3:96: d5:05:33:7e:ac:d3:75:18:d9:ce:78:2a:0b:92:21: e0:3c:e1:1f:83:a7:ec:54:c4:0d:f3:fc:01:21:c7: 56:74:60:4d:87:c6:52:9b:fb:11:45:9d:fd:4a:45: 82:88:a8:53:b6:eb:df:8d:8f:0b:d8:ab:5f:91:64: 39:c0:cf:2e:d6:22:7e:58:39:e5:15:23:c4:b9:9c: d8:17:0a:15:8c:6a:f1:b2:4a:18:3a:78:0c:96:85: 86:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:32:47:22:02:E9:5C:83:03:13:DA:CF:EA:CF:2A:39:2A:3A:DE:4C X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:3d:e6:41:ad:85:65:48:cd:91:8d:3c:94:d0:e1:5f:61:6a: c3:2e:8f:56:67:07:73:35:4e:4e:99:da:15:94:2e:9c:9f:3a: 96:ab:98:86:7d:1a:5c:7b:25:1e:a6:eb:9b:8e:c9:a2:09:67: 05:47:23:db:94:b5:51:98:fd:bb:99:09:9c:bc:04:97:c7:4b: 05:c9:a7:20:47:a8:2c:46:07:4b:39:a0:fb:f1:6f:82:a3:a6: 0f:0c:6a:67:21:cd:06:57:40:60:d4:b6:8c:b7:1b:82:29:87: 09:8f:c6:13:df:ee:f0:9c:cb:29:d4:c2:85:25:16:56:15:57: 20:5a:f9:7b:72:42:15:a0:02:44:cf:ef:d1:b4:cf:32:49:96: 39:a4:1d:1c:6a:5b:dc:b4:b1:e8:0f:0c:f0:04:dc:c1:3a:9d: a8:40:77:2f:ec:f1:70:b4:a1:03:5b:b9:64:6d:5c:cb:46:39: ba:39:7d:0a:88:db:c9:90:b1:a6:ca:d4:b3:b2:df:0d:08:d3: a4:5f:0a:dd:1e:e8:a0:ec:4f:6c:46:78:f1:29:61:b6:19:11: 0a:23:33:26:ab:f7:e6:dc:2b:dd:5a:56:80:8f:db:7d:b6:c3: 09:b7:ae:03:d2:1b:14:6a:ee:d5:07:d3:77:d8:ec:d5:2e:1b: 01:3b:6c:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDE6TB7kPcoJG3twIS/gPqXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwOTIxMTcwMDExWhcNMjYwOTIyMTcwMDExWjAzMTEwLwYDVQQD Eyg2NjMyNDcyMjAyZTk1YzgzMDMxM2RhY2ZlYWNmMmEzOTJhM2FkZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA71HjFJHvzMVgWtY+Hr9/TbnGd3j/ 30H83e9kfXZJDPIGtG6aYxUNGc4iE5X6l1d7JkHViz9pJiOQ4sbXaiMVzuRuVUO/ 7WjoAhRl4ZNsHaRsdWyCB3mR89pcNH3ixph7zlMctAAKswjgbvzTqxlIBH1kPLLn 1lmQcdM/534T24BVT9h/UIDaGGoczNcz5ofv/NKxZxuDjMR8PhVfKTmEfAdy05bV BTN+rNN1GNnOeCoLkiHgPOEfg6fsVMQN8/wBIcdWdGBNh8ZSm/sRRZ39SkWCiKhT tuvfjY8L2KtfkWQ5wM8u1iJ+WDnlFSPEuZzYFwoVjGrxskoYOngMloWGnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGYyRyIC6VyDAxPaz+rPKjkqOt5MMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEj3mQa2F ZUjNkY08lNDhX2Fqwy6PVmcHczVOTpnaFZQunJ86lquYhn0aXHslHqbrm47Jogln BUcj25S1UZj9u5kJnLwEl8dLBcmnIEeoLEYHSzmg+/FvgqOmDwxqZyHNBldAYNS2 jLcbgimHCY/GE9/u8JzLKdTChSUWVhVXIFr5e3JCFaACRM/v0bTPMkmWOaQdHGpb 3LSx6A8M8ATcwTqdqEB3L+zxcLShA1u5ZG1cy0Y5ujl9CojbyZCxpsrUs7LfDQjT pF8K3R7ooOxPbEZ48SlhthkRCiMzJqv35twr3VpWgI/bfbbDCbeuA9IbFGru1QfT d9js1S4bATtsCQ== -----END CERTIFICATE-----Generated at Tue Sep 22 02:43:43 2026 by rpki-client