$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: 4+zg+aDSMzS71Z73hR8rKtTkCG/mFucGzhZI4NXiotk= Subject key identifier: 84:1C:18:94:A3:C1:24:7E:91:B4:0D:29:0E:C8:0E:28:29:A9:3D:9B Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 01A0BF1E028BC89A18472383DD94210C1E97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1B02 Signing time: Sun 20 Sep 2026 14:00:09 +0000 Manifest this update: Sun 20 Sep 2026 14:00:09 +0000 Manifest next update: Mon 21 Sep 2026 14:00:09 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: TLbGxFHLAFPebWeFTcSTCkbpP5M9/4yB8716ZFnhmpY=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 3geV6AQmnNE3--gs3xHupJZtVFw.roa (hash: sNT96XO64aXnjNnHk7Dhs9S+Zq3PRzmgEqOTblaXNls=) 6: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 7: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 8: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 9: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 10: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 11: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 12: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 13: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 14: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 15: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 16: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 17: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 18: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 19: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 20: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 21: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 22: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 23: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 24: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 25: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: gdiJRVH83qzM0Hc5PweB6gWC6-8.roa (hash: pgZ+GtjefMqu429BIRcG12cEE/zIXfPx6RFdA+xRHiE=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:1e:02:8b:c8:9a:18:47:23:83:dd:94:21:0c:1e:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Sep 20 14:00:09 2026 GMT Not After : Sep 21 14:00:09 2026 GMT Subject: CN=841c1894a3c1247e91b40d290ec80e2829a93d9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:72:67:4a:a8:5f:b8:0b:8e:b1:2c:22:df:97: 0a:e4:ac:f9:65:fb:21:93:be:ac:8e:b6:c3:86:38: d6:ba:17:ce:0f:10:08:0a:70:83:c2:13:b4:df:4e: d9:e0:56:b3:c7:c8:82:73:c2:f0:b6:ac:20:a7:42: 01:f5:3b:6d:93:0c:fe:60:30:7e:b8:23:94:6c:b4: 75:13:2e:69:0e:72:59:c3:c4:3d:38:0e:61:53:cc: ab:97:ca:34:52:b2:7f:d5:bc:c9:e1:03:ce:ae:d1: cf:88:82:cc:b9:8d:6a:57:f7:dd:67:54:24:b8:c7: fb:49:b1:4f:f8:61:52:3c:b1:b4:65:58:85:6f:13: 97:f7:43:1e:77:0f:eb:d1:78:3a:83:62:19:a7:7d: 40:8c:ca:e7:18:a2:e7:33:55:b4:07:45:a5:cd:86: cd:e4:6b:74:62:20:4f:61:6a:b1:1e:a7:a5:83:fa: 05:7a:a6:6f:4f:ba:f5:8d:47:f4:81:7a:b1:98:ce: 3c:0f:75:97:b9:42:7d:9c:f0:9d:76:04:22:ae:01: 7c:09:35:ca:f2:3e:6c:62:19:36:c9:64:13:b1:aa: 7c:29:7c:d7:08:d6:c9:0c:8c:a7:6f:65:d8:4b:27: 75:c5:3a:a5:1e:03:ba:54:9b:30:2b:1a:93:4a:03: 63:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:1C:18:94:A3:C1:24:7E:91:B4:0D:29:0E:C8:0E:28:29:A9:3D:9B X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:0a:57:a5:54:66:24:37:f7:44:05:ab:77:9d:a0:fe:ae:46: c7:56:10:88:6a:00:d7:59:1c:e3:a9:87:f9:ff:7d:58:9d:24: 41:94:43:7e:ff:2a:fe:a4:80:76:9d:d7:8a:84:c2:8f:ea:a6: e4:65:9c:56:a4:3b:41:35:f9:03:d0:0c:13:33:04:9f:c4:8a: 10:01:09:3f:e6:01:74:ad:96:c4:16:d3:1e:5d:14:d0:a2:e9: 0f:49:8e:95:99:14:fb:b8:32:91:26:03:d5:25:6f:87:8e:50: a2:51:08:3f:14:ae:59:dc:59:9f:80:f2:b9:b7:32:d8:d2:25: cf:c6:bc:d0:d4:2b:0c:ba:fc:3a:66:fb:9c:21:4a:68:c2:f5: 18:6b:8f:61:b4:f6:52:6d:bb:cf:bb:be:20:9c:57:16:49:9d: 1b:b0:26:c9:c1:4e:90:7a:62:d6:e7:d5:4d:b9:b3:6d:9c:52: 4b:b4:60:a4:f1:92:41:50:fb:39:6b:b5:e3:65:30:0a:f0:8a: 25:59:f0:ab:40:4f:ba:f4:aa:58:dd:a7:7a:04:f2:29:4b:20: 1e:03:c6:fe:46:e0:94:f4:4b:ca:5e:e2:0b:12:33:77:17:33: 19:e9:7d:56:50:b3:2b:98:de:0d:4d:db:9c:d2:e8:99:61:e5: d5:a8:79:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/HgKLyJoYRyOD3ZQhDB6XMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwOTIwMTQwMDA5WhcNMjYwOTIxMTQwMDA5WjAzMTEwLwYDVQQD Eyg4NDFjMTg5NGEzYzEyNDdlOTFiNDBkMjkwZWM4MGUyODI5YTkzZDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3JnSqhfuAuOsSwi35cK5Kz5Zfsh k76sjrbDhjjWuhfODxAICnCDwhO0307Z4Fazx8iCc8Lwtqwgp0IB9Tttkwz+YDB+ uCOUbLR1Ey5pDnJZw8Q9OA5hU8yrl8o0UrJ/1bzJ4QPOrtHPiILMuY1qV/fdZ1Qk uMf7SbFP+GFSPLG0ZViFbxOX90Medw/r0Xg6g2IZp31AjMrnGKLnM1W0B0WlzYbN 5Gt0YiBPYWqxHqelg/oFeqZvT7r1jUf0gXqxmM48D3WXuUJ9nPCddgQirgF8CTXK 8j5sYhk2yWQTsap8KXzXCNbJDIynb2XYSyd1xTqlHgO6VJswKxqTSgNjwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQcGJSjwSR+kbQNKQ7IDigpqT2bMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsApXpVRm JDf3RAWrd52g/q5Gx1YQiGoA11kc46mH+f99WJ0kQZRDfv8q/qSAdp3XioTCj+qm 5GWcVqQ7QTX5A9AMEzMEn8SKEAEJP+YBdK2WxBbTHl0U0KLpD0mOlZkU+7gykSYD 1SVvh45QolEIPxSuWdxZn4Dyubcy2NIlz8a80NQrDLr8Omb7nCFKaML1GGuPYbT2 Um27z7u+IJxXFkmdG7AmycFOkHpi1ufVTbmzbZxSS7RgpPGSQVD7OWu142UwCvCK JVnwq0BPuvSqWN2negTyKUsgHgPG/kbglPRLyl7iCxIzdxczGel9VlCzK5jeDU3b nNLomWHl1ah5Jw== -----END CERTIFICATE-----Generated at Sun Sep 20 23:14:35 2026 by rpki-client