$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft File: 668NIPmOOiBVDJltdCkmiPDSJ50.mft (raw, json) Hash identifier: Rygcjg/y8bfSWzpczncxocnVvRrXxKgBtP/j3XvlyYI= Subject key identifier: F3:20:E6:08:14:FD:00:A8:A9:6C:98:70:85:3C:D8:A1:39:DD:A8:91 Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d Certificate serial: 01A0C5FC8C8A945AF8E9178ED43C0A9389B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft Manifest number: 024B Signing time: Mon 21 Sep 2026 22:00:57 +0000 Manifest this update: Mon 21 Sep 2026 22:00:57 +0000 Manifest next update: Tue 22 Sep 2026 22:00:57 +0000 Files and hashes: 1: 2opF5RUsv3XDc1My0IeDj7X6rkY.roa (hash: rLnnTlMpS3ub6k4swr9VWzMlA8CfLQoDtyjmLZJnpi4=) 2: 668NIPmOOiBVDJltdCkmiPDSJ50.crl (hash: LxiZWyEAZzjpqDK3rDPa9+2Rx2ZhRegjaS6K+vQc93c=) 3: 8_uN9lxayPNFYSFMe_-SzdqsN_M.roa (hash: JquMORB08SkqUpDd0r0GoDrQiAxCIucTbEwQ0tt/Va0=) 4: 9TylcBs9Ho8y2i-aAz0F0fzBnms.roa (hash: zXNgdYhWm8/zmEj+NeyJwKpEXxYhwOhYzf0Mg1Ifeyc=) 5: EgUddJnQyW-DZo-6cboASv4IDkM.roa (hash: E6KKUo7CLQIRbYpxq6kq88AYxp+VGIoTBpmzfke9TAA=) 6: KmrQG8ABSDDoPWxM0MmmDyWHCmA.roa (hash: g70sdgkDbYrQc1kwIhz+eBYDzl0gJbikJ8mXpxog+G0=) 7: M26BQVuNMK835dm83OV-Sr2CkQs.roa (hash: 9jTxXoCPeLHjBT+DdTQIMj47gOx4+kmiPGKh+dU2Lpc=) 8: TVEdarLnlUkZhd4uc5HWaM7C1F4.roa (hash: XXiBDhnQsTykczo/2NACBKND800VuRzS+V0RgxdJm/s=) 9: ZPKSvekrJYA0upvIat_-JC6BKfQ.roa (hash: PPL2NdzyPwz7LPgdAhUxcAJSYob0YB4sCtiY0icE9zo=) 10: lwR4CDLvnTUuVyA34wT6tah5mv0.roa (hash: JomOdXVvYDHYetjFnHtJimdxkzg8t7h8C+QxsLpI72o=) 11: vcuseHHUp2SFcc7WFCquL547C34.roa (hash: W+undj5Tz3EQlz8nELOD/EX3UtN6Yso7VOiTqtTp3ys=) 12: zRMtSyG0erquHg8eDcLfOh4BpSs.roa (hash: fv01yx8YQE61hN1VLmCbWMtgYoNsmN10wZe2YdF/txM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 22:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:fc:8c:8a:94:5a:f8:e9:17:8e:d4:3c:0a:93:89:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d Validity Not Before: Sep 21 22:00:57 2026 GMT Not After : Sep 22 22:00:57 2026 GMT Subject: CN=f320e60814fd00a8a96c9870853cd8a139dda891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:63:a7:18:82:68:f1:81:40:39:7f:6e:a7:1c: ce:27:d2:94:35:ec:72:7e:87:07:a0:16:7f:be:69: 2e:cd:98:89:39:7e:6d:d0:fe:be:7f:19:5b:38:3e: 4a:4a:21:95:54:56:17:2c:87:9a:50:ca:bb:89:55: 01:9b:f3:91:0a:5f:3a:c1:9d:99:f7:da:45:a1:20: 0e:fb:80:04:2a:bf:f0:42:d9:80:f3:45:91:72:c5: 1c:68:54:9c:cb:47:ab:06:84:0c:b1:ef:00:9c:a2: f4:d6:6b:d1:dd:3f:11:7c:8e:d0:f0:b6:9d:1c:f2: ff:12:a0:69:2c:f8:77:2b:d8:e6:0e:ac:b3:44:4e: 5a:8f:ad:9b:8d:aa:b7:08:07:e8:85:21:f4:40:4a: 14:41:f8:7e:77:9f:97:16:5e:da:62:61:70:66:95: 1a:f3:9f:4f:5d:f6:6e:7d:4e:df:25:5a:f7:48:9a: 37:93:15:53:e6:b2:f6:ff:43:55:b0:38:3a:77:fa: 45:22:b4:37:32:e1:9b:e6:a0:b3:f7:f5:16:5e:e5: eb:df:d7:3e:ec:1e:2c:7d:ab:35:82:af:0d:5f:6d: e2:39:60:64:82:4f:9b:6b:c8:48:30:09:bf:aa:ba: 92:43:d6:c7:00:2b:81:aa:e3:2b:ee:7c:a4:59:e8: 5b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:20:E6:08:14:FD:00:A8:A9:6C:98:70:85:3C:D8:A1:39:DD:A8:91 X509v3 Authority Key Identifier: keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:52:39:fe:59:c4:2d:0a:29:2f:25:4a:2d:dd:51:4b:82:cb: 95:a0:c2:6f:ad:ab:88:74:ce:48:d2:84:01:66:28:8b:e4:4a: 45:e0:a5:15:53:b8:42:51:27:9b:8a:17:3a:5b:fd:9b:00:36: fc:20:58:f0:8c:79:06:34:15:d6:87:3f:0e:ef:27:a1:e2:85: 24:fe:e7:84:38:6a:7e:2c:f6:fe:31:8e:54:06:f9:5f:3d:5a: 15:f0:74:eb:8a:34:8f:00:94:c8:6b:dc:fc:d8:5d:f0:e1:9f: af:af:05:cf:65:32:c7:60:91:ce:ca:99:aa:99:5d:e4:b4:76: 5a:47:5b:19:d9:1e:1f:fa:3f:92:e4:6b:78:19:99:03:28:64: 66:7a:8c:f0:56:9d:af:20:ff:4d:8d:63:aa:67:7b:06:83:b3: 81:9f:a5:98:04:0b:b5:af:61:a7:49:4c:c0:9b:9d:9b:bf:98: d2:d3:6e:50:9f:8e:d1:fd:71:52:68:54:cb:c9:c2:1a:c1:91: 48:46:c2:d1:4f:7b:78:fe:20:fb:23:33:d8:03:a7:e5:a6:1b: 4d:5e:f4:f1:25:d1:11:ad:24:f4:b4:fd:5d:d8:0d:56:8f:e2: 04:99:6f:c9:ad:5f:ee:7c:88:06:cc:c8:81:a8:a7:06:1f:90: ba:93:d8:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDF/IyKlFr46ReO1DwKk4m0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYWYwZDIwZjk4ZTNhMjA1NTBjOTk2ZDc0MjkyNjg4ZjBk MjI3OWQwHhcNMjYwOTIxMjIwMDU3WhcNMjYwOTIyMjIwMDU3WjAzMTEwLwYDVQQD EyhmMzIwZTYwODE0ZmQwMGE4YTk2Yzk4NzA4NTNjZDhhMTM5ZGRhODkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAumOnGIJo8YFAOX9upxzOJ9KUNexy focHoBZ/vmkuzZiJOX5t0P6+fxlbOD5KSiGVVFYXLIeaUMq7iVUBm/ORCl86wZ2Z 99pFoSAO+4AEKr/wQtmA80WRcsUcaFScy0erBoQMse8AnKL01mvR3T8RfI7Q8Lad HPL/EqBpLPh3K9jmDqyzRE5aj62bjaq3CAfohSH0QEoUQfh+d5+XFl7aYmFwZpUa 859PXfZufU7fJVr3SJo3kxVT5rL2/0NVsDg6d/pFIrQ3MuGb5qCz9/UWXuXr39c+ 7B4sfas1gq8NX23iOWBkgk+ba8hIMAm/qrqSQ9bHACuBquMr7nykWehb3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPMg5ggU/QCoqWyYcIU82KE53aiRMB8GA1UdIwQY MBaAFOuvDSD5jjogVQyZbXQpJojw0iedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGJlMDYtZWY1Zi00NDE4LWFmMWMt MzIwOTM2Mjg4ZTk1LzEvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMGJlMDYtZWY1Zi00NDE4LWFmMWMtMzIwOTM2Mjg4ZTk1 LzEvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWVI5/lnE LQopLyVKLd1RS4LLlaDCb62riHTOSNKEAWYoi+RKReClFVO4QlEnm4oXOlv9mwA2 /CBY8Ix5BjQV1oc/Du8noeKFJP7nhDhqfiz2/jGOVAb5Xz1aFfB064o0jwCUyGvc /Nhd8OGfr68Fz2Uyx2CRzsqZqpld5LR2WkdbGdkeH/o/kuRreBmZAyhkZnqM8Fad ryD/TY1jqmd7BoOzgZ+lmAQLta9hp0lMwJudm7+Y0tNuUJ+O0f1xUmhUy8nCGsGR SEbC0U97eP4g+yMz2AOn5aYbTV708SXREa0k9LT9XdgNVo/iBJlvya1f7nyIBszI gainBh+QupPYkA== -----END CERTIFICATE-----Generated at Tue Sep 22 10:20:30 2026 by rpki-client