$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: IK1ogc9NwH7WpiQ09XiqjWJKl+Y3jXlcq4fTLA66aOA= Subject key identifier: 91:BB:6F:2A:6C:30:01:CC:F0:DF:00:7E:36:5D:95:31:E8:0A:BE:2D Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 01A0BE427A40A4B5A3CB0FD6252B79053F2D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 1435 Signing time: Sun 20 Sep 2026 10:00:22 +0000 Manifest this update: Sun 20 Sep 2026 10:00:22 +0000 Manifest next update: Mon 21 Sep 2026 10:00:22 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: BKZ4AiIR4HJymEbg7yBDaPjsNEc.roa (hash: NSmqFNuVNWWHUV4DP4w7GZulXixMLjJyMk9Zl8PMqNA=) 3: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 4: IT-G9anfftKLn-JNHdB3nhqaHRg.roa (hash: 8S5tnd+3z64Mysha0HCn0KENKA3IjsNdvVfiIIaQQlM=) 5: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 6: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 7: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 8: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 9: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 10: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 11: g40nZDbHYl7qlSg77AKf4r37XCM.roa (hash: bENh9i+XtP2fEGRFJH3lV6YIPsznIq+IWHYPSo2J8bA=) 12: mQVVU0yW21pC8IYFai3gUt7H-pE.roa (hash: H5zFgqItky5UWDxQkcovYBDjwRGeK4Gj998+PN5ijik=) 13: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: q7D83EOUgC+G2iiBIpyGedt8atfOKVKfp3npe40v5vM=) 14: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 10:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:42:7a:40:a4:b5:a3:cb:0f:d6:25:2b:79:05:3f:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Sep 20 10:00:22 2026 GMT Not After : Sep 21 10:00:22 2026 GMT Subject: CN=91bb6f2a6c3001ccf0df007e365d9531e80abe2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f0:6e:0e:46:8f:3d:0f:bd:48:54:23:17:5d: 7c:59:50:7b:37:b1:ed:16:99:59:cd:87:95:6a:c9: 03:63:88:8e:e0:f3:7b:03:24:6a:69:13:9f:b3:fc: 9c:61:11:14:8f:ee:cc:cc:94:08:81:a4:a7:99:e0: 31:35:40:97:29:3d:47:cf:03:fd:94:77:f1:08:27: a5:38:0e:15:ad:2e:a4:06:af:1d:c1:70:42:0e:f4: 3e:88:3a:64:c4:47:8a:df:91:a3:ed:fa:5f:e7:df: 0f:4c:99:de:29:bc:68:b9:fb:96:a4:9a:cf:b9:f7: 10:e7:46:7f:e1:40:c0:c7:2e:f3:fb:30:1e:1d:4b: f3:a2:4a:80:cb:2e:73:79:93:70:07:8a:e6:84:83: 05:a5:6a:60:1a:d4:91:36:fd:49:36:f2:4f:2e:f0: f5:6a:ee:12:7a:00:b9:b7:61:3b:40:84:85:3e:8b: 23:57:a9:cf:a9:f7:55:7e:26:af:b5:c5:a2:06:de: 5c:01:a2:b8:a7:73:a1:29:03:54:c1:ab:ad:dd:b1: 7a:11:7a:7e:5b:c3:ba:b3:a9:b0:f1:f0:bf:b0:89: fc:26:17:20:74:e9:89:9b:6f:2a:08:c9:86:d4:de: 09:d8:c3:38:ad:56:54:ed:93:e2:d7:09:ae:85:37: 83:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BB:6F:2A:6C:30:01:CC:F0:DF:00:7E:36:5D:95:31:E8:0A:BE:2D X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:4d:44:03:19:07:18:de:55:a9:9f:14:7f:e4:3d:1c:0c:dd: 58:6e:d5:5b:25:33:98:75:9c:61:30:29:61:5c:83:bb:b0:05: 1c:cf:bc:c9:aa:bb:57:f6:77:9e:9b:4c:50:61:46:8d:e5:fa: 3b:54:96:85:0c:64:d3:75:f1:67:5f:39:7c:05:aa:9a:c2:06: 59:51:92:10:4d:57:c0:81:4d:87:66:7d:3f:c4:42:e7:93:55: 3f:09:99:d3:70:43:fd:6e:f3:bd:44:72:6e:b8:81:f1:ea:94: 83:fe:e6:23:f9:45:80:a0:fa:26:80:34:eb:4c:12:4a:01:8a: 92:4c:24:68:a8:6e:9d:f4:36:12:d4:a6:d0:9f:a0:bd:35:3b: 6e:5c:12:23:cf:ed:b5:14:05:03:e0:21:8e:61:67:ac:a1:41: cf:f9:5a:59:f4:de:77:c7:59:c3:24:f1:18:e0:4c:e3:93:ab: cb:55:ed:e1:8f:02:99:07:22:97:fa:87:41:df:b5:97:29:33: c6:5d:14:d8:c1:cf:88:a2:0f:e5:89:a3:ee:93:fa:26:40:e0: 69:02:55:7b:7d:92:42:d2:7a:b4:91:5a:e0:2d:07:f7:0c:c4: f3:21:22:6a:11:e0:d7:db:0d:1b:85:a3:15:0f:2b:90:f2:76: 0e:86:10:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+QnpApLWjyw/WJSt5BT8tMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwOTIwMTAwMDIyWhcNMjYwOTIxMTAwMDIyWjAzMTEwLwYDVQQD Eyg5MWJiNmYyYTZjMzAwMWNjZjBkZjAwN2UzNjVkOTUzMWU4MGFiZTJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vBuDkaPPQ+9SFQjF118WVB7N7Ht FplZzYeVaskDY4iO4PN7AyRqaROfs/ycYREUj+7MzJQIgaSnmeAxNUCXKT1HzwP9 lHfxCCelOA4VrS6kBq8dwXBCDvQ+iDpkxEeK35Gj7fpf598PTJneKbxoufuWpJrP ufcQ50Z/4UDAxy7z+zAeHUvzokqAyy5zeZNwB4rmhIMFpWpgGtSRNv1JNvJPLvD1 au4SegC5t2E7QISFPosjV6nPqfdVfiavtcWiBt5cAaK4p3OhKQNUwaut3bF6EXp+ W8O6s6mw8fC/sIn8JhcgdOmJm28qCMmG1N4J2MM4rVZU7ZPi1wmuhTeDuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJG7bypsMAHM8N8AfjZdlTHoCr4tMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMk1EAxkH GN5VqZ8Uf+Q9HAzdWG7VWyUzmHWcYTApYVyDu7AFHM+8yaq7V/Z3nptMUGFGjeX6 O1SWhQxk03XxZ185fAWqmsIGWVGSEE1XwIFNh2Z9P8RC55NVPwmZ03BD/W7zvURy briB8eqUg/7mI/lFgKD6JoA060wSSgGKkkwkaKhunfQ2EtSm0J+gvTU7blwSI8/t tRQFA+AhjmFnrKFBz/laWfTed8dZwyTxGOBM45Ory1Xt4Y8CmQcil/qHQd+1lykz xl0U2MHPiKIP5Ymj7pP6JkDgaQJVe32SQtJ6tJFa4C0H9wzE8yEiahHg19sNG4Wj FQ8rkPJ2DoYQYA== -----END CERTIFICATE-----Generated at Sun Sep 20 19:28:35 2026 by rpki-client