$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: X6d076Xc+DoQxWfeQhYf07UlH2vAt5JwevkK+b04CdI= Subject key identifier: 6E:8C:65:10:C6:D0:11:CC:D3:B2:B9:D4:D5:27:6E:EF:99:E4:78:D1 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 01A0C9D9B1A738FACF07F070B69ED6AB2F73 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 1A66 Signing time: Tue 22 Sep 2026 16:01:22 +0000 Manifest this update: Tue 22 Sep 2026 16:01:22 +0000 Manifest next update: Wed 23 Sep 2026 16:01:22 +0000 Files and hashes: 1: 8HNqyROtCPcfRiv1Sx49M6ONZYg.roa (hash: zFpstxzrvOg/IGEksLOhRDjWqdDtkzz+78pgZXkJ73Y=) 2: AIs-v4MTJP3X4O8YQJnAripw4vs.roa (hash: kHs1izlvzimCPZa6IfF/iyB6cbHIdll4P1d4fiptxlM=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: jV7Ca8Iuw+/lxokBIQgW+Qt8xFKrYXMwtnUhtbYR5eQ=) 4: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=) 5: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=) 6: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=) 7: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=) 8: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=) 9: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=) 10: lyIOq6TA50RExwMG01O0x9KQ_K8.roa (hash: upG12PbzyM39hFjrEWs8ykSga/yXg/EqgsBSnOyEtfg=) 11: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=) 12: z9CW8ENT4ms8qSgnRvUL6_vDjPY.roa (hash: lH3Kl/j3Y/mCc0yq2REHce8PieFSAQY5Zjhu7gCcN4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:d9:b1:a7:38:fa:cf:07:f0:70:b6:9e:d6:ab:2f:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Sep 22 16:01:22 2026 GMT Not After : Sep 23 16:01:22 2026 GMT Subject: CN=6e8c6510c6d011ccd3b2b9d4d5276eef99e478d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:69:d2:8c:48:52:76:b8:4e:d1:93:7f:76:58: 50:fa:29:fb:c2:81:89:7d:0b:d2:04:65:1e:0d:4c: 94:95:ff:16:eb:5f:38:6a:fe:99:d2:65:80:8b:5b: 0c:ec:62:11:36:eb:d5:7a:6f:4c:03:03:c2:cb:e3: fc:4e:0c:22:f2:28:ba:ec:f5:59:20:82:88:05:77: 28:f2:d9:a2:77:45:08:cd:b0:29:ca:41:c5:f8:fd: b0:0c:86:53:5b:0d:b0:f0:0f:05:3a:89:8d:55:ad: 74:93:21:9b:8d:47:5a:a3:40:b2:09:de:d9:80:db: 94:42:f7:45:43:cf:a5:bb:08:61:22:0b:d6:c0:ea: f4:74:bb:da:5e:8a:f2:be:eb:91:94:a4:88:ae:b0: ad:9f:cd:04:b1:38:56:07:9e:5f:70:87:b6:62:98: e4:db:37:13:56:3b:ee:f1:ee:43:4a:e5:e1:82:59: 69:b1:91:1f:5e:5d:2d:d1:ff:18:81:c3:c4:20:c2: f1:65:82:a7:2c:0d:ee:1e:d9:6c:84:ca:e1:93:04: b4:2d:8c:fe:95:4d:6a:b0:9e:f4:c5:2e:42:fd:91: 1c:4a:d7:e5:a0:58:57:b5:00:f6:ea:6e:fc:1a:89: 1a:6f:f0:eb:d8:59:c4:fa:a4:f8:a8:a7:fc:ee:10: b8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8C:65:10:C6:D0:11:CC:D3:B2:B9:D4:D5:27:6E:EF:99:E4:78:D1 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:e9:ef:9d:c1:c4:9a:15:bf:ce:6b:49:cc:1e:d1:89:48:d3: d1:20:80:37:22:fb:b2:18:16:1b:d5:7c:e0:7a:6d:81:9b:d6: 4d:f6:39:96:5d:a6:d7:05:3b:36:b3:85:a4:2e:d5:df:54:68: 7f:91:72:31:f7:bc:d9:de:c2:ae:0a:0c:d5:db:51:da:e6:38: d4:a7:2f:3e:b6:d5:94:f2:65:58:e3:85:79:84:88:50:ed:41: ff:15:a7:ad:52:82:d7:e0:e5:e1:1b:77:3d:49:03:de:e8:be: ce:79:23:9f:3f:8d:b7:56:d3:9b:fd:f3:62:8b:d2:90:e9:ce: f7:b0:af:75:f1:1e:fc:fa:26:62:cc:22:b3:44:8c:41:ad:01: 28:3d:8e:43:4e:ea:a9:b8:52:26:e0:e1:bd:d8:d2:21:ab:6f: 24:c1:39:f9:80:2c:df:8a:e0:8e:a5:9a:4d:0e:82:4e:5f:56: 41:3d:82:11:a3:9c:ad:f1:ca:a5:ef:6e:df:f1:a2:40:94:53: f8:8a:ee:16:3b:bf:4c:9b:73:89:9d:9d:3d:53:aa:44:c0:50: c4:ae:c7:d7:97:0d:73:eb:46:e0:e8:a9:3b:4c:3c:01:c9:4e: 1e:c3:3b:9f:9b:43:8c:08:2d:cf:ad:40:bb:3d:f1:be:fd:2c: 74:d0:7b:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDJ2bGnOPrPB/Bwtp7Wqy9zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwOTIyMTYwMTIyWhcNMjYwOTIzMTYwMTIyWjAzMTEwLwYDVQQD Eyg2ZThjNjUxMGM2ZDAxMWNjZDNiMmI5ZDRkNTI3NmVlZjk5ZTQ3OGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmnSjEhSdrhO0ZN/dlhQ+in7woGJ fQvSBGUeDUyUlf8W6184av6Z0mWAi1sM7GIRNuvVem9MAwPCy+P8Tgwi8ii67PVZ IIKIBXco8tmid0UIzbApykHF+P2wDIZTWw2w8A8FOomNVa10kyGbjUdao0CyCd7Z gNuUQvdFQ8+luwhhIgvWwOr0dLvaXoryvuuRlKSIrrCtn80EsThWB55fcIe2Ypjk 2zcTVjvu8e5DSuXhgllpsZEfXl0t0f8YgcPEIMLxZYKnLA3uHtlshMrhkwS0LYz+ lU1qsJ70xS5C/ZEcStfloFhXtQD26m78Gokab/Dr2FnE+qT4qKf87hC43QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6MZRDG0BHM07K51NUnbu+Z5HjRMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj+nvncHE mhW/zmtJzB7RiUjT0SCANyL7shgWG9V84HptgZvWTfY5ll2m1wU7NrOFpC7V31Ro f5FyMfe82d7CrgoM1dtR2uY41KcvPrbVlPJlWOOFeYSIUO1B/xWnrVKC1+Dl4Rt3 PUkD3ui+znkjnz+Nt1bTm/3zYovSkOnO97CvdfEe/PomYswis0SMQa0BKD2OQ07q qbhSJuDhvdjSIatvJME5+YAs34rgjqWaTQ6CTl9WQT2CEaOcrfHKpe9u3/GiQJRT +IruFju/TJtziZ2dPVOqRMBQxK7H15cNc+tG4OipO0w8AclOHsM7n5tDjAgtz61A uz3xvv0sdNB7qQ== -----END CERTIFICATE-----Generated at Tue Sep 22 20:32:09 2026 by rpki-client