$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft File: aNoQi85PtWVWJGsxVyb19jRYXvE.mft (raw, json) Hash identifier: J72riZXxMYpM3ttWzrl9aoNPPhnbpQgz77mZUh4f6eQ= Subject key identifier: 33:B4:31:3B:D9:A5:85:74:70:C6:B7:EB:44:79:7E:DF:F2:92:BE:6F Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1 Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1 Certificate serial: 01A0C3D6780173244AD8A73E4B5430B02F42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft Manifest number: DF Signing time: Mon 21 Sep 2026 12:00:07 +0000 Manifest this update: Mon 21 Sep 2026 12:00:07 +0000 Manifest next update: Tue 22 Sep 2026 12:00:07 +0000 Files and hashes: 1: 3g5N4ACt53RDfqdl2Qm2kLw7iuM.roa (hash: JfcuHdPpD93vUy2ajbM4MDyRl9hTtYlGFm++NhJ4v9Q=) 2: 4rKV389CcVb18TkAtAQohjFpet4.roa (hash: bshrb45TXCLz1UeSJOO4z6EZmV9tqPYGJlGzReterCU=) 3: EU5pDQStNaoFQyco-4amRP1_FgA.roa (hash: hTHdQn7G2Zgz/0VPSb7q82WZIakSz6CsJwivy9Eitjw=) 4: HdF1Etsw4pdlSu1K8vrei4yVmKw.roa (hash: uoyjLiPTlTI461zU8sJL8PSon9F9MLbPvGcIZXxD+zQ=) 5: K8y0v8xbRIAHJNfQb92ZFS9zmkM.roa (hash: +Jvt7K7C2npld470zp55mSeL6prCT70kckBsxVr1DQU=) 6: LYy3q2HCwTVaEOOy8i76zpWQDQQ.roa (hash: 3gssksK0WKZ1ji7D3njPjIYsZOKLwjh79PXg9K+4kD8=) 7: V7Gy_xsnTYpW1R8jKT-H-yvfeY0.roa (hash: t4KBOdzw1W/nTMlVzOh3vHraukfR4inEsZhCZK2WaVE=) 8: Y6vuMNkzIPJWRuJg5TuMbsi1FcM.roa (hash: 3aMZ5jo10sNTG4r9ibdunWoGNfpF0gSMyVHFFSZbv+I=) 9: aNoQi85PtWVWJGsxVyb19jRYXvE.crl (hash: 2ticIpEOLLNUDKIA3fH4t7avVbB9ijBPIqc/Sy6N1yk=) 10: foSOnmt17u33gfnRPRG4pNSpMq0.roa (hash: k4fSYwEDaC1MgqKDcu6ALBH1gOuaBBhjlNg8kfhU3RQ=) 11: ib5YzLoYXKZK-R3OCwLsvHBhnXY.roa (hash: IT/E+lCIfVXMpHU9raxW9uwfjlZ+Cij+nDKpT3TnewQ=) 12: oe-pRqcbnH3vKHurAZrBu43iDHo.roa (hash: /UnsYCcH9zJIeaXYRWlLI3q/VXRUYL/1eKK/V/miCRM=) 13: tW89lp5YxoMGwhuGz5wy8-1b7tA.roa (hash: 3iDgHelXEotGhsC69Iuc1srSTIuH+BgeoUU2gRFP8bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 12:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:d6:78:01:73:24:4a:d8:a7:3e:4b:54:30:b0:2f:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1 Validity Not Before: Sep 21 12:00:07 2026 GMT Not After : Sep 22 12:00:07 2026 GMT Subject: CN=33b4313bd9a5857470c6b7eb44797edff292be6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:53:b9:6f:00:4c:6a:af:8b:9f:dd:1a:b0:5f: 2d:01:8c:82:8b:ab:e8:5f:66:c8:1a:fc:09:63:5d: ef:08:b1:c2:2f:33:eb:40:40:28:60:0b:15:8f:d8: 69:48:5d:2e:a3:e3:6e:e9:42:c4:9b:17:5c:06:fc: b1:cd:61:a2:77:3d:80:69:d0:69:e0:f0:c2:a1:7c: 61:99:de:13:1e:b7:4f:bf:ee:73:68:83:f6:de:d0: d2:26:44:02:d1:50:e8:80:0f:d1:7d:24:6a:cb:61: dd:ca:d0:30:cb:cf:ff:57:81:f8:7c:05:cf:c8:77: 2c:1f:a6:fc:7a:e7:41:37:94:af:6f:66:37:6f:49: 57:49:c8:1d:9c:84:2a:c2:cc:bb:74:9c:fb:bd:c3: ae:ab:34:b9:a0:ad:f9:a0:f7:26:c0:9a:4c:29:b6: b3:c8:1c:db:32:8f:b5:aa:7b:6d:96:ea:94:cd:ff: f1:99:9e:5b:75:fb:3d:56:84:ea:30:ea:1f:6f:80: 20:ef:d7:0a:29:07:3e:93:f9:4b:36:ac:50:11:cb: 8b:e1:8e:17:4c:d2:03:7e:48:b8:74:84:39:87:ba: 5a:f7:77:ab:5d:56:83:98:8b:f2:24:dc:5c:32:ad: 13:eb:15:b9:a3:8c:79:27:22:2f:63:53:83:86:66: 20:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:B4:31:3B:D9:A5:85:74:70:C6:B7:EB:44:79:7E:DF:F2:92:BE:6F X509v3 Authority Key Identifier: keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1e:aa:be:c9:8e:4b:3f:86:5f:47:50:74:7b:94:61:56:8e: 28:75:35:b0:bc:42:7d:b9:d4:a2:a5:65:f8:6c:5e:5d:42:89: c9:f9:b4:a1:18:d3:4e:d1:d6:43:09:42:7f:d8:5e:c8:a8:1c: 31:59:b1:6a:08:8a:46:e3:ea:f4:0b:05:2e:e3:5f:3e:42:4f: 6d:17:aa:a9:d0:c2:b4:a4:e0:95:29:a6:39:f0:53:02:80:3a: 47:e9:b8:47:1b:15:e2:1a:2f:ec:1c:97:bd:a4:d7:d3:ce:c6: d6:61:1c:20:c1:7e:37:97:16:bb:47:b5:0b:de:6b:f1:9a:da: af:2b:91:2a:ba:ff:24:db:dd:68:58:ee:c1:1e:51:50:25:c8: 12:7f:b7:ed:bf:b3:ac:54:a9:e4:0b:2f:98:7b:a0:9a:31:a5: db:a7:60:b4:54:52:e3:f6:19:7a:49:c9:a2:47:5d:20:7a:4b: c2:45:46:9d:9c:b0:83:7a:ff:70:33:ba:03:d5:0e:9a:bf:13: 00:cc:b5:da:d9:30:60:fa:95:46:d8:99:52:54:1d:0f:b1:45: 0e:c2:6e:0f:6c:9a:5b:63:2e:7d:73:74:0c:57:3f:aa:ce:34: bb:7d:a9:ab:cb:18:21:9b:3c:53:df:82:12:89:a8:4a:e0:c1: 77:d9:61:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDD1ngBcyRK2Kc+S1QwsC9CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGExMDhiY2U0ZmI1NjU1NjI0NmIzMTU3MjZmNWY2MzQ1 ODVlZjEwHhcNMjYwOTIxMTIwMDA3WhcNMjYwOTIyMTIwMDA3WjAzMTEwLwYDVQQD EygzM2I0MzEzYmQ5YTU4NTc0NzBjNmI3ZWI0NDc5N2VkZmYyOTJiZTZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1O5bwBMaq+Ln90asF8tAYyCi6vo X2bIGvwJY13vCLHCLzPrQEAoYAsVj9hpSF0uo+Nu6ULEmxdcBvyxzWGidz2AadBp 4PDCoXxhmd4THrdPv+5zaIP23tDSJkQC0VDogA/RfSRqy2HdytAwy8//V4H4fAXP yHcsH6b8eudBN5Svb2Y3b0lXScgdnIQqwsy7dJz7vcOuqzS5oK35oPcmwJpMKbaz yBzbMo+1qnttluqUzf/xmZ5bdfs9VoTqMOofb4Ag79cKKQc+k/lLNqxQEcuL4Y4X TNIDfki4dIQ5h7pa93erXVaDmIvyJNxcMq0T6xW5o4x5JyIvY1ODhmYgkwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDO0MTvZpYV0cMa360R5ft/ykr5vMB8GA1UdIwQY MBaAFGjaEIvOT7VlViRrMVcm9fY0WF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJR6qvsmO Sz+GX0dQdHuUYVaOKHU1sLxCfbnUoqVl+GxeXUKJyfm0oRjTTtHWQwlCf9heyKgc MVmxagiKRuPq9AsFLuNfPkJPbReqqdDCtKTglSmmOfBTAoA6R+m4RxsV4hov7ByX vaTX087G1mEcIMF+N5cWu0e1C95r8ZraryuRKrr/JNvdaFjuwR5RUCXIEn+37b+z rFSp5AsvmHugmjGl26dgtFRS4/YZeknJokddIHpLwkVGnZywg3r/cDO6A9UOmr8T AMy12tkwYPqVRtiZUlQdD7FFDsJuD2yaW2MufXN0DFc/qs40u32pq8sYIZs8U9+C EomoSuDBd9lhOQ== -----END CERTIFICATE-----Generated at Mon Sep 21 17:10:43 2026 by rpki-client