$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: itAHVl+k8x3paFx+n0/jIEqtsluR7djHBes2PVhP1ec= Subject key identifier: 70:1F:12:3B:CE:BE:FF:B4:1F:6D:A4:02:26:09:FB:94:7F:1F:B2:FE Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 01A0BF8C2B6F4B425B6CBBBCF9213025A5BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 1B69 Signing time: Sun 20 Sep 2026 16:00:29 +0000 Manifest this update: Sun 20 Sep 2026 16:00:29 +0000 Manifest next update: Mon 21 Sep 2026 16:00:29 +0000 Files and hashes: 1: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (hash: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84=) 2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: HwdOSyqce2BLdRFjpAizPgh8a70ADLL4/laUkt6HJc4=) 3: 1xKMTxjcAyTOqPTp48dbyl1IVKs.roa (hash: USplCCSviit7LuwikiCrStcHpPZhldNMRmJaNU4sZJs=) 4: 2WrIc3-SP4DwQkwPJgua1bGNJ8U.roa (hash: 1n+jxmJd5F9eDLk5zWmpaiLv++ZbzD7Fd2FD1jx9EQI=) 5: 2tySjVTQSHiULWpIIHxe3UTXyKc.roa (hash: 11efIhc4jliYz5b7ccbbcBy+lueobimG/f4ImBFKSr4=) 6: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (hash: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE=) 7: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (hash: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE=) 8: 8s9uSzf6TvkzP7AMAwk-J-bBoaI.roa (hash: HhHYyz7/gaXYnl+eOQvtBscobpbKRyobYY7K5LG1gFs=) 9: CW-qcI1ohMNZFrtxwKP6h3IuUsY.roa (hash: Q0m3SYkmGKp057as4cDbrXW6Plo1d3nxk1JPEsbDaPY=) 10: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (hash: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE=) 11: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (hash: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk=) 12: hjwqR_BvVV3igv-VRSRakB0C0gY.roa (hash: dGn15gWRk4S5nvTCswCYk4PnSEMzXrTWJmJ53SFUgxE=) 13: iyfIsG_zCzXslesxdnK347yeiF4.roa (hash: tDXmuusqCyRHX/DQh8nnAapHWqFHXmFSmh6Yr5JKuq0=) 14: lITdQxhmX_QJLHCdZAw823-rxIE.roa (hash: LD1BnadL45zxeXJQFcYTUwoYEdwQD3yyFtEI21xm/MU=) 15: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (hash: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s=) 16: wQvwuyTtVhloyL12ClFe1Tmx_YM.asa (hash: 7C5CFFl7eP926O+5F2qKTmqq4J0LTe8XElvBDea1xIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:8c:2b:6f:4b:42:5b:6c:bb:bc:f9:21:30:25:a5:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Sep 20 16:00:29 2026 GMT Not After : Sep 21 16:00:29 2026 GMT Subject: CN=701f123bcebeffb41f6da4022609fb947f1fb2fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6b:c7:03:3c:8d:f2:0f:bc:e8:7f:42:e7:b1: b0:75:78:f2:91:01:02:e0:24:e7:55:4a:43:88:7c: ba:5e:47:f6:6b:74:2b:e4:82:c4:8c:f2:20:d7:f1: 36:d2:3c:42:e1:7a:d1:f8:9f:ed:dd:03:b6:9c:94: 79:1d:61:34:c5:65:87:74:c8:5f:43:a0:ce:47:4a: 61:40:b7:23:f1:45:0e:68:d4:11:65:dc:7d:21:c8: dc:e5:c0:af:60:9c:d9:31:62:92:5f:a6:48:af:bd: df:40:fb:32:42:c5:79:92:70:8e:84:91:6d:d9:1d: bf:72:ee:63:a0:94:a1:69:85:5e:a8:30:23:6a:bf: 8a:04:d7:01:df:fe:05:d1:d2:6c:32:1c:80:3f:09: 60:a9:bc:d4:1a:f9:b1:f7:a0:a0:13:6f:79:7d:a1: 63:3e:e4:6c:d9:f3:60:53:b1:78:ca:86:96:f5:54: 60:d7:1d:a4:35:1a:24:de:bc:2d:3c:d1:45:c1:11: 62:96:21:34:53:53:98:47:87:91:a1:21:e4:f7:fa: 4b:94:b5:5f:17:69:bc:0c:2d:7a:89:66:7f:af:dd: 68:90:4d:1a:57:10:ff:80:59:63:6d:22:ad:c4:81: 2b:99:d3:e7:6b:e5:8f:c1:59:76:94:05:ff:73:33: e2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:1F:12:3B:CE:BE:FF:B4:1F:6D:A4:02:26:09:FB:94:7F:1F:B2:FE X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:44:7a:2b:42:60:0c:75:17:0b:3d:76:9f:24:8c:9e:09:f5: 69:87:77:3a:a0:44:e0:07:df:94:30:e5:22:80:d2:33:0a:31: 83:80:3c:40:c2:bd:64:45:f9:b8:77:2e:68:94:d3:c6:2f:05: 23:a4:8e:7a:eb:14:e2:d1:20:ef:04:78:fe:1a:79:97:44:d3: 8e:a2:27:e5:33:82:82:be:78:24:cb:6e:99:46:0b:01:2c:0b: 9c:b7:78:93:30:6d:0c:77:75:03:9d:06:d9:cb:b8:91:71:12: 5e:ca:71:91:e7:66:15:f8:d6:4a:da:c2:3b:ce:89:78:77:ad: 48:aa:f1:09:a0:8a:de:b3:69:28:b3:6d:a3:49:99:36:84:f5: c9:f5:2b:9b:ec:ba:b6:25:1d:e3:df:a6:66:49:24:e3:c1:db: d5:74:e1:60:4e:0f:32:11:0d:5e:9a:4a:f4:b5:1f:f5:51:28: c0:5b:15:91:1b:8f:8c:86:fc:35:4b:2a:8a:ad:5d:19:e6:d3: de:1c:5a:f7:2f:22:19:91:20:bd:fd:4a:8f:0c:ff:c8:29:ae: 46:52:eb:5e:43:9b:a6:79:83:a3:7a:83:75:6e:0a:df:76:31: a5:c9:12:2c:4c:13:26:d9:28:05:95:43:c7:f1:e1:79:43:6f: 07:22:02:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/jCtvS0JbbLu8+SEwJaW8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwOTIwMTYwMDI5WhcNMjYwOTIxMTYwMDI5WjAzMTEwLwYDVQQD Eyg3MDFmMTIzYmNlYmVmZmI0MWY2ZGE0MDIyNjA5ZmI5NDdmMWZiMmZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1mvHAzyN8g+86H9C57GwdXjykQEC 4CTnVUpDiHy6Xkf2a3Qr5ILEjPIg1/E20jxC4XrR+J/t3QO2nJR5HWE0xWWHdMhf Q6DOR0phQLcj8UUOaNQRZdx9Icjc5cCvYJzZMWKSX6ZIr73fQPsyQsV5knCOhJFt 2R2/cu5joJShaYVeqDAjar+KBNcB3/4F0dJsMhyAPwlgqbzUGvmx96CgE295faFj PuRs2fNgU7F4yoaW9VRg1x2kNRok3rwtPNFFwRFiliE0U1OYR4eRoSHk9/pLlLVf F2m8DC16iWZ/r91okE0aVxD/gFljbSKtxIErmdPna+WPwVl2lAX/czPijwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHAfEjvOvv+0H22kAiYJ+5R/H7L+MB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM0R6K0Jg DHUXCz12nySMngn1aYd3OqBE4AfflDDlIoDSMwoxg4A8QMK9ZEX5uHcuaJTTxi8F I6SOeusU4tEg7wR4/hp5l0TTjqIn5TOCgr54JMtumUYLASwLnLd4kzBtDHd1A50G 2cu4kXESXspxkedmFfjWStrCO86JeHetSKrxCaCK3rNpKLNto0mZNoT1yfUrm+y6 tiUd49+mZkkk48Hb1XThYE4PMhENXppK9LUf9VEowFsVkRuPjIb8NUsqiq1dGebT 3hxa9y8iGZEgvf1Kjwz/yCmuRlLrXkObpnmDo3qDdW4K33YxpckSLEwTJtkoBZVD x/HheUNvByICrw== -----END CERTIFICATE-----Generated at Sun Sep 20 23:51:10 2026 by rpki-client