$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: cxtypyESUlojYZPO74Kl01XfFbrGr6QR/0hcu9lUaFo= Subject key identifier: FD:26:C5:71:34:A0:18:1E:98:66:FD:CA:6C:FF:9E:F7:2B:0E:77:4D Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 01A0E888C0E6C106F938F7989FA643E09599 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 1A86 Signing time: Mon 28 Sep 2026 15:01:11 +0000 Manifest this update: Mon 28 Sep 2026 15:01:11 +0000 Manifest next update: Tue 29 Sep 2026 15:01:11 +0000 Files and hashes: 1: 1-gK4FaKQ6vCAd3HD5KMC9zT6LvU.roa (hash: D6YtWc2enJG4JcbTf9d9A2vAeRzN30+OR3FCjqsua4Q=) 2: 7gdlonHkctidA_Jgo0e1sPluTfw.roa (hash: L7iWiH+YVCR3BgQWnot+ADKst5Rvum0Fp/JtCnJ65RY=) 3: DQ1yVesejJpDnZvd2JLWH_7gAEU.roa (hash: iuHd9st9MGEOE3UuhPG4vRJ6eBtZs6iPypxGkfqTQSM=) 4: JlpCz-c9i9-Z_17K8F7XjOHLpJ4.roa (hash: MTi7TKa3n0d3E8E52eS58cc9MxnhlLc9ovB9GkQrKSk=) 5: MCv_Njd7Kt1jfUDJcMfP2Ew9zGA.roa (hash: 8slM4ZyNMUTgbPryNd+oyqvRv0X2KMYBpAbZ2g9V2+s=) 6: Pxzwfsnla9WCGgA_5yVN5NBVL14.roa (hash: dRusvivPw89AhWLw883YVx7O+/W5uw+jCzc5VJhBOks=) 7: dnlzr7T-KrzC8dTpRdaUUBCb42k.roa (hash: FlF41xrTHYEZQDWnwHhEl5bQr7qiicPhhj7kefuMDlI=) 8: h3NO-bNRnKL0h-LwaiCjswg7_nY.roa (hash: nge/dAbyC8BEKmPsWUQCbHBH18ANQj9ceVjvT5f7JS4=) 9: le7g6AeqMWo8tC4Pm6_9GuPpA9Y.roa (hash: M3GaptBPUtevgfpamZx3KC2EjkI+htg/GGtdiA7/WxU=) 10: o2KmTBSx7YAGDylX3itL6SdPUZE.roa (hash: lugrh1NUXlse4UYLEWT+hm10hbsF+hFuCCQ7+JOgu7c=) 11: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: Rf93/8nrD7jpDhd9ztWi1pPRYebXvGIEpNghqsRrmow=) 12: v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa (hash: oqxmALkOA6EG36s93nwvrqkYRgI5R7v2/8FaBvM3TLU=) 13: zMhciCUgU6J6shiNhaiwocMfw14.roa (hash: c8SQXIzHCbyAhdC6MEvd2MwYwyUckczcTmVUE35TvUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 14:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e8:88:c0:e6:c1:06:f9:38:f7:98:9f:a6:43:e0:95:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Sep 28 15:01:11 2026 GMT Not After : Sep 29 15:01:11 2026 GMT Subject: CN=fd26c57134a0181e9866fdca6cff9ef72b0e774d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:0d:ae:1a:e5:94:64:23:6c:c4:9a:6f:38:da: ce:4a:36:1f:fa:33:8a:9d:aa:80:c4:e0:02:42:67: 18:83:1a:82:16:af:32:c4:93:51:92:ab:3b:d1:dd: 2f:bd:b2:84:9f:0d:88:9b:89:5a:a0:5a:94:59:90: 99:04:65:30:6d:e2:a9:02:d9:48:ee:d8:99:f9:51: 67:da:0b:48:9d:bb:5e:17:c6:40:ba:cb:77:4d:92: 2b:2d:b8:0c:e2:b8:5a:eb:a5:f6:59:63:6f:0c:13: 5c:92:63:59:68:ff:ee:19:cc:c0:9a:ca:fb:42:bb: 5a:d2:94:6f:04:cd:2e:6a:f8:11:e1:42:53:c7:a8: 07:d6:cf:16:a5:4c:21:c3:41:39:12:3d:15:f8:c0: 96:6a:64:9c:d8:1d:ff:20:d4:bc:86:30:90:6f:ee: 0c:8e:13:93:00:43:92:03:e2:53:18:07:3f:68:89: a2:d5:13:07:8e:b6:65:01:ed:01:24:76:69:ec:b8: 1e:52:87:fe:d3:c8:49:4e:36:93:91:9b:0e:31:99: 91:f8:2b:87:d6:74:2b:61:e0:39:64:23:21:33:fd: ea:2e:37:09:69:a0:69:4e:94:2a:00:a0:53:59:75: 43:e7:e0:b2:cb:7e:b4:fa:1e:95:b9:76:5d:cb:c8: df:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:26:C5:71:34:A0:18:1E:98:66:FD:CA:6C:FF:9E:F7:2B:0E:77:4D X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:b4:41:b9:b4:9c:0c:61:dc:9d:0b:fe:69:61:de:7b:b0:1e: 11:3d:ed:b0:91:13:15:94:e0:7c:bc:34:81:41:f4:4f:f7:37: ee:15:00:88:45:4b:96:22:07:b5:6f:15:8c:53:d3:73:70:a6: 7a:a6:86:2e:95:31:d6:cc:7d:d5:28:83:9a:b9:ef:0d:82:83: 61:76:06:ed:9c:ba:78:cc:39:56:d0:44:c7:b1:fe:ad:3c:1a: af:3d:48:38:d3:38:5e:dd:5b:5d:cc:da:4c:2e:bb:ac:ab:ff: 92:66:60:d8:53:a8:75:b9:0b:ac:ca:e0:f4:a1:8c:8e:4a:4d: e5:06:3f:68:2f:d8:70:13:ed:e3:74:7d:14:a0:f1:ab:06:8c: ab:97:94:02:cb:e8:15:e7:b8:3a:e7:b3:73:8c:54:bb:dd:9b: c3:80:cc:16:62:d5:17:fb:ef:fa:19:2b:91:cc:b5:0c:d3:df: ed:40:8d:3d:b7:c9:df:39:82:83:d5:a8:27:2f:6d:d1:6f:17: b0:f4:2b:19:d0:43:d3:c0:b9:9e:d3:37:81:8e:70:a1:e1:8e: fe:f4:2b:40:7f:76:0a:5f:c2:a6:eb:3f:44:b6:f2:6b:4d:80: 76:ab:ba:97:d0:74:e6:5f:6a:48:7b:81:2f:d4:7c:78:6b:19: 25:48:d3:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDoiMDmwQb5OPeYn6ZD4JWZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjYwOTI4MTUwMTExWhcNMjYwOTI5MTUwMTExWjAzMTEwLwYDVQQD EyhmZDI2YzU3MTM0YTAxODFlOTg2NmZkY2E2Y2ZmOWVmNzJiMGU3NzRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Q2uGuWUZCNsxJpvONrOSjYf+jOK naqAxOACQmcYgxqCFq8yxJNRkqs70d0vvbKEnw2Im4laoFqUWZCZBGUwbeKpAtlI 7tiZ+VFn2gtInbteF8ZAust3TZIrLbgM4rha66X2WWNvDBNckmNZaP/uGczAmsr7 Qrta0pRvBM0uavgR4UJTx6gH1s8WpUwhw0E5Ej0V+MCWamSc2B3/INS8hjCQb+4M jhOTAEOSA+JTGAc/aImi1RMHjrZlAe0BJHZp7LgeUof+08hJTjaTkZsOMZmR+CuH 1nQrYeA5ZCMhM/3qLjcJaaBpTpQqAKBTWXVD5+Cyy360+h6VuXZdy8jfYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0mxXE0oBgemGb9ymz/nvcrDndNMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACrRBubSc DGHcnQv+aWHee7AeET3tsJETFZTgfLw0gUH0T/c37hUAiEVLliIHtW8VjFPTc3Cm eqaGLpUx1sx91SiDmrnvDYKDYXYG7Zy6eMw5VtBEx7H+rTwarz1IONM4Xt1bXcza TC67rKv/kmZg2FOodbkLrMrg9KGMjkpN5QY/aC/YcBPt43R9FKDxqwaMq5eUAsvo Fee4Ouezc4xUu92bw4DMFmLVF/vv+hkrkcy1DNPf7UCNPbfJ3zmCg9WoJy9t0W8X sPQrGdBD08C5ntM3gY5woeGO/vQrQH92Cl/Cpus/RLbya02Adqu6l9B05l9qSHuB L9R8eGsZJUjTLw== -----END CERTIFICATE-----Generated at Mon Sep 28 23:25:35 2026 by rpki-client