$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft File: 5884hLeAB6Jdvi4s7wzHO2mSH4g.mft (raw, json) Hash identifier: M5tSJCvfci4mNCYQCc2casvi+9wAI7N2SsLqE+U24t0= Subject key identifier: 26:3C:96:E3:58:19:DB:CC:3E:23:64:7D:58:B6:8B:6B:51:D0:C8:16 Authority key identifier: E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 Certificate issuer: /CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Certificate serial: 01A0C632F2B4427F1A3A80DC0D9015B494EF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft Manifest number: 1A33 Signing time: Mon 21 Sep 2026 23:00:22 +0000 Manifest this update: Mon 21 Sep 2026 23:00:22 +0000 Manifest next update: Tue 22 Sep 2026 23:00:22 +0000 Files and hashes: 1: 5884hLeAB6Jdvi4s7wzHO2mSH4g.crl (hash: G++wArt531FYBVl/281MZRYNyTpoOJEouvdY7EC3Lc0=) 2: 6RiDdnednlszc5nfc-ANOJUv2-o.roa (hash: jp3uEswNG4RA6H4G2MDNF+CFUPavRhXT4rfyfKyq6LE=) 3: HdDV5YwMNyFB8k-B_X4MU9-30nM.roa (hash: luVRxl/FnQsj5OM+H4x3yTlX1ppJM10PIPO1RpHN79g=) 4: Nu_9r8H3m3GpfJQaXI9Z_gksBSE.roa (hash: A0MtvPieujf5jUqev3piW+xmWcpxjiKiXWnP9KoZX/U=) 5: ObexSGVy696Wkd2DRhwt2_VaBs8.roa (hash: Ly1Ec9X97SiqjYPYhofzign3IKjIwUM2uHbt0VCXmE4=) 6: ObzqjXT5GtzebuI8BcIwPsXaLb8.roa (hash: CxduJ99uKrCwZPdYUZzvhflelo5OchrVkeFU+IICnVU=) 7: XJkwKQw1uwsNaMGPHoEZmHJ7ln0.roa (hash: 4mMJPUkmp2WBHWIYLKvvJ35kZmLlEY53pxDsemE3rMA=) 8: Y236QjVhGrl24C2bEpBZTpmsO9g.roa (hash: roo618zomZv/80bpPa5A4SKzRxktEgno100+FqWeWZU=) 9: teSjGmrvY_tu6RkdG_34GiE8KM0.roa (hash: yc8bd5ePK4M8XX+rsAFOZYDdIrq94apPIscjQGUl9lw=) 10: ugVQrwIOiOMJPcA4zFZm9kWmY04.roa (hash: Q8pDB3SA4JzJaHb+up2jkC0do3Kit4mBYGTJ7TNXFRI=) 11: yWZ-5OdaSQI1LPfjNeNs7tCX608.roa (hash: esuWPq3Xg5U/Su3ABpCWC8pkIxvEw4LQCmVfV8WC2QE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c6:32:f2:b4:42:7f:1a:3a:80:dc:0d:90:15:b4:94:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7cf3884b78007a25dbe2e2cef0cc73b69921f88 Validity Not Before: Sep 21 23:00:22 2026 GMT Not After : Sep 22 23:00:22 2026 GMT Subject: CN=263c96e35819dbcc3e23647d58b68b6b51d0c816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ca:0c:88:ae:67:7c:32:86:5d:0f:7d:45:0c: e6:45:82:cc:20:cd:6f:70:f1:fd:90:e1:1a:70:43: 2b:a2:7e:fc:18:92:51:95:ec:cd:c7:ac:ea:b0:ef: 71:f2:f2:64:11:ec:bf:1a:6e:3b:c0:03:5c:46:46: 29:9d:db:ba:51:f7:3c:76:3d:84:35:50:e6:3c:34: b0:f8:87:eb:e2:f3:60:eb:3a:7b:6f:3b:84:1e:f4: 7a:be:12:cd:d6:b8:d6:2a:c1:c3:dd:49:df:fd:22: 87:86:8f:0f:60:eb:3c:59:10:d1:d4:f2:f0:81:a6: 32:1c:20:4f:97:12:46:6f:59:17:44:18:ed:7f:4e: 68:c1:d8:89:8e:e6:bb:06:1d:a0:ab:db:01:1c:06: a3:bb:48:dd:5b:01:1d:cd:bc:7c:6b:06:d6:e0:9e: d2:3f:ad:38:8b:49:15:8d:12:7e:23:6c:ce:70:dc: f2:04:a3:d5:34:67:36:a0:5f:2f:32:20:89:4c:d1: f5:57:f8:e1:da:7e:f8:a0:8c:bf:ac:e1:9a:88:9c: 09:2f:d0:a3:83:e4:8f:62:8d:9a:11:9a:48:76:ec: 3b:6f:5a:64:a8:df:3c:de:73:58:39:97:a8:40:d3: 0f:2f:10:26:b8:1f:fc:7d:11:b3:a3:e8:8a:6b:c5: 3d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:3C:96:E3:58:19:DB:CC:3E:23:64:7D:58:B6:8B:6B:51:D0:C8:16 X509v3 Authority Key Identifier: keyid:E7:CF:38:84:B7:80:07:A2:5D:BE:2E:2C:EF:0C:C7:3B:69:92:1F:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5884hLeAB6Jdvi4s7wzHO2mSH4g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/30/4e7bc7-260e-47e6-8388-a184f3556e43/1/5884hLeAB6Jdvi4s7wzHO2mSH4g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b0:a1:de:a1:28:a2:55:7c:38:c8:e4:f2:e7:65:37:0a:9e: 36:7b:55:67:88:45:39:47:4b:77:af:e6:c2:e0:72:c3:b4:54: 21:4f:9a:87:df:69:32:7d:63:c6:32:32:9a:a6:b4:c0:69:9b: 09:ba:34:2c:a8:11:03:b2:da:1e:70:3d:d9:06:13:0c:81:99: c7:76:cf:44:70:7a:54:6e:0d:5d:0d:bc:56:18:ea:80:cb:a2: 2f:6d:ea:ba:38:46:0d:54:a2:58:f3:2a:c6:e8:d8:8a:09:80: 0b:f5:f4:16:e5:c4:23:d0:d2:6b:eb:25:84:f6:1b:79:f3:43: 8c:05:e3:53:48:4e:ec:f5:e2:04:a6:63:b0:77:75:4e:65:31: 07:92:cd:02:22:56:47:93:2c:60:e6:41:2f:d7:12:c5:36:63: c3:00:b1:1c:ec:0c:91:63:5a:5f:af:fd:26:7d:b2:ff:87:50: 52:f9:97:80:d8:74:88:49:ce:a7:07:77:43:86:89:19:85:6d: 11:5c:d8:cb:ce:cd:10:40:f7:9d:81:8a:44:b7:09:d5:95:52: c2:3e:4b:ff:01:4e:cd:8f:59:fe:bc:57:8a:b1:57:92:f0:f4: 06:01:f5:6a:8a:98:d8:86:62:c0:ba:e8:77:f5:4a:87:40:f4: 4c:8b:db:5c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDGMvK0Qn8aOoDcDZAVtJTvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3Y2YzODg0Yjc4MDA3YTI1ZGJlMmUyY2VmMGNjNzNiNjk5 MjFmODgwHhcNMjYwOTIxMjMwMDIyWhcNMjYwOTIyMjMwMDIyWjAzMTEwLwYDVQQD EygyNjNjOTZlMzU4MTlkYmNjM2UyMzY0N2Q1OGI2OGI2YjUxZDBjODE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2soMiK5nfDKGXQ99RQzmRYLMIM1v cPH9kOEacEMron78GJJRlezNx6zqsO9x8vJkEey/Gm47wANcRkYpndu6Ufc8dj2E NVDmPDSw+Ifr4vNg6zp7bzuEHvR6vhLN1rjWKsHD3Unf/SKHho8PYOs8WRDR1PLw gaYyHCBPlxJGb1kXRBjtf05owdiJjua7Bh2gq9sBHAaju0jdWwEdzbx8awbW4J7S P604i0kVjRJ+I2zOcNzyBKPVNGc2oF8vMiCJTNH1V/jh2n74oIy/rOGaiJwJL9Cj g+SPYo2aEZpIduw7b1pkqN883nNYOZeoQNMPLxAmuB/8fRGzo+iKa8U9awIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCY8luNYGdvMPiNkfVi2i2tR0MgWMB8GA1UdIwQY MBaAFOfPOIS3gAeiXb4uLO8Mxztpkh+IMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgt YTE4NGYzNTU2ZTQzLzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMC80ZTdiYzctMjYwZS00N2U2LTgzODgtYTE4NGYzNTU2ZTQz LzEvNTg4NGhMZUFCNkpkdmk0czd3ekhPMm1TSDRnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgrCh3qEo olV8OMjk8udlNwqeNntVZ4hFOUdLd6/mwuByw7RUIU+ah99pMn1jxjIymqa0wGmb Cbo0LKgRA7LaHnA92QYTDIGZx3bPRHB6VG4NXQ28VhjqgMuiL23qujhGDVSiWPMq xujYigmAC/X0FuXEI9DSa+slhPYbefNDjAXjU0hO7PXiBKZjsHd1TmUxB5LNAiJW R5MsYOZBL9cSxTZjwwCxHOwMkWNaX6/9Jn2y/4dQUvmXgNh0iEnOpwd3Q4aJGYVt EVzYy87NEED3nYGKRLcJ1ZVSwj5L/wFOzY9Z/rxXirFXkvD0BgH1aoqY2IZiwLro d/VKh0D0TIvbXA== -----END CERTIFICATE-----Generated at Tue Sep 22 03:14:37 2026 by rpki-client