$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: LNfFwbG4CgwzavhhWmR7/N3f9lvXIA99mZh+boFifi8= Subject key identifier: 6D:C9:78:0F:E0:3F:13:67:67:A5:A2:2E:71:29:3C:63:4E:8F:A8:19 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 01A0BE0B9F81B2AB5C9F811952375232287F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 1788 Signing time: Sun 20 Sep 2026 09:00:27 +0000 Manifest this update: Sun 20 Sep 2026 09:00:27 +0000 Manifest next update: Mon 21 Sep 2026 09:00:27 +0000 Files and hashes: 1: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (hash: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE=) 2: 3GqxL9BgsfVA5m2ZDkR-ZLLIX9A.roa (hash: Pri0BDp61F1x6W2ZNNi8m6bCY1kGNmKIt3J8iAi4+nI=) 3: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=) 4: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=) 5: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=) 6: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=) 7: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=) 8: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=) 9: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=) 10: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: Ydol4s5h9bz8Q7ka54DCDouKs7y7TxsghSJllfvEWs8=) 11: kFKOxKY8VUTuxTf-yKfjHz8Wd2Y.roa (hash: riEmPQV4v2zfq30QZ7AZjXHbnN49xJeD9nNq0fiSPhg=) 12: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=) 13: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=) 14: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=) 15: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=) 16: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:0b:9f:81:b2:ab:5c:9f:81:19:52:37:52:32:28:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Sep 20 09:00:27 2026 GMT Not After : Sep 21 09:00:27 2026 GMT Subject: CN=6dc9780fe03f136767a5a22e71293c634e8fa819 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:24:20:d3:68:35:80:01:5a:0c:9f:53:8c:64: 36:22:0c:6c:4e:85:35:f2:4c:d7:ae:6d:b8:87:5a: 43:bd:63:e6:fd:3e:d2:30:0a:26:3d:e3:87:3d:e0: 5e:11:8a:f9:ba:77:4b:7d:11:ab:2a:d4:29:30:ea: 7e:c0:54:90:57:fd:35:96:d2:96:e1:75:46:f7:c1: f6:f4:85:46:88:23:17:ea:cd:aa:cd:82:25:b0:22: 95:83:67:a6:c0:cc:75:b0:cd:06:7b:47:19:62:65: 59:8f:6a:c1:3a:d8:49:8f:1d:aa:a8:6f:7f:fb:4e: 92:3a:11:23:bc:0c:03:24:e1:0f:3f:53:5c:48:f3: a7:f1:52:75:6b:80:fc:53:74:c7:f1:67:bf:c3:65: 3a:2e:9a:9e:3a:68:55:0e:c9:a8:16:0b:71:3f:4f: 1c:59:fe:a1:5d:7c:b3:0d:28:37:55:4b:55:27:a7: 59:98:90:12:50:76:d5:cc:52:46:ae:4d:f3:bd:e5: 7c:10:94:7b:ed:a8:b4:e6:73:c0:f3:48:0a:7c:d1: c2:21:74:c2:b1:de:e8:b8:50:78:3d:ad:a6:ad:b1: d0:71:15:6e:d0:a2:60:cf:16:51:a2:c7:03:8e:30: 63:68:96:0b:f6:a8:91:9c:34:80:3e:61:71:01:ad: a5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C9:78:0F:E0:3F:13:67:67:A5:A2:2E:71:29:3C:63:4E:8F:A8:19 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:4c:b4:18:1f:4a:53:37:42:ce:27:5e:7e:32:01:ac:20:f8: 55:f6:35:56:4a:ce:87:45:8b:65:b7:b0:e0:08:b7:d5:e0:86: 1e:51:79:a9:7c:f4:03:df:58:21:4f:a1:19:70:70:13:29:5f: c7:de:fb:45:02:c1:49:1b:6c:ec:99:e7:d5:23:b4:1e:43:e2: 52:75:43:bb:7a:85:56:18:e2:89:df:e4:b5:0f:0e:2f:98:df: 3c:20:50:85:13:d4:07:73:3f:b4:2b:30:32:60:fa:4e:cf:0e: 06:b0:2c:24:d2:3a:6c:8d:0e:f9:93:9d:ac:93:d3:96:76:ea: a6:24:ae:a7:52:9e:e9:f9:86:ef:d7:49:55:67:7b:74:a7:bf: 13:64:c8:40:1f:18:37:6c:36:d4:af:bb:2a:2c:ec:00:25:5e: f2:27:55:14:a1:f0:4f:84:ee:89:09:43:aa:aa:45:74:53:3e: ca:10:43:23:09:95:7d:8f:64:d1:c3:56:4b:04:de:06:76:ee: aa:8a:77:16:ca:06:bb:38:f2:3d:99:dd:29:8e:4b:f7:d9:72: 0c:3f:54:29:48:68:a2:c5:e4:5c:01:3d:87:b0:b9:1e:82:74: 80:07:0d:70:e0:e0:42:e0:85:75:ad:8a:0b:74:9f:01:3d:02: 3e:38:2f:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+C5+Bsqtcn4EZUjdSMih/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwOTIwMDkwMDI3WhcNMjYwOTIxMDkwMDI3WjAzMTEwLwYDVQQD Eyg2ZGM5NzgwZmUwM2YxMzY3NjdhNWEyMmU3MTI5M2M2MzRlOGZhODE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwCQg02g1gAFaDJ9TjGQ2IgxsToU1 8kzXrm24h1pDvWPm/T7SMAomPeOHPeBeEYr5undLfRGrKtQpMOp+wFSQV/01ltKW 4XVG98H29IVGiCMX6s2qzYIlsCKVg2emwMx1sM0Ge0cZYmVZj2rBOthJjx2qqG9/ +06SOhEjvAwDJOEPP1NcSPOn8VJ1a4D8U3TH8We/w2U6LpqeOmhVDsmoFgtxP08c Wf6hXXyzDSg3VUtVJ6dZmJASUHbVzFJGrk3zveV8EJR77ai05nPA80gKfNHCIXTC sd7ouFB4Pa2mrbHQcRVu0KJgzxZRoscDjjBjaJYL9qiRnDSAPmFxAa2lXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG3JeA/gPxNnZ6WiLnEpPGNOj6gZMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGUy0GB9K UzdCzidefjIBrCD4VfY1VkrOh0WLZbew4Ai31eCGHlF5qXz0A99YIU+hGXBwEylf x977RQLBSRts7Jnn1SO0HkPiUnVDu3qFVhjiid/ktQ8OL5jfPCBQhRPUB3M/tCsw MmD6Ts8OBrAsJNI6bI0O+ZOdrJPTlnbqpiSup1Ke6fmG79dJVWd7dKe/E2TIQB8Y N2w21K+7KizsACVe8idVFKHwT4TuiQlDqqpFdFM+yhBDIwmVfY9k0cNWSwTeBnbu qop3FsoGuzjyPZndKY5L99lyDD9UKUhoosXkXAE9h7C5HoJ0gAcNcODgQuCFda2K C3SfAT0CPjgv/w== -----END CERTIFICATE-----Generated at Sun Sep 20 14:51:04 2026 by rpki-client