$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json) Hash identifier: +79iSYHeA2gRQsAA8IKtpRImhFXMk0ICLABeFe1rc6Y= Subject key identifier: E7:54:3A:05:8D:B6:B5:5B:F2:FE:F4:E7:11:BC:AD:49:31:59:89:7D Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 01A0C03106025AA8BA5A0B5D636470918AD7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft Manifest number: 1283 Signing time: Sun 20 Sep 2026 19:00:33 +0000 Manifest this update: Sun 20 Sep 2026 19:00:33 +0000 Manifest next update: Mon 21 Sep 2026 19:00:33 +0000 Files and hashes: 1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=) 2: 9UWbCEXqjRhjC5AwqWBCIFK_AT4.asa (hash: UFf7/mopkwyI/qLLTDxzlcrPF+4ju/94DUIEHv1Zj3E=) 3: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: BCJni5p4KNPKf7RH0EeLFJpqkcDj10Wo5oeGqOqX4L8=) 4: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=) 5: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=) 6: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=) 7: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=) 8: TpSktW1NAsZq923aUoE53pMX0hw.roa (hash: ljs6mrp9Kdtic0OnoNEza6FCINLSHSxZypr5fLwF++Q=) 9: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=) 10: egQEbfnW1MXHUAUDIXi9mc2fB-c.roa (hash: 1BkfZIfCGpyU9bVzsVuHecgL4efqavb1+AuIHnc1Rt8=) 11: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=) 12: w1zIh0CnKegnO0T7ra_SO9YilV8.roa (hash: KzpnZqdHE55q0MkGU3Ic0fB1a+0zqfLi5dqRW/lkoPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c0:31:06:02:5a:a8:ba:5a:0b:5d:63:64:70:91:8a:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Sep 20 19:00:33 2026 GMT Not After : Sep 21 19:00:33 2026 GMT Subject: CN=e7543a058db6b55bf2fef4e711bcad493159897d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0e:bb:0b:91:05:6b:7c:cb:72:9a:9e:87:f3: 4f:1f:af:2f:02:c3:66:a4:50:cd:76:6d:2d:fc:c9: 4f:c5:20:56:b6:68:2f:f6:5b:f6:99:60:41:87:9f: 58:f6:b7:4e:a8:43:ee:13:aa:89:65:27:c4:55:2b: a2:8b:cb:29:ea:b5:e4:6b:e8:2f:8e:ed:6a:ae:bf: 7e:0b:f8:34:4a:52:14:3d:55:63:d7:89:f2:a1:6f: 20:ab:b6:5c:d8:50:cc:c6:83:65:89:51:0b:b7:db: 27:5c:21:a2:c7:66:a1:5a:e7:5f:3e:d8:a1:88:4c: e6:f4:a1:73:d3:0c:67:2c:cf:72:1e:42:33:2e:74: 61:23:e3:36:bd:95:28:63:bb:9c:ab:0f:7d:b8:ec: 09:13:2c:b6:9b:b9:9d:93:ee:4a:dd:8a:97:e3:ba: c8:b8:6d:1b:f5:41:ff:b6:41:c7:d3:08:34:ce:17: f7:31:1c:58:45:f1:4d:dc:49:05:aa:25:4a:00:fc: 01:be:f0:2c:35:ce:8e:38:b0:4b:4b:2c:39:e8:9e: be:29:c7:81:b8:93:45:c3:90:40:12:cb:62:db:d6: 6d:fc:bb:6a:c8:41:02:92:4e:f6:2e:31:dc:cb:87: af:29:13:48:b2:28:10:e5:6a:ee:83:6c:04:8d:2a: 2f:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:54:3A:05:8D:B6:B5:5B:F2:FE:F4:E7:11:BC:AD:49:31:59:89:7D X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a9:7a:d9:32:7e:fb:69:5b:6b:50:2a:59:1f:de:95:c0:65: fd:c5:d3:4e:0a:e4:b9:27:13:a6:e5:72:3e:5f:66:0c:df:a2: 6a:b8:2f:99:81:99:86:b6:cc:96:35:45:95:14:31:2a:0f:82: 46:76:92:88:c6:a0:97:48:4b:3e:7f:9e:99:45:3a:fc:95:8d: 7c:77:f8:90:d3:fc:5d:e6:63:58:e8:ba:a4:7c:82:81:f7:85: 5a:96:83:31:85:a3:08:ca:3d:ec:1c:b0:c2:d0:73:60:19:c4: 2d:71:61:2e:4e:66:c8:b3:7e:bd:c0:3a:a3:c7:8d:4c:7c:63: ea:00:45:86:69:2e:d3:2f:2f:92:d9:aa:a8:26:67:ae:fb:37: 8d:8d:46:ed:0c:ee:68:e1:d6:62:60:0c:d8:9b:f9:55:80:36: 60:11:13:38:fb:d1:bb:95:d6:fe:5e:20:76:17:1d:17:34:fe: 9b:da:b1:6a:88:50:6c:d0:bf:20:ef:d4:da:25:ec:83:d7:69: 6b:95:7b:8a:b8:93:5f:d1:1e:b4:6c:93:04:9e:e3:31:9d:3e: d5:b7:eb:d8:fd:62:47:87:9e:3d:a9:42:39:77:75:fa:fc:45: 02:bf:30:4b:88:e8:ec:a9:4f:bc:0f:55:b8:67:4c:36:37:ad: f4:86:a6:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDAMQYCWqi6WgtdY2RwkYrXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwOTIwMTkwMDMzWhcNMjYwOTIxMTkwMDMzWjAzMTEwLwYDVQQD EyhlNzU0M2EwNThkYjZiNTViZjJmZWY0ZTcxMWJjYWQ0OTMxNTk4OTdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA67C5EFa3zLcpqeh/NPH68vAsNm pFDNdm0t/MlPxSBWtmgv9lv2mWBBh59Y9rdOqEPuE6qJZSfEVSuii8sp6rXka+gv ju1qrr9+C/g0SlIUPVVj14nyoW8gq7Zc2FDMxoNliVELt9snXCGix2ahWudfPtih iEzm9KFz0wxnLM9yHkIzLnRhI+M2vZUoY7ucqw99uOwJEyy2m7mdk+5K3YqX47rI uG0b9UH/tkHH0wg0zhf3MRxYRfFN3EkFqiVKAPwBvvAsNc6OOLBLSyw56J6+KceB uJNFw5BAEsti29Zt/LtqyEECkk72LjHcy4evKRNIsigQ5Wrug2wEjSovZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOdUOgWNtrVb8v705xG8rUkxWYl9MB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKl62TJ+ +2lba1AqWR/elcBl/cXTTgrkuScTpuVyPl9mDN+iargvmYGZhrbMljVFlRQxKg+C RnaSiMagl0hLPn+emUU6/JWNfHf4kNP8XeZjWOi6pHyCgfeFWpaDMYWjCMo97Byw wtBzYBnELXFhLk5myLN+vcA6o8eNTHxj6gBFhmku0y8vktmqqCZnrvs3jY1G7Qzu aOHWYmAM2Jv5VYA2YBETOPvRu5XW/l4gdhcdFzT+m9qxaohQbNC/IO/U2iXsg9dp a5V7iriTX9EetGyTBJ7jMZ0+1bfr2P1iR4eePalCOXd1+vxFAr8wS4jo7KlPvA9V uGdMNjet9Iam4A== -----END CERTIFICATE-----Generated at Mon Sep 21 02:01:44 2026 by rpki-client