$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json) Hash identifier: quYQH8CBB6o2yl0vM4h96B0OojdmVuTjFypYB3N+eYM= Subject key identifier: A8:2A:4F:25:FE:47:E8:B2:31:D0:26:F2:3B:8B:E8:04:10:66:79:B8 Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 01A0DF4ED952E17401E33B9153922740C621 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft Manifest number: 1A7B Signing time: Sat 26 Sep 2026 20:01:21 +0000 Manifest this update: Sat 26 Sep 2026 20:01:21 +0000 Manifest next update: Sun 27 Sep 2026 20:01:21 +0000 Files and hashes: 1: 1pNjMggR1gYBaftihFMx8w1rMhE.roa (hash: PULZtkL3C3zDaM8kMCwf21Yb0UEXTXjrHY8fh/1iHFc=) 2: BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa (hash: HBZO37pz26No65orIL67yFB8MvBngZCIHxDCzlTkjJc=) 3: C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa (hash: hyN/ftVawg2QF6kkYn1VlnFyi9JVIm7PN5l5sJloEAU=) 4: CiXCz7OWck5adEg6z95YRceHxmU.roa (hash: EasCRjc+VBWg+tlVvV7czSSDbpGCqgxTM2n5TXY0Ipc=) 5: Uqxv6RJDJys9akW4OeqacWtytrA.roa (hash: RSQidgq4mEPgxtmCFTLFsYGLsEkeze9gOf1NNbRSvgc=) 6: Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa (hash: DTSBhlEZWBIgKWeFJQfKtS9sYqKdFbuY0AXldEHxAZ4=) 7: eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa (hash: X2Eq1j8xxP8127RbRQQH82ZQaRO794u+GIRwZ/G/1eM=) 8: mK3OtIQBuc5E_Igw6gzRMSv2d3c.roa (hash: DMwAvTUmsGM0zrMHUTJobXjFU2+cLUzH4tvhaMwkiwc=) 9: nUVyELULlyE5fyAdMqySIUcD1Kg.roa (hash: 7IAppAs9x9RzUF7a3+rIPbPjrq3AFXyVcrF/g7C0QPU=) 10: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: +s3GBump2C/dvLqXXUHNpK6ZlkWrpqcZ3V+Nh8ZdF3I=) 11: taXjOwEPFjUj9cMa7Gq70xb_Xw8.roa (hash: amO1PgtWxEDUcYd/ZIcEzv+wLt54N13hJwoq+TKEsJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 19:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:df:4e:d9:52:e1:74:01:e3:3b:91:53:92:27:40:c6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Sep 26 20:01:21 2026 GMT Not After : Sep 27 20:01:21 2026 GMT Subject: CN=a82a4f25fe47e8b231d026f23b8be804106679b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:3f:b5:61:71:63:90:11:ff:01:76:47:2a:9c: f6:53:fb:fd:16:4e:cb:0a:ae:27:e3:0d:4c:dc:ec: d2:1a:1d:81:6d:0c:b3:0a:a8:6d:fb:ce:07:87:44: a2:af:f7:a0:ad:3f:f9:88:71:a6:c5:4f:ed:82:17: f5:34:49:f6:95:34:e6:b8:b7:05:8e:3e:66:3c:14: a1:8c:ed:23:34:05:10:22:0a:c3:53:6a:2f:93:bf: 0b:60:3e:95:51:fe:a6:49:d7:fb:48:84:fc:6d:14: db:db:68:2c:ab:57:35:d8:21:6f:31:3c:2d:ee:fe: 45:f7:b0:2e:0b:ea:81:1c:56:e6:e7:b5:9a:4a:cd: c6:0c:e7:96:16:d0:53:a6:06:33:12:2e:fe:59:40: 20:3a:b4:9e:e7:66:32:c6:b9:4b:0c:c7:8a:e5:08: 64:0b:dc:b9:64:70:d1:c1:b9:8d:ae:11:27:5d:4f: d5:a8:ff:bf:02:4a:97:69:42:f6:06:f2:e6:37:be: f4:ec:be:66:35:dd:a0:b1:24:20:97:39:19:cc:47: 8b:04:fc:4d:6f:51:97:d8:28:1b:74:c0:89:80:e4: 82:98:38:6f:28:4d:5f:47:4d:37:6f:a1:da:aa:81: dd:7f:ee:24:4e:49:47:56:75:d0:78:d8:7c:b0:a8: 5b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:2A:4F:25:FE:47:E8:B2:31:D0:26:F2:3B:8B:E8:04:10:66:79:B8 X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:5a:9a:af:8e:65:50:8a:c6:f1:9d:64:4b:e6:c4:18:d8:24: 15:cc:21:17:03:a9:26:92:28:ea:ca:87:c9:26:4e:6f:34:32: d6:b8:2c:3e:6d:d5:29:29:ab:22:59:c3:c9:19:c6:ce:25:f2: d4:df:4e:a6:2c:bb:63:4e:4f:fe:2c:85:ff:05:76:0f:b2:07: 3e:2b:53:d2:b9:fa:6f:c7:40:0b:c1:c5:8b:53:f8:df:47:3f: 51:bc:8f:a7:fe:d9:1a:45:07:7d:17:e9:f6:2a:72:1a:9d:30: 48:e0:f0:7e:b6:1a:b6:a7:67:c3:e1:9a:c6:bd:e8:fd:0c:84: e0:08:88:8e:cb:bc:4b:d6:b0:90:d6:01:f2:e3:35:84:54:91: b2:48:6b:14:e5:80:3e:7f:0f:e8:3e:de:f1:a9:9c:56:72:6b: 7a:77:59:cf:8a:9e:46:ff:e3:34:1e:bc:56:f4:6d:3c:42:1a: eb:75:64:fe:ca:df:fe:fb:63:2c:89:ae:e9:73:78:78:a0:84: 8a:57:61:8c:24:82:c8:68:cd:cf:1d:ac:9e:6e:bc:ba:32:0d: f1:82:bb:f3:8a:8c:19:c9:04:06:60:b7:8a:7b:5c:02:93:e6: f2:be:31:1a:bd:66:3e:fb:c5:e4:6d:86:f2:c2:fc:33:27:f7: 72:1f:18:d5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDfTtlS4XQB4zuRU5InQMYhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjYwOTI2MjAwMTIxWhcNMjYwOTI3MjAwMTIxWjAzMTEwLwYDVQQD EyhhODJhNGYyNWZlNDdlOGIyMzFkMDI2ZjIzYjhiZTgwNDEwNjY3OWI4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD+1YXFjkBH/AXZHKpz2U/v9Fk7L Cq4n4w1M3OzSGh2BbQyzCqht+84Hh0Sir/egrT/5iHGmxU/tghf1NEn2lTTmuLcF jj5mPBShjO0jNAUQIgrDU2ovk78LYD6VUf6mSdf7SIT8bRTb22gsq1c12CFvMTwt 7v5F97AuC+qBHFbm57WaSs3GDOeWFtBTpgYzEi7+WUAgOrSe52YyxrlLDMeK5Qhk C9y5ZHDRwbmNrhEnXU/VqP+/AkqXaUL2BvLmN7707L5mNd2gsSQglzkZzEeLBPxN b1GX2CgbdMCJgOSCmDhvKE1fR003b6HaqoHdf+4kTklHVnXQeNh8sKhbIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKgqTyX+R+iyMdAm8juL6AQQZnm4MB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZVqar45l UIrG8Z1kS+bEGNgkFcwhFwOpJpIo6sqHySZObzQy1rgsPm3VKSmrIlnDyRnGziXy 1N9Opiy7Y05P/iyF/wV2D7IHPitT0rn6b8dAC8HFi1P430c/UbyPp/7ZGkUHfRfp 9ipyGp0wSODwfrYatqdnw+Gaxr3o/QyE4AiIjsu8S9awkNYB8uM1hFSRskhrFOWA Pn8P6D7e8amcVnJrendZz4qeRv/jNB68VvRtPEIa63Vk/srf/vtjLImu6XN4eKCE ildhjCSCyGjNzx2snm68ujIN8YK784qMGckEBmC3intcApPm8r4xGr1mPvvF5G2G 8sL8Myf3ch8Y1Q== -----END CERTIFICATE-----Generated at Sat Sep 26 23:27:03 2026 by rpki-client