$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft File: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft (raw, json) Hash identifier: p+YgX15aYkvN1wDIdZNX0PR7IBNEngaTaZumSfN8CzA= Subject key identifier: 20:A6:F6:33:B3:CC:44:CF:75:A7:D8:1C:A2:28:D7:CC:D3:3E:B1:52 Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea Certificate serial: 01A0C9A1FF25BAE05A9D7483227663CC9B20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft Manifest number: 1A75 Signing time: Tue 22 Sep 2026 15:00:32 +0000 Manifest this update: Tue 22 Sep 2026 15:00:32 +0000 Manifest next update: Wed 23 Sep 2026 15:00:32 +0000 Files and hashes: 1: 0cWx-DBEWXofQGq4uONjR9-bH4Y.roa (hash: pTkOoFQAT359monWmVl8M1BT8bJvgYKuEr63L6+DXH0=) 2: 1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl (hash: 9ir2zS17PhhnoeAyCOGU2bFtmsVnsRCP2ppfHWoerxU=) 3: AoOT9bGlJWd-TIRNHpKTWvzqPSY.roa (hash: Zi71VPuABO0kIOBrih/loFOATBl1klL+p6nG7AFF/d0=) 4: Bcd1BhwhrloaAtNtyP-2iXTXB5A.roa (hash: dwpLC5kz/iKWj1XEBoyZJZ2yN/0XmLy1ykd/NJpK0sU=) 5: EUgnWUs3CsfaZnj_hnNyvxreJoQ.roa (hash: pJY6CLyIZmy66AbMBmwM31A1sACoy25h4xx0+iPYYKE=) 6: MP5IdtDl7YEwuRNByyv8kDyAVco.roa (hash: vqDoHpH/1+pER1chx+gV6UvPLCxswhMzI5LmhtQHsu4=) 7: TJn7hrwQDusGI6b-JvzCy0ryuuI.roa (hash: jB76SwGUuXPBEx6T4Yw/Gggaft9shy0ZMidb4G0i9nM=) 8: UNIm3YXiMDOMkRxhMMlo6vVHArk.roa (hash: Tj2pYqF/A8kH66w2NIt64SQxibERr8EqlG3Fz5Bjgag=) 9: UX6g7KL9WRWy9Rrda_z2jmHwIg0.roa (hash: NgIQIWjEkGD0w0vEE9BTQb05Jn1iZvBqKIdoPQLt1R0=) 10: XUiE35ZJ3I6RBM2rDx0ESiNgluI.roa (hash: k03+qzTCxQ7lrjUzBfLF9RxlBcgnBj56L5MGzoB6xFA=) 11: _6SUA7PKYEVFBTaDAhE_A7MmF48.roa (hash: uJO3tMs1LSBIuJd7osQRiXv584cj5QanzKyRrYPze+w=) 12: cOTwaK6RSeeGqDttEyYUstwdoCE.roa (hash: alEZzagowBG75tk1HZniA5+5QPNp5iyxbE6HUR50PHQ=) 13: fJWzhiz6ayYsqM8kzsREYtIJBgI.roa (hash: N8Chz/wqQxJEwp3lnnRBhU8gdawDyJefdia645ECTwg=) 14: gfMRF0Nj1ChxrdQTcKCsvqZqzRA.roa (hash: VFwJmY7TYTF5JsUpp282lqGtLaHhhYMOSpBJGNGXiME=) 15: q7ctECBBEGOXl7uVauozGHraScs.roa (hash: gH9pmibDk4Ofnm2E38XD3fGrNK+1ocC6xSl5pld1ojw=) 16: qyuH8NgRhRZdTsIxcPjney8uG5Y.roa (hash: n0uUMyMPIGkKTSZ3n9g1M0rkf82uD6ttedakSVtd8tQ=) 17: vhCKx6YE6UZfYQ_y2if0T0sJx9A.roa (hash: 4GxEPZps/hQabeBQl+bTu8j92zD3sd9eABLT3Mr/M3g=) 18: x0r6XLUbiGOM5wv_gPZskGbu2oc.roa (hash: cdp8ZKRLyyEX1Hh8O5VsarJhdWV3a3wqBRxkXALsMf0=) 19: z1vIHaPgOEf1CFFXxVhQ7UIS68w.roa (hash: rFdz4/+higPiFTrvJsOTs2dDOqXP1ja44+BB/HAKISI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:a1:ff:25:ba:e0:5a:9d:74:83:22:76:63:cc:9b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea Validity Not Before: Sep 22 15:00:32 2026 GMT Not After : Sep 23 15:00:32 2026 GMT Subject: CN=20a6f633b3cc44cf75a7d81ca228d7ccd33eb152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e3:f3:89:0b:16:6f:d1:2e:49:69:3b:ff:4a: 1d:12:9c:ee:96:90:86:c0:eb:45:18:20:5d:5d:b8: 93:e1:35:0e:bf:cc:fa:76:71:b6:2b:2d:be:17:3e: 9f:0f:f4:da:33:da:b4:a5:17:10:e1:33:38:96:de: be:d0:2e:66:f3:a2:4a:81:cc:41:6d:3e:a1:7b:5d: 0b:3a:9b:6d:15:88:fd:aa:82:ac:39:37:3f:df:5d: 9a:ae:5d:e9:9e:f5:11:fb:10:26:68:fa:f0:39:1e: cf:3c:6c:36:0f:88:05:be:a7:fb:72:d0:e3:74:36: ad:cd:47:9d:92:4a:f6:f4:be:55:0c:16:90:fb:c4: ef:3e:db:b8:a5:bd:a0:0e:d0:49:5e:fc:75:ae:d4: ae:9f:66:a9:6d:55:41:d3:51:81:8e:8f:f8:77:2a: 89:2f:5d:48:45:46:a2:5b:f3:38:b4:1f:19:65:21: 1f:05:d1:da:d3:97:67:ba:ba:cd:c6:77:84:f8:4c: 78:c7:0b:64:ba:30:b3:fe:f0:65:b7:1b:0f:07:90: fe:45:85:6c:7d:cc:83:ab:71:f0:1b:18:98:de:f6: 3d:3f:c7:8e:cb:f8:9c:12:ca:6f:2d:2d:2b:bb:8e: b4:a1:26:e6:3c:82:ef:dc:1b:36:32:38:e4:bc:fd: ba:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:A6:F6:33:B3:CC:44:CF:75:A7:D8:1C:A2:28:D7:CC:D3:3E:B1:52 X509v3 Authority Key Identifier: keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:fe:c0:19:01:29:45:44:2d:fb:3d:18:ce:99:9a:00:6e:0c: 7b:55:35:c2:28:6a:50:3d:cd:58:7a:eb:d5:bf:2f:0f:f2:ab: f8:ec:20:7d:68:9b:85:b7:20:0a:01:6b:81:3f:86:c5:44:d1: 42:1f:e1:dd:af:93:ef:3d:2b:22:8a:36:0a:91:d5:d4:8b:0e: 5c:b5:8a:96:c6:a0:81:58:c5:d3:00:b5:7c:df:4c:4f:39:48: a8:e7:96:eb:65:ab:ea:ac:0b:18:c2:e4:ae:27:0f:41:6c:5c: c5:34:5d:13:6c:f1:c1:9b:d7:f3:12:cb:b8:8f:ff:a3:2a:ee: 17:05:fe:e2:44:0b:eb:96:72:06:b6:74:3b:21:70:2f:a0:25: 92:c3:0a:99:f4:90:f3:80:0d:fc:13:fa:3d:7c:cb:3e:05:08: f3:af:fa:f7:de:00:52:5f:58:62:6b:1a:09:8b:d2:fc:59:6e: 79:69:33:cd:de:09:7d:27:47:73:32:d2:e0:eb:91:fa:a4:f6: ad:5b:1d:64:31:56:f9:80:af:42:89:db:c8:a0:5c:3f:f7:70: 39:c8:57:ab:cc:2c:cd:8c:20:ad:76:9c:3e:37:f2:2c:70:45: 86:f6:00:b7:b2:46:ff:61:cc:50:cf:44:68:fe:9b:09:1b:75: bf:da:2b:d8 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAaDJof8luuBanXSDInZjzJsgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZiOTg3MjQ0NjExYjUyMzA1MzY3NDRiNmE4OWYwNDRmMzJm NDYyZWEwHhcNMjYwOTIyMTUwMDMyWhcNMjYwOTIzMTUwMDMyWjAzMTEwLwYDVQQD EygyMGE2ZjYzM2IzY2M0NGNmNzVhN2Q4MWNhMjI4ZDdjY2QzM2ViMTUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ePziQsWb9EuSWk7/0odEpzulpCG wOtFGCBdXbiT4TUOv8z6dnG2Ky2+Fz6fD/TaM9q0pRcQ4TM4lt6+0C5m86JKgcxB bT6he10LOpttFYj9qoKsOTc/312arl3pnvUR+xAmaPrwOR7PPGw2D4gFvqf7ctDj dDatzUedkkr29L5VDBaQ+8TvPtu4pb2gDtBJXvx1rtSun2apbVVB01GBjo/4dyqJ L11IRUaiW/M4tB8ZZSEfBdHa05dnurrNxneE+Ex4xwtkujCz/vBltxsPB5D+RYVs fcyDq3HwGxiY3vY9P8eOy/icEspvLS0ru460oSbmPILv3Bs2MjjkvP26mwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFCCm9jOzzETPdafYHKIo18zTPrFSMB8GA1UdIwQY MBaAFPuYckRhG1IwU2dEtqifBE8y9GLqMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS01aHlSR0ViVWpCVFowUzJxSjhFVHpMMFl1by5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDQvMzE5ZDdjLTdlNzYtNDMwOC1iYzAw LWJlNTgzMmQ1ZjdhYS8xLzEtNWh5UkdFYlVqQlRaMFMycUo4RVR6TDBZdW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzQ0LzMxOWQ3Yy03ZTc2LTQzMDgtYmMwMC1iZTU4MzJkNWY3 YWEvMS8xLTVoeVJHRWJVakJUWjBTMnFKOEVUekwwWXVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ/7A GQEpRUQt+z0YzpmaAG4Me1U1wihqUD3NWHrr1b8vD/Kr+OwgfWibhbcgCgFrgT+G xUTRQh/h3a+T7z0rIoo2CpHV1IsOXLWKlsaggVjF0wC1fN9MTzlIqOeW62Wr6qwL GMLkricPQWxcxTRdE2zxwZvX8xLLuI//oyruFwX+4kQL65ZyBrZ0OyFwL6AlksMK mfSQ84AN/BP6PXzLPgUI86/6994AUl9YYmsaCYvS/FlueWkzzd4JfSdHczLS4OuR +qT2rVsdZDFW+YCvQonbyKBcP/dwOchXq8wszYwgrXacPjfyLHBFhvYAt7JG/2HM UM9EaP6bCRt1v9or2A== -----END CERTIFICATE-----Generated at Tue Sep 22 22:58:54 2026 by rpki-client