$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: PbxhKbooXYdTgS2V729vaqmVpl/Zcy3cUwK20C5MtAY= Subject key identifier: DD:FC:64:4C:3F:E1:F4:B1:22:AA:B9:40:FB:E6:41:89:A9:D0:CE:EF Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 01A0C2C41BD96C4F7E033966406262C7B0D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 090B Signing time: Mon 21 Sep 2026 07:00:27 +0000 Manifest this update: Mon 21 Sep 2026 07:00:27 +0000 Manifest next update: Tue 22 Sep 2026 07:00:27 +0000 Files and hashes: 1: 3O71K1jq21K-s1uKNpoLxwxfjs4.roa (hash: 9K3ZJvCfhWt1RrhHN5T33vgZGrICVU040sK1K6zYTsw=) 2: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (hash: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI=) 3: PIJcLY46PYSHoDgSOZxEPuH417I.roa (hash: srTkWvbqzoKRLCgdMr4N/amg9swAtdMCENwqQ8aPPow=) 4: Q7kbnNNnbSsZFlsov6ILXxHCTdM.roa (hash: VhgI6TuEjkaCFM/zUTKmnIt5ZWs9IQY5K9aBKoHxwD8=) 5: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (hash: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI=) 6: WyQhrcQcI54FWZmH__lrHoE3FWU.roa (hash: 1vjfP6Nqw8yzFBCOkKdm5HoQUw0v3VTrGmhqLtnS2VE=) 7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: 184Of58NG+1WpA8i9nv1pDZix12/ylBD9JEmINcu4KE=) 8: gU8hFrAdmGCPNYOjTnvshD8WKTw.roa (hash: aIL6rAim8v0vCsXPaXDt9dqDXZOi08bdb924MpXBpn8=) 9: iZHuJcN5SGRqzNew0iuIDSSeFRo.roa (hash: xBLovi5yJfWqWf4uNxOyhNCZnh9Kt/cScch8+xkXzcw=) 10: l1MJKpxpJrooh4yYg2GeABzuRlk.roa (hash: auDKOkr78/mYWOPaTVOBS3ng5JPSWspfHkibCydvr1k=) 11: rDDIhE0qYfgop087nvS_8O3QtQQ.roa (hash: GNcKt07HGLjSb7pRK/gwNbmbWxAvVfknp/F4+LGsKVg=) 12: uQMfLgCocO-cV1Dq7f8ShCaJ1pI.roa (hash: f2D0zf6gxtDdlo1Fb2b+kXB8Dad/xNYHEZ1SOFzPCFU=) 13: xQbVNLrkghSR1KoodNn_gRkFImc.roa (hash: pt58nZViNxpnnxA6XeQ7GFV7JLxJTNDbZQ9f75iTc5I=) 14: xe57pNkOwTWSUGNF8UIEoEduU54.roa (hash: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 07:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:c4:1b:d9:6c:4f:7e:03:39:66:40:62:62:c7:b0:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Sep 21 07:00:27 2026 GMT Not After : Sep 22 07:00:27 2026 GMT Subject: CN=ddfc644c3fe1f4b122aab940fbe64189a9d0ceef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:4e:c5:20:cf:b8:4c:63:63:1f:b1:8e:da: f0:b9:ef:17:b7:ab:20:0f:8f:60:b6:91:26:61:56: a7:dc:6f:a9:9e:e1:63:29:82:32:3e:bb:c7:e1:93: 28:a1:75:ef:74:1c:25:40:ef:f0:69:74:1b:27:ec: ef:d3:ba:07:5d:ce:0d:c0:90:e1:75:ae:f4:02:8d: 7f:5c:20:b0:cf:30:35:33:38:b5:8a:db:7e:1e:94: 38:34:9a:d5:3a:56:78:2f:44:bc:78:a6:67:6c:7f: 55:db:4f:d6:0e:a3:a1:8f:66:98:5f:65:ed:5f:aa: 87:71:cc:65:08:67:06:00:cd:7e:ff:2a:fa:7e:79: 82:13:73:7a:82:9f:d2:b6:21:c2:41:a5:88:3c:a9: 13:9a:be:f1:c1:77:cd:a0:1e:07:80:68:ac:5c:05: 85:f6:f2:7f:e9:4a:8c:63:bc:fb:ca:8e:d6:0a:3d: 09:08:ff:f9:1f:22:06:c9:c0:a8:2b:a5:4d:f5:3d: d8:7a:0b:3a:42:a8:66:0a:50:2b:cd:06:9c:55:ad: 5d:6a:55:23:d1:a0:98:cb:11:cc:92:67:e4:4d:e8: f0:95:bc:13:24:5c:cb:c9:91:9a:1f:0d:f8:9a:97: 31:d1:87:e7:f0:6e:46:26:11:0c:b9:ff:4e:7c:22: ab:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:FC:64:4C:3F:E1:F4:B1:22:AA:B9:40:FB:E6:41:89:A9:D0:CE:EF X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:ff:93:d7:67:ad:24:fc:22:c8:f3:ac:42:be:e3:7c:b1:69: 8a:a7:e0:9b:f9:c0:d4:0e:49:b4:6d:4c:9c:b9:10:6c:6e:70: 89:98:96:8c:72:ed:3a:8c:23:61:9b:14:ca:b1:5b:61:47:b4: 17:d9:40:01:35:3b:0c:16:dd:12:c0:30:f9:9b:7b:f1:3a:c4: 92:0e:0e:65:23:6b:f3:94:fc:24:5c:04:db:2c:46:cd:26:be: fa:21:ca:3d:43:f9:9e:20:26:11:f5:81:5d:ab:27:b3:65:a1: 22:c7:dd:e4:5d:6e:85:7a:a0:85:d4:1d:c4:bc:56:f2:4e:fe: 0f:33:7b:e2:75:01:4a:47:9a:a2:6a:3a:7c:76:6e:a5:65:b6: 3c:9e:4c:59:a1:78:b5:de:c9:c3:d8:4a:9f:7b:f0:d9:f3:9b: 8e:f6:fd:09:7f:1f:2a:09:ed:83:7c:7a:88:01:85:63:ae:16: c0:53:9e:12:d4:b3:d4:5d:a6:55:7c:88:ad:a7:65:c6:8c:05: ed:59:d5:71:3f:1a:c2:32:1b:5c:ee:3c:7d:b7:2a:7a:fa:8f: 63:e8:27:e0:a2:b4:32:da:11:b4:24:c6:a5:55:31:19:75:3e: d3:84:65:45:86:fb:8a:da:bd:a9:69:e6:8e:e3:a1:5f:0c:36: ca:fd:5f:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCxBvZbE9+AzlmQGJix7DUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwOTIxMDcwMDI3WhcNMjYwOTIyMDcwMDI3WjAzMTEwLwYDVQQD EyhkZGZjNjQ0YzNmZTFmNGIxMjJhYWI5NDBmYmU2NDE4OWE5ZDBjZWVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00NOxSDPuExjYx+xjtrwue8Xt6sg D49gtpEmYVan3G+pnuFjKYIyPrvH4ZMooXXvdBwlQO/waXQbJ+zv07oHXc4NwJDh da70Ao1/XCCwzzA1Mzi1itt+HpQ4NJrVOlZ4L0S8eKZnbH9V20/WDqOhj2aYX2Xt X6qHccxlCGcGAM1+/yr6fnmCE3N6gp/StiHCQaWIPKkTmr7xwXfNoB4HgGisXAWF 9vJ/6UqMY7z7yo7WCj0JCP/5HyIGycCoK6VN9T3Yegs6QqhmClArzQacVa1dalUj 0aCYyxHMkmfkTejwlbwTJFzLyZGaHw34mpcx0Yfn8G5GJhEMuf9OfCKr1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN38ZEw/4fSxIqq5QPvmQYmp0M7vMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXv+T12et JPwiyPOsQr7jfLFpiqfgm/nA1A5JtG1MnLkQbG5wiZiWjHLtOowjYZsUyrFbYUe0 F9lAATU7DBbdEsAw+Zt78TrEkg4OZSNr85T8JFwE2yxGzSa++iHKPUP5niAmEfWB Xasns2WhIsfd5F1uhXqghdQdxLxW8k7+DzN74nUBSkeaomo6fHZupWW2PJ5MWaF4 td7Jw9hKn3vw2fObjvb9CX8fKgntg3x6iAGFY64WwFOeEtSz1F2mVXyIradlxowF 7VnVcT8awjIbXO48fbcqevqPY+gn4KK0MtoRtCTGpVUxGXU+04RlRYb7itq9qWnm juOhXww2yv1fcA== -----END CERTIFICATE-----Generated at Mon Sep 21 13:21:49 2026 by rpki-client