$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: XfOjRPZuaX8WdhR5dYGJKCQD1PrAkNueSHt+2DsWzNM= Subject key identifier: 27:D3:46:77:B3:BD:83:7A:54:0D:DC:19:FA:C5:DC:27:1E:32:8B:AC Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 01A0DA28AEB1ECC21E20ACC27895E523266E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 1A90 Signing time: Fri 25 Sep 2026 20:01:34 +0000 Manifest this update: Fri 25 Sep 2026 20:01:34 +0000 Manifest next update: Sat 26 Sep 2026 20:01:34 +0000 Files and hashes: 1: 2rTA2bFQLnTk-wBE54CdmsvNmbE.roa (hash: rTmmlhzm12lVyQhx6ghJTLh2ggevz2u8kAMqAN9SK3c=) 2: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: sxsINz3xiHgXX+Up0AyzPzn2/va+DiW/d3I5v9iVmfI=) 3: GiXGWF3XbNUka_6eZbMkF4lwUUU.roa (hash: Ghc0ZSrMNmrLcxpN1ogM8Bq5yh44DA/gg5TX6sTsGwk=) 4: Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa (hash: z+0vTxrgxYAsB4o2ZlASjMWqhGlPslViBNl8Jj/ge4E=) 5: JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa (hash: O/QTbkFDD3rtzSPUctcOhfkfZ3hImjATVsAJ0E69A4g=) 6: Ow_kueRJVip82pUj00XLQYjimrs.roa (hash: 85eWZxYsHFwXWd/YsiQWTMazT60hSpQui9cmEWNnT5M=) 7: RGm2lZRMnSfKm4B97NAwBPy9lYQ.roa (hash: Wjqw6vgltXyXDlwoAetJMPKopD3DI3ppoohYHWiU90I=) 8: T8B0kkg4BVlceQJgbiJPcySAVzI.roa (hash: yXFJztGLWwXHOTbokOH+zERGWTqm5J1lqmfqfodFEZc=) 9: W_-_HaUod-cjK_nA0bLneyeWAes.roa (hash: 1x91spJR0Mlu6Fz+Qjwjj0FIGT4+k9oC+PPm0TZ/70g=) 10: bUcBfMu_9o4dYCM9sDK4nJufEqY.roa (hash: iEsA+ypslVdiqyHUg8Q2SIRt6ca1DLneY25H0pJSVOc=) 11: fT61awwkD08cT0v6ICZahtW3HFI.roa (hash: OGczwb/UeMWoa3ZnMERuw+jjcJf8SRTCZaw4MXLAhCE=) 12: gndzUxO1CNccN-YEVyYR7nMztTA.roa (hash: 97uyyMTTG7hyUktNtazYQf48Ni/TGW9HZQJtjllnVwc=) 13: j9edvCOgCpRUHjoOk20-cN9wmxg.roa (hash: 6DgXQwbEU+KDyumiNCNLUw/9Wxv+6tWPT8AusYvqDwo=) 14: wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa (hash: x43Z5uj7ACBLhAYU7mriWUpP8c6bdaVxKIh05vTvKqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 20:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:da:28:ae:b1:ec:c2:1e:20:ac:c2:78:95:e5:23:26:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Sep 25 20:01:34 2026 GMT Not After : Sep 26 20:01:34 2026 GMT Subject: CN=27d34677b3bd837a540ddc19fac5dc271e328bac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d3:88:7f:67:61:ee:cb:e9:be:ee:42:46:f2: a4:f4:ff:96:1f:70:63:a5:fd:44:a5:21:31:ed:c2: 08:54:b4:f3:c1:f7:94:89:aa:15:63:b6:14:6b:33: ad:cb:77:e8:e5:b8:51:83:3f:e0:a1:92:ff:00:36: 29:2a:ef:e4:2c:46:f1:c9:f5:ff:86:8e:1f:95:dc: ba:c2:1d:ff:90:d5:ca:60:51:cd:8f:96:32:ac:6f: b8:7f:6a:3d:76:0d:4b:c9:5d:18:94:73:2b:37:cc: 73:38:c3:f8:ca:e8:25:f7:4f:36:08:d6:87:26:50: 30:38:13:5a:0f:83:43:fd:e9:bc:15:3b:73:c0:3c: 92:19:20:f9:b4:91:fd:ab:0b:21:16:11:06:c8:49: 67:8d:16:81:27:7e:82:c1:78:15:7d:b5:de:7e:67: 4c:59:45:db:e7:4e:9a:93:07:9f:00:bc:f9:5c:b4: 4c:3b:eb:17:ea:c7:7e:c2:d3:47:07:61:80:35:e9: 2a:8c:11:83:f9:6b:15:15:bc:ff:6c:c6:a5:e5:31: 76:90:d2:8c:be:41:ae:24:ed:44:1d:79:66:73:ed: 2f:25:b6:68:a1:57:75:61:ee:a9:f8:39:32:21:77: 66:e6:ca:ba:1a:38:99:c4:2d:0b:a0:6b:fe:84:d8: 8f:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:D3:46:77:B3:BD:83:7A:54:0D:DC:19:FA:C5:DC:27:1E:32:8B:AC X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:23:7b:93:9c:1e:92:2f:59:b9:94:a6:f7:1f:62:07:02:a5: a2:0b:68:5e:51:7d:3e:bf:e7:e9:57:0c:aa:3d:c5:e7:15:fb: 4d:22:e3:1b:74:d4:fa:25:e7:de:00:5f:db:55:7c:f6:74:38: f0:d5:21:2d:2c:53:bf:8a:15:ee:99:77:b4:65:fc:14:bf:cb: e3:b6:a6:c5:af:2b:53:12:ce:2f:ac:f9:4a:18:2e:b1:28:f0: 89:de:9e:a2:4f:c5:b7:84:c6:2d:06:4b:c0:94:a0:07:a9:a3: 85:39:4a:f1:b0:13:a2:34:a2:f4:54:af:4a:1e:1b:cc:8d:ec: 6d:f2:07:14:67:20:07:f4:a9:4b:64:e4:53:ae:cd:80:f9:82: 75:88:dd:51:95:e2:9f:2d:2b:00:0d:c4:11:db:6e:0a:7e:9f: 3a:8c:29:8c:30:fd:f8:6a:59:84:a2:81:8e:b8:80:db:8b:49: ca:61:60:ac:7e:7f:0c:32:5c:b4:46:aa:60:3a:b1:99:ab:b9: c3:b3:99:ab:27:09:52:3c:1c:6f:a3:07:ef:dc:3e:e0:2c:82: 3b:32:4b:5a:43:18:e5:e9:3d:a9:1a:2a:98:12:b9:a5:c1:fc: 07:94:76:79:22:fc:8f:6d:95:fd:3c:f5:b0:2c:5a:9e:b9:26: 61:4a:79:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDaKK6x7MIeIKzCeJXlIyZuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwOTI1MjAwMTM0WhcNMjYwOTI2MjAwMTM0WjAzMTEwLwYDVQQD EygyN2QzNDY3N2IzYmQ4MzdhNTQwZGRjMTlmYWM1ZGMyNzFlMzI4YmFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tOIf2dh7svpvu5CRvKk9P+WH3Bj pf1EpSEx7cIIVLTzwfeUiaoVY7YUazOty3fo5bhRgz/goZL/ADYpKu/kLEbxyfX/ ho4fldy6wh3/kNXKYFHNj5YyrG+4f2o9dg1LyV0YlHMrN8xzOMP4yugl9082CNaH JlAwOBNaD4ND/em8FTtzwDySGSD5tJH9qwshFhEGyElnjRaBJ36CwXgVfbXefmdM WUXb506akwefALz5XLRMO+sX6sd+wtNHB2GANekqjBGD+WsVFbz/bMal5TF2kNKM vkGuJO1EHXlmc+0vJbZooVd1Ye6p+DkyIXdm5sq6GjiZxC0LoGv+hNiPfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCfTRnezvYN6VA3cGfrF3CceMousMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiN7k5we ki9ZuZSm9x9iBwKlogtoXlF9Pr/n6VcMqj3F5xX7TSLjG3TU+iXn3gBf21V89nQ4 8NUhLSxTv4oV7pl3tGX8FL/L47amxa8rUxLOL6z5ShgusSjwid6eok/Ft4TGLQZL wJSgB6mjhTlK8bATojSi9FSvSh4bzI3sbfIHFGcgB/SpS2TkU67NgPmCdYjdUZXi ny0rAA3EEdtuCn6fOowpjDD9+GpZhKKBjriA24tJymFgrH5/DDJctEaqYDqxmau5 w7OZqycJUjwcb6MH79w+4CyCOzJLWkMY5ek9qRoqmBK5pcH8B5R2eSL8j22V/Tz1 sCxanrkmYUp5Qg== -----END CERTIFICATE-----Generated at Sat Sep 26 07:24:56 2026 by rpki-client