$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft File: jNgCUSzLdFsqG48xVxTr45OVQD4.mft (raw, json) Hash identifier: Re5fofwr17WFTENxcPns9WhA61fnYqJnfM+ennqXRIc= Subject key identifier: 29:14:81:C5:42:5D:F8:90:BA:1B:96:2D:38:34:1A:CE:83:74:66:95 Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e Certificate serial: 01A0D5390C79DDBE3E5743072C585D72DFDC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft Manifest number: 0205 Signing time: Thu 24 Sep 2026 21:01:20 +0000 Manifest this update: Thu 24 Sep 2026 21:01:20 +0000 Manifest next update: Fri 25 Sep 2026 21:01:20 +0000 Files and hashes: 1: A8zbeGZ_vFlIfUY9owp1LFdY0Qg.roa (hash: sGkTFzp72t2CXwG6Zrb6GXvi4fJs4oeqeT4NK3rHJ/w=) 2: AuCsa89iuYaLVAW-p74YRDf9z-g.roa (hash: 6v+ocE4bgTY3ojTY1zPl5Q/QHvA7Jiy2d14yNwi0ioo=) 3: CLhd68__Vp-YyeZEWfPslHaIkCw.roa (hash: m6lDWItDQfzxnVbNp7hXCoSHCG1Mi/r1rMWPQsWFRoQ=) 4: FH-HegbkfJBlYkgQDtIOilA52FA.roa (hash: vevNPAkCNe2NwwbA5K2E0UcTudDJF5vZ0Hu7+zSCHDA=) 5: FOFTEst8oF0q0X3OdQgxLZ9oed8.roa (hash: g3Bb+RZcj9ZCWcwsCCB0Hz+Q7AkmMt0+i5iC3617N+w=) 6: IqCUdBuN6Vd_3fBmcNHbMSaSYXg.roa (hash: QTmfXP7ucKMXGRXHzNc5Zcmn4GVOCNfHN2w7u+9ec/A=) 7: RJ_8MLiQcEMQljmCDmVnOOnfQyY.roa (hash: qITG72dsAnXhR2+Wt6OI6k5v+TEp09wmHQrA/LqWJPc=) 8: Sxw-Mo-rafDV0shPebN3B75uBh0.roa (hash: av9Y0PMcBgIjJMb8On2oRvK2d2VAxow0GSsvpmW5Oxk=) 9: TUcYiqaHQaxrNd_59aAcfp5PzUc.roa (hash: UNkyO1RUoB9S8RFsmJ0fXaMIKW0xpN0m4jI2P8DIeTc=) 10: WffXez4tRjvK8i61Xgp9_xyDej0.roa (hash: bMn3sIVFMxXy7m8YFxKTE0In+3PMB96dpHT4q7pYfYw=) 11: elz0WJjsYxFbofiz3y1iAAJK_EM.roa (hash: BrIsc5PixFvDSlwXziognZwHw3nQTaQ45c/0aGBgjy0=) 12: hYM7beFU-i68zuT-E-AP85h8fdI.roa (hash: Q6rivTFhzgG3KkdlD6+HA7Kyl4SyGQidk6P1eN7a4CU=) 13: hp01qqaG6ojwTceGwUYjwpMc_FA.roa (hash: +EoDWRDS7zIW8lYYUpVakjrqTS94dDcew7HVE2+smMs=) 14: jNgCUSzLdFsqG48xVxTr45OVQD4.crl (hash: 9IrSDBfKiTPC7isigXMZTjUlCSJnF1ikihGD1Vg2QN4=) 15: mmjz2N0jeb-OAmne9BrUvTuOa8c.roa (hash: VeJ9ypVGjvPcQwVgo5MVdxvT0Ai6b0ILCQejvfCVvqo=) 16: vtKFCgLOZ8wS2x-s6VKfUtZdS6A.roa (hash: NB2FmYbPK0dEJHV51l4eabkaH3jjAUfpLoCOp7+GBrM=) 17: y8_zhxLnTyLVMVkKCxv2htwRO6s.roa (hash: 0B0AhLTjiKxRKyJN76TunlKY12o6P7Os0KKG5Yonjjo=) 18: yTtSJ-72gvZbFezzjuP8atI2Y74.roa (hash: wldJRvptVpmVW5JI0I+zGNq+GzlHt2h7rIbCYaZ8Fsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 21:01:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d5:39:0c:79:dd:be:3e:57:43:07:2c:58:5d:72:df:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e Validity Not Before: Sep 24 21:01:20 2026 GMT Not After : Sep 25 21:01:20 2026 GMT Subject: CN=291481c5425df890ba1b962d38341ace83746695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5d:b6:51:7b:31:32:a6:f1:d7:65:e9:54:30: 63:21:d3:ff:7f:a8:27:25:7c:75:07:5d:68:15:b2: c8:d9:72:e0:da:52:3d:88:9c:89:25:f7:29:7a:95: 04:9a:07:74:a9:79:3c:f1:d0:75:a7:6e:f0:24:0b: b4:04:98:c0:ba:f7:b5:d1:e1:ad:4e:6b:dc:93:1a: 0e:71:76:a6:c9:f7:87:de:99:db:d8:1a:42:5d:b3: b2:01:e4:0e:99:3e:73:5a:df:c7:29:01:64:a9:d7: fe:9e:70:a0:d1:9f:12:62:c4:23:54:2d:3a:1f:f1: 06:95:06:f3:11:23:52:2d:6f:7f:cc:26:d6:6a:6a: 38:c2:bf:90:4b:d8:fa:84:20:ca:5f:73:00:de:4c: 2b:09:0b:35:92:00:41:c9:d3:4f:e8:db:a2:5a:d3: 73:03:ab:7e:bc:55:9a:db:a3:89:bd:09:bb:16:37: a6:35:66:12:29:fd:e2:22:1d:bc:9f:d9:87:8d:14: fd:02:2d:40:5e:62:e7:1c:a6:cc:16:db:9f:e2:d3: be:49:37:8b:df:0f:39:44:31:08:4e:07:3d:a0:8e: cb:3a:07:6f:73:55:0f:71:9f:8b:23:95:ae:e9:fb: b2:23:b1:62:6b:92:0b:37:5c:2a:db:f3:89:fe:31: 84:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:14:81:C5:42:5D:F8:90:BA:1B:96:2D:38:34:1A:CE:83:74:66:95 X509v3 Authority Key Identifier: keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:2a:4c:3b:ce:78:0b:ab:27:ef:7a:eb:c4:c9:d9:92:2c:65: 16:3c:18:8a:0c:67:8e:80:d5:8e:da:2b:e8:01:bf:77:29:4a: b8:c6:1e:8e:6d:f8:97:73:c4:07:88:0e:13:5c:26:21:ab:7b: 89:7d:6f:7b:df:66:43:c0:0b:9c:57:ce:aa:b3:48:99:5c:1d: 7b:1c:5e:f6:ee:f9:40:62:99:f5:a7:07:b3:ca:ca:18:dc:de: b0:74:d9:2b:a5:8b:b5:55:f7:a0:3f:23:60:01:e6:7c:0a:5c: ed:00:6f:38:2f:c1:6d:15:a0:d9:90:93:c7:5d:9b:e7:2f:53: 1a:5b:4f:0f:ba:7b:9d:8e:d4:a3:d7:45:a9:c9:a8:16:cb:49: af:df:c2:2f:f2:04:bf:0e:3a:2e:f6:43:03:77:70:0c:b1:e6: d3:92:7c:5b:d5:97:c6:af:91:ea:2c:7a:bb:b8:0d:d7:dc:ee: 5f:b1:de:ff:da:d0:62:28:81:9b:1f:d0:1b:31:5a:e5:61:e9: ed:c3:c1:bf:4e:d8:d2:4e:6f:50:4b:23:e6:fa:37:49:7a:91: d2:18:fe:33:85:d3:2a:4c:1c:24:55:f5:b9:43:11:61:de:2e: d2:df:80:0e:f6:b3:b0:bf:d1:d4:57:53:f5:a6:23:cd:ea:8a: db:90:77:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDVOQx53b4+V0MHLFhdct/cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDgwMjUxMmNjYjc0NWIyYTFiOGYzMTU3MTRlYmUzOTM5 NTQwM2UwHhcNMjYwOTI0MjEwMTIwWhcNMjYwOTI1MjEwMTIwWjAzMTEwLwYDVQQD EygyOTE0ODFjNTQyNWRmODkwYmExYjk2MmQzODM0MWFjZTgzNzQ2Njk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1122UXsxMqbx12XpVDBjIdP/f6gn JXx1B11oFbLI2XLg2lI9iJyJJfcpepUEmgd0qXk88dB1p27wJAu0BJjAuve10eGt TmvckxoOcXamyfeH3pnb2BpCXbOyAeQOmT5zWt/HKQFkqdf+nnCg0Z8SYsQjVC06 H/EGlQbzESNSLW9/zCbWamo4wr+QS9j6hCDKX3MA3kwrCQs1kgBBydNP6NuiWtNz A6t+vFWa26OJvQm7FjemNWYSKf3iIh28n9mHjRT9Ai1AXmLnHKbMFtuf4tO+STeL 3w85RDEITgc9oI7LOgdvc1UPcZ+LI5Wu6fuyI7Fia5ILN1wq2/OJ/jGEIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCkUgcVCXfiQuhuWLTg0Gs6DdGaVMB8GA1UdIwQY MBaAFIzYAlEsy3RbKhuPMVcU6+OTlUA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmIt MzhlMDY4NTM2ZTZiLzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmItMzhlMDY4NTM2ZTZi LzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeipMO854 C6sn73rrxMnZkixlFjwYigxnjoDVjtor6AG/dylKuMYejm34l3PEB4gOE1wmIat7 iX1ve99mQ8ALnFfOqrNImVwdexxe9u75QGKZ9acHs8rKGNzesHTZK6WLtVX3oD8j YAHmfApc7QBvOC/BbRWg2ZCTx12b5y9TGltPD7p7nY7Uo9dFqcmoFstJr9/CL/IE vw46LvZDA3dwDLHm05J8W9WXxq+R6ix6u7gN19zuX7He/9rQYiiBmx/QGzFa5WHp 7cPBv07Y0k5vUEsj5vo3SXqR0hj+M4XTKkwcJFX1uUMRYd4u0t+ADvazsL/R1FdT 9aYjzeqK25B3tQ== -----END CERTIFICATE-----Generated at Fri Sep 25 05:17:45 2026 by rpki-client