$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: 0fXCJdVdCFwgDhChjeEgK9fYmPdF6EpO8D/FJkJ0k7E= Subject key identifier: 87:33:34:E2:9C:88:39:96:DE:2E:20:F0:D3:88:2C:D0:3E:2A:28:C3 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 01A0C3691A80B42FA12214170874D160EF99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 1744 Signing time: Mon 21 Sep 2026 10:00:40 +0000 Manifest this update: Mon 21 Sep 2026 10:00:40 +0000 Manifest next update: Tue 22 Sep 2026 10:00:40 +0000 Files and hashes: 1: 0inTqtkV7aRdA0poVknUSc5weqM.roa (hash: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8=) 2: 2AD88r0V-sPnIFkoVtY1Vz1-xto.roa (hash: zIM2AaPfHJC6B6zXhXel8ktXA+t+zTVgveI41tZmcC0=) 3: 6TbA_Za4Eowieja7n7niJ7Rt1gs.roa (hash: scQ2AMr4c5KWoojUsMClo/2J+rhonxe/8Y7reFR2/oA=) 4: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (hash: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw=) 5: KOWxSmH0_bapiUsF2I5NvMk2mAE.roa (hash: qlla291EA5iael/7BwH1F/97Ya9GRn26shYvkPQjZ4Q=) 6: OYUqnwa8yQK0vig2w6Um7A1Wcg4.roa (hash: vSXWDq1SS7TbMrb96ytcbFUS3oNQ6vxE3t+U54lGeWc=) 7: _qefhBTX4GrLHAKY0SuGouHYv88.roa (hash: ZZ2WFS7hoXoz7ExsxVHk1ghS6uAk+/8jwy793fgoALQ=) 8: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (hash: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc=) 9: cYegkqTDRQkQYBG0QAGLC43ERoE.roa (hash: Jj0rGclcjFrkbXAtvfPBQZbVxQ41VQry0fjFc8pn/lw=) 10: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (hash: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM=) 11: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: L2HbWYPkGK/zURBtWHePOimQBD3W35/8a09MsFYsv90=) 12: thPKVIAn4Mtb5x7VAf0Ti0_MWKQ.roa (hash: U0wPlIAv75ZKpiMwZqpBCEwATCl9LCbwg1gs4MzHORI=) 13: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (hash: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 10:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:69:1a:80:b4:2f:a1:22:14:17:08:74:d1:60:ef:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Sep 21 10:00:40 2026 GMT Not After : Sep 22 10:00:40 2026 GMT Subject: CN=873334e29c883996de2e20f0d3882cd03e2a28c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:80:bf:7f:f0:2c:71:fe:bf:ba:88:a6:4e:62: 23:cb:70:ed:a0:e7:b1:e1:e0:52:0b:41:8a:63:6f: f3:6e:1a:c3:8c:4f:f3:2b:1e:da:21:e9:aa:9a:17: 53:51:2c:4f:21:fb:06:52:9a:e6:eb:05:d5:7b:14: ff:dc:05:86:f2:e3:00:4d:5c:94:c1:e7:de:56:f8: ac:5b:c1:ec:34:0c:b1:24:09:83:65:64:cf:cb:f2: a6:9f:d2:f6:56:54:54:57:8f:8c:7d:e9:6f:a9:97: 5d:c6:50:22:68:a5:54:bb:e8:67:39:e9:99:a3:00: 47:d5:49:2f:21:72:a9:71:4f:89:a8:d8:2d:71:3a: 08:da:46:ee:6c:53:2d:1d:cd:3d:75:f3:87:a9:34: 92:0c:41:2d:f6:d7:c9:0d:46:95:5a:d3:8f:77:97: b9:5a:a9:c5:22:6a:1e:71:db:3f:5a:ee:d8:57:18: 02:e1:32:d8:c0:d9:aa:bb:63:63:4f:ca:34:1e:19: ed:87:a6:13:25:45:2b:ef:3b:21:77:35:f7:2e:3d: b9:80:93:2a:d2:4e:d6:3a:e3:20:aa:f4:00:80:38: d7:80:c2:ab:68:41:04:62:91:8f:bc:0a:40:62:66: b1:a5:b4:1c:1a:b7:a2:93:7d:b6:2b:79:28:85:fd: a1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:33:34:E2:9C:88:39:96:DE:2E:20:F0:D3:88:2C:D0:3E:2A:28:C3 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:67:87:8b:e0:1e:8b:c6:f5:5f:d0:b0:de:e8:b8:0a:85:3a: 80:6a:dd:6b:2a:65:da:5b:ce:6c:d1:38:28:67:65:94:4e:7e: 7f:6f:c5:c8:9a:45:68:bf:dc:23:44:26:a9:68:1d:63:99:f5: 04:fb:de:20:28:cf:5e:ef:53:7e:f0:79:fb:81:a5:a3:05:c3: ea:23:fa:f3:0c:05:e7:1a:01:19:d1:cb:e2:89:6e:66:eb:77: 85:eb:a9:fa:ab:4a:8e:17:5c:fe:bf:fd:88:06:ce:41:02:b3: c6:0e:ed:9f:df:41:dd:84:5c:d0:40:6d:3c:d5:3c:f2:8d:7d: b6:d7:f5:14:3f:5c:5d:50:3c:a3:2c:91:f9:a7:12:b0:43:dd: 1b:90:7a:44:6b:e5:25:07:d7:02:ac:c8:c6:6f:b6:46:07:1e: 2f:4d:06:20:e3:19:18:47:4f:98:b3:16:e5:52:78:26:74:a4: cf:25:7d:63:c4:d7:1c:e9:ee:62:61:ca:a5:5a:f6:d2:88:70: 2b:24:d1:d9:52:e6:e5:5b:bd:de:27:b3:04:64:8d:4d:a6:11: 9b:49:06:a7:d7:88:5d:91:50:11:93:9c:c9:ad:c3:43:40:d4: 63:1e:9d:42:56:1d:da:f4:4e:cc:a8:57:60:c4:49:ff:5d:f1: f4:0f:bd:bf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDaRqAtC+hIhQXCHTRYO+ZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwOTIxMTAwMDQwWhcNMjYwOTIyMTAwMDQwWjAzMTEwLwYDVQQD Eyg4NzMzMzRlMjljODgzOTk2ZGUyZTIwZjBkMzg4MmNkMDNlMmEyOGMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw4C/f/Ascf6/uoimTmIjy3DtoOex 4eBSC0GKY2/zbhrDjE/zKx7aIemqmhdTUSxPIfsGUprm6wXVexT/3AWG8uMATVyU wefeVvisW8HsNAyxJAmDZWTPy/Kmn9L2VlRUV4+MfelvqZddxlAiaKVUu+hnOemZ owBH1UkvIXKpcU+JqNgtcToI2kbubFMtHc09dfOHqTSSDEEt9tfJDUaVWtOPd5e5 WqnFImoecds/Wu7YVxgC4TLYwNmqu2NjT8o0Hhnth6YTJUUr7zshdzX3Lj25gJMq 0k7WOuMgqvQAgDjXgMKraEEEYpGPvApAYmaxpbQcGreik322K3kohf2hXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIczNOKciDmW3i4g8NOILNA+KijDMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbGeHi+Ae i8b1X9Cw3ui4CoU6gGrdaypl2lvObNE4KGdllE5+f2/FyJpFaL/cI0QmqWgdY5n1 BPveICjPXu9TfvB5+4GlowXD6iP68wwF5xoBGdHL4oluZut3heup+qtKjhdc/r/9 iAbOQQKzxg7tn99B3YRc0EBtPNU88o19ttf1FD9cXVA8oyyR+acSsEPdG5B6RGvl JQfXAqzIxm+2RgceL00GIOMZGEdPmLMW5VJ4JnSkzyV9Y8TXHOnuYmHKpVr20ohw KyTR2VLm5Vu93iezBGSNTaYRm0kGp9eIXZFQEZOcya3DQ0DUYx6dQlYd2vROzKhX YMRJ/13x9A+9vw== -----END CERTIFICATE-----Generated at Mon Sep 21 19:48:33 2026 by rpki-client