$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: I40D0nIwUdHIUkjSxQZ3vUR4+nncy6frKJ7m2aa2liY= Subject key identifier: 17:26:9B:E9:BD:6F:84:8B:DB:49:8F:5D:F7:85:6D:CD:F3:36:AD:76 Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 01A0BF8C8FFC66CB8B04E5027CE27C0BED33 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 1A6B Signing time: Sun 20 Sep 2026 16:00:55 +0000 Manifest this update: Sun 20 Sep 2026 16:00:55 +0000 Manifest next update: Mon 21 Sep 2026 16:00:55 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: SSS6oE3CowZP8w0gEElm1C/lZ4eibEqFzYrOICLofto=) 2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=) 3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=) 4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=) 5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=) 6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=) 7: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=) 8: lfsA-CiV23r-qpL7I-OyuqCLA7E.roa (hash: IDCu8RiLCmmGO2wQI4VtUyw3k0YFKxR4jBPe/VBgfYc=) 9: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=) 10: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=) 11: qu1WOvTSGJhb9qCrwaoo2MELsDg.roa (hash: sMcBLOOPq2yXaLqHdTpicJZ4I/4D7ujzTrP/m9dXVgg=) 12: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=) 13: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=) 14: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=) 15: yB3ntVub05F4F9i1cWLaKANNBso.roa (hash: zdKl/J+2C305Q7rX/8wtABN6OkAsZKkNZDLRLh5HUdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:8c:8f:fc:66:cb:8b:04:e5:02:7c:e2:7c:0b:ed:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Sep 20 16:00:55 2026 GMT Not After : Sep 21 16:00:55 2026 GMT Subject: CN=17269be9bd6f848bdb498f5df7856dcdf336ad76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:91:e4:27:88:c5:92:0c:43:28:be:ae:39:d5: 96:58:ed:92:c8:94:e5:8a:51:06:6b:b7:4b:7f:31: 9d:8f:0e:7a:d1:58:9d:ae:d0:c8:4c:ab:9b:44:78: 6d:8f:6d:36:fe:4e:3a:99:51:cd:24:ef:ca:ef:07: f2:be:2c:de:ef:b8:a2:1a:ed:c5:12:2a:e9:55:32: 2c:22:35:00:fa:cd:c9:84:c7:b7:08:83:60:6c:12: d6:27:74:f9:9e:f8:df:b5:8f:ab:d4:4a:94:71:31: 04:e8:d4:59:ed:25:dd:f7:1b:54:f0:16:f6:ab:de: 1d:ce:8a:0d:46:65:ab:8f:12:9e:f2:e5:49:cd:d8: 8f:c7:5e:82:71:ac:17:74:20:6f:0f:aa:ae:18:9e: c0:59:39:29:20:a6:11:21:12:7d:64:01:ef:de:bf: ef:6e:ed:39:ee:99:90:f4:0f:6f:d2:e9:fd:ab:65: a4:54:74:41:55:3c:65:1a:24:f8:65:f4:9c:9b:48: 13:23:ef:39:3e:b5:32:35:05:d2:5b:6d:78:07:1c: 80:14:e7:52:74:cf:5e:c1:92:e1:5f:45:b2:5a:da: 9b:4d:93:61:d5:4f:cf:a5:0e:a1:f2:34:ef:b4:35: fc:50:19:0c:b3:e7:c1:38:a8:9d:61:a0:e4:c2:02: 7c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:26:9B:E9:BD:6F:84:8B:DB:49:8F:5D:F7:85:6D:CD:F3:36:AD:76 X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:4b:44:87:68:9b:30:33:77:a0:b8:f6:3c:02:de:c9:8c:24: ae:6e:3e:34:95:79:c9:8f:e1:30:49:29:8f:0f:90:fa:14:5c: fb:43:6d:d4:b6:92:42:53:ca:06:da:d9:93:e7:73:ae:e9:82: e4:8a:b2:46:df:5c:59:af:0a:a5:2b:08:8b:2a:e2:f6:81:6b: 06:93:53:f4:46:c7:80:d4:7f:9e:2a:da:56:21:59:dc:f3:1e: 16:85:1b:cf:a2:5e:d8:96:4d:0e:68:16:7b:52:77:c0:a3:a2: 25:bd:3d:ec:f1:84:44:b4:21:0d:15:99:a7:1b:a1:52:57:57: 75:6d:2d:ec:5e:19:a8:cc:72:95:07:8e:c1:12:3d:49:d3:e4: df:ea:a3:12:cd:0a:d4:dd:29:a9:ed:b4:51:f1:a9:8b:80:45: 42:00:ad:b3:d2:cb:57:99:de:02:5f:a7:3e:96:9b:af:e9:96: 58:b3:a6:ca:b7:cc:01:0d:61:50:3c:f8:2e:01:b1:48:ff:af: 88:63:4d:f5:ee:20:3f:46:9b:6b:a3:67:9e:51:e3:07:99:81: 4c:38:4b:e1:70:f9:dd:5d:96:9b:c2:f0:92:0a:ff:33:ba:41: 33:09:c2:2a:67:1b:9d:ec:7a:58:52:99:3f:c6:b6:e9:b5:c8: 32:46:c6:27 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAaC/jI/8ZsuLBOUCfOJ8C+0zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYwOTIwMTYwMDU1WhcNMjYwOTIxMTYwMDU1WjAzMTEwLwYDVQQD EygxNzI2OWJlOWJkNmY4NDhiZGI0OThmNWRmNzg1NmRjZGYzMzZhZDc2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZHkJ4jFkgxDKL6uOdWWWO2SyJTl ilEGa7dLfzGdjw560VidrtDITKubRHhtj202/k46mVHNJO/K7wfyvize77iiGu3F EirpVTIsIjUA+s3JhMe3CINgbBLWJ3T5nvjftY+r1EqUcTEE6NRZ7SXd9xtU8Bb2 q94dzooNRmWrjxKe8uVJzdiPx16CcawXdCBvD6quGJ7AWTkpIKYRIRJ9ZAHv3r/v bu057pmQ9A9v0un9q2WkVHRBVTxlGiT4ZfScm0gTI+85PrUyNQXSW214BxyAFOdS dM9ewZLhX0WyWtqbTZNh1U/PpQ6h8jTvtDX8UBkMs+fBOKidYaDkwgJ8ewIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFBcmm+m9b4SL20mPXfeFbc3zNq12MB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu0tE h2ibMDN3oLj2PALeyYwkrm4+NJV5yY/hMEkpjw+Q+hRc+0Nt1LaSQlPKBtrZk+dz rumC5IqyRt9cWa8KpSsIiyri9oFrBpNT9EbHgNR/niraViFZ3PMeFoUbz6Je2JZN DmgWe1J3wKOiJb097PGERLQhDRWZpxuhUldXdW0t7F4ZqMxylQeOwRI9SdPk3+qj Es0K1N0pqe20UfGpi4BFQgCts9LLV5neAl+nPpabr+mWWLOmyrfMAQ1hUDz4LgGx SP+viGNN9e4gP0aba6NnnlHjB5mBTDhL4XD53V2Wm8Lwkgr/M7pBMwnCKmcbnex6 WFKZP8a26bXIMkbGJw== -----END CERTIFICATE-----Generated at Sun Sep 20 21:08:52 2026 by rpki-client