$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft File: iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft (raw, json) Hash identifier: XUWNG0ybGNHGT0GST70WhTCNNbvxOXC/gWMRLQQrL+8= Subject key identifier: E7:0F:59:DD:CA:BB:8C:30:C0:AD:B5:80:1B:18:ED:05:BE:AF:8F:02 Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e Certificate serial: 01A0C96B164BF63CA2F304CDACF966ED88FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft Manifest number: 03AE Signing time: Tue 22 Sep 2026 14:00:33 +0000 Manifest this update: Tue 22 Sep 2026 14:00:33 +0000 Manifest next update: Wed 23 Sep 2026 14:00:33 +0000 Files and hashes: 1: 9CW7PS1O-yaGQw798fnARuiUrJY.roa (hash: pJA5oJPC8LVm68jDybSlz7FMMO+yc+xxykw7/S2Fs08=) 2: F7I5rnkHLQ8PitpUJJXzJQnZJaU.roa (hash: mzXoIYY5/cdBAcGj+HsD/eRCWuIVU1w+4VfWf00hQ20=) 3: INCU2iAXvTzNbBMSAxlrItQxyhA.roa (hash: QjZs1QBxW0pY83BtGBXtgMXwn/IF6AETwK3PZKsE2JQ=) 4: Jf0IiUw2yxEGHU21X5UBjTTFsPw.roa (hash: iznEwndgoL7LQZ3si+t9hPfxRdTHhoHEK3Tm2NJNWr8=) 5: Q3Znim6qxleuhiANfuzqn0XQe7Y.roa (hash: xqiLzxwXQFjHq+9P4kBJ5oqn9VLWT6Mr5rM7CUckdIc=) 6: UsGhEaTVOTKiKiirGjznuF2Gaak.roa (hash: F1w1woKo1BbT5Id/y5MMOZaDCzO3XoS91p9xrahgbXo=) 7: gjdIx7JpQJjhJVIboXcukmsgReA.roa (hash: 6IvSw94J4Pwlc26GeUiHVjeQmmn49KLLbVomZAh3xKI=) 8: iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl (hash: Pe0Nxq74i0/2A69fl3k9QKrazATN+8ygLuKboQlesc8=) 9: jJlQZpZevpI7sI0qTXUB9jMuUv0.roa (hash: sIoAPPkOgjZo6KC8AV3+ukTiCzKXpwR8qem4+cLmkos=) 10: q-RWodK7a-3CkL-IcmgLBAtseBw.roa (hash: IdzRoZdWnPk+8n2VcM7Jqg89nCMd+QL98y/Yo8OkRK4=) 11: wYwUaKIKd-bY8Wo70jEekOpz-dA.roa (hash: r5OOBgo8FfNpqi69a1yE5xLz64FR5eB/1u8J9jN8CoI=) 12: zCh_Z-NL-lt9latA7DFFhUPPEEE.roa (hash: H5XNQm6vSeKYsENIaBhTZdYpRcyi8dMupOSZNrKXWpA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:6b:16:4b:f6:3c:a2:f3:04:cd:ac:f9:66:ed:88:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e Validity Not Before: Sep 22 14:00:33 2026 GMT Not After : Sep 23 14:00:33 2026 GMT Subject: CN=e70f59ddcabb8c30c0adb5801b18ed05beaf8f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b1:73:05:53:53:41:ce:d7:be:43:51:fe:81: 21:28:6f:14:ee:38:4d:45:ff:38:41:07:4a:fe:53: ad:b8:2e:c2:f5:3a:d1:04:fe:72:f2:4f:ec:cf:32: 55:4f:08:5e:cf:71:d2:1f:b8:09:a3:61:d4:80:9d: 2d:19:2f:1f:77:89:e5:c6:e9:49:00:87:19:7c:12: 90:5b:08:81:1e:3e:f6:9f:8c:21:4b:34:1a:97:fd: 05:1d:3f:8a:fa:e4:fb:70:e7:ba:ff:cc:2b:4c:e3: b3:29:ea:11:df:94:11:1c:44:8b:21:bb:d5:35:2c: 05:0c:c0:c5:91:44:2e:1f:91:06:7d:10:a1:a6:48: 7b:e7:1f:76:6b:91:44:50:c3:42:20:28:ad:09:4a: f8:d2:2b:11:58:31:a9:4d:b0:a1:48:4e:18:a7:c4: d5:f4:e7:ad:02:07:76:9c:cb:af:1b:95:0f:f0:3f: fc:6e:5c:8f:63:87:2a:49:85:18:6a:d5:cc:db:00: 14:e3:c4:02:70:b4:a0:e6:ae:db:d6:1b:e3:60:2e: 4c:f9:25:38:d3:54:4e:d4:14:b6:4c:be:dd:30:98: ed:85:17:1c:a1:7d:a8:d6:fc:10:a7:e8:0f:47:8a: 47:09:f3:42:fd:52:31:d2:74:10:3e:50:2a:2d:cb: c6:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0F:59:DD:CA:BB:8C:30:C0:AD:B5:80:1B:18:ED:05:BE:AF:8F:02 X509v3 Authority Key Identifier: keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:72:3b:4f:70:6e:78:a8:cd:6d:36:89:3e:f1:05:d7:44:aa: 08:28:d8:d5:a7:72:2b:87:71:ab:65:b4:8d:86:09:26:e3:27: ac:f9:d7:70:77:b2:38:da:c4:01:b1:de:e4:d4:85:fe:9b:d2: e2:3d:79:6d:77:33:a6:65:97:6b:a3:09:07:ca:14:62:66:3e: 0b:92:34:88:42:06:20:20:2e:84:2f:35:98:d1:d7:ef:e0:8e: 60:cb:e6:cc:b7:6a:59:5e:ce:a3:34:6e:e9:7b:c5:8f:54:8f: 43:ed:a8:87:5e:87:fb:7e:2f:ab:da:bd:5c:4b:65:37:02:59: 01:88:6d:53:09:b6:82:2d:49:d6:f9:25:86:7c:4c:48:24:f0: d9:f1:69:ac:59:be:a4:39:51:40:1e:91:a1:6d:45:07:2c:9d: 9f:09:36:68:83:08:19:2c:d2:39:40:8e:8a:be:01:dd:64:54: ed:34:90:9d:fb:49:b5:a6:c8:3a:92:98:00:0d:6f:c1:9d:ef: c8:2d:dd:73:10:ff:9d:2a:9b:13:a1:48:bd:d0:26:27:66:10: ab:56:dc:4a:e1:6e:ad:89:fe:8b:9b:fd:4b:ee:dc:fa:25:b3: b4:65:15:32:83:5e:65:bd:6b:73:cf:b8:70:87:7a:6a:c6:4e: 31:a8:ba:d0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDJaxZL9jyi8wTNrPlm7Yj+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg4ZmI0MTBhM2JmYzczNDBiNjY3YjRmMjIxYzdjYjgwNjI2 Nzg5NmUwHhcNMjYwOTIyMTQwMDMzWhcNMjYwOTIzMTQwMDMzWjAzMTEwLwYDVQQD EyhlNzBmNTlkZGNhYmI4YzMwYzBhZGI1ODAxYjE4ZWQwNWJlYWY4ZjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLFzBVNTQc7XvkNR/oEhKG8U7jhN Rf84QQdK/lOtuC7C9TrRBP5y8k/szzJVTwhez3HSH7gJo2HUgJ0tGS8fd4nlxulJ AIcZfBKQWwiBHj72n4whSzQal/0FHT+K+uT7cOe6/8wrTOOzKeoR35QRHESLIbvV NSwFDMDFkUQuH5EGfRChpkh75x92a5FEUMNCICitCUr40isRWDGpTbChSE4Yp8TV 9OetAgd2nMuvG5UP8D/8blyPY4cqSYUYatXM2wAU48QCcLSg5q7b1hvjYC5M+SU4 01RO1BS2TL7dMJjthRccoX2o1vwQp+gPR4pHCfNC/VIx0nQQPlAqLcvGXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOcPWd3Ku4wwwK21gBsY7QW+r48CMB8GA1UdIwQY MBaAFIj7QQo7/HNAtme08iHHy4BiZ4luMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDIt YjM4YzgwOTUxOTgxLzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MS80NDYyNGYtMjMxZC00NjZjLWJiMDItYjM4YzgwOTUxOTgx LzEvaVB0QkNqdjhjMEMyWjdUeUljZkxnR0puaVc0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgnI7T3Bu eKjNbTaJPvEF10SqCCjY1adyK4dxq2W0jYYJJuMnrPnXcHeyONrEAbHe5NSF/pvS 4j15bXczpmWXa6MJB8oUYmY+C5I0iEIGICAuhC81mNHX7+COYMvmzLdqWV7OozRu 6XvFj1SPQ+2oh16H+34vq9q9XEtlNwJZAYhtUwm2gi1J1vklhnxMSCTw2fFprFm+ pDlRQB6RoW1FByydnwk2aIMIGSzSOUCOir4B3WRU7TSQnftJtabIOpKYAA1vwZ3v yC3dcxD/nSqbE6FIvdAmJ2YQq1bcSuFurYn+i5v9S+7c+iWztGUVMoNeZb1rc8+4 cId6asZOMai60A== -----END CERTIFICATE-----Generated at Tue Sep 22 20:07:56 2026 by rpki-client