$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft File: bds4s0PaLRGTCe2qGceniHAyfr4.mft (raw, json) Hash identifier: knXvRB/daGg8pNd0sjkBA9P/MUmyenAQC76m3HUjxs8= Subject key identifier: 17:35:CC:65:77:81:62:7B:89:CE:1B:D7:18:D6:82:7A:BB:E9:77:63 Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe Certificate serial: 01A0C28D5B5F96E053EFFD5F80B401605712 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft Manifest number: 1B6A Signing time: Mon 21 Sep 2026 06:00:38 +0000 Manifest this update: Mon 21 Sep 2026 06:00:38 +0000 Manifest next update: Tue 22 Sep 2026 06:00:38 +0000 Files and hashes: 1: 0r3kkbCIc2trczoA0tV0PpuHTqk.roa (hash: hYQwD9eKL8aadDbtj9scQfTVqsN0ThTdN4voLWbulpc=) 2: 1-HMehk4Z5593y_16dRGWIQyy-Ng.roa (hash: EurbSdpdbDWY2LP7kxCHMWSabQW2ttzuwZ+l6NbR48o=) 3: 7BOKK6Tl9KRbFdrQtKoSEGrM2ns.roa (hash: 0WZmcRa658Us5LFqpepkQ3ZD0Z3AX8LDSbJ/uzthFek=) 4: CDjWTyoS71DXASo2Nj7eHKZDgBU.roa (hash: 0MjLF8Ccc2qdY2KgDxvd+hMdzbz7ozx3zfAkryxvvg0=) 5: EPBqQkdx7GD5hYF24Z7UGR81Qo8.roa (hash: d9xe8thzz0W/d4MTXJUjxHzBqyaFRNrSeI5OVZiP6OY=) 6: J1bOpzfz9N73oSFlFV1z4QDm-64.roa (hash: h6M5XtZ8RlW37k6FxTv2spT98MJgWMzY1tvdNHQE2Vg=) 7: KVv7_M50V2iyBxYsG_dQpH_S9tQ.roa (hash: RkhZYcx1K+qPGt8mNSXPpba3hYgNZEfnfscSk3pS5x0=) 8: KXN5i1ksyLJ3gWuszNVJ4lkPFkA.roa (hash: yrzgi/xgwBaka39UCK/DNXA3vvLMwfJcozcKOOGIcnk=) 9: KdrCfLVD5w7yEsbqRNIHxnRBV1U.roa (hash: 7kkTNpurW7ovwPOEHHf7JVghG0bKfPeVVb6gJUM+74E=) 10: LRk25r9LuPknCpeQnQqi40l9kvk.roa (hash: 8X9g5sy6dgew6Yf57K9el1CFQfJCMTfnKxpcyCAuf/Q=) 11: NRslGXwzqXLsPOGISDrIoXtcmqY.roa (hash: DEaiL5GBQA1ssRMigPA8Fc7/Qa4ewlIX8LGF5gSXnqI=) 12: O1La2Mo1MYQY3pYzpawz3q36YWQ.roa (hash: 9nFQCGf5z1AV/WxHQinreWL3Ers41lsBCvkG3xts94o=) 13: OID3-h0E9NS9k14gHMrZ8yh6ycU.roa (hash: BA4lyJFHWXpMYsG73bQjPscgyCJa/nGXeiHKEdwKdHE=) 14: Xk9NYhdXTr3rd3NYRXydtLgFRbs.roa (hash: 5i33Vv91iUeFK5+uzl8a/uVNcXnYM4QXT7Iz6UOmTNs=) 15: YKk6KvjeY_RwM6-fGT6G4_ZJVx4.roa (hash: CjTmvkWgMsl3+rELzvl+uMCWJONzTqE5DK9lcYaQMF0=) 16: _yYeoQViTIjqsYE0h5QCAQRGd04.roa (hash: ZBg3y/n8GjKrQaC1IigA7ZREsnmFDIrXAnas9eg3WXo=) 17: bds4s0PaLRGTCe2qGceniHAyfr4.crl (hash: e3cV0ZAk/G26qU1XeWL9H3zIhgOXrisHjtv/T53J02Q=) 18: f4NJeyU8mkRiFYvmGYpOpcDwewU.roa (hash: Ov55FNUpg10FNgHk1tVb/BcXZfkE1RirhMmKU+WbpP0=) 19: m8JrVpoNYFe6r8CVAdMoHF3wnCE.roa (hash: JPLFA7c7BuHIJXMiW+CczCcnzd/BQTgVn9malVbSP1s=) 20: tbUhg7rUfXFYYfYb_lSW_GU4nIM.roa (hash: iEf9/3LdpD/pQVMxYUZBzp5gwic0pOcGWaOr9ht0nlk=) 21: uxXpXBJ-D42p6U9p0a0HPfcVtCc.roa (hash: 039KJGIrepNrUhPHQkdyjtfEPU4TOfPGiPFKu2opKXQ=) 22: x2-UOiQ1JkGjRhg5Y3BKO6HEghI.roa (hash: Sqa+wceVkaOOyPhxXULzb2svO17UJ0RHxLUOfuxIaDY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:8d:5b:5f:96:e0:53:ef:fd:5f:80:b4:01:60:57:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe Validity Not Before: Sep 21 06:00:38 2026 GMT Not After : Sep 22 06:00:38 2026 GMT Subject: CN=1735cc657781627b89ce1bd718d6827abbe97763 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f8:18:71:45:79:30:8e:5f:d3:3d:3f:a1:03: bd:0e:31:e0:c9:96:b3:cd:09:0f:ae:85:b9:51:68: bc:ad:98:f0:10:0a:00:13:54:73:8f:e8:3a:6d:73: cb:2f:6d:7e:2a:09:5a:10:c5:1d:53:77:82:41:bb: ed:55:f8:ed:6e:ca:cf:03:06:82:35:64:c3:c8:73: 1c:85:4e:bd:26:45:ba:10:b8:d5:19:1b:04:7c:f2: 19:60:fa:57:5d:4a:5f:7c:7a:6e:d5:a6:76:24:20: 3c:a6:f3:24:8b:6c:17:39:4b:5e:6a:db:95:d7:19: e6:b4:3b:ac:13:00:a8:94:6f:a1:16:96:18:18:2e: 71:a4:1b:02:eb:57:1b:ab:f2:6d:c3:b6:01:6b:17: 2b:de:89:fa:44:77:24:11:d5:81:68:28:95:98:e3: 42:59:60:3a:6a:2d:de:b9:69:c3:60:07:5f:13:ac: b8:71:e7:63:4a:a5:d1:2c:2f:e3:a2:0a:85:ff:8d: 76:ba:3b:ec:3a:bb:27:dd:6f:49:ce:13:bf:25:ea: 9b:3a:f7:a1:d2:6b:c7:a1:70:55:0d:4a:7c:0e:1e: b6:1d:09:d4:66:d4:fa:81:f5:c1:40:1d:69:ce:0f: b5:bf:0b:f8:08:09:bd:5f:32:2c:89:b3:61:f8:9a: 13:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:35:CC:65:77:81:62:7B:89:CE:1B:D7:18:D6:82:7A:BB:E9:77:63 X509v3 Authority Key Identifier: keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:2c:ba:8a:a5:e5:e2:31:c9:e7:29:d3:e9:f8:f2:06:fa:41: 9c:aa:c0:e1:c2:57:bc:78:26:c5:13:6d:f6:c2:af:40:ee:e1: ef:38:14:dd:50:2a:5a:4d:7f:7a:c8:fb:a9:bb:4e:f3:ae:37: d5:6a:a8:14:d2:15:34:ab:b2:a4:c0:2b:2f:75:75:02:cc:1a: 4a:ca:10:b0:0a:df:34:c4:1f:ea:1a:23:1d:c3:c4:1b:14:02: a6:67:96:89:27:08:ff:15:78:d6:1d:10:8c:f7:e0:fd:0f:7f: df:d0:af:18:b0:ba:e4:03:53:b6:50:85:d6:29:19:16:46:f7: f7:8f:9b:e8:fe:94:e5:a6:04:7e:ff:5a:f2:e3:06:5e:93:53: 6f:81:fb:89:d3:14:c8:33:f4:5c:7d:be:fe:04:6b:5c:aa:29: d0:1e:15:e5:37:5f:f0:df:d5:67:96:c4:78:cf:3c:19:db:b9: 66:7d:50:e6:a4:d3:14:e3:de:81:9d:f4:3b:c9:1e:f6:65:70: 0b:88:2a:7f:6c:9c:f7:6d:4b:e8:d5:c2:b1:4a:d7:a0:31:d2: cf:5f:35:e8:97:8e:dc:06:9f:72:e0:d1:1d:46:20:6d:f1:f5: 0b:7b:2a:74:31:c0:4b:7f:fe:2e:55:3b:e1:4a:56:e0:90:87: c2:90:55:fb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCjVtfluBT7/1fgLQBYFcSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkZGIzOGIzNDNkYTJkMTE5MzA5ZWRhYTE5YzdhNzg4NzAz MjdlYmUwHhcNMjYwOTIxMDYwMDM4WhcNMjYwOTIyMDYwMDM4WjAzMTEwLwYDVQQD EygxNzM1Y2M2NTc3ODE2MjdiODljZTFiZDcxOGQ2ODI3YWJiZTk3NzYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fgYcUV5MI5f0z0/oQO9DjHgyZaz zQkProW5UWi8rZjwEAoAE1Rzj+g6bXPLL21+KglaEMUdU3eCQbvtVfjtbsrPAwaC NWTDyHMchU69JkW6ELjVGRsEfPIZYPpXXUpffHpu1aZ2JCA8pvMki2wXOUteatuV 1xnmtDusEwColG+hFpYYGC5xpBsC61cbq/Jtw7YBaxcr3on6RHckEdWBaCiVmONC WWA6ai3euWnDYAdfE6y4cedjSqXRLC/jogqF/412ujvsOrsn3W9JzhO/JeqbOveh 0mvHoXBVDUp8Dh62HQnUZtT6gfXBQB1pzg+1vwv4CAm9XzIsibNh+JoTnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBc1zGV3gWJ7ic4b1xjWgnq76XdjMB8GA1UdIwQY MBaAFG3bOLND2i0RkwntqhnHp4hwMn6+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQt M2RmYTUxMGQ2YjE2LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Mi9jOTYxYTAtNGY1My00MjJhLWI3ZGQtM2RmYTUxMGQ2YjE2 LzEvYmRzNHMwUGFMUkdUQ2UycUdjZW5pSEF5ZnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAliy6iqXl 4jHJ5ynT6fjyBvpBnKrA4cJXvHgmxRNt9sKvQO7h7zgU3VAqWk1/esj7qbtO8643 1WqoFNIVNKuypMArL3V1AswaSsoQsArfNMQf6hojHcPEGxQCpmeWiScI/xV41h0Q jPfg/Q9/39CvGLC65ANTtlCF1ikZFkb394+b6P6U5aYEfv9a8uMGXpNTb4H7idMU yDP0XH2+/gRrXKop0B4V5Tdf8N/VZ5bEeM88Gdu5Zn1Q5qTTFOPegZ30O8ke9mVw C4gqf2yc921L6NXCsUrXoDHSz1816JeO3AafcuDRHUYgbfH1C3sqdDHAS3/+LlU7 4UpW4JCHwpBV+w== -----END CERTIFICATE-----Generated at Mon Sep 21 11:44:15 2026 by rpki-client