$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json) Hash identifier: 4XXSRySWmzxYiGJbDyuUipTXoUo5kx9BWF8JjKwJj/c= Subject key identifier: A8:CB:2B:8D:10:58:60:B4:D8:FF:B5:3F:4A:6C:5B:0C:FA:1A:15:01 Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 01A0C8216BD949C59BA7F3319D36419665B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft Manifest number: 1A7C Signing time: Tue 22 Sep 2026 08:00:28 +0000 Manifest this update: Tue 22 Sep 2026 08:00:28 +0000 Manifest next update: Wed 23 Sep 2026 08:00:28 +0000 Files and hashes: 1: 1-QuFrP2FCGdb0e2Ii_z6LaU8br8.roa (hash: rbKcnlSwgT9Djc5Fqvy3u9yC2cYZiJQ7dfTu75ri+mI=) 2: Kn1XIiFvEGGy9jGV0znKGyVVN88.roa (hash: S6dp6R29PAVMF1jsj22PyQ1rploMZXbrpKsVzrPCS0A=) 3: LVf00OwBfRzfAd6G6KBKwIxU48Q.roa (hash: Xvect/bo+Wr+aXHUQYsyRoqwRvv8UXPXPU1oErWXh0o=) 4: c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa (hash: N/tir1ikaaQzeua5SN0NNzW44/svT02GC4QfKmsuXFg=) 5: i_sg361hESOO6WvkWK2Qx1qnr_o.roa (hash: grkv5sxl6QC67Xl6GRfRbX76QTIOE0y5InqEToBe4KU=) 6: jDLgcLSuJX7PNQqFfW9rGKaqs0I.roa (hash: gYuzALxJxQy3dIl1B+tjxYOVPb7F/ttrTik4SzmNvpo=) 7: nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa (hash: QxXL80gZjutBzTVwYv0W0HB8GqSHL6xx5f7Es0Ckqj8=) 8: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: RRi31l5U7OhWCPEPyEvvXShdNkWVDoT6Oq8FuiKXzUA=) 9: uX2HFPa-1T3UMzqcLHxJG1wYem0.roa (hash: mt3IsY/c70SVPfG6w+VGWzHhy8025Nd/iJv2s56ORTs=) 10: xkw2dJ1kdWsWVrDQa7ecIv1ZfEE.roa (hash: TlO1SGSzKaGyjfYONLThtWXquMMxH3GzgJNd8bMLo1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 08:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:21:6b:d9:49:c5:9b:a7:f3:31:9d:36:41:96:65:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Sep 22 08:00:28 2026 GMT Not After : Sep 23 08:00:28 2026 GMT Subject: CN=a8cb2b8d105860b4d8ffb53f4a6c5b0cfa1a1501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:fa:ac:25:ed:4f:4f:2b:a3:22:ed:72:64: 37:04:df:24:4a:62:35:aa:8c:66:89:05:a6:00:f6: 52:ff:09:e2:5f:0e:8c:ae:62:f0:a0:2d:6e:15:1e: e1:61:d7:34:ce:df:8e:40:56:34:c4:ae:a8:75:58: 8d:46:1b:82:28:a0:82:10:b7:7e:c9:f4:95:44:3d: 20:af:f5:01:a0:b1:2a:9d:25:a4:fb:8a:99:8b:80: fc:1d:47:21:26:50:93:05:35:45:84:78:67:04:26: e2:71:f3:33:1a:13:59:31:af:60:be:3f:27:20:07: a0:a0:04:a9:d1:4b:d8:ee:e5:09:32:a8:f7:ac:28: 92:8e:21:2a:f9:21:06:74:87:78:6b:b2:75:ed:8b: aa:91:ef:56:f8:6a:7c:b5:4d:24:f3:77:d9:51:02: 83:41:63:00:1f:59:c2:ea:16:2f:f0:97:3e:d1:8c: e4:2a:19:49:4c:17:a8:7e:49:fe:f0:06:7d:6c:cf: 04:03:27:ec:b1:de:28:85:72:f6:6a:4d:d1:a8:01: 9b:20:50:95:5f:ac:f5:56:d3:2d:69:64:b6:7f:13: 8f:8e:8d:6a:d2:b1:35:2d:2a:14:81:a4:02:b2:b2: de:37:7d:f4:03:b1:22:4e:2a:c9:02:73:c6:a9:e9: 4d:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CB:2B:8D:10:58:60:B4:D8:FF:B5:3F:4A:6C:5B:0C:FA:1A:15:01 X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:e7:13:c8:03:5c:89:f3:6f:f5:ae:8d:04:f1:b1:3a:79:54: fd:c0:36:ce:b2:d2:3f:05:54:d0:b2:4d:b8:d8:b6:19:58:00: 94:79:9c:36:21:bd:68:e8:c3:3d:44:cf:9d:15:8e:cf:fb:d6: 7e:d9:cf:e5:e8:fe:d5:96:c7:b7:db:a8:f1:c9:c4:28:a0:2a: 78:64:9f:2c:f3:bd:0d:f4:1e:03:7e:51:59:0b:22:63:d1:f9: 6b:6b:eb:45:53:5d:6a:1b:3e:da:ef:19:bf:bf:c7:a5:b7:29: 23:ab:34:fc:28:18:cc:e4:4d:82:bf:c4:59:31:1f:69:7b:c6: 2a:18:ac:21:4f:d4:17:3c:d9:a3:5f:a6:b4:ed:d3:19:fb:34: 9e:b9:0f:76:3b:8d:ac:eb:58:5a:db:38:ef:26:ab:a9:9f:a7: 8f:e6:89:1f:07:17:6e:48:fa:7d:22:4f:3e:48:8f:9d:21:cf: 75:a3:d1:50:17:04:ec:5f:7d:5e:91:09:da:c9:1b:a1:da:c4: 73:c6:c4:57:fc:1d:3c:df:58:9e:36:7e:1a:d5:48:57:51:17: eb:6c:6a:4a:fb:f3:42:1a:e3:ce:8e:b9:00:e4:00:c7:84:48: c6:aa:df:d4:b6:d5:54:70:f5:a5:47:2d:7a:57:ea:6e:52:d7: ff:9d:f8:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIIWvZScWbp/MxnTZBlmW3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjYwOTIyMDgwMDI4WhcNMjYwOTIzMDgwMDI4WjAzMTEwLwYDVQQD EyhhOGNiMmI4ZDEwNTg2MGI0ZDhmZmI1M2Y0YTZjNWIwY2ZhMWExNTAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqD6rCXtT08royLtcmQ3BN8kSmI1 qoxmiQWmAPZS/wniXw6MrmLwoC1uFR7hYdc0zt+OQFY0xK6odViNRhuCKKCCELd+ yfSVRD0gr/UBoLEqnSWk+4qZi4D8HUchJlCTBTVFhHhnBCbicfMzGhNZMa9gvj8n IAegoASp0UvY7uUJMqj3rCiSjiEq+SEGdId4a7J17Yuqke9W+Gp8tU0k83fZUQKD QWMAH1nC6hYv8Jc+0YzkKhlJTBeofkn+8AZ9bM8EAyfssd4ohXL2ak3RqAGbIFCV X6z1VtMtaWS2fxOPjo1q0rE1LSoUgaQCsrLeN330A7EiTirJAnPGqelN9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjLK40QWGC02P+1P0psWwz6GhUBMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkOcTyANc ifNv9a6NBPGxOnlU/cA2zrLSPwVU0LJNuNi2GVgAlHmcNiG9aOjDPUTPnRWOz/vW ftnP5ej+1ZbHt9uo8cnEKKAqeGSfLPO9DfQeA35RWQsiY9H5a2vrRVNdahs+2u8Z v7/HpbcpI6s0/CgYzORNgr/EWTEfaXvGKhisIU/UFzzZo1+mtO3TGfs0nrkPdjuN rOtYWts47yarqZ+nj+aJHwcXbkj6fSJPPkiPnSHPdaPRUBcE7F99XpEJ2skbodrE c8bEV/wdPN9YnjZ+GtVIV1EX62xqSvvzQhrjzo65AOQAx4RIxqrf1LbVVHD1pUct elfqblLX/534Zg== -----END CERTIFICATE-----Generated at Tue Sep 22 20:01:33 2026 by rpki-client