$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: 8KkRLnlzLHrfMJlbjZ7ZfrrqgRZvTSxnFGgAr+nBJWc= Subject key identifier: 32:B7:3A:A2:08:83:35:7D:9B:94:33:BE:4C:9E:40:7C:E0:EB:C3:AB Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 01A0C821BBB7AB5F2EB2FA3A63E1E03528B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 092A Signing time: Tue 22 Sep 2026 08:00:48 +0000 Manifest this update: Tue 22 Sep 2026 08:00:48 +0000 Manifest next update: Wed 23 Sep 2026 08:00:48 +0000 Files and hashes: 1: 1D9k8_zt5tU5xEXxx_nTvNFR14E.roa (hash: 5AizICGyxHpJw4Npr0yCLhoJ8ZzNbMev6myVVdUeGOM=) 2: 1zvdcEwkgDgymDIvdRNXraLRNH8.roa (hash: 91ImAvK9cIsr386Uw3vdRaUWjAcGr1Za2u1qM4Wcpbw=) 3: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: tlmze/S+OLJnrv61hXqhEyC+mFOfYsSWqcAJB7s6OgM=) 4: B_2DlHPjFMc2OFdioV78P7kSKnk.roa (hash: l6A6lmViWSMPIZA6Jqw5d17N6Vzy1rMqG76RVXMx2Xs=) 5: NEyhwNNluRFiY1QGbFu3eQXwHPk.roa (hash: AA+74Vvem1npNtDBL+Wwimm4qpTBdkXoFA2tK525GCQ=) 6: QAQqyGViM6nC5i8XAnkTLj2Fjlw.roa (hash: C9pNA0dXzzng1peuC0V7+/A3P+D1i1wR3XipGNDFMzY=) 7: V3NHoCO2C0OIcoB4H53PpBNrUdU.roa (hash: LdoGmRo3CKC/nx9jgbFbF8C1cm/1gnONTUC2D8S2Gx0=) 8: YhAgOfBxB36OmlW5J6iwNI4pf-A.roa (hash: YgJ931EB8K2m5BcoLz5t++aQe+CzOPxkeIACGG7/szQ=) 9: YhRc3Mf3n7-3iGrExyD5C7CZBFw.roa (hash: ksdLqMhtmV2T8m4tl86Qc23Jw/2ULQtET80utRAIjT4=) 10: YqA5Nc1KA5rAJ78_5MFp3uqVEyo.roa (hash: /mX+AdWxuRgbJEYcF/jnfYMmQcOrnv5KIh/j9UyP9FA=) 11: _m7nbQwhxW5w0wbnoPwEGZq5xj4.roa (hash: 6vjyJskNxAqxaPWKjJV/dxJmRNdkP5LCRI9f1lfJEJQ=) 12: iacNAwFg_4HGoGsTJn6LHRPtlFA.roa (hash: O2cDspTxotRdN6yj3yrsJmq7e6o/A/FbDoi7W5a9R4s=) 13: lrFBEKIZbBXIc9_I4zbSz4RjDmE.roa (hash: v/eVSdswkj07gsnQAoZ8DkBTrsjZAtAanAE3ZZjEf8U=) 14: rB-GRWPvn3oAjav-7hoWPrGNxdU.roa (hash: rPdzZUH5HWNL3o+DGYQhE29ut122q+EzGXhwG7kfgHE=) 15: rFlRkZEZd5Z1JSMbC-8xSLjTjKU.roa (hash: 5Ca02/lo6NUiWyGcT/F75FOvazcZn0O1kd7Dj1J0NJY=) 16: xeGzSDm-blUsbUt2WamIi2l7bV0.roa (hash: y6IJ/JOLtWfU6f/TY9wb28HI1chMC4cI/lZ982XG47E=) 17: z9ARo-p4RTVhYnYCwUeLQoHNI0c.roa (hash: h3CtyvykuY57x41IgLYTP2ID/rzbFX3Z2i6KoIYgMWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:21:bb:b7:ab:5f:2e:b2:fa:3a:63:e1:e0:35:28:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Sep 22 08:00:48 2026 GMT Not After : Sep 23 08:00:48 2026 GMT Subject: CN=32b73aa20883357d9b9433be4c9e407ce0ebc3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:03:7e:0d:2f:aa:06:5c:3f:eb:d4:ee:a8:3f: 3f:00:b9:67:fd:33:3d:2c:1b:ba:aa:c0:e3:37:fb: dc:8f:79:d4:25:bb:c9:17:e9:48:2a:2f:ca:02:de: 3f:0c:97:44:01:b5:85:39:5e:5d:30:41:c3:20:c9: 0b:96:51:06:16:88:c1:08:ee:e2:0b:8b:2b:02:ff: 1a:e7:02:17:b2:73:53:68:eb:92:8c:aa:fa:f3:11: 41:b1:3c:0a:37:63:5b:3f:08:98:39:4b:c3:38:6f: 65:0a:f1:68:04:19:1d:a2:33:94:55:6d:28:cb:cc: ed:82:22:02:49:06:47:6d:33:a4:68:82:62:d3:e8: c4:13:11:e0:38:fc:87:45:bd:a5:e8:35:9b:ea:80: e9:a0:26:fb:87:a4:24:14:a9:ef:51:5c:25:d5:92: f6:d5:9f:77:21:3c:1e:29:bd:b8:f3:d5:39:a6:cd: 49:1b:f6:68:82:bd:3c:05:3d:e0:02:a8:4f:30:bb: 68:40:8a:17:47:f9:6d:f7:c7:a0:a8:ec:3f:cc:30: d7:24:01:07:c4:16:39:93:4b:c3:2e:54:78:f3:f7: fd:bd:63:60:32:4e:58:2e:35:98:6b:f5:a1:89:37: f4:7d:ce:cb:4c:78:4d:3a:4b:14:d1:34:5c:0e:9f: a6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B7:3A:A2:08:83:35:7D:9B:94:33:BE:4C:9E:40:7C:E0:EB:C3:AB X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:35:07:de:2b:c7:04:9a:18:37:2c:36:90:9c:79:9b:82:9e: 7b:55:c8:6a:41:ea:15:5a:b2:4e:da:5e:c3:aa:82:02:e8:03: 52:eb:57:e4:a3:65:e2:4b:88:b8:b9:a6:83:bd:31:3e:cd:68: b7:7e:ed:34:9c:09:e0:7c:4c:94:d3:45:e7:e4:6e:cf:13:fd: f6:ee:3b:2d:e1:a4:4c:1b:f3:94:82:5a:e1:43:d3:1f:39:af: 2f:2c:25:27:b3:50:7b:83:81:df:48:6b:85:db:ec:42:3d:a8: f1:58:6c:f5:42:96:34:55:dc:ac:17:7c:0c:39:f1:e5:81:17: b0:84:65:08:53:0f:20:e6:d3:6b:e9:90:fe:cb:2f:26:90:08: 0f:79:ca:f1:a2:c3:2d:79:01:48:77:8f:75:47:5d:81:76:49: 38:16:eb:12:54:83:e1:1b:97:92:48:53:de:91:5b:e8:f2:ba: 37:c9:b7:85:fc:1a:60:9e:0b:04:d8:e9:5c:a8:c2:6e:74:3d: 47:14:cb:d9:33:73:89:7d:b6:13:d1:48:0c:6a:28:9b:f4:97: e3:87:85:3c:8c:56:f1:de:c9:7a:0f:96:f9:c2:d8:61:cf:bd: 23:45:83:de:a5:8e:06:bf:3d:05:53:34:ee:6a:7d:5e:0f:6f: db:e5:81:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIIbu3q18usvo6Y+HgNSiyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjYwOTIyMDgwMDQ4WhcNMjYwOTIzMDgwMDQ4WjAzMTEwLwYDVQQD EygzMmI3M2FhMjA4ODMzNTdkOWI5NDMzYmU0YzllNDA3Y2UwZWJjM2FiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgN+DS+qBlw/69TuqD8/ALln/TM9 LBu6qsDjN/vcj3nUJbvJF+lIKi/KAt4/DJdEAbWFOV5dMEHDIMkLllEGFojBCO7i C4srAv8a5wIXsnNTaOuSjKr68xFBsTwKN2NbPwiYOUvDOG9lCvFoBBkdojOUVW0o y8ztgiICSQZHbTOkaIJi0+jEExHgOPyHRb2l6DWb6oDpoCb7h6QkFKnvUVwl1ZL2 1Z93ITweKb2489U5ps1JG/Zogr08BT3gAqhPMLtoQIoXR/lt98egqOw/zDDXJAEH xBY5k0vDLlR48/f9vWNgMk5YLjWYa/WhiTf0fc7LTHhNOksU0TRcDp+m/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDK3OqIIgzV9m5QzvkyeQHzg68OrMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTUH3ivH BJoYNyw2kJx5m4Kee1XIakHqFVqyTtpew6qCAugDUutX5KNl4kuIuLmmg70xPs1o t37tNJwJ4HxMlNNF5+RuzxP99u47LeGkTBvzlIJa4UPTHzmvLywlJ7NQe4OB30hr hdvsQj2o8Vhs9UKWNFXcrBd8DDnx5YEXsIRlCFMPIObTa+mQ/ssvJpAID3nK8aLD LXkBSHePdUddgXZJOBbrElSD4RuXkkhT3pFb6PK6N8m3hfwaYJ4LBNjpXKjCbnQ9 RxTL2TNziX22E9FIDGoom/SX44eFPIxW8d7Jeg+W+cLYYc+9I0WD3qWOBr89BVM0 7mp9Xg9v2+WBIg== -----END CERTIFICATE-----Generated at Tue Sep 22 17:09:07 2026 by rpki-client