$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json) Hash identifier: aI0V9txtwJrrHjKOFyFDlIb0CKmyhCNhjFlRIRMfio8= Subject key identifier: 07:F6:4B:B7:12:3D:52:15:8D:FB:2D:40:76:20:97:0C:60:E1:2B:3F Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 01A0CCA351542EA055C8B0B3DFAF5FB675D4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft Manifest number: 1A86 Signing time: Wed 23 Sep 2026 05:00:50 +0000 Manifest this update: Wed 23 Sep 2026 05:00:50 +0000 Manifest next update: Thu 24 Sep 2026 05:00:50 +0000 Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=) 2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=) 3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=) 4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=) 5: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=) 6: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=) 7: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=) 8: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: HVSkWG/N084YsbgeuDdnd2gwrfwRU2sLvDFOJ9jWoXI=) 9: sUbsaOI44Bi0X3YK1epsVJEDUec.roa (hash: rYaOkD3dBPrS2T2laRzCj+4LsYQ8WlURz0+sfmO0/n0=) 10: wa9zMyfDDEuwe9jHEEf5XR0rY1U.roa (hash: w6cKFExTNVukVfdOoaJCYRMUgY7AI2mb+j8X2JfaAr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cc:a3:51:54:2e:a0:55:c8:b0:b3:df:af:5f:b6:75:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Sep 23 05:00:50 2026 GMT Not After : Sep 24 05:00:50 2026 GMT Subject: CN=07f64bb7123d52158dfb2d407620970c60e12b3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b8:a1:de:3b:d5:9d:62:cb:9b:31:6c:0a:4a: 37:26:53:a7:3e:9d:93:12:2e:e0:41:28:48:d0:6e: 56:de:3f:cf:c8:b0:ec:2c:9d:6f:f7:19:0b:83:58: f9:9c:d5:fb:69:f0:bb:4f:cf:c4:20:41:83:00:8a: 1e:c6:40:f8:a2:5e:8b:77:15:b0:51:05:49:d3:73: 16:ab:1e:68:17:31:b4:72:4a:65:6e:d8:73:93:62: 73:0f:fd:37:0a:9d:5b:64:ec:98:6f:ca:af:79:f7: 8c:3e:f8:d8:3d:58:f4:2d:f4:94:3c:0d:bb:65:21: 4c:32:6c:85:c1:be:d1:24:b3:96:df:0c:23:f1:df: 9a:eb:61:f1:99:9a:ee:ff:00:ac:67:d5:07:1e:3d: d1:e5:be:f4:f1:df:ce:f1:24:70:04:76:7e:ec:70: b0:8c:d8:7d:68:9e:04:f8:0f:9b:9d:d7:51:a6:c4: 0b:2b:0b:05:c6:dd:24:03:e8:95:3a:f9:7b:33:6b: d3:84:d5:07:82:28:fe:a6:07:f0:88:6c:8e:ab:7b: f2:d5:29:1d:c0:73:f4:98:8d:17:6b:ad:72:73:9c: 78:be:f4:de:9f:7a:cf:04:35:ec:48:db:df:b4:09: 84:00:da:92:d1:60:4e:a3:99:1a:73:a2:28:17:0d: aa:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:F6:4B:B7:12:3D:52:15:8D:FB:2D:40:76:20:97:0C:60:E1:2B:3F X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:3a:94:be:51:97:97:94:8e:d7:c7:83:fa:bb:cd:34:07:0e: b1:4b:73:2d:9b:38:ae:d8:1a:37:c5:32:7c:5f:c6:7d:0f:79: e8:3e:ec:39:e7:a8:a3:54:da:82:8b:16:98:91:f1:f5:96:1e: 45:dd:78:b9:9e:0a:89:3c:b5:8f:99:e3:a9:b2:a1:4a:41:f5: 51:fb:d9:04:5c:a5:fe:81:a1:af:70:2e:99:29:3e:c4:7b:dd: 01:a7:96:86:69:0f:08:bf:94:a1:1f:21:99:85:50:b8:fc:ef: 86:26:b7:a6:a6:2a:d1:ef:24:e4:2b:d2:d8:1b:3b:d3:be:cd: 2d:0c:42:e3:4c:44:f1:48:e5:ee:c1:0f:26:48:35:84:e7:27: f2:3a:5e:a3:d0:1a:02:a6:43:d6:e4:2b:13:d9:e7:5e:2b:e1: eb:ec:91:d6:b3:36:55:bc:f4:50:69:8f:54:0e:85:d6:be:39: fe:65:fa:f8:9c:95:9c:90:a5:b1:d6:2e:19:97:ff:d0:59:73: 87:73:0c:2b:ab:bd:24:8b:7a:b4:b2:c3:10:31:2c:cd:02:99: e9:98:eb:03:4c:9c:58:26:a0:2b:00:97:33:e5:c5:fd:c2:b3: 3b:c6:4c:cc:7c:4c:cd:f9:4c:51:b0:18:b8:5b:e5:62:9f:19: 67:12:cc:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDMo1FULqBVyLCz369ftnXUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYwOTIzMDUwMDUwWhcNMjYwOTI0MDUwMDUwWjAzMTEwLwYDVQQD EygwN2Y2NGJiNzEyM2Q1MjE1OGRmYjJkNDA3NjIwOTcwYzYwZTEyYjNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rih3jvVnWLLmzFsCko3JlOnPp2T Ei7gQShI0G5W3j/PyLDsLJ1v9xkLg1j5nNX7afC7T8/EIEGDAIoexkD4ol6LdxWw UQVJ03MWqx5oFzG0ckplbthzk2JzD/03Cp1bZOyYb8qvefeMPvjYPVj0LfSUPA27 ZSFMMmyFwb7RJLOW3wwj8d+a62HxmZru/wCsZ9UHHj3R5b708d/O8SRwBHZ+7HCw jNh9aJ4E+A+bnddRpsQLKwsFxt0kA+iVOvl7M2vThNUHgij+pgfwiGyOq3vy1Skd wHP0mI0Xa61yc5x4vvTen3rPBDXsSNvftAmEANqS0WBOo5kac6IoFw2qewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAf2S7cSPVIVjfstQHYglwxg4Ss/MB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwjqUvlGX l5SO18eD+rvNNAcOsUtzLZs4rtgaN8UyfF/GfQ956D7sOeeoo1TagosWmJHx9ZYe Rd14uZ4KiTy1j5njqbKhSkH1UfvZBFyl/oGhr3AumSk+xHvdAaeWhmkPCL+UoR8h mYVQuPzvhia3pqYq0e8k5CvS2Bs7077NLQxC40xE8Ujl7sEPJkg1hOcn8jpeo9Aa AqZD1uQrE9nnXivh6+yR1rM2Vbz0UGmPVA6F1r45/mX6+JyVnJClsdYuGZf/0Flz h3MMK6u9JIt6tLLDEDEszQKZ6ZjrA0ycWCagKwCXM+XF/cKzO8ZMzHxMzflMUbAY uFvlYp8ZZxLMDQ== -----END CERTIFICATE-----Generated at Wed Sep 23 09:29:42 2026 by rpki-client