$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft File: 1wNkIHbSfiUvqQvxpClvi82dDPE.mft (raw, json) Hash identifier: bO3BAtWbbaovNAMg4ayKJF8yijV3njMHELy3qj1sXio= Subject key identifier: 35:10:74:3B:8F:93:5E:EA:9B:9D:B5:9D:CB:16:69:09:E6:6D:D0:9B Authority key identifier: D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 Certificate issuer: /CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Certificate serial: 01A0C33268F4C23F0E5F072ED91449A408BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft Manifest number: 1A71 Signing time: Mon 21 Sep 2026 09:00:55 +0000 Manifest this update: Mon 21 Sep 2026 09:00:55 +0000 Manifest next update: Tue 22 Sep 2026 09:00:55 +0000 Files and hashes: 1: 1wNkIHbSfiUvqQvxpClvi82dDPE.crl (hash: sjWnvyowQ6NAL1Sbw9/ni9DSsmHaUKZDbk+TWaqrRCI=) 2: 6mvUdK2sJwETz4cqi4djiQKdMUQ.roa (hash: buR6ykljG7LAqYhxUka9PO0/x3h8cTppZNDgptnhgrU=) 3: GAkBUkP8O44HfA6UaUDucppg-zQ.roa (hash: H7w0TIFmG05ogbUF44/87E8bKqO7AppZ4RVUKMn1LjM=) 4: TqaRlv7nhvg_q1QJfNxKvCz6Es4.roa (hash: gXAZNWfcjeZpPsYrp9FhwN0x/FJK/I6F7O8+Py5tCqI=) 5: gq-wS1-FKcHhFx26F3VsD_Kp72Y.roa (hash: TF4H2aT6JRXNsprJBLWhkIJdEFblvAAuKU3lRYmbao8=) 6: ksti9Cz-YWGrPG3nUQtWw4iwXW8.roa (hash: QXzCZnDrQ2SXERmOPrfezHiPL5LdEJk0j9fQC6saTKg=) 7: n8m0xVPUJ7sSm50Su5RRDOcBypY.roa (hash: gyRmAMA/LaYNtHFV0LdlYDTpgJV5V6CTCcVfo5PwA40=) 8: sULwREEDbR9cO_ZFXNBvDlgpedg.roa (hash: NItBFzwyD60IOLb445lIBGtun2ohXotLoTLwxnyZxwU=) 9: vdMRJ5aeJMjPnWdXFF9CeJUbNPU.roa (hash: MD01V65vyHAdTu6f2/Lr5HRyugzVDjKE7/qB7jMnsR4=) 10: zJ9v3e8uiAj7Q1OVSD92Rk2ryOk.roa (hash: 9EEvX12mvolHxSL/Y8mliHI1ROhGnZ9siBUYGBNhM2A=) 11: zkxMCcGoaYzw6MrkLQogXuC04_I.roa (hash: 7Y4R/zBLEg3xanLWgu8jUnFDOXWl73uX33xCHdArZKE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 09:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:32:68:f4:c2:3f:0e:5f:07:2e:d9:14:49:a4:08:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d703642076d27e252fa90bf1a4296f8bcd9d0cf1 Validity Not Before: Sep 21 09:00:55 2026 GMT Not After : Sep 22 09:00:55 2026 GMT Subject: CN=3510743b8f935eea9b9db59dcb166909e66dd09b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:76:d7:8c:30:f8:10:7a:b5:69:1b:ef:10:22: c2:c2:b9:d6:70:63:9d:79:9c:bc:eb:76:1e:df:81: b3:2c:56:7a:62:4e:d0:97:05:22:15:35:77:05:3d: 42:7b:1e:4a:48:45:d9:96:df:56:9e:47:65:f4:4b: 61:08:0e:2f:e4:10:3f:dc:bc:6a:77:34:a5:fd:af: 33:72:e2:99:d3:93:fd:aa:a3:68:e2:20:83:41:fa: f7:32:63:43:13:47:dc:34:33:89:5c:7a:c7:77:9e: 25:fc:b7:61:54:24:b4:31:7d:34:3e:38:1f:95:83: e6:9d:6b:a0:8d:2e:3b:70:26:95:ac:00:13:b3:28: ea:ec:22:f2:c4:be:5b:f7:46:a5:87:5f:f9:c0:15: bc:69:17:ef:de:02:73:ec:4a:bd:ca:9e:5b:80:f3: 9b:61:68:22:39:89:92:9b:7c:2c:9e:92:8c:21:0c: b1:9b:79:2e:2c:2b:1d:60:37:a7:96:cb:1e:5b:d2: 65:cc:00:ea:c0:46:f8:0e:60:43:97:de:da:4d:c6: e1:ee:e5:e7:01:b0:f3:4c:00:05:a0:f2:dc:94:33: ae:e2:5e:24:a0:b4:84:c1:e6:df:c3:37:fa:66:2b: d4:da:86:b8:62:e0:d3:47:10:23:d2:77:53:db:c4: 8b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:10:74:3B:8F:93:5E:EA:9B:9D:B5:9D:CB:16:69:09:E6:6D:D0:9B X509v3 Authority Key Identifier: keyid:D7:03:64:20:76:D2:7E:25:2F:A9:0B:F1:A4:29:6F:8B:CD:9D:0C:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1wNkIHbSfiUvqQvxpClvi82dDPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/38136c-db51-4f70-ad8b-654505a2d045/1/1wNkIHbSfiUvqQvxpClvi82dDPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:a8:d3:47:4d:5d:d9:c5:ea:ef:30:53:fd:9b:21:55:3a:f9: 21:ac:68:0d:d6:13:e6:aa:39:e1:8c:81:38:06:b9:04:9c:a3: 1e:b2:db:88:13:79:c2:68:c7:4a:50:c2:c6:21:2c:0c:9d:71: ac:de:22:06:c6:3a:31:1c:c0:81:ad:9f:95:46:b3:a5:a2:b0: c8:ef:d2:d0:2b:ff:8d:ee:0f:98:9e:80:8b:60:92:02:27:55: 5f:6f:8d:02:c7:f9:dd:f3:9a:4d:6a:52:31:6d:14:18:a3:b9: 83:d8:cd:51:f7:71:d3:11:51:a9:d5:f1:14:ad:11:ac:c2:82: a7:d7:f0:40:87:1b:b7:2e:ae:a0:c6:da:7a:87:ee:a1:61:5a: 3f:78:60:78:2e:3d:f0:c8:2b:31:dc:64:19:7b:0f:4f:15:b2: c5:b3:9a:92:57:80:79:72:02:0e:2e:e3:af:ed:a0:93:4a:a0: 33:14:ed:1d:d3:47:d5:74:9d:d4:90:08:cd:f6:df:e1:75:2c: b5:45:e8:1d:a1:cd:40:97:32:51:35:19:8b:0d:1a:08:e2:24: 29:5c:33:c2:d1:d5:be:11:8a:47:64:9e:31:19:f0:5b:7b:9c: 95:d1:bc:7b:8d:20:bf:48:b9:07:84:9d:f3:93:3d:b8:64:ce: 91:70:01:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDMmj0wj8OXwcu2RRJpAi7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3MDM2NDIwNzZkMjdlMjUyZmE5MGJmMWE0Mjk2ZjhiY2Q5 ZDBjZjEwHhcNMjYwOTIxMDkwMDU1WhcNMjYwOTIyMDkwMDU1WjAzMTEwLwYDVQQD EygzNTEwNzQzYjhmOTM1ZWVhOWI5ZGI1OWRjYjE2NjkwOWU2NmRkMDliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+HbXjDD4EHq1aRvvECLCwrnWcGOd eZy863Ye34GzLFZ6Yk7QlwUiFTV3BT1Cex5KSEXZlt9Wnkdl9EthCA4v5BA/3Lxq dzSl/a8zcuKZ05P9qqNo4iCDQfr3MmNDE0fcNDOJXHrHd54l/LdhVCS0MX00Pjgf lYPmnWugjS47cCaVrAATsyjq7CLyxL5b90alh1/5wBW8aRfv3gJz7Eq9yp5bgPOb YWgiOYmSm3wsnpKMIQyxm3kuLCsdYDenlsseW9JlzADqwEb4DmBDl97aTcbh7uXn AbDzTAAFoPLclDOu4l4koLSEwebfwzf6ZivU2oa4YuDTRxAj0ndT28SL3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDUQdDuPk17qm521ncsWaQnmbdCbMB8GA1UdIwQY MBaAFNcDZCB20n4lL6kL8aQpb4vNnQzxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGIt NjU0NTA1YTJkMDQ1LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81YS8zODEzNmMtZGI1MS00ZjcwLWFkOGItNjU0NTA1YTJkMDQ1 LzEvMXdOa0lIYlNmaVV2cVF2eHBDbHZpODJkRFBFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqjTR01d 2cXq7zBT/ZshVTr5IaxoDdYT5qo54YyBOAa5BJyjHrLbiBN5wmjHSlDCxiEsDJ1x rN4iBsY6MRzAga2flUazpaKwyO/S0Cv/je4PmJ6Ai2CSAidVX2+NAsf53fOaTWpS MW0UGKO5g9jNUfdx0xFRqdXxFK0RrMKCp9fwQIcbty6uoMbaeofuoWFaP3hgeC49 8MgrMdxkGXsPTxWyxbOakleAeXICDi7jr+2gk0qgMxTtHdNH1XSd1JAIzfbf4XUs tUXoHaHNQJcyUTUZiw0aCOIkKVwzwtHVvhGKR2SeMRnwW3ucldG8e40gv0i5B4Sd 85M9uGTOkXABjA== -----END CERTIFICATE-----Generated at Mon Sep 21 18:53:18 2026 by rpki-client