$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft File: TDfyfrSZezvvnygmajlpQFD-dPk.mft (raw, json) Hash identifier: N8kU3D52WqzFxDotby5r+yS5Of6+qfF5HANhvv/Q29A= Subject key identifier: 9D:01:9D:F8:BB:67:57:2D:0C:5D:78:83:17:17:EC:8E:59:8D:50:86 Authority key identifier: 4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 Certificate issuer: /CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Certificate serial: 01A0C2884C6C8D88DDA186A2DC411665BACD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft Manifest number: 1ACA Signing time: Mon 21 Sep 2026 05:55:07 +0000 Manifest this update: Mon 21 Sep 2026 05:55:07 +0000 Manifest next update: Tue 22 Sep 2026 05:55:07 +0000 Files and hashes: 1: 3mj4BF15-QsrQeXNqlhp9O0RF8Q.roa (hash: vXL9dy1/SgEnnpISMc/F/t6U8c7+bWH7fiwFFAUniPU=) 2: 70hrIJb71j9X4fpmOp9ZdXpiYbo.roa (hash: Z5s8D4Bcjh7dxrbzSCt6bkmdTngOg/wM1fo6Ekix090=) 3: DxXB1sVQddkWlIQL7M2Ft26ZYDs.roa (hash: aIKudkaShc6wqjcTHt+BKsEmLCkGpXtihIIuVaZi7po=) 4: TDfyfrSZezvvnygmajlpQFD-dPk.crl (hash: LToVyVT7upZc64fujG9n3Wq/ECSoMCTmPrTatwilGRI=) 5: dDIM-ljTCDKhWIxv1515WUGeQvk.roa (hash: /ksxNXhqwhx98qeq21Eca7WB/KLYXy3qx2dkD35mKTc=) 6: kFLjuN4_tRjI-IILkJq8lcLpDdc.roa (hash: lQTRIEBvMUBY3vX80dFs9U0bSNDBYvB6Uew+srrzZ9A=) 7: n8dvRB_IxQYW2HaCkZPqC764yy4.roa (hash: V6JYAy1QkjclNMb/hsYOaNTig8bDfvc3itb4t3/ahSw=) 8: qrG9XLPl84E40eGjaluMQlHH30g.roa (hash: JZCVwj3aTdfzcFTKEfr0xBq4Umu2aHhpSpk1hh5GgSQ=) 9: sNbxwr_VlMceIOoORfjNh48fthg.roa (hash: og1IfOlO+B5tux3x/JdwIjbchpmcSQUOsvTa4SrXgws=) 10: sPyU_Xm3Mi4DrCYd-xCPHCu7Yj8.roa (hash: R+jYi2MX3/3kpxkJYiEg+3YO+SpdTf42NvPMvZti0mw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 05:55:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:88:4c:6c:8d:88:dd:a1:86:a2:dc:41:16:65:ba:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c37f27eb4997b3bef9f28266a39694050fe74f9 Validity Not Before: Sep 21 05:55:07 2026 GMT Not After : Sep 22 05:55:07 2026 GMT Subject: CN=9d019df8bb67572d0c5d78831717ec8e598d5086 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:59:b6:39:a2:b2:61:aa:da:c1:8d:c5:1d:48: ec:3d:21:f0:30:72:c7:40:d9:98:83:d0:ab:f5:ac: 5e:ee:3d:95:0c:5f:d4:97:0f:3c:86:50:02:0e:b2: 0d:6c:47:8c:03:6e:98:86:91:a1:f9:bd:00:e4:16: c8:2d:56:dd:5a:ac:44:a7:06:23:54:a3:52:ee:2e: 5a:4e:ea:76:fa:4d:8b:20:5c:2f:35:a3:35:27:af: 8d:7c:53:65:3e:e7:c9:25:46:de:5b:a6:f0:1d:58: be:4b:61:39:0e:0a:f6:a1:9b:0d:4d:39:28:04:db: 9a:59:cc:06:89:e3:ec:af:44:20:20:5f:7f:24:af: 67:07:53:e9:57:15:1e:44:ac:e5:2a:e9:84:1e:75: 17:a7:10:5c:77:12:16:25:1f:78:53:d5:2e:7e:6b: b2:e2:3c:ee:4b:04:68:e9:bd:20:98:c4:d6:e8:85: 5d:83:1d:60:ef:ca:ae:f0:aa:82:50:27:80:11:7d: 64:80:81:cb:8e:ce:79:e5:40:3b:d9:23:76:25:a5: b7:ac:f5:20:f7:3f:3d:17:31:71:39:bd:f6:20:10: d3:c6:99:1a:96:13:ff:e1:1e:fd:44:df:3c:5d:97: 99:7b:9b:50:0c:ce:aa:24:00:76:b0:54:61:e2:65: 96:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:01:9D:F8:BB:67:57:2D:0C:5D:78:83:17:17:EC:8E:59:8D:50:86 X509v3 Authority Key Identifier: keyid:4C:37:F2:7E:B4:99:7B:3B:EF:9F:28:26:6A:39:69:40:50:FE:74:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDfyfrSZezvvnygmajlpQFD-dPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/09cea0-ef2b-4f20-a19a-eb5a627e76a3/1/TDfyfrSZezvvnygmajlpQFD-dPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:1b:f7:ca:97:88:f8:86:81:0e:80:5c:dd:38:9d:d2:51:c0: 2a:ff:23:43:07:58:ca:65:00:90:35:b2:7c:0d:4a:af:8b:7c: 4c:d9:18:94:ba:43:d6:c1:0b:eb:70:d6:7e:eb:a6:e0:45:9e: 28:d7:30:41:09:7f:9c:b4:f5:dc:97:e4:e7:ef:37:7d:7b:ce: 53:31:61:d4:41:78:ea:d2:20:96:3d:2b:59:a1:16:7e:91:4d: 73:f0:4e:b7:b8:c3:26:b1:75:9d:33:cd:a4:6e:7a:c3:37:4d: aa:7a:8d:81:dc:fa:bf:54:30:2b:31:7f:6c:39:0c:f9:38:5c: bd:45:62:e7:08:2c:b6:d8:d3:c9:8d:c5:71:62:52:1f:1f:fd: 90:d8:a5:6c:16:f1:45:d3:e3:9c:84:46:d9:25:f1:56:ed:e2: 25:17:65:b5:77:f1:87:82:f7:44:1e:22:e7:df:9b:66:e5:41: a8:88:8a:40:a7:e5:92:44:28:3b:93:50:6a:17:37:8e:19:eb: 32:f8:c3:0b:1e:2b:e6:be:08:a7:c4:8e:1f:ad:9a:de:ba:19: 49:e9:e0:70:b3:54:b3:d6:9b:d1:67:66:47:9d:65:43:77:be: 2e:23:4b:75:d2:ff:2e:0d:42:88:73:83:1b:e2:74:e1:46:ce: 18:40:2a:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCiExsjYjdoYai3EEWZbrNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjMzdmMjdlYjQ5OTdiM2JlZjlmMjgyNjZhMzk2OTQwNTBm ZTc0ZjkwHhcNMjYwOTIxMDU1NTA3WhcNMjYwOTIyMDU1NTA3WjAzMTEwLwYDVQQD Eyg5ZDAxOWRmOGJiNjc1NzJkMGM1ZDc4ODMxNzE3ZWM4ZTU5OGQ1MDg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVm2OaKyYarawY3FHUjsPSHwMHLH QNmYg9Cr9axe7j2VDF/Ulw88hlACDrINbEeMA26YhpGh+b0A5BbILVbdWqxEpwYj VKNS7i5aTup2+k2LIFwvNaM1J6+NfFNlPufJJUbeW6bwHVi+S2E5Dgr2oZsNTTko BNuaWcwGiePsr0QgIF9/JK9nB1PpVxUeRKzlKumEHnUXpxBcdxIWJR94U9Uufmuy 4jzuSwRo6b0gmMTW6IVdgx1g78qu8KqCUCeAEX1kgIHLjs555UA72SN2JaW3rPUg 9z89FzFxOb32IBDTxpkalhP/4R79RN88XZeZe5tQDM6qJAB2sFRh4mWWuwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0Bnfi7Z1ctDF14gxcX7I5ZjVCGMB8GA1UdIwQY MBaAFEw38n60mXs7758oJmo5aUBQ/nT5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEt ZWI1YTYyN2U3NmEzLzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81ZC8wOWNlYTAtZWYyYi00ZjIwLWExOWEtZWI1YTYyN2U3NmEz LzEvVERmeWZyU1plenZ2bnlnbWFqbHBRRkQtZFBrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVhv3ypeI +IaBDoBc3Tid0lHAKv8jQwdYymUAkDWyfA1Kr4t8TNkYlLpD1sEL63DWfuum4EWe KNcwQQl/nLT13Jfk5+83fXvOUzFh1EF46tIglj0rWaEWfpFNc/BOt7jDJrF1nTPN pG56wzdNqnqNgdz6v1QwKzF/bDkM+ThcvUVi5wgsttjTyY3FcWJSHx/9kNilbBbx RdPjnIRG2SXxVu3iJRdltXfxh4L3RB4i59+bZuVBqIiKQKflkkQoO5NQahc3jhnr MvjDCx4r5r4Ip8SOH62a3roZSengcLNUs9ab0WdmR51lQ3e+LiNLddL/Lg1CiHOD G+J04UbOGEAq0g== -----END CERTIFICATE-----Generated at Mon Sep 21 15:42:49 2026 by rpki-client