$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: 50wqFT+ao6iE0HX+nEBH12ch95MlpciBImCQv9y97P4= Subject key identifier: 8E:84:3D:FF:20:EB:38:36:66:F6:65:53:4F:DA:FA:28:34:27:58:0F Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 01A0C3A02E9FCCE628B97B9ED577A3DFD87A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1A75 Signing time: Mon 21 Sep 2026 11:00:49 +0000 Manifest this update: Mon 21 Sep 2026 11:00:49 +0000 Manifest next update: Tue 22 Sep 2026 11:00:49 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: J_a4ymcJIY3L6HOzFARmH41d5es.asa (hash: bpzpa0qKowmOhDsx7cnZXh9EOSP6XWxhHtsK/Z/ggTU=) 6: LfkCmSO1I7GGpJ0of5l-0c5AGBc.asa (hash: UgfWuPDLjqxThrUgxhNFddbI4VXPReh33QeUjBvYjVs=) 7: LuOgAc37LU8V7dGgdj8hy6ymH64.asa (hash: pkN431oI3RFQuibIh8RwZRrzTHAA18y2t6J/hjni00c=) 8: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 9: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 10: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: 12RZZRO5RzgXtYAKXJuX1P5yp1ja/IxjnUPQtY2ijkM=) 11: cIcqaLXZmekavhCmoIAJhBRw3JE.roa (hash: 8QflktthB1MZE1m+SbfCOvT58wwBH/AnF87SL9k5yss=) 12: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 13: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 14: oaZumtYBqB2DBSwMpqnmqOIkGm0.roa (hash: 9YqR7q1fJK+xrhMWwkV3smWMIV3JZ5y1OxTGOkJ6aPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 11:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:a0:2e:9f:cc:e6:28:b9:7b:9e:d5:77:a3:df:d8:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Sep 21 11:00:49 2026 GMT Not After : Sep 22 11:00:49 2026 GMT Subject: CN=8e843dff20eb383666f665534fdafa283427580f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:f8:f7:4b:03:0c:c3:b0:65:1c:e4:b1:25:c5: 88:39:14:47:6f:41:14:43:c5:82:a5:76:6b:71:b4: 8e:5c:1d:bf:2b:c4:35:dc:c1:fc:89:66:64:76:50: bc:aa:f5:76:91:21:d0:65:c9:96:48:80:b4:1e:b0: 2f:00:24:95:72:ee:f7:61:3a:8d:71:dd:95:bb:02: 14:33:e2:a2:aa:ed:5c:fb:cc:6b:72:b8:6e:d7:64: 10:ff:81:48:a0:f9:93:98:c9:f7:ae:9c:55:e0:49: a4:c0:99:63:8b:19:1e:1c:3e:bb:01:cf:75:4e:4d: af:de:0b:7f:ef:f6:5c:dd:8e:aa:eb:5d:c2:6e:69: c0:cc:39:94:bf:cc:1d:be:82:0c:65:05:fe:1c:dd: dc:92:b3:43:37:9c:d7:16:13:19:81:68:a8:da:a8: 39:94:c1:69:69:91:a5:29:98:b9:75:7a:1d:42:f0: 83:6c:44:55:02:26:e3:7a:68:43:4d:db:bf:73:4a: 90:ae:0b:00:a9:d7:39:bd:f5:16:70:ec:2a:29:da: 41:c8:fa:6f:5f:19:2e:6a:a0:45:84:aa:60:96:3c: d5:5a:2c:99:78:8b:50:ed:89:aa:31:4d:3b:b6:9b: bc:cb:ed:d4:4b:4b:04:c3:36:bf:c8:ea:4c:b6:b0: 27:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:84:3D:FF:20:EB:38:36:66:F6:65:53:4F:DA:FA:28:34:27:58:0F X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:40:ed:54:b5:b9:ff:43:e7:0c:f5:be:c0:54:e0:9d:eb:b3: 0b:60:0a:e7:b3:25:49:2c:21:80:15:78:bb:56:15:ab:e8:b5: 25:a7:08:ed:ff:3f:7a:db:72:5c:3c:d0:13:35:3f:9d:96:59: b5:a2:2c:10:02:74:e4:9a:58:89:75:f3:07:bc:9a:4e:4f:18: b8:80:55:d4:f5:43:3a:fa:e8:6f:5d:fa:b9:b8:5f:0f:fd:28: be:c2:c3:08:a6:52:44:31:13:88:d0:37:72:83:d6:41:e4:7c: cf:b2:eb:5f:18:f2:cc:0c:71:a2:6c:e3:84:f7:3b:ee:48:90: 56:58:44:9c:37:c8:b8:f1:b1:77:84:60:19:a3:2c:6b:48:70: 94:bb:82:80:54:64:b0:87:dd:e9:5b:df:51:a9:1d:9d:9e:f2: f1:ee:e9:e5:36:c6:e3:ce:14:1c:46:24:a3:01:2e:c5:aa:06: 1c:00:3d:c9:e2:f2:a8:3b:f2:b8:29:11:72:cc:d3:1e:ea:d0: 40:53:90:8b:5b:c8:4c:c1:c8:29:5c:cb:e4:5e:7b:46:10:cf: 9d:41:32:e0:43:68:8f:67:79:c6:e7:2c:53:eb:0f:e2:c9:37: 0a:dc:9e:71:fc:1b:ed:37:f4:c5:34:c8:7c:8b:25:04:1a:94: 06:f7:d4:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDoC6fzOYouXue1Xej39h6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwOTIxMTEwMDQ5WhcNMjYwOTIyMTEwMDQ5WjAzMTEwLwYDVQQD Eyg4ZTg0M2RmZjIwZWIzODM2NjZmNjY1NTM0ZmRhZmEyODM0Mjc1ODBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4fj3SwMMw7BlHOSxJcWIORRHb0EU Q8WCpXZrcbSOXB2/K8Q13MH8iWZkdlC8qvV2kSHQZcmWSIC0HrAvACSVcu73YTqN cd2VuwIUM+Kiqu1c+8xrcrhu12QQ/4FIoPmTmMn3rpxV4EmkwJljixkeHD67Ac91 Tk2v3gt/7/Zc3Y6q613CbmnAzDmUv8wdvoIMZQX+HN3ckrNDN5zXFhMZgWio2qg5 lMFpaZGlKZi5dXodQvCDbERVAibjemhDTdu/c0qQrgsAqdc5vfUWcOwqKdpByPpv XxkuaqBFhKpgljzVWiyZeItQ7YmqMU07tpu8y+3US0sEwza/yOpMtrAnnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6EPf8g6zg2ZvZlU0/a+ig0J1gPMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArUDtVLW5 /0PnDPW+wFTgneuzC2AK57MlSSwhgBV4u1YVq+i1JacI7f8/ettyXDzQEzU/nZZZ taIsEAJ05JpYiXXzB7yaTk8YuIBV1PVDOvrob136ubhfD/0ovsLDCKZSRDETiNA3 coPWQeR8z7LrXxjyzAxxomzjhPc77kiQVlhEnDfIuPGxd4RgGaMsa0hwlLuCgFRk sIfd6VvfUakdnZ7y8e7p5TbG484UHEYkowEuxaoGHAA9yeLyqDvyuCkRcszTHurQ QFOQi1vITMHIKVzL5F57RhDPnUEy4ENoj2d5xucsU+sP4sk3Ctyecfwb7Tf0xTTI fIslBBqUBvfUSw== -----END CERTIFICATE-----Generated at Mon Sep 21 17:47:23 2026 by rpki-client