$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json) Hash identifier: P7k/UboDLE7VIa66UxLIs8zacWmIe9isp5RGot4YWQg= Subject key identifier: 79:36:8C:8F:49:53:B0:7E:76:36:48:04:A1:D6:29:94:2D:5D:EB:67 Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Certificate serial: 01A0C88F10608E2DA769559465DB94151A64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft Manifest number: 1270 Signing time: Tue 22 Sep 2026 10:00:14 +0000 Manifest this update: Tue 22 Sep 2026 10:00:14 +0000 Manifest next update: Wed 23 Sep 2026 10:00:14 +0000 Files and hashes: 1: 0fPiuwb4X2weC-gKDNJaEbSPHqw.roa (hash: S57h9JaZkZt0GA+n+fixlPL0kJI1rFB4fls5bIvI/yg=) 2: 9CV2ccBp-wqUL_fP6QBnKryYIpM.roa (hash: EVfvSX2FaZ2DaE0/qfbpH/rDdeen/hkG4N8QfWHeB08=) 3: JKGW4gg3OI-zymSfSwtWhhEO1-c.roa (hash: Hj2gZmYvtr1JqmPfTXMpYrbuy1yiPpWa6zihMnTrs60=) 4: NJlkPEbvZj17oZnTPoUJnz4aYHU.roa (hash: 1OOkVDVrLB0wggxypUryE2P0Q8in33IuC2Ho6AYkBaQ=) 5: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=) 6: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: HFZ7pph1pmvIaUot9eaFV/O90Gi+9c28+cmWTDVdJGU=) 7: mwnslxanlyapMrSdoQ959onOJDo.roa (hash: 5V4ABzOc/BOKT+0CLM0NPcH5YpVerld75dduR0xdwO8=) 8: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=) 9: vZOfCIg9L8SEJQT_PB29EUcqp1o.roa (hash: D6jkKtX92Ek141r9wDvoefr0ADP2trBgJ4ZfnvX2MDA=) 10: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 10:00:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:8f:10:60:8e:2d:a7:69:55:94:65:db:94:15:1a:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Validity Not Before: Sep 22 10:00:14 2026 GMT Not After : Sep 23 10:00:14 2026 GMT Subject: CN=79368c8f4953b07e76364804a1d629942d5deb67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:42:b6:05:54:be:04:83:28:0f:b0:53:49:84: 7a:fa:d2:a1:b0:fc:88:8c:31:63:99:70:25:67:cc: af:c0:0c:d8:dc:42:5f:b6:87:64:f6:21:00:52:64: b8:2b:a0:bb:b4:3e:34:fc:98:41:b6:dc:98:68:0c: b2:04:c0:00:b8:0e:60:a6:1d:96:f7:66:b4:1d:45: 5b:58:02:81:40:32:65:42:6a:f3:43:fd:75:51:ad: 7e:82:a9:3d:8b:76:74:2b:d3:14:cf:8d:4d:58:77: c1:dc:bb:65:f2:4a:93:52:48:1a:31:3b:f9:c4:00: 2a:ee:b1:9d:c1:3f:f1:76:96:64:f4:cb:24:20:65: bb:03:ef:ab:11:a6:a7:89:70:ad:71:85:d2:1c:da: 45:77:23:cb:e0:1d:95:d2:3d:28:54:9d:6f:94:08: 97:01:24:26:88:05:a1:47:6e:a0:ad:82:0a:37:e7: ea:a8:fd:98:1b:ce:39:5b:a0:a9:c8:a5:14:f6:85: c9:3f:8f:01:95:25:f1:aa:d7:22:53:8a:0c:b7:48: 09:05:bb:56:74:71:bf:58:1c:81:25:fd:d5:bd:9b: d6:d0:17:f4:9a:5c:d8:c4:b4:cf:05:ca:b9:4a:31: 0f:8f:fe:91:2d:74:6c:41:e9:83:74:64:3e:2a:36: 5b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:36:8C:8F:49:53:B0:7E:76:36:48:04:A1:D6:29:94:2D:5D:EB:67 X509v3 Authority Key Identifier: keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:ff:d8:5c:b7:fa:30:7d:1c:b6:35:ed:43:5c:e0:20:e2:1d: 55:f2:83:5d:99:42:ed:66:38:01:3d:f8:eb:82:cf:b9:a8:e1: 24:fd:20:b6:c6:d2:c5:b6:68:76:ae:3c:a5:7e:e6:32:46:bf: 56:d2:27:67:4a:d2:b6:cf:6c:7c:82:99:d0:5f:ae:37:8e:25: 6c:8b:84:40:8b:f7:92:54:d4:c0:ba:28:ba:2e:d5:07:76:60: 86:16:20:be:e3:05:61:8a:9f:d8:bf:bd:d4:3d:94:bf:b6:e9: f1:ef:60:9a:da:86:b9:8a:71:db:8d:b8:23:f4:a3:f3:53:33: 75:1b:a0:6b:ce:fd:f5:dc:99:c8:29:db:ad:5f:00:ae:57:50: 16:df:dc:5e:a8:9f:a5:bd:26:be:08:73:67:a1:21:0f:f8:2a: e2:f6:64:50:4e:65:16:d4:98:ff:dd:13:e3:8c:93:cf:60:a6: 55:b3:be:31:8b:f1:a3:0c:4b:69:e0:cd:20:60:f5:16:d0:2c: b3:fc:cf:51:63:5f:a3:b7:87:07:35:f9:bf:23:43:87:75:5b: 39:8d:d0:50:28:09:2e:27:e2:a8:0b:e8:fc:13:5b:85:05:bd: 1d:4c:48:08:8f:1e:09:ee:72:02:71:1b:cb:c3:13:62:2d:ff: cc:5a:d9:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIjxBgji2naVWUZduUFRpkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2 ZGVmMjAwHhcNMjYwOTIyMTAwMDE0WhcNMjYwOTIzMTAwMDE0WjAzMTEwLwYDVQQD Eyg3OTM2OGM4ZjQ5NTNiMDdlNzYzNjQ4MDRhMWQ2Mjk5NDJkNWRlYjY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0K2BVS+BIMoD7BTSYR6+tKhsPyI jDFjmXAlZ8yvwAzY3EJftodk9iEAUmS4K6C7tD40/JhBttyYaAyyBMAAuA5gph2W 92a0HUVbWAKBQDJlQmrzQ/11Ua1+gqk9i3Z0K9MUz41NWHfB3Ltl8kqTUkgaMTv5 xAAq7rGdwT/xdpZk9MskIGW7A++rEaaniXCtcYXSHNpFdyPL4B2V0j0oVJ1vlAiX ASQmiAWhR26grYIKN+fqqP2YG845W6CpyKUU9oXJP48BlSXxqtciU4oMt0gJBbtW dHG/WByBJf3VvZvW0Bf0mlzYxLTPBcq5SjEPj/6RLXRsQemDdGQ+KjZbyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHk2jI9JU7B+djZIBKHWKZQtXetnMB8GA1UdIwQY MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt MjU0NDY4M2FhMTI1LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1 LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUP/YXLf6 MH0ctjXtQ1zgIOIdVfKDXZlC7WY4AT3464LPuajhJP0gtsbSxbZodq48pX7mMka/ VtInZ0rSts9sfIKZ0F+uN44lbIuEQIv3klTUwLooui7VB3ZghhYgvuMFYYqf2L+9 1D2Uv7bp8e9gmtqGuYpx2424I/Sj81MzdRuga8799dyZyCnbrV8ArldQFt/cXqif pb0mvghzZ6EhD/gq4vZkUE5lFtSY/90T44yTz2CmVbO+MYvxowxLaeDNIGD1FtAs s/zPUWNfo7eHBzX5vyNDh3VbOY3QUCgJLifiqAvo/BNbhQW9HUxICI8eCe5yAnEb y8MTYi3/zFrZ/A== -----END CERTIFICATE-----Generated at Tue Sep 22 20:48:21 2026 by rpki-client