$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: 52ZVquEtmJeX8rBDa7UguAheOXWzyWXcoLIseNNZVpU= Subject key identifier: 1B:9A:81:D6:7B:DA:97:CD:35:75:E0:A6:08:5F:7F:6A:D6:CF:24:C9 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 01A0C2FB8573FA8B0330DAED092B625D3FDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0C9B Signing time: Mon 21 Sep 2026 08:00:58 +0000 Manifest this update: Mon 21 Sep 2026 08:00:58 +0000 Manifest next update: Tue 22 Sep 2026 08:00:58 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: NqpHVc4PYKYMQtrw9bY364HrWVaOEpCluRoPMa56mR8=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: GysgxckvU9w6RPGtRYGSjjzMaeI.roa (hash: jULcLoc2tnQVeXNdUpLnnHKQk5KFPYH+I0w28ILf6uo=) 8: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 9: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 10: SAA7qyjcW84McQBC6YBfHzblJfA.roa (hash: dbjWwV6RFntCa8n+N5y1CE7UmL5X6zdxSBIazMuF9gY=) 11: SAOjAfmVta9T_Ls7ykRFr8U5SYI.roa (hash: r10sWadtpWdod9WG4HGHqPD7qRwz46PwcZV2+I/tlNM=) 12: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 13: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 14: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 15: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 16: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 17: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 18: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 19: zFqREBgVNzI2E15fdQInesLKPTw.roa (hash: NsrPAKNCirfx6K/YKvvDtbYP5Q+iM+dl/3GgSwcg4O8=) 20: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:fb:85:73:fa:8b:03:30:da:ed:09:2b:62:5d:3f:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Sep 21 08:00:58 2026 GMT Not After : Sep 22 08:00:58 2026 GMT Subject: CN=1b9a81d67bda97cd3575e0a6085f7f6ad6cf24c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:69:29:7b:74:8b:35:0c:2b:71:bd:ce:89:0d: 0a:f3:31:c4:37:13:1d:a0:78:e2:a1:7c:cf:f0:b4: 51:42:e0:27:3c:79:00:35:8f:8e:8a:82:bf:35:82: e1:e9:d5:d4:17:d2:a9:19:8f:df:14:a1:c6:4f:43: 56:48:5e:2d:67:9d:75:8a:be:4a:86:84:e2:51:85: ba:8b:0c:3b:ee:82:9c:a2:19:14:ae:a9:06:c3:b3: ef:33:a0:82:db:55:83:85:34:ff:3f:9f:7f:f6:f6: 2f:e0:76:2c:0b:e9:7e:e9:03:b1:c2:b3:f4:ae:25: 0a:63:14:9e:23:dd:da:99:2c:92:d3:12:8f:2b:ab: 5c:6f:1f:4b:40:ba:f1:98:4c:64:60:c4:8d:0d:83: 80:0c:48:73:c5:dd:95:b8:62:2f:28:18:26:75:ce: b6:d8:94:34:34:6c:b1:83:9a:eb:62:f0:41:f9:61: d0:ea:6c:da:9a:6f:c8:9d:bd:75:e7:5c:4d:75:cf: df:a2:e2:bb:86:5e:79:9c:35:3f:84:d7:2e:60:6d: a1:f2:27:f2:32:38:4d:58:00:9d:86:db:52:b6:83: 38:01:b9:9a:c7:0e:99:bb:b4:5f:91:21:98:ca:c9: a9:19:95:87:7b:50:39:3d:60:90:00:47:7d:d6:de: cf:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:9A:81:D6:7B:DA:97:CD:35:75:E0:A6:08:5F:7F:6A:D6:CF:24:C9 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:0b:09:6c:1b:5a:86:69:55:81:2a:7e:23:25:77:47:b7:0b: 1d:5f:e6:e4:66:24:e9:51:a0:db:29:5f:0f:00:0e:65:61:fc: 7e:95:ea:db:87:67:87:cd:69:1b:cb:fa:68:a3:3a:f8:a3:78: 6d:bf:03:f1:56:df:9e:75:a8:2c:f0:a6:93:5f:e0:b0:82:99: f5:07:27:0e:cf:b0:f8:47:7f:bf:56:f8:08:85:1e:92:cb:7a: 54:64:ef:d2:ba:d7:41:08:5c:36:77:49:fc:d8:34:7c:ff:ef: 5a:db:ff:36:8f:02:6e:16:98:5f:54:65:27:4c:d8:2e:08:94: 9c:79:b5:87:43:56:99:6b:0f:fe:b7:a7:44:87:b0:f7:b9:ea: 57:9c:50:13:e9:9c:cc:83:0f:b4:d4:47:a1:97:c6:c4:48:79: 3c:dd:ba:42:0a:2c:f6:1d:1a:e5:d9:62:10:14:f0:b8:df:2b: a2:50:87:b2:bf:17:74:bf:08:63:00:1e:a6:66:73:19:59:e3: f4:00:f9:29:90:fa:d3:1b:00:22:08:40:92:3e:b8:9e:43:13: c0:ae:eb:58:4e:2b:08:4b:eb:67:c4:d0:6f:06:64:5f:a3:a8: 67:06:33:89:a5:71:9e:c3:90:a6:77:d6:d7:33:3e:55:0a:a7: 25:a9:a9:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDC+4Vz+osDMNrtCStiXT/eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwOTIxMDgwMDU4WhcNMjYwOTIyMDgwMDU4WjAzMTEwLwYDVQQD EygxYjlhODFkNjdiZGE5N2NkMzU3NWUwYTYwODVmN2Y2YWQ2Y2YyNGM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWkpe3SLNQwrcb3OiQ0K8zHENxMd oHjioXzP8LRRQuAnPHkANY+OioK/NYLh6dXUF9KpGY/fFKHGT0NWSF4tZ511ir5K hoTiUYW6iww77oKcohkUrqkGw7PvM6CC21WDhTT/P59/9vYv4HYsC+l+6QOxwrP0 riUKYxSeI93amSyS0xKPK6tcbx9LQLrxmExkYMSNDYOADEhzxd2VuGIvKBgmdc62 2JQ0NGyxg5rrYvBB+WHQ6mzamm/Inb1151xNdc/fouK7hl55nDU/hNcuYG2h8ify MjhNWACdhttStoM4Abmaxw6Zu7RfkSGYysmpGZWHe1A5PWCQAEd91t7PMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBuagdZ72pfNNXXgpghff2rWzyTJMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAsJbBta hmlVgSp+IyV3R7cLHV/m5GYk6VGg2ylfDwAOZWH8fpXq24dnh81pG8v6aKM6+KN4 bb8D8VbfnnWoLPCmk1/gsIKZ9QcnDs+w+Ed/v1b4CIUekst6VGTv0rrXQQhcNndJ /Ng0fP/vWtv/No8CbhaYX1RlJ0zYLgiUnHm1h0NWmWsP/renRIew97nqV5xQE+mc zIMPtNRHoZfGxEh5PN26Qgos9h0a5dliEBTwuN8rolCHsr8XdL8IYwAepmZzGVnj 9AD5KZD60xsAIghAkj64nkMTwK7rWE4rCEvrZ8TQbwZkX6OoZwYziaVxnsOQpnfW 1zM+VQqnJampaA== -----END CERTIFICATE-----Generated at Mon Sep 21 14:30:34 2026 by rpki-client