$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: F4JYx6O5HSDUIenXKRkbtePXns4olUxgNFToBkyec10= Subject key identifier: 9A:46:1B:12:7C:19:A9:A5:58:64:10:D4:4B:63:C9:32:DF:3E:99:48 Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 01A0C8C680D44D5B2FF9AC264657BCB65D2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0C9E Signing time: Tue 22 Sep 2026 11:00:47 +0000 Manifest this update: Tue 22 Sep 2026 11:00:47 +0000 Manifest next update: Wed 23 Sep 2026 11:00:47 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: 5WC7SJGzzoFwthyAhM3YEI4a7RCQNApGWM/yVrtKFCE=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: GysgxckvU9w6RPGtRYGSjjzMaeI.roa (hash: jULcLoc2tnQVeXNdUpLnnHKQk5KFPYH+I0w28ILf6uo=) 8: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 9: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 10: SAA7qyjcW84McQBC6YBfHzblJfA.roa (hash: dbjWwV6RFntCa8n+N5y1CE7UmL5X6zdxSBIazMuF9gY=) 11: SAOjAfmVta9T_Ls7ykRFr8U5SYI.roa (hash: r10sWadtpWdod9WG4HGHqPD7qRwz46PwcZV2+I/tlNM=) 12: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 13: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 14: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 15: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 16: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 17: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 18: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 19: zFqREBgVNzI2E15fdQInesLKPTw.roa (hash: NsrPAKNCirfx6K/YKvvDtbYP5Q+iM+dl/3GgSwcg4O8=) 20: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 11:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:c6:80:d4:4d:5b:2f:f9:ac:26:46:57:bc:b6:5d:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Sep 22 11:00:47 2026 GMT Not After : Sep 23 11:00:47 2026 GMT Subject: CN=9a461b127c19a9a5586410d44b63c932df3e9948 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:4c:fd:63:56:71:6d:eb:8c:db:07:00:c9: 41:d7:e7:44:75:3c:32:3e:db:cd:4a:91:06:cc:26: e0:a4:f6:b6:16:04:f0:88:ba:64:b5:b3:ea:d8:5d: 84:f6:6c:f5:00:81:26:32:fc:00:6a:c8:12:68:32: 56:31:10:98:24:75:8b:0d:97:1d:a3:c2:82:a8:61: 85:30:97:ce:be:63:80:6c:3a:46:f6:51:ec:ee:15: 29:ec:1c:f8:2a:a1:0f:3d:9e:b9:d8:6c:13:cb:e2: c2:94:98:ae:3e:4c:67:17:af:07:ef:6c:4c:8e:3e: 1a:ff:94:c8:3b:81:bf:e0:c5:49:39:c6:57:22:cf: fe:3b:32:7c:4d:c0:e1:7c:c2:ba:a8:e1:95:7d:7b: 5f:6d:7a:9d:13:5a:87:fc:78:63:0b:82:96:48:ce: 55:de:64:ac:92:8d:b6:ad:bf:91:85:41:f2:95:56: f3:1e:c8:61:ba:ed:7c:8d:23:06:3f:df:2f:15:bb: e5:8f:d5:e9:12:19:25:32:69:85:82:46:fd:70:27: 30:7b:eb:ce:bb:d1:df:34:73:f4:2b:58:bc:0c:86: 61:46:7d:0f:46:5b:b7:5b:00:2a:33:99:57:dd:2b: b8:d1:f0:67:3b:3e:a6:28:a0:86:26:44:d2:1b:71: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:46:1B:12:7C:19:A9:A5:58:64:10:D4:4B:63:C9:32:DF:3E:99:48 X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a5:e5:e1:9a:53:52:1d:50:85:27:89:b0:e9:c4:4f:3d:e2: 70:7a:24:ef:df:dd:0c:31:9b:cd:95:36:25:b8:3f:b2:19:3b: 05:64:1b:d8:b5:dc:41:7b:0e:06:43:94:15:63:8f:e2:f8:60: 2b:53:b3:04:a6:1f:bb:0c:65:e7:bf:e9:b6:d5:0d:e7:a8:e4: b9:6b:77:c4:e2:72:3b:cf:23:ac:30:03:e8:0e:9d:88:90:9a: 4e:51:4f:be:5e:e6:13:ba:17:6c:c3:1d:9f:04:2b:ea:7a:38: d9:43:b6:70:2a:11:08:f0:1f:b5:0f:b7:33:e7:86:70:d4:38: 0c:61:85:1a:b6:a9:9e:4e:38:2a:32:58:9e:88:5d:1e:be:4c: 07:6e:0f:38:52:a7:a9:ed:65:18:0b:c2:36:15:0c:a8:13:0d: 6d:03:67:b0:61:ab:f7:5e:85:13:56:ec:23:6f:4d:c0:4d:22: 89:55:ef:aa:88:3b:39:a1:86:53:6b:32:d2:a2:92:88:93:07: 88:55:c8:98:94:5d:b1:1d:8d:a6:7e:10:47:1b:11:ca:e0:62: 75:16:da:14:e1:b9:f7:10:e4:7d:f8:59:c9:29:65:56:3a:3c: 93:be:f7:5a:a7:50:95:e1:92:b4:60:a9:5d:52:e3:a8:8f:d8: 7e:a8:1b:dd -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIxoDUTVsv+awmRle8tl0sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwOTIyMTEwMDQ3WhcNMjYwOTIzMTEwMDQ3WjAzMTEwLwYDVQQD Eyg5YTQ2MWIxMjdjMTlhOWE1NTg2NDEwZDQ0YjYzYzkzMmRmM2U5OTQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrdM/WNWcW3rjNsHAMlB1+dEdTwy PtvNSpEGzCbgpPa2FgTwiLpktbPq2F2E9mz1AIEmMvwAasgSaDJWMRCYJHWLDZcd o8KCqGGFMJfOvmOAbDpG9lHs7hUp7Bz4KqEPPZ652GwTy+LClJiuPkxnF68H72xM jj4a/5TIO4G/4MVJOcZXIs/+OzJ8TcDhfMK6qOGVfXtfbXqdE1qH/HhjC4KWSM5V 3mSsko22rb+RhUHylVbzHshhuu18jSMGP98vFbvlj9XpEhklMmmFgkb9cCcwe+vO u9HfNHP0K1i8DIZhRn0PRlu3WwAqM5lX3Su40fBnOz6mKKCGJkTSG3F0iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJpGGxJ8GamlWGQQ1EtjyTLfPplIMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMKXl4ZpT Uh1QhSeJsOnETz3icHok79/dDDGbzZU2Jbg/shk7BWQb2LXcQXsOBkOUFWOP4vhg K1OzBKYfuwxl57/pttUN56jkuWt3xOJyO88jrDAD6A6diJCaTlFPvl7mE7oXbMMd nwQr6no42UO2cCoRCPAftQ+3M+eGcNQ4DGGFGrapnk44KjJYnohdHr5MB24POFKn qe1lGAvCNhUMqBMNbQNnsGGr916FE1bsI29NwE0iiVXvqog7OaGGU2sy0qKSiJMH iFXImJRdsR2Npn4QRxsRyuBidRbaFOG59xDkffhZySllVjo8k773WqdQleGStGCp XVLjqI/Yfqgb3Q== -----END CERTIFICATE-----Generated at Tue Sep 22 17:20:33 2026 by rpki-client