$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft File: 1KdSLSfmKuI6RgFD66ZzO3myRHc.mft (raw, json) Hash identifier: Ao6+liDHMEXFiLKXHgJVyn1Vqrg7Xva+nEZf/xqQO6s= Subject key identifier: 22:84:1F:16:FC:1A:29:B8:E4:63:32:1C:25:7F:E6:33:68:41:32:BC Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477 Certificate serial: 01A0BE0BB7AB77AAE7C7F0BC3F10C38FCDB3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft Manifest number: DE Signing time: Sun 20 Sep 2026 09:00:33 +0000 Manifest this update: Sun 20 Sep 2026 09:00:33 +0000 Manifest next update: Mon 21 Sep 2026 09:00:33 +0000 Files and hashes: 1: 1-N-2fC6tfa1s0LvlFU9jMbLrhuE.roa (hash: RE3o5Zu1XdF9S+04ylutP3QqzKtcsQWMmIT7k6SNN/Y=) 2: 1KdSLSfmKuI6RgFD66ZzO3myRHc.crl (hash: qeHmOV7moddtYH5xr1bNy1WyMUwWg8eidGAoirdlZf0=) 3: 6kERmgZGL5UqVKqbENAa-FNSgHc.roa (hash: AClJH/YtHZ63QiXgfCJgcjixUw8nfxsUu8O75U0YUJI=) 4: AhMkHazE-91WYq1pzL4rD-YgpOY.roa (hash: N7RR15LWLaA1GWhDaUwnFbFOrZQPw3IJjIesRqmsD5I=) 5: CBhFxYlbZteyN6PZ-Vmyl3AaymU.roa (hash: cEqju8RXsbFDyu/dW9+z6y7ODNyFcVjrj9eawVPTsVE=) 6: FkByO5VyomUSANjFcmnEdvz3Cko.roa (hash: z10lQ6g3SDPSArAHievRO6Z2mqsSExBrr1d205CDUP4=) 7: IJAySIrj88My47LJGVkAc9rZDtY.roa (hash: an1H6uRWsmTvyleV0pswewslnipkuBrqpFXZ8x8RXI4=) 8: K7O0xdV18ha5dPNdq-y0BPQgffc.roa (hash: GEqEkzuoCanIwB018rtlec4WErFm2E3DumXI3txV98E=) 9: SKjJw3_dqVQh5tqn8vnBC1JzJSI.roa (hash: FFebWzZWCHdxw5ZCEnSdY08q5KwfVzoC6UmmM8w/pz4=) 10: TqDntdHJZddaYt_ZyotBF9-hm14.roa (hash: VjSEFTxxCdGkCwFWGpwHDnoo4e0X5kbRBsmPmmTPxWI=) 11: WvAmQJBuWNK-A1dgFB9mFwv86Gk.roa (hash: i6VXTVtK2u+Sa4dxw7J/aRal1n9vO5pWlCr6D3BmpWo=) 12: XhZYqo-93sizkFwJq1Oc8KABtwQ.roa (hash: FFax2+o10DIFWYK/5aiR6THgjmcFiIwVqFNYjJSFM+w=) 13: bPSazfrJEoM_auhnCGJjDI29Zwk.roa (hash: pMTZbr0m442O8974ozmFdKCgEYF3GhKq7mIvRyWA1Yc=) 14: jlnRp7Jr9ytnSH4nVGSVmBf_k6o.roa (hash: 7kRo5njKROlYBvZ0FU20K/hBTNAanIB/DZh3W6WgLMY=) 15: q-BhPuQnM-Q-h6hN62IefM9bmG4.roa (hash: OIcCu5qI8ffXeo2TrrcMk7ECFhZnyqwj4znnE1b0z/Y=) 16: wZMooB7OVcFLzuI4NUrersbqikQ.roa (hash: pEN10g0qlhvjBHq9CVkl9+QR6Ky5ASwHfrEgR03oriI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:0b:b7:ab:77:aa:e7:c7:f0:bc:3f:10:c3:8f:cd:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477 Validity Not Before: Sep 20 09:00:33 2026 GMT Not After : Sep 21 09:00:33 2026 GMT Subject: CN=22841f16fc1a29b8e463321c257fe633684132bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:88:46:7f:88:51:62:a3:0c:e9:f4:f4:c9:18: 39:a4:d4:3a:ca:68:e0:a1:52:a0:2a:77:e0:8d:5d: 3e:3f:e9:93:f1:53:dd:1d:25:fc:0d:29:b0:b0:ce: 48:41:6b:7c:6d:e7:38:1d:7f:cb:bb:fe:bb:39:48: 66:ee:44:50:59:d2:b6:a3:53:f5:b5:69:50:88:a7: e1:0e:d5:f3:d6:7c:2f:dc:cf:b7:7f:21:0b:18:03: cc:98:01:f9:4c:33:63:a7:d1:40:a3:4c:0a:b2:8b: 4c:e3:c6:be:a0:d0:2a:dc:1d:91:18:d9:9e:78:e6: e0:c4:84:e5:5a:c5:c4:99:c5:e3:3a:c8:5e:e7:98: c2:e1:0f:30:30:a5:49:6d:fa:36:b4:7e:f2:69:b5: a7:7a:c0:5e:68:f3:2c:c6:36:5b:89:d9:fd:59:bc: 72:05:9a:85:94:65:bd:af:63:2c:96:d0:2f:8c:99: 2f:c1:e1:46:2e:b0:29:09:6d:24:eb:8f:e2:03:ed: e4:34:3d:9d:b3:8f:5b:52:38:93:46:ab:8b:ee:76: 28:ee:d4:c6:34:a4:da:f5:7b:21:b8:c4:42:ad:c0: 63:02:7c:01:05:d0:72:6e:bd:c8:81:f0:8b:55:60: 26:bd:8b:75:94:67:4f:a7:60:f9:6b:6d:d7:3c:bf: 93:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:84:1F:16:FC:1A:29:B8:E4:63:32:1C:25:7F:E6:33:68:41:32:BC X509v3 Authority Key Identifier: keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:f1:1c:ae:0e:a3:a0:02:1f:b6:a8:bd:9e:38:72:58:b8:b8: 4e:3b:df:95:03:fd:10:e2:95:eb:8d:ef:2c:58:6c:4c:e5:68: 47:1d:1b:72:09:d7:52:e6:ca:c1:1b:c0:21:b5:13:97:07:fd: 2c:a6:8d:e4:6a:fd:54:95:92:a4:a7:e4:74:16:f9:0d:75:b2: d4:fd:26:53:4b:58:43:51:51:ec:e2:02:79:98:bc:94:89:73: eb:1b:af:dd:19:d3:89:f5:6f:4f:60:a0:b7:3d:44:2c:ed:6a: 50:dc:97:24:93:cd:f4:26:72:b1:b2:08:25:0e:f3:3d:c6:e9: 08:e5:75:f4:e3:cb:07:c6:e1:fc:4d:2b:10:f8:f7:70:2d:94: ab:e6:bc:41:d1:6e:f8:5f:6e:af:02:ba:9e:9b:88:35:d0:3d: 80:68:10:f9:87:35:4b:31:82:cf:ca:2e:f9:9a:e6:b6:53:a6: 8c:7f:fb:e7:f2:4e:6f:27:c5:0b:80:ac:47:90:43:71:4b:22: 41:d4:58:cc:95:60:fc:23:f8:28:19:ce:3d:3e:0a:6b:2b:9e: 6b:23:77:6d:c1:94:3f:b3:b7:21:c9:4f:da:cc:18:b5:d0:df: 16:bf:70:0e:2b:b6:13:61:ab:d1:9d:e1:cc:26:8a:3a:af:d9: 64:e4:d0:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+C7erd6rnx/C8PxDDj82zMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YTc1MjJkMjdlNjJhZTIzYTQ2MDE0M2ViYTY3MzNiNzli MjQ0NzcwHhcNMjYwOTIwMDkwMDMzWhcNMjYwOTIxMDkwMDMzWjAzMTEwLwYDVQQD EygyMjg0MWYxNmZjMWEyOWI4ZTQ2MzMyMWMyNTdmZTYzMzY4NDEzMmJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYhGf4hRYqMM6fT0yRg5pNQ6ymjg oVKgKnfgjV0+P+mT8VPdHSX8DSmwsM5IQWt8bec4HX/Lu/67OUhm7kRQWdK2o1P1 tWlQiKfhDtXz1nwv3M+3fyELGAPMmAH5TDNjp9FAo0wKsotM48a+oNAq3B2RGNme eObgxITlWsXEmcXjOshe55jC4Q8wMKVJbfo2tH7yabWnesBeaPMsxjZbidn9Wbxy BZqFlGW9r2MsltAvjJkvweFGLrApCW0k64/iA+3kND2ds49bUjiTRquL7nYo7tTG NKTa9XshuMRCrcBjAnwBBdBybr3IgfCLVWAmvYt1lGdPp2D5a23XPL+TqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCKEHxb8Gim45GMyHCV/5jNoQTK8MB8GA1UdIwQY MBaAFNSnUi0n5iriOkYBQ+umczt5skR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvEcrg6j oAIftqi9njhyWLi4TjvflQP9EOKV643vLFhsTOVoRx0bcgnXUubKwRvAIbUTlwf9 LKaN5Gr9VJWSpKfkdBb5DXWy1P0mU0tYQ1FR7OICeZi8lIlz6xuv3RnTifVvT2Cg tz1ELO1qUNyXJJPN9CZysbIIJQ7zPcbpCOV19OPLB8bh/E0rEPj3cC2Uq+a8QdFu +F9urwK6npuINdA9gGgQ+Yc1SzGCz8ou+ZrmtlOmjH/75/JObyfFC4CsR5BDcUsi QdRYzJVg/CP4KBnOPT4KayueayN3bcGUP7O3IclP2swYtdDfFr9wDiu2E2Gr0Z3h zCaKOq/ZZOTQEA== -----END CERTIFICATE-----Generated at Sun Sep 20 21:32:18 2026 by rpki-client