$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft File: 1KdSLSfmKuI6RgFD66ZzO3myRHc.mft (raw, json) Hash identifier: Fi9tSknj9iRBaOvtrN/D0uTuNsjiTpnfJb5u59Ld7V8= Subject key identifier: C5:29:1D:F3:FB:BE:F7:BB:C6:3E:6E:AB:EF:75:89:75:37:65:42:A7 Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477 Certificate serial: 01A0C40DEACE5B6DA1FE14C0F612FD3FBAA0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft Manifest number: E2 Signing time: Mon 21 Sep 2026 13:00:41 +0000 Manifest this update: Mon 21 Sep 2026 13:00:41 +0000 Manifest next update: Tue 22 Sep 2026 13:00:41 +0000 Files and hashes: 1: 1-N-2fC6tfa1s0LvlFU9jMbLrhuE.roa (hash: RE3o5Zu1XdF9S+04ylutP3QqzKtcsQWMmIT7k6SNN/Y=) 2: 1KdSLSfmKuI6RgFD66ZzO3myRHc.crl (hash: HiCudHatgLqa3+yVYwdCNwJ0C7hg2FDcYMKMFDwMjSA=) 3: 3DxUz2y-w-oU9XkwLblu0mnExSE.roa (hash: j+9/Pz/kjffz7vgclDxuszWQFHGKnkAq/0VsDedDSxA=) 4: 6kERmgZGL5UqVKqbENAa-FNSgHc.roa (hash: AClJH/YtHZ63QiXgfCJgcjixUw8nfxsUu8O75U0YUJI=) 5: AhMkHazE-91WYq1pzL4rD-YgpOY.roa (hash: N7RR15LWLaA1GWhDaUwnFbFOrZQPw3IJjIesRqmsD5I=) 6: CBhFxYlbZteyN6PZ-Vmyl3AaymU.roa (hash: cEqju8RXsbFDyu/dW9+z6y7ODNyFcVjrj9eawVPTsVE=) 7: FkByO5VyomUSANjFcmnEdvz3Cko.roa (hash: z10lQ6g3SDPSArAHievRO6Z2mqsSExBrr1d205CDUP4=) 8: K7O0xdV18ha5dPNdq-y0BPQgffc.roa (hash: GEqEkzuoCanIwB018rtlec4WErFm2E3DumXI3txV98E=) 9: SKjJw3_dqVQh5tqn8vnBC1JzJSI.roa (hash: FFebWzZWCHdxw5ZCEnSdY08q5KwfVzoC6UmmM8w/pz4=) 10: TqDntdHJZddaYt_ZyotBF9-hm14.roa (hash: VjSEFTxxCdGkCwFWGpwHDnoo4e0X5kbRBsmPmmTPxWI=) 11: WvAmQJBuWNK-A1dgFB9mFwv86Gk.roa (hash: i6VXTVtK2u+Sa4dxw7J/aRal1n9vO5pWlCr6D3BmpWo=) 12: XhZYqo-93sizkFwJq1Oc8KABtwQ.roa (hash: FFax2+o10DIFWYK/5aiR6THgjmcFiIwVqFNYjJSFM+w=) 13: bPSazfrJEoM_auhnCGJjDI29Zwk.roa (hash: pMTZbr0m442O8974ozmFdKCgEYF3GhKq7mIvRyWA1Yc=) 14: jlnRp7Jr9ytnSH4nVGSVmBf_k6o.roa (hash: 7kRo5njKROlYBvZ0FU20K/hBTNAanIB/DZh3W6WgLMY=) 15: q-BhPuQnM-Q-h6hN62IefM9bmG4.roa (hash: OIcCu5qI8ffXeo2TrrcMk7ECFhZnyqwj4znnE1b0z/Y=) 16: rUKH9k4MHdd4Y1ypLX0RMcrlJ4k.roa (hash: z/3YdmL7lhmSOdD9Jb00nUrqP817x/GBxNytvu/Ui24=) 17: wZMooB7OVcFLzuI4NUrersbqikQ.roa (hash: pEN10g0qlhvjBHq9CVkl9+QR6Ky5ASwHfrEgR03oriI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:0d:ea:ce:5b:6d:a1:fe:14:c0:f6:12:fd:3f:ba:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477 Validity Not Before: Sep 21 13:00:41 2026 GMT Not After : Sep 22 13:00:41 2026 GMT Subject: CN=c5291df3fbbef7bbc63e6eabef758975376542a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:bd:84:ad:86:8e:c6:65:3f:07:99:e8:82: 7c:fb:b4:f7:d0:be:ac:86:ca:2a:c7:97:1d:90:1a: d6:35:7f:dd:32:02:7d:b8:41:86:02:51:c4:3e:35: a9:0e:70:1c:15:50:a6:f4:cc:a1:d3:c5:dd:c8:59: 23:43:18:c8:16:c4:23:e8:7b:63:3e:fd:15:b6:8a: 7f:ce:86:f6:78:e9:66:0d:68:c8:55:38:1c:bf:81: 12:ad:fa:80:a2:63:bf:21:0e:18:38:27:8c:a1:2c: 19:0a:f2:dd:50:0f:10:d0:18:9b:62:ba:dc:0d:f0: 5b:8f:00:b7:02:63:26:30:c6:37:ca:30:62:90:f1: 1c:e8:66:b1:77:40:1a:4e:46:b7:87:f1:33:17:b8: 08:38:e3:b5:e5:e3:c7:45:70:4f:61:d3:95:c9:df: 9d:60:ea:43:35:73:84:04:55:09:6a:b8:ca:3a:2e: 67:4f:f4:22:ab:ab:34:56:82:1a:cb:15:b2:fd:18: 27:30:7a:7f:b8:c1:06:0e:df:23:91:2e:69:b2:86: ae:f8:e8:9f:46:a2:16:fd:e0:15:3b:dd:05:9a:9d: ae:f4:1b:76:9e:e7:f5:de:25:0e:ef:2d:e9:1e:86: 09:2a:3c:ae:19:8c:b6:07:75:95:ea:02:fd:71:b9: dc:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:29:1D:F3:FB:BE:F7:BB:C6:3E:6E:AB:EF:75:89:75:37:65:42:A7 X509v3 Authority Key Identifier: keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:8a:ec:9d:9c:fc:ba:45:dc:4b:e5:1c:f8:38:c8:81:0c:f2: a6:65:27:96:c9:8a:bd:6b:06:6d:53:00:f6:e9:b4:fc:b4:fe: b7:64:07:0e:b5:9a:8e:df:41:4e:68:a1:e3:57:70:cc:5a:e6: 69:ae:00:33:0b:4d:20:68:c8:b6:d5:8f:54:c6:0a:a5:60:50: a7:39:c0:a9:74:3c:db:be:d3:ba:94:2c:dc:f7:a4:ac:33:8e: 5b:4e:8f:48:c5:81:46:d8:41:dc:0c:8f:14:ec:cd:40:61:62: 3f:46:26:3d:52:e2:a8:6f:81:05:99:02:8a:48:31:45:de:fa: 06:b3:56:6d:ec:84:6a:66:15:87:61:6d:57:5c:88:ed:0a:43: da:78:04:1d:30:8a:31:3b:ef:da:5c:1f:74:85:40:4a:fa:40: ed:34:b6:77:c8:4a:0a:40:02:95:0c:97:e3:75:39:19:a2:c7: 9a:0c:e5:0c:a2:0d:8c:c0:90:26:06:65:4e:b6:18:07:9b:ff: 3e:a3:52:f1:92:2b:d3:1e:66:ac:98:db:73:62:17:69:a7:3c: 94:08:96:df:a0:b9:2d:67:65:06:eb:84:bd:14:e6:2e:f8:94: ce:27:03:c2:9b:d5:3f:df:b8:b1:8a:f0:6c:52:bd:b2:d7:3c: fc:1c:fa:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDEDerOW22h/hTA9hL9P7qgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YTc1MjJkMjdlNjJhZTIzYTQ2MDE0M2ViYTY3MzNiNzli MjQ0NzcwHhcNMjYwOTIxMTMwMDQxWhcNMjYwOTIyMTMwMDQxWjAzMTEwLwYDVQQD EyhjNTI5MWRmM2ZiYmVmN2JiYzYzZTZlYWJlZjc1ODk3NTM3NjU0MmE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIm9hK2GjsZlPweZ6IJ8+7T30L6s hsoqx5cdkBrWNX/dMgJ9uEGGAlHEPjWpDnAcFVCm9Myh08XdyFkjQxjIFsQj6Htj Pv0Vtop/zob2eOlmDWjIVTgcv4ESrfqAomO/IQ4YOCeMoSwZCvLdUA8Q0BibYrrc DfBbjwC3AmMmMMY3yjBikPEc6Gaxd0AaTka3h/EzF7gIOOO15ePHRXBPYdOVyd+d YOpDNXOEBFUJarjKOi5nT/Qiq6s0VoIayxWy/RgnMHp/uMEGDt8jkS5psoau+Oif RqIW/eAVO90Fmp2u9Bt2nuf13iUO7y3pHoYJKjyuGYy2B3WV6gL9cbncxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMUpHfP7vve7xj5uq+91iXU3ZUKnMB8GA1UdIwQY MBaAFNSnUi0n5iriOkYBQ+umczt5skR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQYrsnZz8 ukXcS+Uc+DjIgQzypmUnlsmKvWsGbVMA9um0/LT+t2QHDrWajt9BTmih41dwzFrm aa4AMwtNIGjIttWPVMYKpWBQpznAqXQ8277TupQs3PekrDOOW06PSMWBRthB3AyP FOzNQGFiP0YmPVLiqG+BBZkCikgxRd76BrNWbeyEamYVh2FtV1yI7QpD2ngEHTCK MTvv2lwfdIVASvpA7TS2d8hKCkAClQyX43U5GaLHmgzlDKINjMCQJgZlTrYYB5v/ PqNS8ZIr0x5mrJjbc2IXaac8lAiW36C5LWdlBuuEvRTmLviUzicDwpvVP9+4sYrw bFK9stc8/Bz6Xw== -----END CERTIFICATE-----Generated at Tue Sep 22 01:12:02 2026 by rpki-client