$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft File: RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft (raw, json) Hash identifier: XDvOsj52DNJNz3Fx7ep3digb3uUIINNikdfoxrMhYJY= Subject key identifier: 4E:5E:25:AF:C6:C1:84:58:E2:9B:AE:1E:D6:8C:F1:00:46:35:98:4A Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33 Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533 Certificate serial: 01A0BDD51C730237C8ABB95ACBB4AA3A307F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft Manifest number: DD Signing time: Sun 20 Sep 2026 08:00:55 +0000 Manifest this update: Sun 20 Sep 2026 08:00:55 +0000 Manifest next update: Mon 21 Sep 2026 08:00:55 +0000 Files and hashes: 1: 27SFGjL64PRRMSLcGYBH49SrHwY.roa (hash: PITM8gWftdzoJkt0rkZ9FWqRBqnEUQ3T5vRe+zc5/CY=) 2: 5tISpF8rQEYFqX2FwQmh5rWJ0Zk.roa (hash: AczR6yQs7ci1IaX5b+iS3KJri6446eAoxlf9O/ku2LE=) 3: CFo5ABZ8MUKR3Fd6UO8--zq7M8k.roa (hash: 2+XQO3qwflJmVUasaub9xdlpRBF+UPsxhcWzlGiEL9U=) 4: CJ-zj836A3TR54KML6nA2kNlyiY.roa (hash: AuGdHKTStnhkWfUpHj8s2x6Pp9jt1yZgqVw4hJJIo3Y=) 5: HLt3ChQvLj8LY2RlhdFsx32ZjtQ.roa (hash: wKiOyGKSsl/R2H5PXAn1g9VUgp4V7yTcuvPe7XIgMUI=) 6: N1LDUBXoMuyaQ5RB_L5TdL6A_bo.roa (hash: ydFk7XHt/wPpdtN+nRxyF+IGde9jjOJbhdYJVNBXgSE=) 7: RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl (hash: fEZBwDGlA/hyaId5gDAKWJiiFwaSDUm/ScSD1b5LrLs=) 8: YGc8XwIVxvPvNOy1PgoUyW2QPp0.roa (hash: jYxSVOKSDjKakNAM1hB0qhbPKHM/2nh6XhBXQd6OChs=) 9: fJB8oRf1C6vKaO7myZ7LMHrSK0E.roa (hash: Z3DT4Iuv/+d3kQTawlogZW0GVTOl0W6XRptIt8v4Yuc=) 10: fTMIdoB4kQzu02mFfH9z8btZ5uM.roa (hash: 5eDUcm8uO6+nohQB/UiadkgP4q7oAy/sELIvvCPSQxA=) 11: nk9xUVbrQk03Ta5kBEtwBRsxj3o.roa (hash: y8rjtAjlPGYqktsMfNPd+YZPmUHg0mqok5iv3DPzIpQ=) 12: qfTY39j6wENhgC39URgloBvaDwc.roa (hash: MJgSYqEnjtZo7TnO5PmqwrhzDK5fq5ePybyEEHZ72Z8=) 13: xNYBtHtKlWI4iA2yM39CNxxB3YE.roa (hash: c5VvgWr2oNDztERgklFXuCsqKhPSllyvYEbuD8nPSxI=) 14: zaDnFGvlfelI_tMjoTP339vPBGw.roa (hash: 6zQB6LLudq9lrD59fSKuhQnrVhHCZxEGxEn2HPI44zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 08:00:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bd:d5:1c:73:02:37:c8:ab:b9:5a:cb:b4:aa:3a:30:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533 Validity Not Before: Sep 20 08:00:55 2026 GMT Not After : Sep 21 08:00:55 2026 GMT Subject: CN=4e5e25afc6c18458e29bae1ed68cf1004635984a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:12:9e:90:29:ee:4c:30:ff:a3:59:be:c0:cd: 0d:8e:ab:48:cc:a9:4b:9f:dd:c5:b6:7c:ff:8d:88: b8:e1:42:21:61:e7:9f:1d:9e:ff:7b:5a:2a:f8:67: a3:d1:9f:86:89:58:52:8d:0c:39:4c:51:e6:4d:56: cb:ac:5d:80:03:10:35:81:59:fe:11:ff:12:11:9f: 9e:02:09:d6:5f:82:73:6c:d1:26:85:be:8f:06:f3: c2:df:2f:26:05:3f:2b:f3:4e:22:d9:62:64:ba:40: d3:26:d8:4c:4b:11:ff:a9:97:a7:90:75:43:f8:88: 1f:9a:e4:23:aa:54:d8:45:92:8f:28:29:4c:20:31: e6:1e:86:a9:b7:b1:88:bd:15:71:c5:ba:a3:de:07: 51:6f:c3:22:2f:f7:7a:45:0f:5c:e1:d6:ab:95:75: 4a:a4:fa:7e:d0:49:8f:90:fb:5e:66:2e:21:ac:9c: f3:c3:a3:93:ef:cd:ab:f0:f9:02:b8:3a:96:95:d7: da:94:62:28:3a:c0:47:9b:91:79:87:54:eb:8c:8f: 37:f1:a4:f6:da:c8:c0:16:c1:96:71:2c:27:1f:2a: 2c:84:dd:fc:d6:6d:07:f5:80:9a:ba:d1:07:37:ca: 85:60:49:c4:be:0f:85:2e:61:db:ed:c5:39:49:d9: 91:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:5E:25:AF:C6:C1:84:58:E2:9B:AE:1E:D6:8C:F1:00:46:35:98:4A X509v3 Authority Key Identifier: keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:23:70:77:e0:28:60:78:b2:b4:ea:52:e4:f4:f8:ff:4e:3a: 23:b0:0a:25:03:aa:5b:62:5a:7c:bd:89:da:d4:d5:3f:f3:43: 3f:c7:c1:da:b8:b0:f7:1e:e2:1e:2d:85:9c:6a:99:93:86:2e: ed:52:10:db:72:83:15:e3:f1:b6:ef:65:ab:91:36:e8:b7:a2: 32:5b:19:e9:cc:45:72:57:76:ca:d1:7d:65:37:0f:a1:d2:9a: 69:4c:a7:ec:ba:98:7d:6a:bd:6b:9e:95:81:da:fd:20:bc:9e: 68:d6:50:58:24:7c:3d:9d:ee:14:40:e4:dc:9a:46:13:66:9a: d1:67:32:17:21:2c:b3:39:f5:83:3f:c8:43:ce:c3:9b:b4:5a: ce:e4:2c:82:23:f4:19:17:a5:b4:60:af:2d:34:a1:2a:9a:f7: c1:e3:0e:6a:dc:6d:7e:d9:7f:ce:85:6a:f5:50:24:b4:e0:22: 81:70:5c:c3:11:4a:39:0d:07:ef:60:62:41:f3:bc:4e:0b:70: 11:f8:45:be:8f:5a:57:01:5d:03:e0:3f:2c:0e:ee:3a:e0:e8: 98:6e:52:31:9b:43:fd:b5:67:ce:d2:79:5e:65:b3:47:67:56: 21:21:e5:22:14:bd:03:a9:ea:b8:20:55:3e:cc:48:a5:05:0b: 77:8c:69:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC91RxzAjfIq7lay7SqOjB/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTkxMjA4MDljMjNiZjMwMzNlM2Y1NzM5OTUyNzZmMGM3 YTI1MzMwHhcNMjYwOTIwMDgwMDU1WhcNMjYwOTIxMDgwMDU1WjAzMTEwLwYDVQQD Eyg0ZTVlMjVhZmM2YzE4NDU4ZTI5YmFlMWVkNjhjZjEwMDQ2MzU5ODRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xKekCnuTDD/o1m+wM0NjqtIzKlL n93Ftnz/jYi44UIhYeefHZ7/e1oq+Gej0Z+GiVhSjQw5TFHmTVbLrF2AAxA1gVn+ Ef8SEZ+eAgnWX4JzbNEmhb6PBvPC3y8mBT8r804i2WJkukDTJthMSxH/qZenkHVD +IgfmuQjqlTYRZKPKClMIDHmHoapt7GIvRVxxbqj3gdRb8MiL/d6RQ9c4darlXVK pPp+0EmPkPteZi4hrJzzw6OT782r8PkCuDqWldfalGIoOsBHm5F5h1TrjI838aT2 2sjAFsGWcSwnHyoshN381m0H9YCautEHN8qFYEnEvg+FLmHb7cU5SdmRXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5eJa/GwYRY4puuHtaM8QBGNZhKMB8GA1UdIwQY MBaAFERZEggJwjvzAz4/VzmVJ28MeiUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfSNwd+Ao YHiytOpS5PT4/046I7AKJQOqW2JafL2J2tTVP/NDP8fB2riw9x7iHi2FnGqZk4Yu 7VIQ23KDFePxtu9lq5E26LeiMlsZ6cxFcld2ytF9ZTcPodKaaUyn7LqYfWq9a56V gdr9ILyeaNZQWCR8PZ3uFEDk3JpGE2aa0WcyFyEsszn1gz/IQ87Dm7RazuQsgiP0 GReltGCvLTShKpr3weMOatxtftl/zoVq9VAktOAigXBcwxFKOQ0H72BiQfO8Tgtw EfhFvo9aVwFdA+A/LA7uOuDomG5SMZtD/bVnztJ5XmWzR2dWISHlIhS9A6nquCBV PsxIpQULd4xpuQ== -----END CERTIFICATE-----Generated at Sun Sep 20 17:40:03 2026 by rpki-client