$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft File: Ka7sqK_wmbK64FeB3KjdkCfw2is.mft (raw, json) Hash identifier: DWu/0xlEurtWSM++q6Rg2YTlYaX60OqSC8E8Fdc5fTE= Subject key identifier: 25:E3:B4:D4:FE:2C:08:AE:B7:54:20:52:31:00:A6:8C:A3:3D:E8:ED Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b Certificate serial: 01A0C4E94AC01A122EC587CCE83686EA53D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft Manifest number: E0 Signing time: Mon 21 Sep 2026 17:00:18 +0000 Manifest this update: Mon 21 Sep 2026 17:00:18 +0000 Manifest next update: Tue 22 Sep 2026 17:00:18 +0000 Files and hashes: 1: 1q_wYD9UWOnoJzVrOoUZdi0ptKs.roa (hash: VrKJCQshMNsRpRS3xMtIqZM3UIX0Rv/9TMlKh43+0eE=) 2: 41i4ev5edbKVJwvdRc7UmMCrvCg.roa (hash: m9BCRj3y94R37HOuPnWLtwP7M0mYu2TFW0DGKzHM/Z8=) 3: 50FgNVwdKIXZBSoi9_tx_m369VY.roa (hash: ECrdWmJHCoSD4ehG05AezfCmwTDPcEay5D7cVyccxQw=) 4: 7yrgfzbw8vVRPOjj7HWXtxyf49Q.roa (hash: md2tHitigyecVuWcaFRQgwV0T+xTsDPtPKLbeAD5RVI=) 5: BdOjrY77wFG1RfqnZLrdZFMXaRg.roa (hash: bODeK0rFTfjBKeuHpe99mPxykv44Z0oBibXlE79cC5U=) 6: FLDisamNsDJXm_1lT92yfeRj3fw.roa (hash: WM25J4c59hU5SI4kz6OM2HoWYEmKXTDdKjYCSlG2JzI=) 7: GS38DtcRNFiCDgomRRGuYwhjhtk.roa (hash: vhy5Ct6d/4AD2NqH7XvOO/NEboMBe6M9200o1l76a98=) 8: IDFQmB2_BNbe8TZvBZB6pYkqhGU.roa (hash: dE0Z7qv5NDY7r0/9XxQ9jfsrqbdxqd+FO+WrhOi5Glg=) 9: Jj70oOtEM3MPYlWgVX1aJYN3MXw.roa (hash: xzFEEvPbBuccgBOT1CsatLmHtV69WRilCT0khWKpwtQ=) 10: Jk_N7QSRVi_cTxcu3qy15ogPA68.roa (hash: Rmy9FhhubCl3WFg5IP5VOAwqyczxSE6B2MhGe3ccsM0=) 11: Ka7sqK_wmbK64FeB3KjdkCfw2is.crl (hash: ArNDXJarQRENEjrGjz9D+gdI35QVllVVIFkCEXQILno=) 12: NklB14-VXLI3MM6lJe389quYPZU.roa (hash: D2ILNVHNm82CCp8tZk+B53IKie8TqikfqpmmGRxzs5M=) 13: URT0EEJBnslT-0WyvEI0zhxE7ao.roa (hash: l8gQYKhmIYyk/qnAnSCwTsLP9MGIBmIKOkyQVshPQkY=) 14: VOA0hCAmccn3JFjBj1YG73p2_z4.roa (hash: fdiyK2e1RDodBjjbIJyeBT4dY1npNcatRvvQ4NjK3Go=) 15: WFW6qhbNTOwNvMn1wBdtZc0maBc.roa (hash: 4FeYT4PmqlfqsjKx24dhNEkHWmZbQRRBE78LWYeUekw=) 16: ZOUpcJbmawhfKT6X9vbpqXgFbzE.roa (hash: t1IEQIm5R7nnAL2Bg46AN21+xubthTU7oKqD6v54mRI=) 17: _WY29sxvL7eTgbKFEoCzs5DGbWk.roa (hash: 0n3QlO/r3sjWRk/sTTbpZIaERpyILu3lDPLbKxDkXXE=) 18: h-EWcWkmbvgj39jkxm-JcD4jNys.roa (hash: 5gX5iFM/ehmHTHBUKpjDT1zVGwl4cU31igc51yeX2UU=) 19: j4Fd2DjxWr_xPGcMiuUhdZLMc30.roa (hash: KhwmTUHddEmqeMPHDyYX5yKpCm2bT7FKBk70Iu6qVsU=) 20: kA7PdZv1BHY99jFpYu5rnXF5Gpw.roa (hash: cX0Aca9kGYKiN/9m9sBSvjG37vCXXVdWtb4rGx97cf8=) 21: lUlD9gbYsyOLr3r0s3Uaa4KVupU.roa (hash: Bx05tts8mxf//4522K5SFSuxKCitbQyyOHV0CHxYOm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 17:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:e9:4a:c0:1a:12:2e:c5:87:cc:e8:36:86:ea:53:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b Validity Not Before: Sep 21 17:00:18 2026 GMT Not After : Sep 22 17:00:18 2026 GMT Subject: CN=25e3b4d4fe2c08aeb75420523100a68ca33de8ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:a4:20:64:79:c4:76:c1:48:27:f7:7f:b0:ac: 6c:a3:6d:83:64:3b:bb:b8:2a:81:a3:4c:7c:a3:7a: 6c:f9:7c:5c:e6:17:49:52:a6:74:be:ce:89:f7:50: fd:67:62:f3:81:b5:33:c6:15:12:40:11:f8:55:4d: b9:0f:9c:4b:4b:b8:94:31:3e:79:25:e8:d1:f1:ee: 38:f4:50:82:1d:36:76:1a:61:9c:bc:5c:17:78:ec: 96:f3:e6:b2:91:71:a9:9e:33:83:17:be:f6:a4:0a: 3d:ba:dd:27:69:11:4a:ea:94:58:58:c9:86:a7:06: 5e:5a:19:82:6e:80:7f:31:7e:16:95:40:85:83:6b: 3d:a5:9b:ca:03:9f:82:16:04:ad:56:e9:0f:ff:67: 7f:ad:68:6f:fb:d1:2a:a7:a0:b0:f0:bb:6d:b0:24: 0b:28:e3:88:ac:1d:52:8f:f1:27:4a:7a:58:c2:80: 30:d9:ce:66:91:27:54:70:70:e4:11:74:d3:f4:8d: 78:e4:e1:1d:3c:96:4f:63:92:b7:89:f2:31:5c:ed: 36:b8:22:3e:a5:66:aa:fe:3f:33:d5:73:f1:87:11: 0f:6b:23:a6:a9:98:13:98:ca:6f:93:97:48:11:58: 50:d4:57:2b:68:7b:61:31:25:00:d2:5a:dc:43:e3: 49:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:E3:B4:D4:FE:2C:08:AE:B7:54:20:52:31:00:A6:8C:A3:3D:E8:ED X509v3 Authority Key Identifier: keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:33:ad:9b:2a:82:43:43:3c:28:6a:4a:c0:9f:8f:37:14:51: e9:ae:ec:1a:7d:49:1f:d6:01:40:cb:f2:49:64:47:bc:94:68: ea:14:9b:3a:55:43:b1:04:a8:f0:84:48:4c:5d:6e:ca:25:df: f8:15:ef:88:b6:09:e3:10:01:f9:67:84:4e:22:bd:db:02:38: aa:be:f5:a6:01:85:c9:7c:52:55:c0:fd:a2:ef:0e:3a:80:2c: 87:7c:1d:82:7d:56:e4:f4:e8:ee:ab:e5:20:e4:b8:fb:93:f7: b1:c9:fc:8b:14:50:b3:a2:0e:ab:46:38:37:ee:f3:2d:40:01: d6:08:4e:a8:ef:a9:f1:6d:a8:19:a2:26:fa:ee:77:ae:94:78: 97:a3:6d:5e:6c:a9:95:66:21:9f:ce:86:dd:4b:cd:48:f1:43: 05:c2:9d:de:15:a2:5c:54:61:02:8e:cc:9c:15:bb:be:10:89: 67:39:41:12:a7:ce:5a:b4:3f:2d:44:06:e1:af:8b:25:ae:78: 5e:4c:9f:59:d7:d6:71:56:6e:5a:8c:67:06:07:82:77:75:f8: 3a:80:53:76:0f:55:5c:69:0c:82:ef:8a:61:1b:10:d9:b1:e8: e3:35:a5:31:3f:da:a0:a8:79:54:c6:21:bf:35:4c:01:62:6f: 24:63:c6:45 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDE6UrAGhIuxYfM6DaG6lPQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YWVlY2E4YWZmMDk5YjJiYWUwNTc4MWRjYThkZDkwMjdm MGRhMmIwHhcNMjYwOTIxMTcwMDE4WhcNMjYwOTIyMTcwMDE4WjAzMTEwLwYDVQQD EygyNWUzYjRkNGZlMmMwOGFlYjc1NDIwNTIzMTAwYTY4Y2EzM2RlOGVkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh6QgZHnEdsFIJ/d/sKxso22DZDu7 uCqBo0x8o3ps+Xxc5hdJUqZ0vs6J91D9Z2LzgbUzxhUSQBH4VU25D5xLS7iUMT55 JejR8e449FCCHTZ2GmGcvFwXeOyW8+aykXGpnjODF772pAo9ut0naRFK6pRYWMmG pwZeWhmCboB/MX4WlUCFg2s9pZvKA5+CFgStVukP/2d/rWhv+9Eqp6Cw8LttsCQL KOOIrB1Sj/EnSnpYwoAw2c5mkSdUcHDkEXTT9I145OEdPJZPY5K3ifIxXO02uCI+ pWaq/j8z1XPxhxEPayOmqZgTmMpvk5dIEVhQ1FcraHthMSUA0lrcQ+NJKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCXjtNT+LAiut1QgUjEApoyjPejtMB8GA1UdIwQY MBaAFCmu7Kiv8JmyuuBXgdyo3ZAn8NorMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWTOtmyqC Q0M8KGpKwJ+PNxRR6a7sGn1JH9YBQMvySWRHvJRo6hSbOlVDsQSo8IRITF1uyiXf +BXviLYJ4xAB+WeETiK92wI4qr71pgGFyXxSVcD9ou8OOoAsh3wdgn1W5PTo7qvl IOS4+5P3scn8ixRQs6IOq0Y4N+7zLUAB1ghOqO+p8W2oGaIm+u53rpR4l6NtXmyp lWYhn86G3UvNSPFDBcKd3hWiXFRhAo7MnBW7vhCJZzlBEqfOWrQ/LUQG4a+LJa54 XkyfWdfWcVZuWoxnBgeCd3X4OoBTdg9VXGkMgu+KYRsQ2bHo4zWlMT/aoKh5VMYh vzVMAWJvJGPGRQ== -----END CERTIFICATE-----Generated at Tue Sep 22 02:25:20 2026 by rpki-client