$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft File: u2qi6QuXDRvK7tElJWMlCBFT-dA.mft (raw, json) Hash identifier: w+KDxxV+x002jwQ3mglibviu0KnHivuPSufXlJty5vg= Subject key identifier: 88:36:07:12:E0:17:61:92:63:E2:A6:CB:20:85:4C:FE:CF:D7:53:61 Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0 Certificate issuer: /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0 Certificate serial: 01A0C21FAB94EF038F5E331507E3EF3A7966 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft Manifest number: E1 Signing time: Mon 21 Sep 2026 04:00:50 +0000 Manifest this update: Mon 21 Sep 2026 04:00:50 +0000 Manifest next update: Tue 22 Sep 2026 04:00:50 +0000 Files and hashes: 1: 1-x0LA5b_Qa7duH02aAFMCbeAziE.roa (hash: D5E/NlS1WcmJBkiWUYiira8KCkqBtxvWMFgI/iWwLtQ=) 2: 57AVFEKk7vZln1xu08ncf1wfVP8.roa (hash: DpOPXY5JzxueLGeQrTDBAs7bP1zTXtO/7VEht/dL00M=) 3: 5AtrV7yOPOGzp3dD9scm4jFp88g.roa (hash: Iyw+z4hUQvrtjBYppz1+vkyM47qxvTh/rZ/AFbdmSyE=) 4: 75cRJGWWWeEGDBP5zSNTjgoUGow.roa (hash: q+98+01kCf3O5JbXFHN6n+KofQN/z5Q/5IhPWdMNYis=) 5: 929vYbDJj4se9paqibWN3-3R8HA.roa (hash: W9ddFPxvbc6tqGzHqj597SIXQeJ26nx3+gxFSTYVhW8=) 6: G8t30FnyqJ9nd31D40VQeRTEtBA.roa (hash: TUmnHq75alVMMqFrQcwFLzsSHCqRjTU+zq33n/KhuME=) 7: GyWzmF_PpZ9N7VpvNUnUwxN8sIg.roa (hash: aO6JHojQKb2l7UaVOSnTv4mzQmmXqQjYDswxCMnwBH4=) 8: R6r6-4m3eXKt8b9AzresZI1lWHc.roa (hash: 8di1Oi8xGenPm6U4E5v0M/GzUjBIZHCPAo+Pu/wQRBU=) 9: kCEhbc-CjGlkrVP2PS1PYrIGODw.roa (hash: 9TV84/4RfuYCLfpfpR6Gh6BK5KQrek5oB2df/+w8lAo=) 10: u2qi6QuXDRvK7tElJWMlCBFT-dA.crl (hash: 2mhVPFl4j5K4geS9yxdvaghrrd9XMNr2lrorxY3QHOs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 04:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:1f:ab:94:ef:03:8f:5e:33:15:07:e3:ef:3a:79:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0 Validity Not Before: Sep 21 04:00:50 2026 GMT Not After : Sep 22 04:00:50 2026 GMT Subject: CN=88360712e017619263e2a6cb20854cfecfd75361 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ad:0f:83:c3:ed:de:0f:51:0b:e8:ff:87:9c: de:ff:79:ff:47:55:b5:a3:e2:5c:25:05:93:2e:de: a1:23:f9:e5:5b:63:97:36:2b:7e:f8:9d:70:28:d8: b4:6e:58:76:9c:ae:8c:79:6e:c6:89:e7:2a:1f:4d: 01:e4:3c:96:6e:8c:49:de:a2:b8:09:85:71:54:54: 6c:5b:66:bd:a7:86:41:27:a8:84:75:27:70:8f:44: 83:97:44:b8:a2:86:be:5b:95:04:b1:6d:c3:f5:c6: b5:63:04:29:ec:13:55:e1:f1:b2:9b:3f:be:41:6c: 7b:19:ae:49:7b:d6:0f:75:a7:a0:fa:23:62:ee:0c: 86:ec:19:4f:66:46:09:62:8d:60:45:62:f9:4a:eb: c5:50:07:48:7a:f9:ec:d2:9a:c4:62:15:e1:46:59: f7:58:c1:b3:c5:c4:19:6c:43:f0:ff:45:e7:ca:ba: 05:70:20:d2:05:bc:94:24:09:37:d1:48:10:69:92: a3:ea:f3:fa:5b:69:77:32:f6:9f:cf:ef:9d:57:c2: 4c:7a:21:94:9f:c1:1b:eb:cb:79:fe:fa:98:28:dd: 65:e0:7d:bf:eb:e6:05:7c:7a:32:0a:20:3d:6d:9e: 0f:ed:2d:50:55:37:b8:2e:3d:1d:e2:74:16:f6:c3: 9c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:36:07:12:E0:17:61:92:63:E2:A6:CB:20:85:4C:FE:CF:D7:53:61 X509v3 Authority Key Identifier: keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:82:28:d8:c4:b8:18:13:3c:32:5b:75:35:2d:07:62:3b:3a: 66:70:fe:30:20:f3:b6:3c:d6:69:9d:5e:f7:b7:5c:55:5f:0d: f5:cb:86:0a:7a:a6:0a:02:89:81:09:14:a2:07:77:67:1f:e6: 6e:94:5e:1d:1d:f9:25:25:37:9b:b7:79:d0:14:bf:10:b4:b2: 1d:21:b9:84:7d:c4:37:9a:56:32:46:d5:46:f9:f7:98:f0:cf: c2:c3:90:20:ca:db:35:87:25:9d:9e:b0:98:cb:6c:97:8b:fe: cd:b8:00:1b:33:9e:81:be:1b:ab:ad:c5:c0:14:69:ad:15:21: e1:ed:fe:30:e5:05:9d:0f:73:46:a2:e6:79:f7:22:b7:c6:06: 79:8f:fe:8e:71:74:ef:b2:22:27:24:20:21:f0:61:bc:39:66: b7:14:3b:ac:e3:25:71:00:5b:c2:f2:b4:21:19:6f:25:7f:48: 6d:4f:04:1d:44:7b:61:4e:9b:09:e6:7f:60:ee:20:2b:de:e2: 4b:50:cc:a3:47:06:76:7f:0c:26:df:d3:ed:4d:0b:75:69:3a: 6d:49:da:bd:33:a0:2a:af:fc:63:06:02:ef:55:e2:33:6d:bc: 7a:ea:f8:a0:db:6f:f0:f5:0f:e1:eb:38:be:03:17:ab:c3:f4: 2a:71:da:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCH6uU7wOPXjMVB+PvOnlmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNmFhMmU5MGI5NzBkMWJjYWVlZDEyNTI1NjMyNTA4MTE1 M2Y5ZDAwHhcNMjYwOTIxMDQwMDUwWhcNMjYwOTIyMDQwMDUwWjAzMTEwLwYDVQQD Eyg4ODM2MDcxMmUwMTc2MTkyNjNlMmE2Y2IyMDg1NGNmZWNmZDc1MzYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq60Pg8Pt3g9RC+j/h5ze/3n/R1W1 o+JcJQWTLt6hI/nlW2OXNit++J1wKNi0blh2nK6MeW7GiecqH00B5DyWboxJ3qK4 CYVxVFRsW2a9p4ZBJ6iEdSdwj0SDl0S4ooa+W5UEsW3D9ca1YwQp7BNV4fGymz++ QWx7Ga5Je9YPdaeg+iNi7gyG7BlPZkYJYo1gRWL5SuvFUAdIevns0prEYhXhRln3 WMGzxcQZbEPw/0XnyroFcCDSBbyUJAk30UgQaZKj6vP6W2l3Mvafz++dV8JMeiGU n8Eb68t5/vqYKN1l4H2/6+YFfHoyCiA9bZ4P7S1QVTe4Lj0d4nQW9sOcvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIg2BxLgF2GSY+KmyyCFTP7P11NhMB8GA1UdIwQY MBaAFLtqoukLlw0byu7RJSVjJQgRU/nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt NzI2MDU3YTFmMmE0LzEvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0 LzEvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv4Io2MS4 GBM8Mlt1NS0HYjs6ZnD+MCDztjzWaZ1e97dcVV8N9cuGCnqmCgKJgQkUogd3Zx/m bpReHR35JSU3m7d50BS/ELSyHSG5hH3EN5pWMkbVRvn3mPDPwsOQIMrbNYclnZ6w mMtsl4v+zbgAGzOegb4bq63FwBRprRUh4e3+MOUFnQ9zRqLmefcit8YGeY/+jnF0 77IiJyQgIfBhvDlmtxQ7rOMlcQBbwvK0IRlvJX9IbU8EHUR7YU6bCeZ/YO4gK97i S1DMo0cGdn8MJt/T7U0LdWk6bUnavTOgKq/8YwYC71XiM228eur4oNtv8PUP4es4 vgMXq8P0KnHa2A== -----END CERTIFICATE-----Generated at Mon Sep 21 14:27:52 2026 by rpki-client