$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: 2QJ69i0Q3CZdupXw+tLeJdXZMYzzsWcrKebB/km0f1g= Subject key identifier: A1:BD:C7:71:B0:15:32:0F:DB:CD:42:19:C5:EF:E7:6B:0F:EE:D7:3A Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 01A0C745DA2AED924E55A52F1731E9D13CEF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 143E Signing time: Tue 22 Sep 2026 04:00:38 +0000 Manifest this update: Tue 22 Sep 2026 04:00:38 +0000 Manifest next update: Wed 23 Sep 2026 04:00:38 +0000 Files and hashes: 1: 2JOxayZ4kxrtihpkJSNfTVv34wU.roa (hash: zOn78CRIowaCVixyqjErS7L368UV3aEuLomuXw4ifTk=) 2: 8JmGNshMSYZovGEGptxvSVmLazw.roa (hash: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk=) 3: 9VFCcM5TkSFj-DtH7qLQwgSN5IM.roa (hash: wrh+UMairP6Hp+q2S/1S737Q0ISs8AkPKt06IH0nojo=) 4: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (hash: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc=) 5: Qds8QcMRNkZLZIxEq4DIiHLqmf8.roa (hash: 8W6wOK2I4qsuYzKI/ho+wcaX0Cqt4fg6SETKF3W+ImI=) 6: TjDmMYZX4kBSUtV2aoQj0qKysRg.roa (hash: l2/gMvnSsklv14g/tuA37El8fuSOsjkNRMRQv6RZ2fY=) 7: X1LVS0a4yLVV-n31U0OmgdyXH_Q.roa (hash: HB5LPZBvI9YtdaaDN25t7bfdVncLanwsoppFOKXdT7I=) 8: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (hash: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w=) 9: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (hash: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc=) 10: d0K0IoBy5xJlcUIFuELdP0a1cwQ.roa (hash: 4io78nOLezFoyBWo3ZpnK3RNwopEXZfQZmn24eH/WJQ=) 11: dxZrm_kRJNnz8YeorAaaxgmTmrU.roa (hash: Le5MlQmjVvWn8m1gclKNCqW1PZyJn3stX+9I88dbC/c=) 12: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: 9TMFnceJqPr8hP7hIkZULsndT4YlTKaavYiXly9UoYo=) 13: gVoDkYx52kg2ObqLQQiu3dVABJ4.roa (hash: Q8A5Ai5FoLvBhe3BwpyHiBUhPSy+KXj0LhOWSA21Wgw=) 14: mfX6n982kHfEGonK72FOllXPKLM.roa (hash: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo=) 15: oSJ76RTJAM4Rkm0VytsagsICSMI.roa (hash: 5KF6cvuY3cWzSG6wpKOaFIJmUmHSua9Uf0BUoXvpF6w=) 16: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (hash: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 04:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c7:45:da:2a:ed:92:4e:55:a5:2f:17:31:e9:d1:3c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Sep 22 04:00:38 2026 GMT Not After : Sep 23 04:00:38 2026 GMT Subject: CN=a1bdc771b015320fdbcd4219c5efe76b0feed73a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5c:a0:d8:3d:fc:bc:44:9d:9b:d7:c1:a1:6a: 34:e8:a6:cb:b0:1b:b9:91:75:f4:0d:f1:16:94:43: 29:f0:26:61:d6:27:53:8f:32:47:db:81:ee:dc:82: 68:89:ba:0b:e5:84:d5:d3:fd:e8:b4:7f:03:b8:8b: be:8e:b4:06:83:71:fa:65:f2:2c:ad:75:8a:54:3b: c2:51:33:03:45:cf:09:16:8e:bc:36:bc:25:f7:fa: 7d:57:9b:66:db:64:1f:b8:59:48:ec:a3:21:0c:1d: 78:e8:6f:c0:77:8d:eb:b4:87:d8:cb:6b:b8:1f:3b: 29:81:7e:36:4a:35:26:f1:7c:eb:83:53:90:0c:52: d8:e0:09:f5:c4:ab:78:e3:bc:95:f8:9b:c3:7a:b1: df:be:40:b3:e9:ed:91:9a:a7:2a:ec:88:5d:f7:98: 8c:e3:48:d3:87:ac:e5:3e:74:ba:ff:8a:23:ea:91: 81:94:00:aa:f0:8c:bd:36:34:b9:23:01:69:80:ea: ab:e3:70:84:a7:3e:9f:26:55:d3:a3:f9:b3:bb:00: ce:2c:47:0b:24:7b:21:43:54:f9:c4:59:7c:cf:c6: 85:e8:cf:fa:66:c1:ac:11:0b:d7:68:d4:8f:da:a8: ae:03:df:f7:a7:ba:50:dc:3a:64:b2:09:d6:a0:5d: 4b:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:BD:C7:71:B0:15:32:0F:DB:CD:42:19:C5:EF:E7:6B:0F:EE:D7:3A X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:a8:fe:ae:d9:ff:61:fa:d0:03:dd:51:01:48:73:ca:3b:dd: 6e:93:98:95:e3:b0:12:00:9f:bd:9b:5e:f8:a7:34:d1:20:d1: 28:b1:cd:89:eb:eb:a1:31:41:05:d1:4c:df:d5:9f:39:bd:2d: 2e:3c:28:c5:c2:cf:69:94:6b:b1:2e:0e:97:ab:ed:48:11:e4: db:41:7b:bc:6a:50:51:91:64:fd:02:0b:fa:78:5c:0f:e8:6c: 58:cd:34:85:0d:a0:4b:10:07:ce:9b:40:eb:43:6d:25:97:ff: bf:03:6d:3f:2c:f7:90:92:76:39:1e:d1:e7:42:85:7f:92:f4: b0:e4:b7:51:2d:e4:0f:8b:25:80:74:22:da:5e:65:f4:05:41: 8a:65:18:3f:32:35:6d:b3:2a:2c:f9:ec:11:08:9f:75:ba:8f: 79:79:f2:52:84:bd:b1:b8:36:56:66:ef:91:4d:bb:ec:02:12: 5f:6c:dc:e0:21:e0:0a:53:8b:a6:6b:92:83:98:cc:80:34:0b: 22:ae:22:1d:a9:65:c9:95:af:a8:33:af:5c:89:e6:1f:41:21: e5:29:4f:5e:97:27:a2:90:ca:cc:3b:e5:94:77:50:95:b6:d1: c0:0b:e6:8b:15:43:37:0e:6c:07:f8:9d:42:99:cc:b9:2a:05: 3b:fd:ba:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDHRdoq7ZJOVaUvFzHp0TzvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwOTIyMDQwMDM4WhcNMjYwOTIzMDQwMDM4WjAzMTEwLwYDVQQD EyhhMWJkYzc3MWIwMTUzMjBmZGJjZDQyMTljNWVmZTc2YjBmZWVkNzNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51yg2D38vESdm9fBoWo06KbLsBu5 kXX0DfEWlEMp8CZh1idTjzJH24Hu3IJoiboL5YTV0/3otH8DuIu+jrQGg3H6ZfIs rXWKVDvCUTMDRc8JFo68Nrwl9/p9V5tm22QfuFlI7KMhDB146G/Ad43rtIfYy2u4 HzspgX42SjUm8Xzrg1OQDFLY4An1xKt447yV+JvDerHfvkCz6e2Rmqcq7Ihd95iM 40jTh6zlPnS6/4oj6pGBlACq8Iy9NjS5IwFpgOqr43CEpz6fJlXTo/mzuwDOLEcL JHshQ1T5xFl8z8aF6M/6ZsGsEQvXaNSP2qiuA9/3p7pQ3DpksgnWoF1LIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKG9x3GwFTIP281CGcXv52sP7tc6MB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr6j+rtn/ YfrQA91RAUhzyjvdbpOYleOwEgCfvZte+Kc00SDRKLHNievroTFBBdFM39WfOb0t LjwoxcLPaZRrsS4Ol6vtSBHk20F7vGpQUZFk/QIL+nhcD+hsWM00hQ2gSxAHzptA 60NtJZf/vwNtPyz3kJJ2OR7R50KFf5L0sOS3US3kD4slgHQi2l5l9AVBimUYPzI1 bbMqLPnsEQifdbqPeXnyUoS9sbg2VmbvkU277AISX2zc4CHgClOLpmuSg5jMgDQL Iq4iHallyZWvqDOvXInmH0Eh5SlPXpcnopDKzDvllHdQlbbRwAvmixVDNw5sB/id QpnMuSoFO/26TA== -----END CERTIFICATE-----Generated at Tue Sep 22 12:51:17 2026 by rpki-client