$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json) Hash identifier: mT0zAHsICs4QQEiVzVhbnFpXxJB23GivFrAF16NgOno= Subject key identifier: D6:FC:50:A9:20:57:64:CE:29:29:8B:DE:33:5B:7C:B9:D6:4A:FA:73 Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Certificate serial: 01A0C3324A2D0E886BCBF8451B62A9689676 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft Manifest number: 1A35 Signing time: Mon 21 Sep 2026 09:00:47 +0000 Manifest this update: Mon 21 Sep 2026 09:00:47 +0000 Manifest next update: Tue 22 Sep 2026 09:00:47 +0000 Files and hashes: 1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: BMvudRC9AJLiThRKBK5WzLO+SW7Bz/XJ7zSPfQfh3Oc=) 2: H_7ICe9bA6bKL6KxaXlnbRtE9DQ.roa (hash: myn2XXBsyfDvjK8OtF68llJ02gjDW6IloTyqRTy6l4w=) 3: Hs51wq2_SIQJ1nds1uh8F6Dx3ik.roa (hash: qxptTNT2o/4UgSRP/kpcf65j1wxXKH/EWbmmjxAt01o=) 4: N2OatwOOlKKioT0NRltvF2MW-2A.roa (hash: AtT0Hq5M6f320Q4NS840MNR01KALlUtkbsCAVvpe4jQ=) 5: OnrSgXShMD1_YxLsr4K4NR2DYjo.roa (hash: bEj/ZTsWrileSoseeV3gIpSqKmunzW5sU0pOXuBCYTw=) 6: P36bForyKz3A1xYxUt5uRvnbjGo.roa (hash: CVAU2pcmHNPpR0Ea2g62GxYoWi/yJ4n8I1Gjfyzzm7o=) 7: SM90LiH91VtlPCGHFr3CKSsHv0Y.roa (hash: XAYb3lsOE4KC9elTgFUEcm0bx9BxW9iNpIaDYCdyiew=) 8: UqleOCOfPnolHy26c63w8sv6kxk.roa (hash: TFhiCPhgDCJT/VB/4VLTfoJPPS4mOC/hIwRArT1aGa4=) 9: hA4LZGEpLGlLMjbHRVLskAR0nGU.roa (hash: VmVFGxtwjgzGgXnpNKA7htr01o6wk9c+gM+jTcxW2ok=) 10: kTAGdAP94XB_eZK0C7vAHDqzJI8.roa (hash: CuJkjxQNxfp3wO54mRyTZ1oYxOazwRwfQjI9X+1M5ho=) 11: r_euWEHWB_wzU16rSDnkg8NIiGM.roa (hash: 12QG/5iTtnjlTjpFN6Uc829CvAhr4LDM2fjYVha8AqA=) 12: uZHn0r02l2agjVRMRfZ3xICbMLw.roa (hash: YR/6cl0OhmlwCiQwg5TQ7bSWNguLPLl/GP2GOc23T+k=) 13: yYOwtyKahcxZCOoytNIFiE-qAW8.roa (hash: eofnDKszG901n4rKY8DsTQFASkhAGR/8+Zpt3ZNH6qA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 09:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:32:4a:2d:0e:88:6b:cb:f8:45:1b:62:a9:68:96:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Validity Not Before: Sep 21 09:00:47 2026 GMT Not After : Sep 22 09:00:47 2026 GMT Subject: CN=d6fc50a9205764ce29298bde335b7cb9d64afa73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:0b:7d:e2:73:f5:45:98:1a:ad:0f:3e:91:9d: a9:88:65:d2:d7:46:06:11:98:5f:2e:d3:cd:59:ed: 9a:70:47:d0:ab:4b:57:d1:f0:4a:64:4b:e8:06:a8: 49:e3:7b:0f:20:f9:d2:e8:2a:1d:d6:18:0a:fb:50: ba:47:77:92:a1:aa:d4:46:41:a5:2b:de:e4:4b:53: 75:e7:77:17:7d:6a:eb:63:09:9a:c1:89:c4:15:d3: c7:09:0e:7b:24:22:91:10:e6:6c:22:55:f9:6f:ef: de:18:0a:2b:02:9f:08:13:93:60:b4:25:6b:95:1d: 4c:cf:f6:96:3a:e4:6f:0b:03:57:30:50:a6:9c:ba: 46:a7:d0:39:ed:74:80:80:51:aa:38:f3:5e:8b:42: 4e:97:d0:8a:1b:f2:ae:90:d4:43:e5:0b:6c:cb:33: ce:ef:5d:a0:ca:62:08:0e:7a:c2:81:e9:c7:73:25: e5:9c:f9:47:b7:0c:6e:d4:e4:8e:62:33:02:84:02: ce:d4:37:f1:8b:fd:20:f4:f1:1f:b1:76:96:3a:c6: 53:12:a6:a8:f1:1e:e7:45:95:a3:a7:7e:44:38:e6: 8f:60:50:62:0a:85:e0:c6:be:c1:7b:1e:bf:51:ea: 96:8e:20:d7:c9:10:22:2a:ef:4b:34:4c:61:dc:fe: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:FC:50:A9:20:57:64:CE:29:29:8B:DE:33:5B:7C:B9:D6:4A:FA:73 X509v3 Authority Key Identifier: keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:0f:43:6f:8a:4c:2c:0f:f1:48:51:71:cd:4e:cc:0b:9b:03: 6a:8f:29:0b:c7:4a:c5:86:b5:cb:1a:e3:aa:82:c6:21:11:de: bc:74:2b:c6:07:3d:14:d6:48:a1:28:40:32:c1:4e:05:83:8d: f2:d0:26:10:f7:b7:45:61:98:84:50:98:cd:ea:af:69:89:27: 43:24:f5:0f:cd:eb:76:c8:d8:bd:16:3a:36:b7:31:dd:5c:3a: e0:70:be:16:e0:d8:9f:31:a6:0b:f8:ee:68:39:5c:42:bd:0d: e4:d2:58:56:8c:1b:1a:01:eb:37:04:71:e7:f3:e4:cc:4d:77: a9:3d:cc:7f:8e:9c:fb:d0:07:e3:4a:48:67:f2:6e:58:8a:32: 89:dc:5c:4c:88:d3:f7:6b:81:28:42:ca:07:f2:75:97:b6:81: 6c:46:ad:f1:fc:24:72:c6:63:48:e8:75:58:32:1c:28:f3:bd: b8:ec:37:9e:f7:4e:1b:8c:1e:3b:6b:f1:46:f5:a9:36:f9:78: ae:cf:68:68:f0:52:87:ce:9a:6a:3b:3d:50:15:c6:4a:c2:a7: 4c:3e:3f:e3:21:e8:17:b1:dc:11:22:3f:9d:c2:de:21:8f:4a: a1:d4:6c:50:de:e2:79:3a:26:18:29:39:b3:cb:4c:4d:8d:23: ca:2d:bb:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDMkotDohry/hFG2KpaJZ2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlM2YzMWM5ZWFjZTZmMGE1ZWNjZGI4ZGYyYjAxYzczNTE1 Njg2ODYwHhcNMjYwOTIxMDkwMDQ3WhcNMjYwOTIyMDkwMDQ3WjAzMTEwLwYDVQQD EyhkNmZjNTBhOTIwNTc2NGNlMjkyOThiZGUzMzViN2NiOWQ2NGFmYTczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugt94nP1RZgarQ8+kZ2piGXS10YG EZhfLtPNWe2acEfQq0tX0fBKZEvoBqhJ43sPIPnS6Cod1hgK+1C6R3eSoarURkGl K97kS1N153cXfWrrYwmawYnEFdPHCQ57JCKREOZsIlX5b+/eGAorAp8IE5NgtCVr lR1Mz/aWOuRvCwNXMFCmnLpGp9A57XSAgFGqOPNei0JOl9CKG/KukNRD5QtsyzPO 712gymIIDnrCgenHcyXlnPlHtwxu1OSOYjMChALO1Dfxi/0g9PEfsXaWOsZTEqao 8R7nRZWjp35EOOaPYFBiCoXgxr7Bex6/UeqWjiDXyRAiKu9LNExh3P7iiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNb8UKkgV2TOKSmL3jNbfLnWSvpzMB8GA1UdIwQY MBaAFA4/Mcnqzm8KXszbjfKwHHNRVoaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYt ZGQ1ZGRkMDVkYjBiLzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYtZGQ1ZGRkMDVkYjBi LzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGA9Db4pM LA/xSFFxzU7MC5sDao8pC8dKxYa1yxrjqoLGIRHevHQrxgc9FNZIoShAMsFOBYON 8tAmEPe3RWGYhFCYzeqvaYknQyT1D83rdsjYvRY6Nrcx3Vw64HC+FuDYnzGmC/ju aDlcQr0N5NJYVowbGgHrNwRx5/PkzE13qT3Mf46c+9AH40pIZ/JuWIoyidxcTIjT 92uBKELKB/J1l7aBbEat8fwkcsZjSOh1WDIcKPO9uOw3nvdOG4weO2vxRvWpNvl4 rs9oaPBSh86aajs9UBXGSsKnTD4/4yHoF7HcESI/ncLeIY9KodRsUN7ieTomGCk5 s8tMTY0jyi27Ig== -----END CERTIFICATE-----Generated at Mon Sep 21 19:03:30 2026 by rpki-client