$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft File: pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft (raw, json) Hash identifier: a7pu4uMztzhg+ev63Cw3UK9vQgdVUXtWxzGW5n6L1ZI= Subject key identifier: 68:25:DC:19:EA:30:D0:51:2A:72:71:7D:5C:03:EF:64:76:74:7F:6E Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2 Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2 Certificate serial: 01A0BF5560711017FD03616C9086060907A1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft Manifest number: DD Signing time: Sun 20 Sep 2026 15:00:38 +0000 Manifest this update: Sun 20 Sep 2026 15:00:38 +0000 Manifest next update: Mon 21 Sep 2026 15:00:38 +0000 Files and hashes: 1: 8eWn-LZ8SHda6Hq0PZ8MjLvheII.roa (hash: t0Q9JGg0FFkCyUnnAjxlIairjnAp1fGIhWq7kxGfNJg=) 2: Dl8kjWnig9EJLu_V18bsJwWgThI.roa (hash: l/ftiedkdOtevwG6rB8zoiK5YC04kv/8SOqTEc+HzIM=) 3: E2z6-aE0lSQ3PEiEzxW-JiraDEE.roa (hash: KsnALsa02zQjMMj5q5msrnek1tk5/ZfIcaQoMmke+mE=) 4: EFeoepCweNchcY3yfWtwGD_ZuaI.roa (hash: pYKBI/KFA8wkQgixMUY8skRW5VKXK8M6e31dK0HwAis=) 5: G_cJpHD_tLUwCg2RMVO24zq3Grw.roa (hash: xNL/dYNyvvIlOS2j+6Eyo8zzNd4uG3W4GbIaOCiKFl4=) 6: HAt__vrw52VuZkpPDGhyJ1Sqq6U.roa (hash: j9XKjBk7nFDWQWKVzLFTasY9jD5D/3qYwK+3ZpEzpj0=) 7: I4AgYPx6q-AXqCOLfyv2qdwV6wU.roa (hash: 8y1qmodCTXEdWfudBIOg5DrmRpEF6FezAaUs7Ropbsg=) 8: JEVNWQm_Cx4mWqq5f1Vg9xZ9JzQ.roa (hash: suXL0V83sdkLjwTY6BS/4DMQepDMTnnLPjHsyUslYPM=) 9: JpbDWGlEPEX32kqGhGQOeWSYx5Q.roa (hash: JNJaUsPN0pZohEeyDrNgCF5tl5YPCYCRSpC1PRT7kZo=) 10: MlxaAHik4Irhhg2pDV_s_Rvf7bI.roa (hash: 3NA/JBsu3EKmNF330/KjUrrDVxnecTt8Q2GPQT4XUMo=) 11: O1gPaiiuHk3Ynoh8wcqM-XkdraY.roa (hash: suwi7xOa2pEQsq5Ilao9i/obnAr3R24ZSt95W5s3w8g=) 12: QOM15JeN0LuoBWCIcbxrvBihxTo.roa (hash: RgmDFHjBWCEG8nuyIsqAeoRJCFfCkfWjGGmoJpZMo70=) 13: R26ho8RD5wA-FJFM2n4H8lCIMDU.roa (hash: K8bV/6TdZ6xy+XDttrJ2eOGl3w4V8h8EbfrCk8vy/rQ=) 14: SirBpcdRe0m-u_7kALpPCFiPrPs.roa (hash: Z3DSwVfj4GWtECnzKi66mFueac7BJgJGEnZh6Zx4AQg=) 15: UNcrdBCA_IAi--0l3IsFosaU7lY.roa (hash: 8FZC4gbje388SsnaqTJsrZ50Gofq4vRkK1UBtNYlK+4=) 16: X4pU60oDGJrdQI6mIHlAf5rK9qE.roa (hash: pOrJ7LztgT1wu4oDyjOGr9iWSnnOAH4w2AcPvFhqBnA=) 17: Xy2lL2DYT88B5SmizPLux-GXV3Q.roa (hash: Mh0mK933Nfyx6zsgugTVc4TLaFDjax/ayFtH6UHp1oo=) 18: ak2Qp1unBPBGGKshocpx5pL8uig.roa (hash: mOmd1/1RN87KSSOrhLIJgH1FH+upMs+93rOqXUD4go4=) 19: g4bMCR1I2A-6CXSx0W_2l3WKHNg.roa (hash: W5QhjY/Vw7lnM6k8E56FkxoOhrKCflFe48p21g7wGsM=) 20: i5MOqIaSyXP0Wf307JZ-H9fPCU8.roa (hash: WqvJAJL4M1ePBiSqQQISn5kDX+foal+qOH30XzgeJBs=) 21: n5NcxiT9PS0KRcc3R-BBqbuxAco.roa (hash: bz9bpUxzgrZqP4jqMtfZiRv9Qka9ZHViEEqOfmNETJA=) 22: os3bcu3roUzbLBzHQwm9bp3nxZ8.roa (hash: lfz697NMPxlXy6wIBOMRer/mHkvfB1xMD+9SuaGfDyQ=) 23: pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl (hash: eItve9rgUFf8iljGb3dfYiMdGC/CcLhmhXDfg9EUN5Q=) 24: wyD5rZUYnotDvDLBTn1HvdDE-sg.roa (hash: LP8H59Ja7nr0y53p7ISvyJuUcJ0QD06m9kkaSrByJHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:55:60:71:10:17:fd:03:61:6c:90:86:06:09:07:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2 Validity Not Before: Sep 20 15:00:38 2026 GMT Not After : Sep 21 15:00:38 2026 GMT Subject: CN=6825dc19ea30d0512a72717d5c03ef6476747f6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c8:b5:6e:b3:2a:ec:f7:46:f4:35:2e:aa:32: 9b:51:11:f9:dc:5e:d9:56:14:74:90:d8:88:aa:bf: 8b:28:bf:71:71:cc:a6:da:42:db:fb:66:7c:2b:08: e1:21:be:4a:d3:df:e8:12:5d:dd:31:9d:e1:68:37: 53:a6:23:35:43:a3:41:13:3b:40:19:0f:de:56:c0: 5f:ab:54:5c:5b:47:4b:9b:c1:c5:99:d8:47:17:29: 85:a4:44:2f:12:1b:15:ff:da:5d:19:53:9e:3c:02: 6a:4a:95:85:44:cc:9c:c0:6d:09:48:d6:58:72:08: 55:63:b1:92:3a:6a:e4:14:f2:54:2f:91:f4:e8:2c: d4:da:09:08:59:1b:81:22:18:10:45:b5:a5:fb:0c: eb:3b:26:ec:56:26:9e:0a:f1:64:ce:d3:d1:56:11: b2:69:05:9e:3a:38:c3:b9:35:e1:c2:9a:cc:32:4d: 51:d9:1e:31:24:b5:e8:18:f3:53:e3:a8:f1:2b:ab: cc:9c:3c:5c:54:ea:87:4d:9d:a6:97:21:32:cd:70: 7c:a3:bb:89:d2:c9:c4:1e:41:67:75:3f:4b:26:70: 82:4d:7f:eb:9a:88:05:a9:ab:f3:84:e7:2d:b5:c8: 10:42:20:0f:3a:07:d9:43:b9:88:12:f9:ad:d4:72: 92:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:25:DC:19:EA:30:D0:51:2A:72:71:7D:5C:03:EF:64:76:74:7F:6E X509v3 Authority Key Identifier: keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:1b:bd:30:94:8b:b5:aa:d9:2d:bc:be:54:81:46:be:40:71: 50:c1:bf:14:ae:bc:02:65:72:f4:d5:ca:fd:3e:f1:b4:72:32: 2c:ff:93:78:54:84:b1:e3:60:4c:22:67:9d:f7:5d:b7:dd:49: 75:88:30:f1:b9:20:f7:cf:a2:58:92:ed:56:61:10:31:15:2f: 2b:9a:88:8b:c9:50:7e:1c:0a:ee:47:c3:92:d1:eb:fa:1b:08: b0:9a:7e:34:94:60:e1:68:5b:be:ab:3d:1f:b8:0c:5b:ec:16: 53:0d:f5:b4:06:22:2d:c3:2e:26:c0:98:e9:dc:51:ac:fa:35: c8:69:74:5f:be:aa:cf:ac:1a:0d:5a:36:8d:2b:34:1a:6f:46: 8a:42:98:15:50:75:af:bc:7b:54:66:ad:04:44:ac:66:f4:82: c5:b7:1b:d5:fc:cf:e2:05:14:86:85:97:53:20:b7:77:0f:5f: 4f:f3:a2:43:e8:7d:90:2d:8c:2d:96:1d:5c:5e:bb:23:b1:72: 12:f5:b9:70:89:68:37:56:d1:1d:09:b7:37:59:64:30:f8:63: dc:14:e0:0e:ee:74:3c:fc:25:e1:e0:8d:4a:0d:5e:34:8a:9a: e3:d1:15:91:ce:d5:60:44:70:74:45:8d:56:a2:18:6f:dc:25: 93:cf:0f:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/VWBxEBf9A2FskIYGCQehMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3 ZDE3ZTIwHhcNMjYwOTIwMTUwMDM4WhcNMjYwOTIxMTUwMDM4WjAzMTEwLwYDVQQD Eyg2ODI1ZGMxOWVhMzBkMDUxMmE3MjcxN2Q1YzAzZWY2NDc2NzQ3ZjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMi1brMq7PdG9DUuqjKbURH53F7Z VhR0kNiIqr+LKL9xccym2kLb+2Z8KwjhIb5K09/oEl3dMZ3haDdTpiM1Q6NBEztA GQ/eVsBfq1RcW0dLm8HFmdhHFymFpEQvEhsV/9pdGVOePAJqSpWFRMycwG0JSNZY cghVY7GSOmrkFPJUL5H06CzU2gkIWRuBIhgQRbWl+wzrOybsViaeCvFkztPRVhGy aQWeOjjDuTXhwprMMk1R2R4xJLXoGPNT46jxK6vMnDxcVOqHTZ2mlyEyzXB8o7uJ 0snEHkFndT9LJnCCTX/rmogFqavzhOcttcgQQiAPOgfZQ7mIEvmt1HKSpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgl3BnqMNBRKnJxfVwD72R2dH9uMB8GA1UdIwQY MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnhu9MJSL tarZLby+VIFGvkBxUMG/FK68AmVy9NXK/T7xtHIyLP+TeFSEseNgTCJnnfddt91J dYgw8bkg98+iWJLtVmEQMRUvK5qIi8lQfhwK7kfDktHr+hsIsJp+NJRg4Whbvqs9 H7gMW+wWUw31tAYiLcMuJsCY6dxRrPo1yGl0X76qz6waDVo2jSs0Gm9GikKYFVB1 r7x7VGatBESsZvSCxbcb1fzP4gUUhoWXUyC3dw9fT/OiQ+h9kC2MLZYdXF67I7Fy EvW5cIloN1bRHQm3N1lkMPhj3BTgDu50PPwl4eCNSg1eNIqa49EVkc7VYERwdEWN VqIYb9wlk88PnA== -----END CERTIFICATE-----Generated at Sun Sep 20 20:11:50 2026 by rpki-client