$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft File: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft (raw, json) Hash identifier: rdkP/m66ur9/VPkJ2Gu+qtirCKFIfwvopP8RjJPFXX8= Subject key identifier: D6:BE:F0:BF:B9:EB:0B:A4:7A:F4:AA:26:3C:CB:63:F2:73:B3:3A:19 Authority key identifier: 43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 Certificate issuer: /CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Certificate serial: 01A0C5C55C97EF950E67698219C8F09EA482 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft Manifest number: 1A8C Signing time: Mon 21 Sep 2026 21:00:40 +0000 Manifest this update: Mon 21 Sep 2026 21:00:40 +0000 Manifest next update: Tue 22 Sep 2026 21:00:40 +0000 Files and hashes: 1: 1Xksz4pAytZHMrrT7gOuFdy8S2Y.roa (hash: HuNf5dwLg/DJcTEcYtbO8BEopfRLLX+209pk2+0+87w=) 2: 3uaiubVaYwEf-0pq3jOcgWmJ5CE.roa (hash: +/DqQfsYBGZvH5gjSmEEf+nK4crysz9SgEpPppJMqlo=) 3: I08p1jkDdJlEDsjwq053srkjN2k.roa (hash: La1YGwc3oCLT3rS+rl/RN0PZ9UFeOvqPsj5JGqvzCv8=) 4: I6YWMGhy7HKFnX7IA6Ri3Fvq3Bw.roa (hash: iO6NFnEQ5zNAX8dkduVe692P6jMfZQ6IsoktNrW/oGA=) 5: KbtlTKcgt-X8HNV4rKo5uZlq6R8.roa (hash: 70QTuQkF5890Kc+PvR2XYv1coLUM/SKD0ZPfp0La8K4=) 6: Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl (hash: vVYhxRNdFhWTQhZBah83/d7ZXKgz8Spc40LgBD2wqb4=) 7: aFH3yZOCBvv0pwITn-ojOO9u5_Y.roa (hash: R+3z3be5a6cpJXKXgxNcsq7jkEToT3RKyUkCWxn8eBI=) 8: cbkmSv4A8E7qdpGnIA9EV1uMTfI.roa (hash: Etb18uo7Rn29ZvaJx07byCrsL8cUj5zuO8qDMwtLZ0E=) 9: g8lpKS3Uw8kC5lMG62drJ46w5hs.roa (hash: 83NMQZQtm0Gu60VzRcxhZibSAqmZFrS/fqUqV713Mcs=) 10: zQaBu8xvqsgQldV2qdnBjEZymN8.roa (hash: gNV6m/aR4O8Blczk03nyUg7ckGuOlJt+WZprd2w5EI8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 21:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:c5:5c:97:ef:95:0e:67:69:82:19:c8:f0:9e:a4:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=43d5ba0815c9f5193f80989ee893acacc4ba8849 Validity Not Before: Sep 21 21:00:40 2026 GMT Not After : Sep 22 21:00:40 2026 GMT Subject: CN=d6bef0bfb9eb0ba47af4aa263ccb63f273b33a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f2:c1:f6:f9:6d:31:fc:c9:1d:46:8c:e9:e9: 66:8e:24:88:13:54:07:ac:97:aa:65:aa:79:6b:0d: f9:38:91:42:5e:a6:bf:8c:df:e6:74:5b:47:a8:7e: ea:46:1f:44:95:ca:9b:ef:2d:51:10:59:f1:19:68: e7:5d:a0:5a:b4:e0:c2:a0:b5:b6:ab:a2:6e:27:43: 6b:da:cf:df:63:0e:38:e5:e0:3e:cc:b5:f0:5e:18: 55:5e:7b:e2:c2:08:67:2a:8e:fa:da:54:33:6d:66: f6:c6:7e:84:20:08:e9:d2:21:e8:86:0d:1c:e4:6e: 5e:03:c9:a7:0f:ca:59:91:cd:ce:fe:2b:2a:d6:50: 35:46:0f:23:96:87:7b:94:5f:84:f8:3f:ea:8e:7b: dc:72:cd:df:b9:8e:8d:e4:7d:aa:70:33:bb:05:78: 78:63:39:5b:7f:f4:84:af:9d:7e:1b:3d:34:99:c1: 82:0a:d6:8f:d6:90:57:75:d4:56:43:64:af:af:bb: 13:d3:dc:fa:16:d3:ea:c1:ef:8a:d9:f5:1c:43:54: b5:c6:a8:23:bd:23:bc:bd:a1:51:3d:52:32:7d:cd: 6e:84:eb:52:99:0b:25:e3:d0:fb:de:dd:3d:cd:4c: 6d:b7:2c:f8:e6:bf:ff:5b:3f:f8:ef:49:fb:66:4c: 7c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:BE:F0:BF:B9:EB:0B:A4:7A:F4:AA:26:3C:CB:63:F2:73:B3:3A:19 X509v3 Authority Key Identifier: keyid:43:D5:BA:08:15:C9:F5:19:3F:80:98:9E:E8:93:AC:AC:C4:BA:88:49 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/7282b4-7f11-4ee0-abea-e13e5579c5dc/1/Q9W6CBXJ9Rk_gJie6JOsrMS6iEk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:78:10:2a:c7:27:6e:d8:d1:ab:1b:3b:f0:64:1a:e6:ca:20: f0:ef:ec:a7:de:fc:e0:96:74:20:5c:28:77:c6:bd:00:7c:a6: bb:38:70:15:ce:76:9e:57:86:05:9d:35:1e:5b:31:17:45:03: 06:92:ab:2d:f4:39:79:9c:b4:a5:14:4a:61:c2:76:d7:50:ce: 0e:b9:b5:18:90:7b:07:08:f8:77:a6:db:57:5c:c7:ae:1c:7d: ca:dd:25:7c:c5:a0:02:26:52:2c:2e:e6:ef:0b:4b:7c:ea:9c: b5:ba:c9:40:31:47:01:d6:1c:cf:1b:bd:69:8b:08:68:e9:59: a6:d6:dd:35:85:5f:f3:5c:62:c5:f8:39:57:07:66:ed:94:c9: 8f:28:99:fd:b2:73:4f:55:bd:5a:b4:d2:2a:bc:27:2f:3c:26: f4:ce:86:d5:3f:eb:32:cd:8b:8e:27:04:72:fc:18:e3:21:82: 45:97:b2:4f:d1:f4:50:b4:bc:75:5f:d2:8b:0e:ef:63:4a:a8: 3b:89:63:a4:c5:fe:c3:ff:39:7a:49:7c:9e:a9:c3:3c:97:25: b2:fd:ff:c4:d4:6f:19:32:e0:bc:93:b9:b4:95:b5:f7:69:47: 25:1f:53:ce:0b:32:8e:74:3d:ec:71:58:e6:6f:2d:7d:95:96: d1:08:30:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFxVyX75UOZ2mCGcjwnqSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQzZDViYTA4MTVjOWY1MTkzZjgwOTg5ZWU4OTNhY2FjYzRi YTg4NDkwHhcNMjYwOTIxMjEwMDQwWhcNMjYwOTIyMjEwMDQwWjAzMTEwLwYDVQQD EyhkNmJlZjBiZmI5ZWIwYmE0N2FmNGFhMjYzY2NiNjNmMjczYjMzYTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfLB9vltMfzJHUaM6elmjiSIE1QH rJeqZap5aw35OJFCXqa/jN/mdFtHqH7qRh9Elcqb7y1REFnxGWjnXaBatODCoLW2 q6JuJ0Nr2s/fYw445eA+zLXwXhhVXnviwghnKo762lQzbWb2xn6EIAjp0iHohg0c 5G5eA8mnD8pZkc3O/isq1lA1Rg8jlod7lF+E+D/qjnvccs3fuY6N5H2qcDO7BXh4 Yzlbf/SEr51+Gz00mcGCCtaP1pBXddRWQ2Svr7sT09z6FtPqwe+K2fUcQ1S1xqgj vSO8vaFRPVIyfc1uhOtSmQsl49D73t09zUxttyz45r//Wz/470n7Zkx8/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNa+8L+56wukevSqJjzLY/JzszoZMB8GA1UdIwQY MBaAFEPVuggVyfUZP4CYnuiTrKzEuohJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEt ZTEzZTU1NzljNWRjLzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi83MjgyYjQtN2YxMS00ZWUwLWFiZWEtZTEzZTU1NzljNWRj LzEvUTlXNkNCWEo5UmtfZ0ppZTZKT3NyTVM2aUVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIngQKscn btjRqxs78GQa5sog8O/sp9784JZ0IFwod8a9AHymuzhwFc52nleGBZ01HlsxF0UD BpKrLfQ5eZy0pRRKYcJ211DODrm1GJB7Bwj4d6bbV1zHrhx9yt0lfMWgAiZSLC7m 7wtLfOqctbrJQDFHAdYczxu9aYsIaOlZptbdNYVf81xixfg5Vwdm7ZTJjyiZ/bJz T1W9WrTSKrwnLzwm9M6G1T/rMs2LjicEcvwY4yGCRZeyT9H0ULS8dV/Siw7vY0qo O4ljpMX+w/85ekl8nqnDPJclsv3/xNRvGTLgvJO5tJW192lHJR9TzgsyjnQ97HFY 5m8tfZWW0QgwfQ== -----END CERTIFICATE-----Generated at Tue Sep 22 07:10:56 2026 by rpki-client