$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: UOQ+svp+cBgXiRPkWKYuPmAxOpcq8LnkcVreBZJEI5g= Subject key identifier: 2A:DB:F2:C9:00:16:35:B7:73:86:3B:B4:EA:77:EC:69:C7:63:40:55 Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 01A0C40DD94B24562391C4C3B04DA9BF4946 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1A96 Signing time: Mon 21 Sep 2026 13:00:36 +0000 Manifest this update: Mon 21 Sep 2026 13:00:36 +0000 Manifest next update: Tue 22 Sep 2026 13:00:36 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 6: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 7: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 8: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 9: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 10: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 11: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 12: R0aW1UlU2G9IJ0JSgRuhXpY0Qr0.roa (hash: 61Iq2Y9qBNlCXxjTubM5AW+momY69I+HgyILrPoypSI=) 13: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 14: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 15: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: mXAFplm4LRkU4xzkhWGypI1cj38BIa1MNVCH8cWAfbM=) 16: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 17: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 18: lgdudiRubbn4kubyyDwuIWxdQas.roa (hash: Mto3E9aOm3/d28/F7shwzi6mJEuxr7zprdp5mund0Ik=) 19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:0d:d9:4b:24:56:23:91:c4:c3:b0:4d:a9:bf:49:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Sep 21 13:00:36 2026 GMT Not After : Sep 22 13:00:36 2026 GMT Subject: CN=2adbf2c9001635b773863bb4ea77ec69c7634055 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:0d:5a:9d:7a:91:2f:27:79:97:3c:d2:c7:11: 8c:d9:88:e7:14:4f:5f:bb:f7:9a:d8:79:98:30:42: ed:8d:ba:8b:1e:fa:f5:fe:6d:b2:af:9c:2a:78:73: e5:60:74:47:41:0f:cd:89:f9:30:12:28:e7:5b:e4: 20:49:ac:83:31:7d:cd:df:a8:78:e7:87:11:f8:d3: 2a:8b:7f:b8:df:8f:4c:fd:a9:a0:b8:ba:d4:da:01: 48:42:18:e1:73:fd:d5:37:6c:0f:17:0d:b3:54:64: d7:b5:af:b6:dc:5b:cc:e1:1b:27:6c:86:f1:8b:73: b5:16:39:4e:c6:26:00:e6:bd:18:48:ad:c1:a4:9a: af:97:23:0c:48:14:43:5d:65:8e:e9:0d:53:3e:9a: 74:d9:ab:e4:47:2d:24:19:91:c9:ec:4f:82:ff:9f: f8:0e:d4:39:67:c0:5d:77:34:21:17:fd:4d:cf:35: f2:f0:10:d0:c7:8e:82:0a:01:06:c9:f3:28:37:17: ec:36:fc:b2:cd:45:2d:fd:b5:45:f7:52:5d:1d:a5: 5b:d4:72:02:37:29:00:53:47:7c:fc:b3:0c:eb:bf: 24:66:87:b9:2a:8d:31:ba:a7:0a:7a:af:65:06:97: 42:9d:6e:73:ba:a0:5e:bb:cf:3a:2f:cd:68:ba:b3: 01:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:DB:F2:C9:00:16:35:B7:73:86:3B:B4:EA:77:EC:69:C7:63:40:55 X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:da:22:16:c3:46:41:4c:91:45:e9:d3:64:64:8f:1d:71:44: 38:ea:f2:17:e3:28:d4:fc:58:9a:84:a9:2e:bb:01:22:c5:e6: c9:f0:d5:d7:d8:7c:0d:02:34:0f:fa:ef:8c:90:04:56:97:f9: 3b:74:74:7a:0d:4b:50:a3:3e:4f:8e:80:26:04:e0:7a:da:b0: 99:c3:73:44:96:e9:7a:c7:f2:6a:ed:54:d0:dc:b1:44:f8:f8: 1c:3e:8a:cf:6c:0d:cc:a6:03:ab:a0:cd:e1:72:66:5f:92:cf: 3c:60:52:fc:cd:27:c4:a5:d2:91:e7:99:42:3f:64:b1:7c:29: ca:cc:18:b9:fc:76:7f:4c:37:f4:85:a0:7e:98:ae:23:9e:b2: 07:b8:3e:67:50:ee:e0:54:7b:33:be:74:d1:47:ef:6e:90:5a: 8d:e3:2e:3d:bd:f2:48:b5:67:4e:1a:9e:01:e9:1f:dc:76:3c: a4:2f:ea:5c:0c:f9:e2:b9:4c:9b:24:4a:15:8c:41:94:88:dd: d6:15:8b:6b:7c:03:4c:d3:72:2e:d6:42:e9:6f:82:da:11:d2: 86:03:54:01:0b:37:e8:67:76:ae:d0:d7:9c:45:13:12:03:1f: cc:7f:59:64:12:c9:49:ef:49:a6:99:bb:2c:56:d0:3e:a5:da: 60:85:fd:e5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDEDdlLJFYjkcTDsE2pv0lGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwOTIxMTMwMDM2WhcNMjYwOTIyMTMwMDM2WjAzMTEwLwYDVQQD EygyYWRiZjJjOTAwMTYzNWI3NzM4NjNiYjRlYTc3ZWM2OWM3NjM0MDU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkA1anXqRLyd5lzzSxxGM2YjnFE9f u/ea2HmYMELtjbqLHvr1/m2yr5wqeHPlYHRHQQ/NifkwEijnW+QgSayDMX3N36h4 54cR+NMqi3+4349M/amguLrU2gFIQhjhc/3VN2wPFw2zVGTXta+23FvM4RsnbIbx i3O1FjlOxiYA5r0YSK3BpJqvlyMMSBRDXWWO6Q1TPpp02avkRy0kGZHJ7E+C/5/4 DtQ5Z8BddzQhF/1NzzXy8BDQx46CCgEGyfMoNxfsNvyyzUUt/bVF91JdHaVb1HIC NykAU0d8/LMM678kZoe5Ko0xuqcKeq9lBpdCnW5zuqBeu886L81ourMBJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCrb8skAFjW3c4Y7tOp37GnHY0BVMB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9oiFsNG QUyRRenTZGSPHXFEOOryF+Mo1PxYmoSpLrsBIsXmyfDV19h8DQI0D/rvjJAEVpf5 O3R0eg1LUKM+T46AJgTgetqwmcNzRJbpesfyau1U0NyxRPj4HD6Kz2wNzKYDq6DN 4XJmX5LPPGBS/M0nxKXSkeeZQj9ksXwpyswYufx2f0w39IWgfpiuI56yB7g+Z1Du 4FR7M7500UfvbpBajeMuPb3ySLVnThqeAekf3HY8pC/qXAz54rlMmyRKFYxBlIjd 1hWLa3wDTNNyLtZC6W+C2hHShgNUAQs36Gd2rtDXnEUTEgMfzH9ZZBLJSe9Jppm7 LFbQPqXaYIX95Q== -----END CERTIFICATE-----Generated at Mon Sep 21 18:04:36 2026 by rpki-client