$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft File: iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft (raw, json) Hash identifier: Jtj9YZF2xAuaT+Oa7xARWldm+j64ACze9UN1NCpfGRc= Subject key identifier: CD:A7:37:82:BD:C1:76:31:62:53:20:F0:0D:17:D0:E2:D6:FE:2F:BE Authority key identifier: 89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 Certificate issuer: /CN=89056fa9625b6c87404267c6dc219924ac160045 Certificate serial: 01A0C5FC16BC35D68A68CE7E97C7FA59153D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft Manifest number: 1A97 Signing time: Mon 21 Sep 2026 22:00:27 +0000 Manifest this update: Mon 21 Sep 2026 22:00:27 +0000 Manifest next update: Tue 22 Sep 2026 22:00:27 +0000 Files and hashes: 1: 08tWIG0PWPMB6teHHPxQow1s2uE.roa (hash: TRz7F0l+NZVOM8RvaeEJy+Qjij2W704OcN/st69PivQ=) 2: 1-UqZU4lpdGQymEWntoGUKEtiDfs.roa (hash: uTnzw0q4V97naKhct/jjJQaHWdigAfbfM0kb6Q0iHPQ=) 3: 140kRQEj3h0GjQtPnM7mNhB0pd0.roa (hash: Glji+wdNx0lC1Qzp3pek3CS+AHdgtNRm2/n00pXzbAo=) 4: 1dV6pkuQdd-HC1y6xQt3McROiYw.roa (hash: gXtTDzPv9WQmg2U2/AVAIR2HMc660QfTKzCojb5m4Ek=) 5: DB2WtvMT6TxXIgEHXGIAtXj5H0k.roa (hash: Dnxb8mZ2R2y2UMXQPUm34dqJpzSVn8nnfGQsSFiCrQc=) 6: FUcbBOzjjlbY_wlRLYHqupvBQoY.roa (hash: cfKmdGrx3472puEg8Y3AGEJtcDQtTCxIr5rg73nD5Fs=) 7: GA5NIaob_i0eg5R554MtD65rkDU.roa (hash: bpwMu6JYsIFlQS/jF79o+wgM6JCrcfl8VddhfNU17mo=) 8: I1s63daDxmdSUkoW3y6FqwGC_kI.roa (hash: 2cA/q0JWCQ+iKL0Tgi1c5YHyZkG1aHs+6TYtD4toyos=) 9: IAog0mAhjeJoKpCE7InfTrDEICE.roa (hash: paRV5HrLIvsP8VMOY2Cmvjxq2/JHKdV5V7s5Hxdb4ho=) 10: N7EYzGEcYA36m-xSvdYRWYsCcUE.roa (hash: WxQmK8/jxnVfJLUqxdBcxCVr+Pgy+YeHJkLPADfkzds=) 11: P_ICJAuY1fS-sdbKO3ae7kjYH9k.roa (hash: USZSiJ9BppPlcXgUCCMjXHlF5EFhbbiWLDr45EjJQiw=) 12: R0aW1UlU2G9IJ0JSgRuhXpY0Qr0.roa (hash: 61Iq2Y9qBNlCXxjTubM5AW+momY69I+HgyILrPoypSI=) 13: RN6drM--dD_6tv6f7ZT4g-Tmx4M.roa (hash: 45pPotnyCUMx03gGTQCEe2Fo2L9SNyOnrMGfMN+GUgw=) 14: TjgQANrKozyjOw4w5hYOpjN8uMI.roa (hash: ZPk1Xebxi+DiSuX9N5KulEgI7Xg4MHf0W/5nIFTVTvE=) 15: iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl (hash: 78gQ59+NWrqAbLt/dYSqr5doHcbTijGuYWW9pkOnHTg=) 16: ism2bNCba5CRcXgOISoZjzrR_jk.roa (hash: dVX1PspVHvMWPysATRUgDChbCgGx47lGOpGb8yF+l7A=) 17: kHBXqwhaHY9YgoftEomJM-YmPQM.roa (hash: Fv2HJ19zHGdY+cirM1+n1J1pjKCaMFvflEkbxIMaw+U=) 18: lgdudiRubbn4kubyyDwuIWxdQas.roa (hash: Mto3E9aOm3/d28/F7shwzi6mJEuxr7zprdp5mund0Ik=) 19: qqOBoufK9Bv9fBzKEZO1Ybb2Xms.roa (hash: w+bQOMrvhdWjYo96qmwB8eS7ozAg8IZHWE6OTWarCag=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 22:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:fc:16:bc:35:d6:8a:68:ce:7e:97:c7:fa:59:15:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89056fa9625b6c87404267c6dc219924ac160045 Validity Not Before: Sep 21 22:00:27 2026 GMT Not After : Sep 22 22:00:27 2026 GMT Subject: CN=cda73782bdc17631625320f00d17d0e2d6fe2fbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:97:08:9b:3e:01:d8:f6:f6:4e:0b:87:f1:0d: 09:7b:71:9c:7b:e0:e0:09:7b:ca:46:5c:91:d9:ca: 58:8d:4a:46:a4:38:8c:79:ff:d6:f3:63:74:2f:22: 83:fe:47:c0:36:87:7c:69:b5:c3:f4:ba:70:ba:be: ae:15:1f:a3:14:0f:8d:7e:48:7e:7c:5b:e7:55:a8: c7:40:08:5a:3e:3f:7c:e6:dd:ea:19:10:a3:0f:0a: f4:a6:91:82:cf:23:03:8f:b2:57:e3:7d:97:09:9b: df:97:a4:c4:42:b6:be:d2:ef:92:55:e0:e4:d7:38: 90:80:43:f5:a9:fa:da:ab:b0:89:fc:f9:e2:bd:8d: 46:bf:84:fd:df:1f:d3:45:bd:7c:49:d8:70:b4:68: 34:4b:cc:80:73:93:a8:c7:cd:31:01:0f:24:a1:26: 36:76:d7:0c:a6:59:19:98:09:01:fe:f9:99:98:ba: 98:18:e7:e2:c6:02:27:50:8a:ec:80:ae:13:48:dc: 6e:66:77:c3:26:d7:97:5e:8b:11:40:a2:b8:16:56: 01:ec:f1:41:8d:9d:cd:ff:17:47:86:01:db:d7:e9: f4:4c:94:93:a2:47:bc:ee:0f:fe:37:55:c0:d9:5b: f6:bd:99:56:13:2a:bb:60:63:d2:dd:d0:cb:f0:2b: 3a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:A7:37:82:BD:C1:76:31:62:53:20:F0:0D:17:D0:E2:D6:FE:2F:BE X509v3 Authority Key Identifier: keyid:89:05:6F:A9:62:5B:6C:87:40:42:67:C6:DC:21:99:24:AC:16:00:45 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iQVvqWJbbIdAQmfG3CGZJKwWAEU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/99ae2f-39cc-43f3-941d-51920373353c/1/iQVvqWJbbIdAQmfG3CGZJKwWAEU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:86:96:cf:65:a9:0e:9b:6b:b5:30:d8:97:e1:6d:72:a9:fa: 77:9a:cc:ea:48:9d:f0:e9:6e:12:a0:42:61:bd:ae:41:e7:e9: 9a:0a:40:c9:9e:a9:df:68:81:6a:76:37:0f:55:08:d7:3e:9d: 60:1c:2c:84:48:84:d7:b7:86:e3:4e:f5:e5:8a:7a:70:4b:3e: 12:bb:aa:a9:0b:0f:dc:3b:90:27:25:37:58:98:d8:13:74:11: e7:16:42:c2:f9:10:f7:25:68:4f:ae:bf:bb:eb:fb:cc:25:93: 00:53:b7:75:7a:dd:b5:26:45:56:cd:00:ca:c9:d5:f4:68:ce: 83:ce:ee:50:da:a2:b0:b0:7b:7f:29:66:60:5e:58:6a:49:13: 0f:0f:4c:eb:bd:67:50:0e:10:5c:a3:78:1c:5b:d5:95:0d:dc: 50:fc:0d:02:e2:7b:c7:77:ae:8b:37:1a:d5:2b:6a:c0:72:0c: d2:d0:a9:9f:fc:c9:cd:f0:43:87:ac:79:3e:a0:d2:8e:39:98: b3:e9:97:71:8b:f2:2d:61:fa:ee:02:a0:3d:6c:e2:8a:b5:79: 51:57:c3:88:58:65:49:7e:7b:2e:de:ef:d8:fd:b3:29:8f:1b: 31:73:50:6a:82:0b:e6:dd:90:0c:8b:1f:57:37:a9:93:80:66: ce:85:c9:f9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDF/Ba8NdaKaM5+l8f6WRU9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5MDU2ZmE5NjI1YjZjODc0MDQyNjdjNmRjMjE5OTI0YWMx NjAwNDUwHhcNMjYwOTIxMjIwMDI3WhcNMjYwOTIyMjIwMDI3WjAzMTEwLwYDVQQD EyhjZGE3Mzc4MmJkYzE3NjMxNjI1MzIwZjAwZDE3ZDBlMmQ2ZmUyZmJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJcImz4B2Pb2TguH8Q0Je3Gce+Dg CXvKRlyR2cpYjUpGpDiMef/W82N0LyKD/kfANod8abXD9Lpwur6uFR+jFA+Nfkh+ fFvnVajHQAhaPj985t3qGRCjDwr0ppGCzyMDj7JX432XCZvfl6TEQra+0u+SVeDk 1ziQgEP1qfraq7CJ/PnivY1Gv4T93x/TRb18SdhwtGg0S8yAc5Oox80xAQ8koSY2 dtcMplkZmAkB/vmZmLqYGOfixgInUIrsgK4TSNxuZnfDJteXXosRQKK4FlYB7PFB jZ3N/xdHhgHb1+n0TJSToke87g/+N1XA2Vv2vZlWEyq7YGPS3dDL8Cs68wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2nN4K9wXYxYlMg8A0X0OLW/i++MB8GA1UdIwQY MBaAFIkFb6liW2yHQEJnxtwhmSSsFgBFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQt NTE5MjAzNzMzNTNjLzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYi85OWFlMmYtMzljYy00M2YzLTk0MWQtNTE5MjAzNzMzNTNj LzEvaVFWdnFXSmJiSWRBUW1mRzNDR1pKS3dXQUVVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdIaWz2Wp DptrtTDYl+Ftcqn6d5rM6kid8OluEqBCYb2uQefpmgpAyZ6p32iBanY3D1UI1z6d YBwshEiE17eG40715Yp6cEs+EruqqQsP3DuQJyU3WJjYE3QR5xZCwvkQ9yVoT66/ u+v7zCWTAFO3dXrdtSZFVs0AysnV9GjOg87uUNqisLB7fylmYF5YakkTDw9M671n UA4QXKN4HFvVlQ3cUPwNAuJ7x3euizca1StqwHIM0tCpn/zJzfBDh6x5PqDSjjmY s+mXcYvyLWH67gKgPWziirV5UVfDiFhlSX57Lt7v2P2zKY8bMXNQaoIL5t2QDIsf Vzepk4BmzoXJ+Q== -----END CERTIFICATE-----Generated at Tue Sep 22 09:48:27 2026 by rpki-client