$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: JpujF+7elQcrsbsteLSgDJBcxeAKhcCmmUM/qCKX+6Q= Subject key identifier: 2C:99:38:AE:F3:16:A8:AD:2A:55:F9:B6:F1:D4:46:D4:80:32:6A:A9 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 01A0C4EA2F1916F9DBC60F1B65513EEB83DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1A6E Signing time: Mon 21 Sep 2026 17:01:16 +0000 Manifest this update: Mon 21 Sep 2026 17:01:16 +0000 Manifest next update: Tue 22 Sep 2026 17:01:16 +0000 Files and hashes: 1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=) 2: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: 3WE8bi4dnZIKHyFwrMa2c57h2x5Sqft5zO/LjamlrKI=) 3: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=) 4: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=) 5: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=) 6: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=) 7: icFgcPIuVEwDXoSkl0ySM_0s_10.roa (hash: m6BnteEoReQBu4GAYUMJxfQIRVgJC4sSvXHdkUa3NjE=) 8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=) 9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=) 10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=) 11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=) 12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=) 13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 17:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:ea:2f:19:16:f9:db:c6:0f:1b:65:51:3e:eb:83:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Sep 21 17:01:16 2026 GMT Not After : Sep 22 17:01:16 2026 GMT Subject: CN=2c9938aef316a8ad2a55f9b6f1d446d480326aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:69:f5:e1:ec:f7:1b:6e:0a:1e:b8:f1:e2:7d: a8:8b:99:35:65:3b:d2:49:c6:fa:a7:fb:d4:56:11: cd:55:fa:57:1a:03:a5:49:fa:f1:a6:b0:00:ed:14: 3c:a6:0f:e3:73:d6:c5:7b:21:2b:5d:eb:e4:43:8c: 13:d0:fa:4e:31:b6:ab:68:cc:5f:0c:11:67:2d:6d: 0d:a1:bc:15:26:1a:3f:3a:7d:47:f9:d0:fe:bc:5d: 6a:d2:2d:9f:76:43:66:b8:40:79:db:04:5a:13:aa: cc:2f:4a:91:4a:3b:cb:8a:4a:a4:28:97:f5:ba:64: ab:09:1b:fd:4f:94:f4:9d:06:29:82:b4:e3:cb:bb: 9f:12:b0:59:ac:54:f7:59:a7:52:f8:49:b6:0d:37: 67:fa:25:44:64:22:8b:86:4d:bf:8a:c2:ce:52:a3: cb:e3:f4:27:4a:b1:c7:60:91:a2:2d:32:80:5b:d6: 55:b9:fc:4d:5b:97:3a:84:55:9a:a6:96:9a:bf:f1: f7:09:dd:99:d1:3a:64:38:9a:de:c6:8b:81:96:e2: 41:37:ae:6f:dc:8f:b9:70:9f:6c:68:f8:3f:da:78: dd:89:10:ab:85:70:86:35:e5:9c:b4:0b:0b:e2:29: 0f:73:9c:03:05:7c:10:cb:42:3b:1c:2c:8c:a3:b3: 46:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:99:38:AE:F3:16:A8:AD:2A:55:F9:B6:F1:D4:46:D4:80:32:6A:A9 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:3d:ad:11:58:2f:b5:13:f4:7e:eb:b6:ee:13:ec:8f:b6:2c: 57:9b:9b:2e:10:97:93:6c:86:78:92:d2:52:6a:fb:91:e2:92: bd:12:cb:39:8c:db:c5:36:8e:68:a4:a3:b9:bb:8d:c7:80:de: 4c:bc:7c:73:1c:27:6d:58:6d:6a:44:d5:0c:9b:b5:da:19:f5: dc:ca:31:ed:5e:fd:6a:a6:35:08:c7:a8:c9:67:11:35:bb:e7: 6b:6d:e9:14:7c:7c:2b:7f:83:e6:07:83:65:ab:69:a5:41:86: 5b:1a:1b:82:1a:e6:62:f8:ff:a0:2b:60:e7:a8:4f:11:2b:37: 99:15:02:36:3f:b5:db:07:ca:4f:f5:2e:2e:55:1b:f6:97:e6: 54:d9:0c:3e:a7:7b:af:78:d9:a8:c9:30:5d:10:b7:62:ad:b1: bd:94:e3:85:9c:46:83:c0:26:a2:b0:25:26:d6:e1:f6:7f:eb: 7b:1c:e4:09:5f:19:07:da:ad:36:9d:a6:95:c9:dd:77:38:5d: ee:44:17:be:1f:ab:43:8f:dc:48:19:af:74:4e:fc:02:f4:17: af:12:bc:9b:96:7e:5f:c9:4c:f1:52:e9:31:37:b3:13:16:b9: 8b:8e:93:f1:24:35:a6:67:53:a3:bd:fa:28:7f:2c:ca:2d:b4: f7:8d:26:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDE6i8ZFvnbxg8bZVE+64PaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwOTIxMTcwMTE2WhcNMjYwOTIyMTcwMTE2WjAzMTEwLwYDVQQD EygyYzk5MzhhZWYzMTZhOGFkMmE1NWY5YjZmMWQ0NDZkNDgwMzI2YWE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Gn14ez3G24KHrjx4n2oi5k1ZTvS Scb6p/vUVhHNVfpXGgOlSfrxprAA7RQ8pg/jc9bFeyErXevkQ4wT0PpOMbaraMxf DBFnLW0NobwVJho/On1H+dD+vF1q0i2fdkNmuEB52wRaE6rML0qRSjvLikqkKJf1 umSrCRv9T5T0nQYpgrTjy7ufErBZrFT3WadS+Em2DTdn+iVEZCKLhk2/isLOUqPL 4/QnSrHHYJGiLTKAW9ZVufxNW5c6hFWappaav/H3Cd2Z0TpkOJrexouBluJBN65v 3I+5cJ9saPg/2njdiRCrhXCGNeWctAsL4ikPc5wDBXwQy0I7HCyMo7NGUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCyZOK7zFqitKlX5tvHURtSAMmqpMB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJj2tEVgv tRP0fuu27hPsj7YsV5ubLhCXk2yGeJLSUmr7keKSvRLLOYzbxTaOaKSjubuNx4De TLx8cxwnbVhtakTVDJu12hn13Mox7V79aqY1CMeoyWcRNbvna23pFHx8K3+D5geD ZatppUGGWxobghrmYvj/oCtg56hPESs3mRUCNj+12wfKT/UuLlUb9pfmVNkMPqd7 r3jZqMkwXRC3Yq2xvZTjhZxGg8AmorAlJtbh9n/rexzkCV8ZB9qtNp2mlcnddzhd 7kQXvh+rQ4/cSBmvdE78AvQXrxK8m5Z+X8lM8VLpMTezExa5i46T8SQ1pmdTo736 KH8syi20940mqQ== -----END CERTIFICATE-----Generated at Tue Sep 22 01:36:16 2026 by rpki-client