$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft File: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft (raw, json) Hash identifier: liLtbh0u0wG9WyT8vdTWpJxp9YRO3Af4064UM+6FGlQ= Subject key identifier: 00:B9:87:FA:3B:DE:D9:61:B2:F2:68:81:F2:64:03:9B:C4:9A:8E:75 Authority key identifier: 30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 Certificate issuer: /CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Certificate serial: 01A0D45DFC2750F3F4C265D8F963F40A90E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft Manifest number: 1A76 Signing time: Thu 24 Sep 2026 17:02:04 +0000 Manifest this update: Thu 24 Sep 2026 17:02:04 +0000 Manifest next update: Fri 25 Sep 2026 17:02:04 +0000 Files and hashes: 1: Ab10LIDLRTF0PMThWTZR2XKCPUo.roa (hash: gOUOA7HUeObMo1sz87FojtFMHZKh1H5YBLGoqzYYHas=) 2: MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl (hash: xw9GbeZemCjui0Iro+M0EPUIvPxEN0oP7WGlsaxxzJA=) 3: WKvQQ0vKtpL43A08LcaBXTbj1kM.roa (hash: PRKu/DhDcwlsm5Jxqp2u00fHvQbqCeG7Bd2bm+dr5Ag=) 4: WYkkzBha-wTT67Gvhww1_FOg7QM.roa (hash: S1GPXGttTr/+ACoT1bs3TKRF2XPsfPAL0AORzGoCF9M=) 5: fvQ2Upwlm_BTPZuG-yhDHTrdS3A.roa (hash: W2tlzy8p7bFGP6in7P36ocCzYFzrqqDwRCFH7LaoTu4=) 6: hatB16DXDw0_Vm1ySuNMj5Y6auw.roa (hash: hVNkkdPmq+q7XousYHRGOebUzbj6zgU5nS/86C8jF9A=) 7: icFgcPIuVEwDXoSkl0ySM_0s_10.roa (hash: m6BnteEoReQBu4GAYUMJxfQIRVgJC4sSvXHdkUa3NjE=) 8: jbAWSXDnSzSUbGDEXT56Cj_H7fU.roa (hash: vtEwLtfqW4qkmELJWjSf6WMsJC95aJI8yky7ZJEN78k=) 9: lWZWuIJZ3q5_hVt6znDikSoBR3M.roa (hash: y85mPvpTXgrTdx2E8ZlH0eaEQJTPz5/4CbPHnZc0y/0=) 10: lg-xaQ_5kMXRgUe1cfTquL-sxEk.roa (hash: DrSW8pSYEFjTMNFurufTgFjckkn7K2mmqSF0WbWEz10=) 11: vJQ8eWA9gitpdTEogU6FKIxSf4M.roa (hash: c/auuaX6uZTawydsm3NxKIP9OAI41TsWcjh2cXjpviE=) 12: vuBbsDJkWmoNnQMaSnTKljEK9f4.roa (hash: v05fmL1UJXoi2B7sFB3rnj4EDXcUe8R7u6fgG/Bd6XI=) 13: zVexCvkSNXzSQ_4jRtVV_rcjPGE.roa (hash: how96F3OMhXkq8E95kXfSQSmzCi80yeTXVsw9qWAjXo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:5d:fc:27:50:f3:f4:c2:65:d8:f9:63:f4:0a:90:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=30f1ba6111c8f1d3f37c1b7c1a5ed737402192f2 Validity Not Before: Sep 24 17:02:04 2026 GMT Not After : Sep 25 17:02:04 2026 GMT Subject: CN=00b987fa3bded961b2f26881f264039bc49a8e75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1f:fc:6a:98:13:87:df:ab:2e:f8:4b:54:f1: de:9a:4e:5c:15:c9:5c:98:38:dc:ca:ee:ab:76:9d: fe:e1:2c:3c:3d:0d:f1:e9:80:d1:6f:68:7d:5c:98: 8b:b6:94:36:ec:8c:cb:6a:a4:ba:f9:d4:0e:63:c0: d9:2b:5e:88:4d:b0:e9:e0:9b:f6:79:2f:bb:57:1a: 23:16:fa:95:13:44:d0:c9:4b:04:3f:52:ce:8b:83: 22:06:98:5d:92:1b:16:a7:93:a4:99:da:fb:09:88: 72:c4:fd:27:bf:6f:83:74:8a:2d:f2:eb:d3:af:e9: 94:65:fd:0c:96:ea:83:ee:65:ac:32:5e:9c:e1:8a: 23:3e:23:07:25:c7:b8:d0:19:ef:47:f9:bc:f1:9e: 8b:db:d3:13:73:6f:54:9f:11:7a:90:b3:96:9a:71: 15:23:4d:d7:c3:7a:0f:06:1c:9e:f2:bd:ee:cc:6e: 0c:f0:ba:be:2c:32:3d:75:c5:9a:e9:91:00:19:7a: 68:5b:a9:39:3e:b2:65:88:c1:7c:66:a6:af:ad:16: 47:0d:07:f6:c8:0b:d6:ec:47:f2:24:3c:e8:81:6d: a5:99:62:4a:50:51:17:d7:5e:7c:52:1e:42:fb:22: 3a:65:f6:47:fa:0d:0c:5c:24:3a:e9:d9:f3:5f:e6: 0d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B9:87:FA:3B:DE:D9:61:B2:F2:68:81:F2:64:03:9B:C4:9A:8E:75 X509v3 Authority Key Identifier: keyid:30:F1:BA:61:11:C8:F1:D3:F3:7C:1B:7C:1A:5E:D7:37:40:21:92:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8d7c57-ba65-47fc-bcc4-c33018633d33/1/MPG6YRHI8dPzfBt8Gl7XN0AhkvI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:3c:8b:d8:1f:c6:c8:e8:25:a5:5e:50:8e:d5:2d:47:92:12: 3f:a4:8f:c1:18:9d:61:31:f1:5c:62:a9:5a:81:f8:6a:d1:e2: fa:6a:33:6e:b3:9c:d5:90:75:e3:f5:a0:76:0d:b9:9c:1c:28: 5f:68:da:09:97:a8:c0:a8:9c:42:01:e2:86:0c:b4:c3:f4:0a: 71:b9:96:cf:23:ad:13:67:80:4d:bf:91:47:51:dc:85:b2:59: f4:05:7e:3a:75:fb:6a:8a:f8:b2:64:ac:cc:d5:f0:8d:81:65: f6:97:5e:a2:67:68:99:42:c2:42:f1:c9:3c:58:a0:d3:20:5f: e1:98:71:1c:a0:89:e4:23:0f:6a:82:1b:78:a8:31:5f:89:d5: 05:7b:b1:dc:2b:00:04:f8:18:f0:ef:a0:f8:5f:65:63:b2:d4: b5:ed:db:39:08:78:83:fa:ca:c1:1c:1d:36:db:9f:22:1d:ec: da:df:32:34:0e:1b:64:9b:97:1f:af:7c:7d:a7:22:33:8f:c3: 06:9d:dd:ec:cd:0a:e0:e8:2f:6e:e3:45:3a:05:f2:88:76:22: 12:dc:8a:50:8c:0d:53:9d:87:b3:f8:0e:0a:c7:b4:b5:e6:2e: 24:e7:f7:3d:24:f3:20:d5:53:b2:dc:4b:a5:82:c8:a3:94:67: c2:da:da:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUXfwnUPP0wmXY+WP0CpDpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMwZjFiYTYxMTFjOGYxZDNmMzdjMWI3YzFhNWVkNzM3NDAy MTkyZjIwHhcNMjYwOTI0MTcwMjA0WhcNMjYwOTI1MTcwMjA0WjAzMTEwLwYDVQQD EygwMGI5ODdmYTNiZGVkOTYxYjJmMjY4ODFmMjY0MDM5YmM0OWE4ZTc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtR/8apgTh9+rLvhLVPHemk5cFclc mDjcyu6rdp3+4Sw8PQ3x6YDRb2h9XJiLtpQ27IzLaqS6+dQOY8DZK16ITbDp4Jv2 eS+7VxojFvqVE0TQyUsEP1LOi4MiBphdkhsWp5Okmdr7CYhyxP0nv2+DdIot8uvT r+mUZf0MluqD7mWsMl6c4YojPiMHJce40BnvR/m88Z6L29MTc29UnxF6kLOWmnEV I03Xw3oPBhye8r3uzG4M8Lq+LDI9dcWa6ZEAGXpoW6k5PrJliMF8ZqavrRZHDQf2 yAvW7EfyJDzogW2lmWJKUFEX1158Uh5C+yI6ZfZH+g0MXCQ66dnzX+YN+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAC5h/o73tlhsvJogfJkA5vEmo51MB8GA1UdIwQY MBaAFDDxumERyPHT83wbfBpe1zdAIZLyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQt YzMzMDE4NjMzZDMzLzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMy84ZDdjNTctYmE2NS00N2ZjLWJjYzQtYzMzMDE4NjMzZDMz LzEvTVBHNllSSEk4ZFB6ZkJ0OEdsN1hOMEFoa3ZJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmTyL2B/G yOglpV5QjtUtR5ISP6SPwRidYTHxXGKpWoH4atHi+mozbrOc1ZB14/Wgdg25nBwo X2jaCZeowKicQgHihgy0w/QKcbmWzyOtE2eATb+RR1HchbJZ9AV+OnX7aor4smSs zNXwjYFl9pdeomdomULCQvHJPFig0yBf4ZhxHKCJ5CMPaoIbeKgxX4nVBXux3CsA BPgY8O+g+F9lY7LUte3bOQh4g/rKwRwdNtufIh3s2t8yNA4bZJuXH698faciM4/D Bp3d7M0K4OgvbuNFOgXyiHYiEtyKUIwNU52Hs/gOCse0teYuJOf3PSTzINVTstxL pYLIo5RnwtraoQ== -----END CERTIFICATE-----Generated at Thu Sep 24 21:27:56 2026 by rpki-client