$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json) Hash identifier: KFAVV/Lg5lw1G9npBkQydq2WcJ2FsQ/6qNyBTyKnGNU= Subject key identifier: 02:42:EA:BD:19:48:06:C9:92:03:00:AE:3C:17:AF:A7:45:03:2C:3D Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 01A0ED0B11969B3F132C943D20704D1400AE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft Manifest number: 1A8E Signing time: Tue 29 Sep 2026 12:02:00 +0000 Manifest this update: Tue 29 Sep 2026 12:02:00 +0000 Manifest next update: Wed 30 Sep 2026 12:02:00 +0000 Files and hashes: 1: 0grhf2XqQS0PbS4vuPKgFUJ4CtY.roa (hash: CABCkAtRB5z7qM37KIh3THIotph2AI+4ndFJUzJYceA=) 2: 1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa (hash: EnRdzd4XuA4kPVdeCj63BslUTaDS51Ig0OU7ONlJnmA=) 3: 7TDWyr5P0SFkG_1wE_zPclx-LJY.roa (hash: mwM+t2AjMGEMAQqYQt7qupjhUbDte5jBQzS3pFunV5E=) 4: 8qGSgqlkHDr914hHEHKKhmYVXnE.roa (hash: frQT+RP9L9JKaXT7O/jbBEr9AzGG4KNbuIOuQ79wIgI=) 5: DY4whTo7KFMsapAbjbck9KXaN2Q.roa (hash: Z3/CUxyVCWOqALKEDmYApn9KMCw1qs9OcKyU5Z8f4RU=) 6: I7MkmQek9TX_IQqyz6tzXHWahHc.roa (hash: guTyQfwBcIAtfrQpROz3rqT3lhXR49lhfULYZRlg2k4=) 7: KSert21IyVLdzTzI3FZycKPooac.roa (hash: enNDLKMhC0/+6E/ssv2WFmJ1HNQhuj49stCcOOz9a3U=) 8: MmwxwXtvbBi5TfpYulx_NsdGK8I.roa (hash: CpEEnuPEEQ/Lt5U7MuRSDkJQEaOqlXnkUBi298BTux0=) 9: bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa (hash: irzJrYBfyhTaJEK1r/bwWtkoGmHHDM2zuMWB3WPr1vw=) 10: fCGYEGlgfKRgTz2ikieXaOSbdRE.roa (hash: FYEv1aBWOrr2YMP+bkGoFPlLBNqhRh64fwSr9xKf+yc=) 11: i_8Ltd9wbcfD0mAu6VNm7MTQ_Ac.roa (hash: LXGue0t/sMA2Z7REoNuZF9MeZQKOuFmufuOtJTo72DU=) 12: l46NNfdll0CkF-GyTagj6nVywQA.roa (hash: Bz8PpZZscQ882ZYbIbT/ZfP7vpdnPTaRcDmY5jTgHws=) 13: nhzxopyxtZ3ZNpXqMYr4_bVPXYw.roa (hash: XWNHr6I19HMZl/NwLAbZ/QL51wNU0N0GDXtB6ekbpGI=) 14: qXx90FSqDeV2TFA5z5gkzjt5MT4.roa (hash: GIcu6RV+4oLEen2ihNm9iiU1rL+T3G8HifCPdddrGao=) 15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: /I8Zs+RrxQdBKjuBI21zKZh8n6F3htqNziaFAIGGQSA=) 16: vy_B141YrrWxhcrnlEIljoTLECk.roa (hash: xj/TtKRTGyOPxeeyCWIfxLPuFe3BEl/1ac8Kc9RexP0=) 17: w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa (hash: jnFfoOHT3qsowloY5NEfrKxUN2Spb88yoOnFZYPFjK4=) 18: wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa (hash: dmGJEO5REXkLJeMFm08GEDBzv38Ylu5Doyq2n0KUXjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 12:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ed:0b:11:96:9b:3f:13:2c:94:3d:20:70:4d:14:00:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Sep 29 12:02:00 2026 GMT Not After : Sep 30 12:02:00 2026 GMT Subject: CN=0242eabd194806c9920300ae3c17afa745032c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:8b:f3:2e:0f:8f:29:18:b9:59:2b:20:65: 92:1c:49:e4:9b:de:cd:83:cd:88:09:8e:fc:ed:48: 55:2d:ac:d4:78:9f:70:44:d7:fc:97:4b:44:1c:98: ed:f8:37:8c:4c:39:d1:2d:f9:a4:95:3b:b4:7d:07: 46:52:dd:99:06:92:b8:7b:5e:77:4b:be:de:ab:6d: f1:64:5e:da:59:ae:f9:6e:0d:1f:07:3c:08:c6:9e: 86:a4:e2:96:17:e8:db:68:ef:27:48:03:98:fb:f3: 24:db:f2:84:f2:51:ab:3d:f2:ec:08:c4:ea:e2:09: ee:24:7f:15:93:f9:d9:d5:54:8c:47:a0:f1:2c:c1: 07:8f:8f:84:62:76:0d:9f:95:ab:19:5c:dd:29:65: f3:c0:2c:d0:1b:49:15:77:e5:5f:c3:22:77:7a:1f: a0:a5:65:de:88:7a:81:68:48:13:8b:87:ca:72:2c: d6:3b:73:c9:b0:28:bf:ac:6e:6b:77:43:d6:d8:a2: 7d:f3:f4:27:ad:20:68:b4:2d:62:6e:20:5b:4f:3e: b5:58:01:67:86:25:87:5e:95:54:13:ae:ed:04:bf: 3e:05:a9:26:ea:c5:a1:93:de:01:69:4f:89:05:ae: 81:e3:11:ed:bb:f6:d5:79:7c:5a:3f:be:b3:4d:c9: cb:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:42:EA:BD:19:48:06:C9:92:03:00:AE:3C:17:AF:A7:45:03:2C:3D X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:53:99:e3:af:86:34:13:42:5b:e8:74:0c:4a:db:75:e5:4f: 5d:58:da:ab:8a:85:40:c5:38:2f:82:dc:e0:da:47:f7:9b:08: ba:cf:1b:24:ef:d4:26:b1:e4:b9:87:6e:b4:be:6d:2d:d7:ab: ee:23:82:8a:e0:49:61:d9:40:dc:65:f7:76:4a:a4:a2:ed:c9: 86:c1:9b:8f:ef:7f:1e:e1:af:8a:df:8d:a7:01:90:f3:8f:1c: 30:7c:7d:ea:35:9b:4a:79:82:e1:6d:a0:09:91:28:30:bb:79: 08:1e:f5:96:0f:93:52:44:8b:03:fa:2b:42:df:d0:a5:de:12: e5:fe:f3:dd:3b:71:c4:20:8a:87:2d:19:ad:01:90:d3:bd:f3: d6:4b:f8:3d:87:a5:6f:44:c6:03:34:b8:81:d9:a9:66:fe:81: 3a:42:73:47:7d:a0:c2:b5:d5:91:df:cc:cd:1a:23:bf:02:d0: 06:fd:94:ab:dc:04:92:fc:ff:c9:ed:b9:6d:aa:f8:fa:09:6f: 22:09:07:0d:65:0e:67:61:7c:00:cf:bb:de:0c:84:a0:78:fc: c3:f6:eb:72:da:32:7b:ba:b5:9b:e7:2b:74:f7:ea:41:81:3e: 0e:ac:7a:d5:21:74:ad:00:84:41:7a:ba:77:da:bd:12:e6:c6: c7:3b:c8:4b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDtCxGWmz8TLJQ9IHBNFACuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwOTI5MTIwMjAwWhcNMjYwOTMwMTIwMjAwWjAzMTEwLwYDVQQD EygwMjQyZWFiZDE5NDgwNmM5OTIwMzAwYWUzYzE3YWZhNzQ1MDMyYzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbSL8y4PjykYuVkrIGWSHEnkm97N g82ICY787UhVLazUeJ9wRNf8l0tEHJjt+DeMTDnRLfmklTu0fQdGUt2ZBpK4e153 S77eq23xZF7aWa75bg0fBzwIxp6GpOKWF+jbaO8nSAOY+/Mk2/KE8lGrPfLsCMTq 4gnuJH8Vk/nZ1VSMR6DxLMEHj4+EYnYNn5WrGVzdKWXzwCzQG0kVd+VfwyJ3eh+g pWXeiHqBaEgTi4fKcizWO3PJsCi/rG5rd0PW2KJ98/QnrSBotC1ibiBbTz61WAFn hiWHXpVUE67tBL8+Bakm6sWhk94BaU+JBa6B4xHtu/bVeXxaP76zTcnLuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAJC6r0ZSAbJkgMArjwXr6dFAyw9MB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHVOZ46+G NBNCW+h0DErbdeVPXVjaq4qFQMU4L4Lc4NpH95sIus8bJO/UJrHkuYdutL5tLder 7iOCiuBJYdlA3GX3dkqkou3JhsGbj+9/HuGvit+NpwGQ848cMHx96jWbSnmC4W2g CZEoMLt5CB71lg+TUkSLA/orQt/Qpd4S5f7z3TtxxCCKhy0ZrQGQ073z1kv4PYel b0TGAzS4gdmpZv6BOkJzR32gwrXVkd/MzRojvwLQBv2Uq9wEkvz/ye25bar4+glv IgkHDWUOZ2F8AM+73gyEoHj8w/brctoye7q1m+crdPfqQYE+Dqx61SF0rQCEQXq6 d9q9EubGxzvISw== -----END CERTIFICATE-----Generated at Tue Sep 29 20:33:53 2026 by rpki-client