$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: JaKl8ZOEiD6SLrSXy5++IOHXoPi4FAYjwobgk0dVlUU= Subject key identifier: A5:EC:8D:33:59:AA:33:26:2C:D7:47:C2:7F:EE:78:35:5B:AF:A4:E2 Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 01A0E8F69082C25A86FE1712C9CADE3DCE9D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 1A5A Signing time: Mon 28 Sep 2026 17:01:07 +0000 Manifest this update: Mon 28 Sep 2026 17:01:07 +0000 Manifest next update: Tue 29 Sep 2026 17:01:07 +0000 Files and hashes: 1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=) 2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=) 3: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=) 4: B7aE9R9fg8NCdOQeiZzwMIi2ZNw.roa (hash: d1Ep9dN1bkXXcsIWaTx6sw5pJSc2xeGu6SeeEZeK/UM=) 5: H3x0T_83rlo2BTe5d7dbAF2ptxg.roa (hash: PQJVU6JoM83KwjANErOepQ3bz3i1NBfWfLmiBsgEm0c=) 6: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=) 7: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=) 8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: TU+VTflw2RBV7aWyhad1a29blZFTvTMUiKbrRjJyZnE=) 9: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=) 10: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=) 11: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=) 12: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 14:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e8:f6:90:82:c2:5a:86:fe:17:12:c9:ca:de:3d:ce:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Sep 28 17:01:07 2026 GMT Not After : Sep 29 17:01:07 2026 GMT Subject: CN=a5ec8d3359aa33262cd747c27fee78355bafa4e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:50:ba:2f:80:fe:e3:48:fd:12:0a:d9:1a:62: 57:0a:28:d2:ca:57:30:a0:d7:b3:73:07:a9:b3:ca: 50:c0:97:99:11:10:e4:e9:af:1c:d5:7e:75:e6:fe: 0d:0f:db:57:72:c9:9f:4a:76:b2:7c:2c:4b:ad:98: 00:35:9b:6f:77:c6:de:0f:be:cc:ab:98:4b:03:40: 5f:1d:43:11:03:30:d9:03:94:68:38:e4:75:45:9b: 38:98:a0:4d:ad:7a:1a:23:cf:4b:a5:6c:62:36:03: cd:c2:7d:a3:f1:ce:cd:11:c7:fa:57:c7:4d:79:a0: b3:c6:2a:ca:67:1c:7e:4d:26:dc:ee:d1:12:1d:42: f0:be:b1:73:be:54:eb:97:f6:9a:d1:11:3b:ca:60: e3:cc:6b:7a:24:cc:06:45:08:eb:f0:64:00:3e:a6: 6e:f5:f9:88:73:7e:03:6e:58:42:5c:2f:46:0b:31: 8c:35:6c:a7:10:45:de:a5:b4:56:56:04:58:b0:e9: c8:91:13:a5:2e:55:3d:40:3f:71:6e:40:0e:d1:4f: 39:f0:e3:3b:6c:03:82:c9:42:83:20:97:f9:26:3e: b4:8f:3a:19:e9:fa:94:38:b1:73:10:51:67:50:26: 09:4e:83:71:58:4d:eb:8e:bb:ac:15:fd:50:84:f9: cb:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:EC:8D:33:59:AA:33:26:2C:D7:47:C2:7F:EE:78:35:5B:AF:A4:E2 X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:a3:b5:91:52:9a:91:14:f1:f7:1a:45:47:3d:c3:dc:aa:10: 5f:6a:90:fc:e7:b7:0c:9a:67:67:d6:d7:b0:5e:95:4b:dd:65: b9:fe:5b:d8:79:da:5a:73:5e:38:43:7f:7e:63:74:20:83:0b: 69:ce:e8:52:46:5c:09:bf:f1:37:89:86:f3:c4:27:1e:5a:64: 9c:56:c4:68:57:67:34:18:70:e7:0a:c8:7c:d1:5c:b4:6d:e5: ab:1e:bb:79:9a:f0:6a:5a:42:40:8f:8d:55:35:72:b3:f7:1e: 1f:26:29:f2:a0:ba:01:c4:41:11:48:69:0e:74:92:9a:71:89: ae:9c:39:a4:45:e3:fd:93:22:48:f8:4f:03:88:9c:c8:9b:07: 5c:f4:85:69:50:ed:fd:a2:1b:ab:35:c9:1f:31:35:08:67:03: 9e:da:91:89:55:40:b8:7a:af:80:6a:39:75:30:5c:6c:3d:ad: aa:cb:7f:7c:e0:90:cf:1e:da:30:5e:f3:f3:2e:0f:21:9f:c8: 8f:9b:a8:cf:65:5e:0d:1e:66:47:23:76:5f:9e:c8:67:72:88: 70:25:cb:55:45:8d:f9:d6:6a:8a:06:9e:dc:c0:04:6d:39:92: e7:5a:94:0f:dc:52:e1:94:a8:5e:19:b9:b3:cc:05:ff:7c:5e: 11:d8:4f:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDo9pCCwlqG/hcSycrePc6dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwOTI4MTcwMTA3WhcNMjYwOTI5MTcwMTA3WjAzMTEwLwYDVQQD EyhhNWVjOGQzMzU5YWEzMzI2MmNkNzQ3YzI3ZmVlNzgzNTViYWZhNGUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFC6L4D+40j9EgrZGmJXCijSylcw oNezcweps8pQwJeZERDk6a8c1X515v4ND9tXcsmfSnayfCxLrZgANZtvd8beD77M q5hLA0BfHUMRAzDZA5RoOOR1RZs4mKBNrXoaI89LpWxiNgPNwn2j8c7NEcf6V8dN eaCzxirKZxx+TSbc7tESHULwvrFzvlTrl/aa0RE7ymDjzGt6JMwGRQjr8GQAPqZu 9fmIc34DblhCXC9GCzGMNWynEEXepbRWVgRYsOnIkROlLlU9QD9xbkAO0U858OM7 bAOCyUKDIJf5Jj60jzoZ6fqUOLFzEFFnUCYJToNxWE3rjrusFf1QhPnLYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKXsjTNZqjMmLNdHwn/ueDVbr6TiMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoKO1kVKa kRTx9xpFRz3D3KoQX2qQ/Oe3DJpnZ9bXsF6VS91luf5b2HnaWnNeOEN/fmN0IIML ac7oUkZcCb/xN4mG88QnHlpknFbEaFdnNBhw5wrIfNFctG3lqx67eZrwalpCQI+N VTVys/ceHyYp8qC6AcRBEUhpDnSSmnGJrpw5pEXj/ZMiSPhPA4icyJsHXPSFaVDt /aIbqzXJHzE1CGcDntqRiVVAuHqvgGo5dTBcbD2tqst/fOCQzx7aMF7z8y4PIZ/I j5uoz2VeDR5mRyN2X57IZ3KIcCXLVUWN+dZqigae3MAEbTmS51qUD9xS4ZSoXhm5 s8wF/3xeEdhP0g== -----END CERTIFICATE-----Generated at Tue Sep 29 00:57:27 2026 by rpki-client