$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: 7ItwAa2cZAJBIBz0QuEmh0KxY9X3uJULu8xlSDHs/IM= Subject key identifier: D1:57:7A:36:14:56:AA:3B:15:41:0F:23:91:5B:77:A9:49:A0:8F:BF Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 01A0E13CE346CC374AE2C34F91D2DA8B3475 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 1A56 Signing time: Sun 27 Sep 2026 05:00:58 +0000 Manifest this update: Sun 27 Sep 2026 05:00:58 +0000 Manifest next update: Mon 28 Sep 2026 05:00:58 +0000 Files and hashes: 1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=) 2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=) 3: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=) 4: B7aE9R9fg8NCdOQeiZzwMIi2ZNw.roa (hash: d1Ep9dN1bkXXcsIWaTx6sw5pJSc2xeGu6SeeEZeK/UM=) 5: H3x0T_83rlo2BTe5d7dbAF2ptxg.roa (hash: PQJVU6JoM83KwjANErOepQ3bz3i1NBfWfLmiBsgEm0c=) 6: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=) 7: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=) 8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: 11XaLG7zoaxxcAYDMYTQoJymotO1w3wEt42Y3vWmKOw=) 9: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=) 10: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=) 11: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=) 12: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 04:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e1:3c:e3:46:cc:37:4a:e2:c3:4f:91:d2:da:8b:34:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Sep 27 05:00:58 2026 GMT Not After : Sep 28 05:00:58 2026 GMT Subject: CN=d1577a361456aa3b15410f23915b77a949a08fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:75:03:4c:93:77:74:5d:14:4b:eb:5c:69:ef: 37:6e:09:b1:6a:99:f3:06:49:c1:0e:94:35:e0:f3: eb:bc:c6:3e:53:56:33:e1:ac:7b:d4:a4:5a:9c:a2: 86:c1:0b:39:4f:40:a8:eb:42:12:e2:a2:66:64:ab: 40:be:75:d2:46:02:80:64:23:cc:eb:10:a0:a9:37: a1:27:70:85:62:24:f7:ab:70:3c:14:e0:44:15:3d: 3b:1d:87:83:71:37:3f:c9:74:4d:cf:af:90:0e:3e: e2:2f:68:af:28:4c:b7:39:39:2a:86:60:04:a1:66: c7:a7:67:fc:ce:95:92:d1:53:b2:74:ff:4f:8f:9c: be:48:df:65:d8:dd:b6:f7:5e:ff:d5:74:2b:fb:70: be:7d:83:d2:b5:04:24:6c:93:a7:cd:ee:e4:41:62: 16:ca:31:04:7c:0f:f0:28:a7:71:fa:64:63:7b:6c: d9:f8:95:49:84:9e:01:16:d8:fa:8e:86:e8:5c:9f: be:91:6d:bc:f6:e0:9f:df:88:1a:56:86:31:25:1e: 47:e9:01:c2:e8:eb:59:66:ae:45:16:7e:27:fd:c2: 1a:69:58:6f:b6:9c:a9:c8:d1:72:d5:02:fc:2f:60: 8d:9a:7e:c4:60:da:34:4a:93:01:b6:5c:8d:ac:72: 4a:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:57:7A:36:14:56:AA:3B:15:41:0F:23:91:5B:77:A9:49:A0:8F:BF X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:62:fe:40:a1:0e:d2:f0:a8:da:0b:bc:5e:b8:7a:09:1e:d9: b7:6c:48:74:38:e3:9d:a4:20:d6:75:e2:80:70:5f:cc:bc:f6: 75:47:5d:a1:24:95:5b:02:65:01:ef:b0:6a:04:d4:75:93:fb: f8:8f:f3:97:64:56:86:38:0a:1f:af:7e:58:fe:d9:0c:5d:c1: 0d:92:6e:ae:31:aa:9a:cb:47:58:a2:bf:75:6b:f4:c0:3d:1b: 25:f8:e3:d9:64:aa:8c:3c:30:74:6d:ff:7c:e4:2a:ad:25:b9: 21:81:3a:c1:c5:05:fc:22:71:73:df:23:0c:21:4a:bc:54:5e: 81:5d:e0:26:64:ba:e4:97:a4:b3:ae:0f:86:e5:3f:85:c7:80: 30:8f:c0:e6:2c:46:f3:33:ec:7d:c9:40:f7:c6:20:64:69:90: 01:4f:cd:3c:5f:8b:bd:9a:d2:94:1a:9d:8d:75:b5:15:70:ad: 87:e1:91:14:d5:37:7e:bd:5b:c5:f8:39:8a:fc:fc:a3:d4:a0: da:d5:a7:f5:c0:23:29:0d:ad:55:9e:e0:c2:ef:3c:0c:cb:20: ac:bd:f3:fd:f4:d7:c5:ba:83:d4:06:ad:85:9a:5e:33:9f:cf: 5c:97:00:17:70:24:b6:56:d6:52:e6:8a:bf:2a:1b:c1:4e:54: c8:11:85:44 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDhPONGzDdK4sNPkdLaizR1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYwOTI3MDUwMDU4WhcNMjYwOTI4MDUwMDU4WjAzMTEwLwYDVQQD EyhkMTU3N2EzNjE0NTZhYTNiMTU0MTBmMjM5MTViNzdhOTQ5YTA4ZmJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHUDTJN3dF0US+tcae83bgmxapnz BknBDpQ14PPrvMY+U1Yz4ax71KRanKKGwQs5T0Co60IS4qJmZKtAvnXSRgKAZCPM 6xCgqTehJ3CFYiT3q3A8FOBEFT07HYeDcTc/yXRNz6+QDj7iL2ivKEy3OTkqhmAE oWbHp2f8zpWS0VOydP9Pj5y+SN9l2N22917/1XQr+3C+fYPStQQkbJOnze7kQWIW yjEEfA/wKKdx+mRje2zZ+JVJhJ4BFtj6joboXJ++kW289uCf34gaVoYxJR5H6QHC 6OtZZq5FFn4n/cIaaVhvtpypyNFy1QL8L2CNmn7EYNo0SpMBtlyNrHJKZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNFXejYUVqo7FUEPI5Fbd6lJoI+/MB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2L+QKEO 0vCo2gu8Xrh6CR7Zt2xIdDjjnaQg1nXigHBfzLz2dUddoSSVWwJlAe+wagTUdZP7 +I/zl2RWhjgKH69+WP7ZDF3BDZJurjGqmstHWKK/dWv0wD0bJfjj2WSqjDwwdG3/ fOQqrSW5IYE6wcUF/CJxc98jDCFKvFRegV3gJmS65Jeks64PhuU/hceAMI/A5ixG 8zPsfclA98YgZGmQAU/NPF+LvZrSlBqdjXW1FXCth+GRFNU3fr1bxfg5ivz8o9Sg 2tWn9cAjKQ2tVZ7gwu88DMsgrL3z/fTXxbqD1AathZpeM5/PXJcAF3AktlbWUuaK vyobwU5UyBGFRA== -----END CERTIFICATE-----Generated at Sun Sep 27 06:48:46 2026 by rpki-client