$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: ajqsZk3xRdNKaIAIBBJFE0xUaOYG+zLTwk9s7AVr1wc= Subject key identifier: 2E:1B:FB:3A:02:1A:79:EB:19:AB:23:1E:6D:56:2B:AC:1E:A1:4F:72 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 01A0C4446A089854BD23C23E73EB3DACD611 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 1A90 Signing time: Mon 21 Sep 2026 14:00:12 +0000 Manifest this update: Mon 21 Sep 2026 14:00:12 +0000 Manifest next update: Tue 22 Sep 2026 14:00:12 +0000 Files and hashes: 1: 0ld9oICrjkM9PiOBYi7PkCMaP7g.roa (hash: 7pPoPeKMxfAld72vWaWuaU3WiGoLWbNKS8HJfbCj2GY=) 2: 1BFQM936y9WGcLJKwy60Wg2ag-8.roa (hash: NTbQFXMY5QSvW0BgWqBt3HeqiX8tXZPRJi0IS+SKq2s=) 3: DT8TXPB7Zoh4Y9JFFdsSZ2RIgLg.roa (hash: cdCtaCnFbbokb4IxB6SbsLXr+yswcQckTbmvZnS/sJA=) 4: H3d0QP653F6Jo-epVSXBiVH1h6k.roa (hash: B2NZF4jz4UwnLzA3KbDxjNp0EF7Qv4Th+B09WImKi2I=) 5: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: FPkGM7HXxdDGvKKVzxJVeQ23788HxMzs8DgWaCrGuWA=) 6: O2mRnCNeDokP5q-PUWLd28D1SG8.roa (hash: XL7s2EUC28zeBKoJlmCFsu+5IjkYrbxfH3a9YMWon60=) 7: XPPuMgWRNY1QAnjWn2LftTc8cH4.roa (hash: LqWi3Xbli/jxxlx74n8O7L6EJtxaJ1UA0GYHmPMDyEU=) 8: ZRr2QwcqGgt_EOiTtMFoE-lkmow.roa (hash: SIg3ToChfd1+8YW/rxSI4oA419Stw5Sb9StcFL22beM=) 9: dY6eqUD4ykA92I5VKqHmYTX3q88.roa (hash: uvlx5CXBvfA8EWdxrFvclZnKJJH1HmhxtH5z6Fa+fBo=) 10: hCjWTJUhp9C-lxxCdRV4Jwzm4mk.roa (hash: ECwHPN5lxdIugX2ttk1L3l/uci2ps9CeCy1VAcBMeQs=) 11: lERL5Mrj2Bt3hRDr7br_N3d-JkE.roa (hash: /A5fyVRtCeR1gSok1lWq8T+wbRAaNz8PoEuYxSfdZSU=) 12: lWQXyxEJYv9OPJsRSSX1CCPbFb8.roa (hash: qyL/Gv6WkVcsE18337JVKs2VK9z6GTYDQ6GMJ2m3/WQ=) 13: whyP5FxoblHoIHhMTAeqWb1jp8w.roa (hash: a7SodNhSARcbHydA3wymHLN4IRqMOWIhBwT2PU/EoPc=) 14: zd2dqaKa6O4wz9TxJzSxhbKbteU.roa (hash: Sv1+bPBughIj/le0hfMKADppbA91Co/u0NeJGW/Uifs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:44:6a:08:98:54:bd:23:c2:3e:73:eb:3d:ac:d6:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Sep 21 14:00:12 2026 GMT Not After : Sep 22 14:00:12 2026 GMT Subject: CN=2e1bfb3a021a79eb19ab231e6d562bac1ea14f72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:85:50:68:07:f9:9f:ae:fd:6f:f9:8e:42:35: 3e:22:1f:8d:7e:87:ee:f6:9c:09:a4:53:5f:d8:4b: 9d:53:9d:6b:80:30:9b:27:34:b6:14:08:25:21:45: ac:a3:a3:6e:43:0c:5e:bf:c2:7d:d3:b3:c2:74:71: ee:24:6c:d8:90:d8:23:df:35:76:75:d9:b0:c2:56: 09:36:cc:e2:c9:0f:5a:2b:d8:20:8f:65:9d:32:96: 8a:37:b9:c7:97:9d:1e:da:66:28:3e:eb:1e:0e:7c: b2:b5:30:16:f3:ee:36:02:4e:10:8d:6c:8b:35:38: 04:d7:a7:1c:0c:f0:e2:dd:61:21:58:bd:a1:7e:53: b2:95:c5:0d:38:41:3d:bb:8a:f5:eb:4b:a2:a9:3e: 74:c4:dc:36:1e:2b:8e:7b:0c:ac:92:84:41:32:b9: de:2a:56:f7:07:cc:78:e3:0d:aa:27:28:94:71:e8: 21:7b:41:f7:0f:c2:3d:56:0e:80:50:75:d4:a9:84: 58:66:06:ed:44:f2:37:9f:45:ef:0e:93:e0:1f:a1: 70:a6:34:9d:3d:db:3a:f1:5a:09:39:48:71:97:38: c4:89:ee:a5:6b:61:4c:76:6a:16:ba:92:4c:c2:46: 2e:cd:65:89:fb:df:45:9f:fe:f1:87:7d:09:29:a3: 99:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:1B:FB:3A:02:1A:79:EB:19:AB:23:1E:6D:56:2B:AC:1E:A1:4F:72 X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:4b:9b:8a:73:de:d7:e0:30:3a:ec:31:aa:89:2a:66:ca:d6: 4e:f7:f8:40:df:da:eb:7a:04:aa:b6:6a:0e:e2:e8:c8:93:9e: 97:21:cd:67:99:44:66:57:cb:df:b6:ae:9c:35:0e:a8:28:63: 26:65:38:d5:8b:b6:c1:8d:70:76:1a:4b:01:bb:6c:11:ba:d7: 0c:c6:b7:25:de:c2:36:1c:64:94:2e:e8:5c:64:1f:2d:99:1c: f1:e1:01:0f:83:13:25:34:1d:d1:57:30:dd:88:74:1f:52:4a: 59:d8:4b:61:5d:e3:78:e2:6a:1e:87:3b:8a:3e:68:79:a0:1c: 27:0d:0b:68:65:1f:f7:af:5b:e2:b5:b9:5c:eb:8d:5c:c3:94: 14:f2:9e:db:e0:49:a4:79:0c:cd:32:a5:5d:77:45:ea:c0:02: 85:ad:f4:1e:77:bd:2a:20:a6:42:94:e3:cd:a5:d7:6b:4b:e8: 73:4f:f3:a8:d8:13:ec:97:9a:86:81:6f:91:b5:b3:a0:d3:5f: 3e:21:d1:aa:e3:f0:3e:1a:91:5b:22:c2:fe:a2:6c:2d:f2:20: 74:2d:85:48:d3:d8:31:d5:eb:43:e8:ec:04:64:16:19:2e:c4: 21:8c:9d:cf:cc:f5:48:d1:15:4a:ab:48:e6:c0:92:b9:75:19: 10:5f:dd:3e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDERGoImFS9I8I+c+s9rNYRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwOTIxMTQwMDEyWhcNMjYwOTIyMTQwMDEyWjAzMTEwLwYDVQQD EygyZTFiZmIzYTAyMWE3OWViMTlhYjIzMWU2ZDU2MmJhYzFlYTE0ZjcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2YVQaAf5n679b/mOQjU+Ih+Nfofu 9pwJpFNf2EudU51rgDCbJzS2FAglIUWso6NuQwxev8J907PCdHHuJGzYkNgj3zV2 ddmwwlYJNsziyQ9aK9ggj2WdMpaKN7nHl50e2mYoPuseDnyytTAW8+42Ak4QjWyL NTgE16ccDPDi3WEhWL2hflOylcUNOEE9u4r160uiqT50xNw2HiuOewyskoRBMrne Klb3B8x44w2qJyiUceghe0H3D8I9Vg6AUHXUqYRYZgbtRPI3n0XvDpPgH6FwpjSd Pds68VoJOUhxlzjEie6la2FMdmoWupJMwkYuzWWJ+99Fn/7xh30JKaOZOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4b+zoCGnnrGasjHm1WK6weoU9yMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJEubinPe 1+AwOuwxqokqZsrWTvf4QN/a63oEqrZqDuLoyJOelyHNZ5lEZlfL37aunDUOqChj JmU41Yu2wY1wdhpLAbtsEbrXDMa3Jd7CNhxklC7oXGQfLZkc8eEBD4MTJTQd0Vcw 3Yh0H1JKWdhLYV3jeOJqHoc7ij5oeaAcJw0LaGUf969b4rW5XOuNXMOUFPKe2+BJ pHkMzTKlXXdF6sACha30Hne9KiCmQpTjzaXXa0voc0/zqNgT7JeahoFvkbWzoNNf PiHRquPwPhqRWyLC/qJsLfIgdC2FSNPYMdXrQ+jsBGQWGS7EIYydz8z1SNEVSqtI 5sCSuXUZEF/dPg== -----END CERTIFICATE-----Generated at Mon Sep 21 18:52:37 2026 by rpki-client