$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: x5z165nXh4lM+mtFKmpqGwKPstTPONgxWFWO8ZA3/HM= Subject key identifier: 2E:56:B7:02:47:CC:36:88:44:A9:71:54:60:85:EC:CB:84:C3:FD:FF Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 01A0C25691F156216EF73DAB5BD061F617C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 1A8F Signing time: Mon 21 Sep 2026 05:00:48 +0000 Manifest this update: Mon 21 Sep 2026 05:00:48 +0000 Manifest next update: Tue 22 Sep 2026 05:00:48 +0000 Files and hashes: 1: 0ld9oICrjkM9PiOBYi7PkCMaP7g.roa (hash: 7pPoPeKMxfAld72vWaWuaU3WiGoLWbNKS8HJfbCj2GY=) 2: 1BFQM936y9WGcLJKwy60Wg2ag-8.roa (hash: NTbQFXMY5QSvW0BgWqBt3HeqiX8tXZPRJi0IS+SKq2s=) 3: DT8TXPB7Zoh4Y9JFFdsSZ2RIgLg.roa (hash: cdCtaCnFbbokb4IxB6SbsLXr+yswcQckTbmvZnS/sJA=) 4: H3d0QP653F6Jo-epVSXBiVH1h6k.roa (hash: B2NZF4jz4UwnLzA3KbDxjNp0EF7Qv4Th+B09WImKi2I=) 5: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: RrjQfANLq9znRtCdF+w7iCCQvZUD9YM/eYwUETmfQyo=) 6: O2mRnCNeDokP5q-PUWLd28D1SG8.roa (hash: XL7s2EUC28zeBKoJlmCFsu+5IjkYrbxfH3a9YMWon60=) 7: XPPuMgWRNY1QAnjWn2LftTc8cH4.roa (hash: LqWi3Xbli/jxxlx74n8O7L6EJtxaJ1UA0GYHmPMDyEU=) 8: ZRr2QwcqGgt_EOiTtMFoE-lkmow.roa (hash: SIg3ToChfd1+8YW/rxSI4oA419Stw5Sb9StcFL22beM=) 9: dY6eqUD4ykA92I5VKqHmYTX3q88.roa (hash: uvlx5CXBvfA8EWdxrFvclZnKJJH1HmhxtH5z6Fa+fBo=) 10: hCjWTJUhp9C-lxxCdRV4Jwzm4mk.roa (hash: ECwHPN5lxdIugX2ttk1L3l/uci2ps9CeCy1VAcBMeQs=) 11: lERL5Mrj2Bt3hRDr7br_N3d-JkE.roa (hash: /A5fyVRtCeR1gSok1lWq8T+wbRAaNz8PoEuYxSfdZSU=) 12: lWQXyxEJYv9OPJsRSSX1CCPbFb8.roa (hash: qyL/Gv6WkVcsE18337JVKs2VK9z6GTYDQ6GMJ2m3/WQ=) 13: whyP5FxoblHoIHhMTAeqWb1jp8w.roa (hash: a7SodNhSARcbHydA3wymHLN4IRqMOWIhBwT2PU/EoPc=) 14: zd2dqaKa6O4wz9TxJzSxhbKbteU.roa (hash: Sv1+bPBughIj/le0hfMKADppbA91Co/u0NeJGW/Uifs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 05:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:56:91:f1:56:21:6e:f7:3d:ab:5b:d0:61:f6:17:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Sep 21 05:00:48 2026 GMT Not After : Sep 22 05:00:48 2026 GMT Subject: CN=2e56b70247cc368844a971546085eccb84c3fdff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ef:c5:59:0a:5b:5b:bc:04:e1:23:0a:37:16: d0:af:28:4c:17:7e:f3:f0:79:bc:c4:a9:e9:28:01: f4:17:9d:82:c8:e0:c9:64:36:14:6d:52:fa:dd:df: b9:9d:03:8d:6e:c5:00:bf:96:e3:3e:3f:e6:82:d4: eb:33:e2:f2:44:29:b5:5d:f2:e1:81:e6:ed:dc:ad: 04:78:bd:aa:f7:3a:11:b7:dd:40:0f:ea:a4:5d:bd: 49:99:38:d6:c0:53:15:e4:21:73:f4:6f:dc:4d:50: e7:62:76:cc:0f:cf:21:9a:5b:9e:a0:cc:40:f4:72: 49:c5:bc:93:0b:64:45:db:02:73:64:0e:8e:5d:46: 00:66:f1:76:ce:64:10:05:34:0f:64:6e:39:fd:65: 8c:78:b3:69:3b:27:56:1f:5f:f8:74:dd:6c:10:aa: 4a:73:ad:83:6e:ea:0c:f5:d7:5c:ee:d7:25:00:b1: c6:65:a8:eb:f0:b1:3d:7a:93:73:1c:84:90:ac:d0: 51:5d:dd:0a:5a:28:ab:82:a4:65:20:1e:a6:93:4b: 9b:1c:21:dd:fc:eb:b4:d8:e0:ac:48:ef:19:30:b5: 01:a1:f7:68:fd:e7:52:9d:27:f5:6a:b0:40:dc:68: 20:00:45:0d:70:26:12:5e:59:2f:86:4f:36:fb:73: 33:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:56:B7:02:47:CC:36:88:44:A9:71:54:60:85:EC:CB:84:C3:FD:FF X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:16:ff:0d:4c:e4:a3:91:2d:08:80:40:27:27:bc:4b:8d:44: ef:9c:95:cf:78:86:2a:af:ca:cd:92:06:82:b2:8e:52:b4:28: 38:a2:0b:53:f3:9c:c2:17:33:ca:99:69:6e:e8:a5:f6:1a:fb: 3b:b4:ab:55:25:2f:4c:3a:bf:f6:9f:20:b2:0e:b4:2e:a6:6e: 35:71:20:c2:99:77:b5:52:19:31:46:6b:1a:7d:38:49:f1:f6: 48:10:4c:e0:42:87:5b:ef:49:52:2f:7b:58:9a:0f:dd:34:b3: 66:ff:cd:97:e9:f7:5b:69:3d:43:05:2d:75:11:b6:58:ee:27: 5d:c2:dd:5c:fb:01:62:81:7c:b0:4d:8a:d5:cd:0e:8a:0b:84: 4c:0e:54:31:84:ef:b9:04:59:9c:41:cf:4f:f8:59:59:b3:a6: e5:17:28:7c:1f:2f:35:ea:11:5d:95:c2:f9:14:29:d7:74:ba: 46:4f:56:f5:0c:b4:bc:fd:06:3e:ea:86:b8:61:54:b7:3f:ed: 29:ff:c6:83:85:4c:5c:69:69:c9:32:1b:3e:19:d0:0e:b5:10: f7:4b:a0:db:3f:d6:97:b7:1a:df:fe:9c:d0:5b:78:45:73:f1: 0c:fa:46:21:1f:4e:f9:dd:95:17:b1:cd:93:6b:c1:e8:e6:f4: 34:06:b1:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCVpHxViFu9z2rW9Bh9hfHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwOTIxMDUwMDQ4WhcNMjYwOTIyMDUwMDQ4WjAzMTEwLwYDVQQD EygyZTU2YjcwMjQ3Y2MzNjg4NDRhOTcxNTQ2MDg1ZWNjYjg0YzNmZGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAie/FWQpbW7wE4SMKNxbQryhMF37z 8Hm8xKnpKAH0F52CyODJZDYUbVL63d+5nQONbsUAv5bjPj/mgtTrM+LyRCm1XfLh gebt3K0EeL2q9zoRt91AD+qkXb1JmTjWwFMV5CFz9G/cTVDnYnbMD88hmlueoMxA 9HJJxbyTC2RF2wJzZA6OXUYAZvF2zmQQBTQPZG45/WWMeLNpOydWH1/4dN1sEKpK c62DbuoM9ddc7tclALHGZajr8LE9epNzHISQrNBRXd0KWiirgqRlIB6mk0ubHCHd /Ou02OCsSO8ZMLUBofdo/edSnSf1arBA3GggAEUNcCYSXlkvhk82+3MzpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC5WtwJHzDaIRKlxVGCF7MuEw/3/MB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERb/DUzk o5EtCIBAJye8S41E75yVz3iGKq/KzZIGgrKOUrQoOKILU/Ocwhczyplpbuil9hr7 O7SrVSUvTDq/9p8gsg60LqZuNXEgwpl3tVIZMUZrGn04SfH2SBBM4EKHW+9JUi97 WJoP3TSzZv/Nl+n3W2k9QwUtdRG2WO4nXcLdXPsBYoF8sE2K1c0OiguETA5UMYTv uQRZnEHPT/hZWbOm5RcofB8vNeoRXZXC+RQp13S6Rk9W9Qy0vP0GPuqGuGFUtz/t Kf/Gg4VMXGlpyTIbPhnQDrUQ90ug2z/Wl7ca3/6c0Ft4RXPxDPpGIR9O+d2VF7HN k2vB6Ob0NAaxOw== -----END CERTIFICATE-----Generated at Mon Sep 21 16:36:27 2026 by rpki-client