$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json) Hash identifier: PPpAviFhJBGvNubc6FxGbTH9iiGl0Mk8L2BM4CneNzU= Subject key identifier: 56:F6:5B:C3:BB:0B:15:1C:CC:5F:9A:C0:7B:B5:9A:16:94:58:9D:6A Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16 Certificate serial: 01A0D1C9556700A13FA65E773DA6AC9C6688 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft Manifest number: 1A8A Signing time: Thu 24 Sep 2026 05:00:27 +0000 Manifest this update: Thu 24 Sep 2026 05:00:27 +0000 Manifest next update: Fri 25 Sep 2026 05:00:27 +0000 Files and hashes: 1: 67pKVcBP4g1ka7BHnXY8o1GjatI.roa (hash: NHI8d7vH5tjpxPomV3eBVCOa5aQTAvgW0GwAOx6HDCM=) 2: 6oyqxH6fbfCjScGv2qC0XiD5gCU.roa (hash: X2pwG2wmLfB4M+6njFbtbY0lJjAJiNG8E4ePk2t5PZ8=) 3: BG7hZwdKTnkeh7F43mqTspITrC4.roa (hash: 9w3fRT22xu3zZICYpxgXI0CEKv6s/N6rtv0UUVT3l1A=) 4: E3UcI6HbofZm_snwFtZqoqwg5-4.roa (hash: d4QiFFj+amh2JyYpNEFn0n/k8uKNUlkfpX81m7S5ZMs=) 5: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (hash: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=) 6: KsuuqZuzWciosvKgFRPXzNp2Gcs.roa (hash: fH9tuqcfvS+JzHyWBgJi96fMfx/uXZQsaH9PlzbW4JY=) 7: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: caMkz3zj3jr/RKKARvKmNZx9rgqCDxQSfnlSEhTjB4Q=) 8: _s7vUDean7Bk3XkZfaPzLom7oDA.roa (hash: GgtG8eWJVnz8jQ43nDutA9e3I7bTjxYLRfGFuNm9kaE=) 9: gAqwEcTCZcYoTWX4c9WWfhoNMgI.roa (hash: vAiaSmq1X3G0blOObiQg/SKw+90F8oGpc/icVWBJSss=) 10: k0wZqmhMQI1_yKbqeg-OeoA8ghg.roa (hash: okOMVmkk1MoA9VfXhi+YW9SB7pABGOjg3hztcxMcS9k=) 11: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (hash: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM=) 12: qMM2yBBqAUZtpJ-UlQnkHWnMjy0.roa (hash: TpFOiG67I1bJklLN/pt/Lsphs7nPRwEpTIL7MabwCy0=) 13: qOQMcO_XSSMHONHJzrh7779P3jo.roa (hash: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 05:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:c9:55:67:00:a1:3f:a6:5e:77:3d:a6:ac:9c:66:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16 Validity Not Before: Sep 24 05:00:27 2026 GMT Not After : Sep 25 05:00:27 2026 GMT Subject: CN=56f65bc3bb0b151ccc5f9ac07bb59a1694589d6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:1b:a5:16:79:55:a0:02:a0:64:45:58:9f:97: 97:a6:1d:e0:7c:6f:16:d0:2a:c6:00:e9:78:94:2f: 54:c0:fe:da:c2:a1:7a:1d:69:5b:f4:9c:50:40:c5: bb:4e:7b:52:54:9b:44:4e:4a:8f:22:b3:73:fc:dc: 74:42:4e:16:37:e3:3a:c2:2b:08:fc:aa:7e:3e:a0: b9:52:19:5d:76:e3:b1:90:79:98:c1:7d:f4:c6:4a: f8:1e:ce:0a:75:ee:63:7c:e8:16:b3:fe:a6:03:81: 0d:19:aa:b6:bd:82:0e:78:f9:16:bb:12:d8:05:63: 10:1d:3d:73:fd:a9:15:25:30:0e:62:fe:33:d3:94: 8b:72:4b:49:10:87:36:86:0e:c8:bb:1f:94:96:4a: 68:f6:3b:a2:89:10:e7:1c:d6:a6:21:a3:f8:bf:37: df:b8:ea:ec:bb:eb:53:9a:e8:54:1c:63:78:fe:9e: df:63:54:90:29:09:52:01:a8:12:93:08:9a:25:e0: a7:37:2b:ff:ef:ff:cd:23:13:ff:8c:76:df:72:48: 31:ab:75:d6:58:9b:2b:26:34:37:60:d5:0b:d4:36: d6:bb:25:78:bf:11:ab:01:a9:e8:b1:64:a4:f6:ca: 46:31:e2:8f:b2:74:2f:41:13:9d:b3:4a:62:68:16: 84:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:F6:5B:C3:BB:0B:15:1C:CC:5F:9A:C0:7B:B5:9A:16:94:58:9D:6A X509v3 Authority Key Identifier: keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:c1:b5:a2:ab:60:39:aa:7d:eb:de:c3:b9:90:3f:27:a4:85: 4c:b3:ef:8b:a7:c1:8b:11:b4:75:01:e4:29:1f:5c:7a:14:93: c8:a1:bf:41:a5:45:6e:ee:cc:58:fe:47:85:19:b0:63:0b:4f: 37:7e:92:55:7a:e8:eb:26:b9:65:e6:b2:cb:65:19:29:40:f3: 98:06:19:50:a3:06:45:d2:76:9e:53:38:90:eb:cc:d2:1c:0d: 41:d0:d1:7f:c0:bb:0f:74:fb:1a:3c:2e:14:d6:f1:da:de:96: 9c:79:d5:17:40:68:88:2f:1e:0f:41:2b:b5:31:58:16:8e:41: 14:b7:b5:01:19:71:ed:97:d5:07:68:10:d2:e7:17:fb:2b:90: 9c:74:15:71:4f:cf:93:e2:4c:ef:53:b4:dc:c0:b5:dd:7d:be: fb:d2:98:69:28:9d:bf:da:66:87:6d:d5:a6:25:fb:c7:7b:f6: df:7d:b4:26:93:73:ff:c5:7f:69:2d:96:70:4f:cc:6d:d9:96: a6:9e:f5:ce:94:f2:db:99:60:1e:41:ba:37:6b:de:a9:56:68: 86:08:9e:de:a3:63:17:93:73:b6:7f:0b:8a:35:29:28:71:f0: e2:ec:46:d6:6d:c8:f4:2d:c3:c0:94:16:29:25:37:d1:c6:ad: 09:12:c9:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRyVVnAKE/pl53PaasnGaIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZTg4OGE3NmU5OTg1MWIwMWZiODZjZWM1MzdkNGQ4ZTYx MGRlMTYwHhcNMjYwOTI0MDUwMDI3WhcNMjYwOTI1MDUwMDI3WjAzMTEwLwYDVQQD Eyg1NmY2NWJjM2JiMGIxNTFjY2M1ZjlhYzA3YmI1OWExNjk0NTg5ZDZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBulFnlVoAKgZEVYn5eXph3gfG8W 0CrGAOl4lC9UwP7awqF6HWlb9JxQQMW7TntSVJtETkqPIrNz/Nx0Qk4WN+M6wisI /Kp+PqC5UhldduOxkHmYwX30xkr4Hs4Kde5jfOgWs/6mA4ENGaq2vYIOePkWuxLY BWMQHT1z/akVJTAOYv4z05SLcktJEIc2hg7Iux+Ulkpo9juiiRDnHNamIaP4vzff uOrsu+tTmuhUHGN4/p7fY1SQKQlSAagSkwiaJeCnNyv/7//NIxP/jHbfckgxq3XW WJsrJjQ3YNUL1DbWuyV4vxGrAanosWSk9spGMeKPsnQvQROds0piaBaE9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFb2W8O7CxUczF+awHu1mhaUWJ1qMB8GA1UdIwQY MBaAFEToiKdumYUbAfuGzsU31NjmEN4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUt YmMwZGJhOTMyYjM1LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUtYmMwZGJhOTMyYjM1 LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMG1oqtg Oap9697DuZA/J6SFTLPvi6fBixG0dQHkKR9cehSTyKG/QaVFbu7MWP5HhRmwYwtP N36SVXro6ya5Zeayy2UZKUDzmAYZUKMGRdJ2nlM4kOvM0hwNQdDRf8C7D3T7Gjwu FNbx2t6WnHnVF0BoiC8eD0ErtTFYFo5BFLe1ARlx7ZfVB2gQ0ucX+yuQnHQVcU/P k+JM71O03MC13X2++9KYaSidv9pmh23VpiX7x3v23320JpNz/8V/aS2WcE/MbdmW pp71zpTy25lgHkG6N2veqVZohgie3qNjF5Nztn8LijUpKHHw4uxG1m3I9C3DwJQW KSU30catCRLJoA== -----END CERTIFICATE-----Generated at Thu Sep 24 15:02:42 2026 by rpki-client