$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: nbSKfkO0pcUYe0PjJEhICIWnebdFt9rFLXBrUI2ajmw= Subject key identifier: 0B:8B:ED:B5:7D:57:AD:83:2C:02:3D:7B:B0:5B:22:AD:AC:BF:E2:44 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 01A0C6D8119E8ED22118E3190D9FBCB0DCDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 1A8B Signing time: Tue 22 Sep 2026 02:00:44 +0000 Manifest this update: Tue 22 Sep 2026 02:00:44 +0000 Manifest next update: Wed 23 Sep 2026 02:00:44 +0000 Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=) 2: 3BOp-YxEDCV8bR7KeQJ8iZNQrP0.roa (hash: GQeGMsayLy25d3Mzz8Sr1dTr20A68juU11xi9SJ1kwQ=) 3: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=) 4: FpZLKm-2HuyBs9RMbUcbmbopMuU.roa (hash: 3TSsOddEtljGL8cZUDm9jJjfR573z1TKNPv7WQMwWsE=) 5: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=) 6: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=) 7: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: zrD/7jpdxKyiH+VdPFGZyi2kxTPnseefNejKwXHWzns=) 9: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=) 10: dKLrGCnnWV06iolZrHx2nh4vWJg.roa (hash: IGn7SudG+KQQ8pkrK3hPDPOgmXUuAfTQAKdCH2IyL6I=) 11: mEhn-x7tkmLGeYlMpZdP2RjzVPY.roa (hash: YARnW3hK0MAvwIlgDRpM5wiqLHphA51kgJTHfm2NanQ=) 12: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=) 13: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=) 14: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c6:d8:11:9e:8e:d2:21:18:e3:19:0d:9f:bc:b0:dc:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Sep 22 02:00:44 2026 GMT Not After : Sep 23 02:00:44 2026 GMT Subject: CN=0b8bedb57d57ad832c023d7bb05b22adacbfe244 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:83:d2:14:ee:46:ec:93:f4:39:49:99:a3:8c: 80:f5:8d:6f:5e:0f:59:30:96:20:1d:17:64:ba:5b: 66:98:6d:a5:18:ff:ce:df:34:a2:7d:31:b9:40:57: 08:89:3b:97:33:e1:26:11:b6:fe:d2:96:f4:68:51: 71:75:14:44:a5:5b:9c:c2:4b:74:f5:59:3d:c8:cb: fa:be:0c:68:fc:33:d1:e8:25:26:ec:96:ef:5f:5c: e7:07:ff:78:ab:74:01:e4:cf:a3:30:33:6a:d2:eb: b6:79:ae:e8:d0:c0:11:f3:39:52:ec:e0:08:4f:d4: f9:ff:f8:d2:44:18:90:84:e3:19:dd:37:36:4c:b1: 80:dd:fe:f8:2f:33:1e:f6:4e:f9:b6:bb:db:d0:a9: ee:ef:c0:1f:28:15:17:58:66:1b:54:81:be:17:45: 03:49:b0:db:86:a0:36:9b:6f:3b:46:dc:c5:e9:df: ce:70:44:35:18:5b:a5:7e:6b:31:3e:01:95:ad:d7: 04:2c:d3:d3:d9:22:3d:d1:59:ca:1b:3a:2d:c2:b8: 52:19:b8:bf:2c:9b:20:5e:4e:ba:3f:c1:78:d7:e0: 06:c5:e2:ad:dc:60:2e:76:ae:a9:b3:3c:08:4c:8a: fd:b9:90:ee:21:28:88:3a:c5:7d:dd:97:af:d3:46: b5:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:8B:ED:B5:7D:57:AD:83:2C:02:3D:7B:B0:5B:22:AD:AC:BF:E2:44 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:7d:06:ed:7a:c3:d9:14:6e:f7:f0:7e:bd:0e:0c:ef:6a:23: 4a:40:e0:a3:ca:26:7e:c2:d0:f8:fd:d2:cb:39:87:da:3e:fa: f0:65:78:5b:30:3b:a6:94:80:f8:fc:00:aa:ad:bb:f6:aa:f1: 84:ac:58:ec:d4:23:80:b8:b0:b9:f5:1e:29:29:ad:f3:b0:d5: c6:f9:35:9b:71:83:f4:48:a6:fa:4f:56:80:24:9d:f3:19:3d: 40:8b:26:f4:9d:11:5a:eb:57:f1:2a:5a:42:e5:1d:01:14:fc: 52:fd:31:95:e0:f0:5d:6c:db:6d:24:a8:08:7f:19:54:5a:e6: 6a:01:f5:79:c9:3c:29:bd:88:53:75:a2:7c:6f:f0:dd:b7:6e: 40:52:e7:52:60:5c:93:ca:ee:53:16:68:2c:85:71:88:88:c5: e2:9b:81:eb:44:b6:e2:c8:6e:78:1c:f5:d4:f5:48:d0:81:8c: b5:57:1b:fd:06:ba:2e:f1:d7:62:8f:2c:73:6b:31:46:a6:e0: 4c:46:d3:f6:33:b8:b9:15:d7:a1:bf:c7:c1:b4:13:d7:8b:01: 3b:45:2b:cc:3d:37:51:d0:b9:f3:53:b4:79:9e:8e:16:3a:35: 27:f3:38:6a:d1:69:0d:a6:44:e0:26:5c:62:be:5e:ac:5f:70: c4:35:cc:87 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDG2BGejtIhGOMZDZ+8sNzeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwOTIyMDIwMDQ0WhcNMjYwOTIzMDIwMDQ0WjAzMTEwLwYDVQQD EygwYjhiZWRiNTdkNTdhZDgzMmMwMjNkN2JiMDViMjJhZGFjYmZlMjQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYPSFO5G7JP0OUmZo4yA9Y1vXg9Z MJYgHRdkultmmG2lGP/O3zSifTG5QFcIiTuXM+EmEbb+0pb0aFFxdRREpVucwkt0 9Vk9yMv6vgxo/DPR6CUm7JbvX1znB/94q3QB5M+jMDNq0uu2ea7o0MAR8zlS7OAI T9T5//jSRBiQhOMZ3Tc2TLGA3f74LzMe9k75trvb0Knu78AfKBUXWGYbVIG+F0UD SbDbhqA2m287RtzF6d/OcEQ1GFulfmsxPgGVrdcELNPT2SI90VnKGzotwrhSGbi/ LJsgXk66P8F41+AGxeKt3GAudq6pszwITIr9uZDuISiIOsV93Zev00a1/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAuL7bV9V62DLAI9e7BbIq2sv+JEMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK30G7XrD 2RRu9/B+vQ4M72ojSkDgo8omfsLQ+P3SyzmH2j768GV4WzA7ppSA+PwAqq279qrx hKxY7NQjgLiwufUeKSmt87DVxvk1m3GD9Eim+k9WgCSd8xk9QIsm9J0RWutX8Spa QuUdART8Uv0xleDwXWzbbSSoCH8ZVFrmagH1eck8Kb2IU3WifG/w3bduQFLnUmBc k8ruUxZoLIVxiIjF4puB60S24shueBz11PVI0IGMtVcb/Qa6LvHXYo8sc2sxRqbg TEbT9jO4uRXXob/HwbQT14sBO0UrzD03UdC581O0eZ6OFjo1J/M4atFpDaZE4CZc Yr5erF9wxDXMhw== -----END CERTIFICATE-----Generated at Tue Sep 22 05:39:33 2026 by rpki-client