$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: EYj38OZIhwuMNvXw0dEZB733vsc520UjZ4NNuXYiG7I= Subject key identifier: F2:B2:40:E3:ED:9D:88:4E:3D:B2:9F:E9:8F:63:7C:EF:D9:90:3E:2F Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 01A0C10D20FA0B6B5F89948491CC94BFA05B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 1A88 Signing time: Sun 20 Sep 2026 23:00:58 +0000 Manifest this update: Sun 20 Sep 2026 23:00:58 +0000 Manifest next update: Mon 21 Sep 2026 23:00:58 +0000 Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=) 2: 3BOp-YxEDCV8bR7KeQJ8iZNQrP0.roa (hash: GQeGMsayLy25d3Mzz8Sr1dTr20A68juU11xi9SJ1kwQ=) 3: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=) 4: FpZLKm-2HuyBs9RMbUcbmbopMuU.roa (hash: 3TSsOddEtljGL8cZUDm9jJjfR573z1TKNPv7WQMwWsE=) 5: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=) 6: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=) 7: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: X2gpsCDWrUJ3CPT3QM8pumcRBk1+lofZ9I1kcb9Rw0g=) 9: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=) 10: dKLrGCnnWV06iolZrHx2nh4vWJg.roa (hash: IGn7SudG+KQQ8pkrK3hPDPOgmXUuAfTQAKdCH2IyL6I=) 11: mEhn-x7tkmLGeYlMpZdP2RjzVPY.roa (hash: YARnW3hK0MAvwIlgDRpM5wiqLHphA51kgJTHfm2NanQ=) 12: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=) 13: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=) 14: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c1:0d:20:fa:0b:6b:5f:89:94:84:91:cc:94:bf:a0:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Sep 20 23:00:58 2026 GMT Not After : Sep 21 23:00:58 2026 GMT Subject: CN=f2b240e3ed9d884e3db29fe98f637cefd9903e2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a6:70:1b:39:6b:f8:48:69:3d:08:66:e2:39: c7:a4:44:3d:55:23:26:61:48:38:df:9f:48:11:1e: 9a:b8:70:2c:ca:0f:d2:11:9e:8f:9d:51:2c:ad:d5: af:1b:e6:6d:7f:2a:3a:a2:86:5b:a4:25:67:b7:53: d6:c4:ec:79:32:6f:1b:c1:97:0d:7e:7d:b5:cb:39: 84:17:fd:aa:9e:72:e7:e9:32:4e:d7:4d:b4:97:00: ff:d0:a8:10:21:e5:04:c3:00:b3:5e:96:35:89:be: ce:58:88:64:95:bd:75:a4:a2:31:50:b1:8a:ba:f0: c6:db:67:73:0c:bc:2e:ac:d4:42:fd:75:a0:67:a1: 9e:99:46:0b:08:ea:bb:b4:22:f4:13:50:bd:3e:63: f7:8f:4c:2b:73:db:50:14:09:51:74:dd:46:c8:dd: 34:3b:96:1e:98:7a:39:5f:cb:0b:28:62:2f:4d:5c: 22:ba:26:d1:91:26:b8:96:69:31:9c:4c:36:ac:b9: 76:18:00:a1:30:7d:9c:2e:d6:79:f5:76:28:b9:70: 4d:67:bc:49:ab:b4:3c:ff:98:31:0f:78:cb:67:bd: 40:0a:2b:0d:51:96:80:3d:48:a9:51:64:56:1a:57: 0e:dd:c5:75:05:ac:c9:27:ae:34:3d:ac:7b:96:a3: b0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B2:40:E3:ED:9D:88:4E:3D:B2:9F:E9:8F:63:7C:EF:D9:90:3E:2F X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:9c:61:58:e8:c5:7e:fc:71:c6:87:ea:f8:e1:5a:0a:6c:92: 12:83:ff:d0:75:0b:9d:bd:3c:91:93:36:6e:51:9a:3b:6c:1a: 9e:6b:57:01:a5:8c:55:a8:65:49:6c:76:ec:58:ca:64:d4:d4: ca:d2:e8:0a:dd:b2:04:be:52:ea:50:c6:fd:15:0a:36:e0:fc: cb:1d:0f:44:55:65:39:b2:e7:d4:f9:da:6c:f0:1c:d5:38:0f: ee:be:8f:a9:bd:40:cd:4a:76:54:95:bd:d2:59:df:02:a7:b5: 25:53:48:3a:44:18:de:90:10:3d:96:72:6d:f1:a5:cf:b1:15: 65:58:84:8c:8f:45:21:dc:f5:4a:cf:b8:38:05:60:1b:f1:2d: 0b:81:05:c5:9f:c4:5e:b9:07:9c:c9:f4:4b:89:3f:c5:4c:47: f5:0a:1d:4e:a7:25:9f:59:d4:ea:76:b5:62:49:a6:e6:46:61: d2:47:2c:10:12:3a:61:cd:a3:b2:04:db:69:5d:e1:d9:cb:f3: b6:c2:e9:b9:0f:4d:af:69:7b:dc:13:81:54:59:a8:17:85:21: 7b:51:e3:2a:a1:93:e7:d6:02:2e:19:f6:b2:37:d3:c3:9e:3f: 82:2b:54:cb:29:c4:59:75:54:fe:bb:e3:9c:4b:d7:bb:db:16: 64:62:89:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDBDSD6C2tfiZSEkcyUv6BbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwOTIwMjMwMDU4WhcNMjYwOTIxMjMwMDU4WjAzMTEwLwYDVQQD EyhmMmIyNDBlM2VkOWQ4ODRlM2RiMjlmZTk4ZjYzN2NlZmQ5OTAzZTJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqZwGzlr+EhpPQhm4jnHpEQ9VSMm YUg4359IER6auHAsyg/SEZ6PnVEsrdWvG+Ztfyo6ooZbpCVnt1PWxOx5Mm8bwZcN fn21yzmEF/2qnnLn6TJO1020lwD/0KgQIeUEwwCzXpY1ib7OWIhklb11pKIxULGK uvDG22dzDLwurNRC/XWgZ6GemUYLCOq7tCL0E1C9PmP3j0wrc9tQFAlRdN1GyN00 O5YemHo5X8sLKGIvTVwiuibRkSa4lmkxnEw2rLl2GAChMH2cLtZ59XYouXBNZ7xJ q7Q8/5gxD3jLZ71ACisNUZaAPUipUWRWGlcO3cV1BazJJ640Pax7lqOw9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPKyQOPtnYhOPbKf6Y9jfO/ZkD4vMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoJxhWOjF fvxxxofq+OFaCmySEoP/0HULnb08kZM2blGaO2wanmtXAaWMVahlSWx27FjKZNTU ytLoCt2yBL5S6lDG/RUKNuD8yx0PRFVlObLn1PnabPAc1TgP7r6Pqb1AzUp2VJW9 0lnfAqe1JVNIOkQY3pAQPZZybfGlz7EVZViEjI9FIdz1Ss+4OAVgG/EtC4EFxZ/E XrkHnMn0S4k/xUxH9QodTqcln1nU6na1Ykmm5kZh0kcsEBI6Yc2jsgTbaV3h2cvz tsLpuQ9Nr2l73BOBVFmoF4Uhe1HjKqGT59YCLhn2sjfTw54/gitUyynEWXVU/rvj nEvXu9sWZGKJ/A== -----END CERTIFICATE-----Generated at Mon Sep 21 01:19:35 2026 by rpki-client