$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: KEtd/iP/i7o1rIp51wINsOyrpsVNLsmIFFqP0QvxxBk= Subject key identifier: 0A:7D:4D:44:91:0D:C3:23:FA:ED:42:4B:D8:99:E8:2E:DE:5C:44:39 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 01A0C28D90BEE68678E55AB12B3F32C71D24 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0DC6 Signing time: Mon 21 Sep 2026 06:00:52 +0000 Manifest this update: Mon 21 Sep 2026 06:00:52 +0000 Manifest next update: Tue 22 Sep 2026 06:00:52 +0000 Files and hashes: 1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=) 2: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: vYJPQ1oY+oBvhaFi2kAAMGDaZzgyn+uHt8CTfkkzm6A=) 3: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=) 4: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=) 5: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=) 6: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=) 7: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=) 8: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=) 9: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=) 10: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=) 11: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=) 12: kGneqi-DhIJThQbxo8k8aRtzhC0.roa (hash: LH1+UqmotTldhBb3/js9nM0r1q8ixXwicRK2tem2Z4A=) 13: qn7-xSOm3GNFbVMeEpI89BCHyGs.roa (hash: OAD6prCAz8lBbB+PhlF1Idqkbd0upRCxQF4VAJd3pnc=) 14: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=) 15: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 06:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:8d:90:be:e6:86:78:e5:5a:b1:2b:3f:32:c7:1d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Sep 21 06:00:52 2026 GMT Not After : Sep 22 06:00:52 2026 GMT Subject: CN=0a7d4d44910dc323faed424bd899e82ede5c4439 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:8b:43:4a:bb:f2:45:8e:83:00:a4:b1:55:c8: 43:3f:8b:21:56:90:bc:4d:75:e6:74:27:ea:35:bf: 6a:45:e6:bb:f8:49:2a:5b:32:a4:37:49:a7:7f:b2: 61:15:41:79:eb:f6:09:86:7b:94:eb:48:7f:a8:4f: ee:77:ed:a4:1a:0a:25:c6:2e:99:f3:c0:c9:d2:7a: c8:0b:47:94:d6:3e:a0:3d:90:16:1f:58:91:7c:e2: 34:9e:2e:c6:08:43:57:cf:22:06:a7:b1:f7:91:ea: 3f:47:2c:46:4c:c6:45:c3:33:75:64:24:cc:d0:12: 35:3b:3d:b4:e1:17:e8:2e:a8:65:4b:8c:26:76:90: b6:78:73:a7:d5:26:5a:ed:80:92:9d:1a:c7:cb:87: 41:4c:80:c8:47:8e:54:86:18:00:7e:42:23:ce:60: 06:bb:0f:80:91:62:f1:da:30:d5:13:c0:83:4a:09: f9:4b:f9:8d:8b:85:bf:0f:f5:00:e9:c3:6a:84:42: 1a:15:7c:98:fd:bc:be:b9:b5:43:cf:48:3b:a7:7d: c3:5a:f3:85:9b:57:0f:4b:df:07:c6:70:f2:2f:89: af:af:69:90:79:dc:0d:94:98:ef:7b:d2:f4:85:fe: 79:db:e0:d9:da:d7:96:78:5b:83:8a:cc:4e:92:24: e5:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:7D:4D:44:91:0D:C3:23:FA:ED:42:4B:D8:99:E8:2E:DE:5C:44:39 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:23:a0:c5:d1:1a:3a:66:61:bc:90:47:36:55:9d:2e:bd:ed: 0c:b1:55:0d:73:12:92:58:c3:ea:51:6a:59:90:fc:9c:a6:fc: 94:fb:f1:49:ec:9a:b5:86:25:99:3f:8f:fc:f1:b5:20:27:4b: bf:3f:1d:69:4b:b4:48:29:07:57:ee:af:d9:de:47:6c:cf:13: 0c:e3:e1:cd:a3:e6:ae:fa:a8:78:31:36:bf:4f:4d:02:fd:d0: f7:7e:88:e0:d2:f8:e2:2b:c1:c7:a6:2e:5f:4d:94:07:03:ab: 9e:32:3c:0a:e7:66:59:db:d3:e7:37:80:7b:a8:2c:93:e2:76: cf:8a:8f:5d:2b:69:66:55:5b:6b:5d:b3:52:8c:f5:b7:25:60: d8:89:68:d2:94:47:73:d7:b6:b1:60:bf:f1:5e:e9:a5:86:a1: 32:6f:24:d9:7f:37:90:5b:89:84:53:63:03:cd:fb:ec:9f:21: 87:7c:e7:46:f7:73:ef:52:6e:81:dd:af:5e:0c:4f:9a:c0:68: 41:44:5b:af:6b:0a:1a:88:fd:94:f9:3a:6a:3b:8d:bf:12:cb: 7f:77:51:ae:75:d0:41:20:5e:19:c8:d9:9d:99:54:ca:09:8a: 97:19:83:c3:9a:c9:c8:d1:ec:ec:89:53:b3:47:d0:4e:28:93: b9:c3:e6:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCjZC+5oZ45VqxKz8yxx0kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwOTIxMDYwMDUyWhcNMjYwOTIyMDYwMDUyWjAzMTEwLwYDVQQD EygwYTdkNGQ0NDkxMGRjMzIzZmFlZDQyNGJkODk5ZTgyZWRlNWM0NDM5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YtDSrvyRY6DAKSxVchDP4shVpC8 TXXmdCfqNb9qRea7+EkqWzKkN0mnf7JhFUF56/YJhnuU60h/qE/ud+2kGgolxi6Z 88DJ0nrIC0eU1j6gPZAWH1iRfOI0ni7GCENXzyIGp7H3keo/RyxGTMZFwzN1ZCTM 0BI1Oz204RfoLqhlS4wmdpC2eHOn1SZa7YCSnRrHy4dBTIDIR45UhhgAfkIjzmAG uw+AkWLx2jDVE8CDSgn5S/mNi4W/D/UA6cNqhEIaFXyY/by+ubVDz0g7p33DWvOF m1cPS98HxnDyL4mvr2mQedwNlJjve9L0hf552+DZ2teWeFuDisxOkiTluwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAp9TUSRDcMj+u1CS9iZ6C7eXEQ5MB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbCOgxdEa OmZhvJBHNlWdLr3tDLFVDXMSkljD6lFqWZD8nKb8lPvxSeyatYYlmT+P/PG1ICdL vz8daUu0SCkHV+6v2d5HbM8TDOPhzaPmrvqoeDE2v09NAv3Q936I4NL44ivBx6Yu X02UBwOrnjI8CudmWdvT5zeAe6gsk+J2z4qPXStpZlVba12zUoz1tyVg2Ilo0pRH c9e2sWC/8V7ppYahMm8k2X83kFuJhFNjA8377J8hh3znRvdz71Jugd2vXgxPmsBo QURbr2sKGoj9lPk6ajuNvxLLf3dRrnXQQSBeGcjZnZlUygmKlxmDw5rJyNHs7IlT s0fQTiiTucPmHQ== -----END CERTIFICATE-----Generated at Mon Sep 21 16:06:58 2026 by rpki-client