$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: pOtQtSdhOMrpQlUDr8dkcYihx1VoWAZ2I9DGjdv4krY= Subject key identifier: CE:BC:D4:0C:98:F3:92:1D:5A:1D:74:A8:00:44:5C:6F:6E:AF:E4:18 Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 01A0CA466EBED8F13FA136241DB955044B07 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 1A87 Signing time: Tue 22 Sep 2026 18:00:08 +0000 Manifest this update: Tue 22 Sep 2026 18:00:08 +0000 Manifest next update: Wed 23 Sep 2026 18:00:08 +0000 Files and hashes: 1: A0jJG1saLwhFpwXvphN5KLkIp7E.roa (hash: zfUzOQxZDjIQpzcBLbTZxhWmdADgguB1bEK9a5hzld0=) 2: BHJrH90HA7e2j36fHZGtluntvoI.roa (hash: Y13mf0+6dWn2wsiZuzG7gygvh4nWO0T3oCMxSoXnKls=) 3: I3Qz77k2oYxzlmKadcI15VK2Xho.roa (hash: rl1+7VSSJCLWAX7YF+ZUOE9VZc/4GpcEkb9o7QBoLJw=) 4: IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa (hash: LzcrEnLFMAnlZ+5zqbHv6+pvv/Iv59lNp1OzlwME3F8=) 5: Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa (hash: MOGwB7iZKu1QkN/hiCIWIk9cs+bF15Y23HgeypcVdhw=) 6: _4I_-jCH3XR23JxHVWzlSOPi3_M.roa (hash: tqFTpY9AJoIMPhinhdWGv8n5l6XDT7XH/JbG8DY2pa4=) 7: kz88XGl4i-o90qHpgWaNT6qB9F4.roa (hash: iFw0bXeL0s+Rwtq0iRLlZLd1+3x1hxhmoVT6WC3MudE=) 8: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: eD/ykUO2ryEFji9T6iLSTad4hKY83vux94+EiAuTia0=) 9: sqmM075pYoIhRN4MwnW9o487rF8.roa (hash: I1CZglIvCm1ewemqOSJLikUmJGVYj4wQzxEvNc+9woA=) 10: vCq8VVeEIofiFQLrkv4khGyN3iM.roa (hash: +sZQ4wGcyHE3djaR6nEoYJEVQLBZat/sIPQiTRwtVBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 18:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ca:46:6e:be:d8:f1:3f:a1:36:24:1d:b9:55:04:4b:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Sep 22 18:00:08 2026 GMT Not After : Sep 23 18:00:08 2026 GMT Subject: CN=cebcd40c98f3921d5a1d74a800445c6f6eafe418 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:08:e9:ca:95:21:5c:55:ca:1b:94:c0:6d:51: f3:05:24:67:3c:6c:c1:07:0c:f3:4b:fc:29:b7:62: 1e:7a:c6:9c:e4:8f:52:bc:8f:45:23:1f:9f:78:98: c6:94:96:f4:66:79:f7:9a:2b:f3:d4:7c:df:3f:12: b9:61:c3:71:d4:a9:8f:56:dc:c9:72:61:d6:24:12: 36:07:71:5d:1d:0d:0d:7f:87:09:11:53:20:52:2e: 75:34:6a:63:5c:3a:cf:ef:10:7e:61:44:06:cc:90: b1:e2:7e:7f:4d:90:1d:35:6e:1f:fe:0b:7d:e6:8d: 60:cf:6d:09:01:67:42:1b:db:7e:8f:e6:05:49:59: 83:ab:43:df:5a:ba:16:dc:b5:34:91:38:89:77:8b: 25:2f:1f:13:b6:1e:f0:19:f8:bb:21:77:17:a7:ff: 5a:80:a6:57:4f:4d:36:53:db:17:6c:b6:cf:d1:17: 6e:68:df:b6:17:61:ed:94:22:0e:f5:7f:19:01:d7: 9b:66:05:59:ff:03:fd:83:51:d5:ca:ee:39:5f:29: 03:3e:f1:60:98:e3:e7:c0:ca:4d:dd:71:11:92:99: 44:22:b8:70:69:0d:43:9c:bf:df:3d:42:93:b0:cc: 1a:3b:b1:ac:20:0d:ee:41:41:f9:81:c5:c8:2a:4c: af:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:BC:D4:0C:98:F3:92:1D:5A:1D:74:A8:00:44:5C:6F:6E:AF:E4:18 X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:13:33:17:60:16:d3:a1:17:6c:ab:08:d1:69:8e:df:02:5b: d9:3e:0a:32:81:23:a4:1d:e0:63:7e:5c:25:92:3f:94:19:d2: 05:84:35:45:f9:48:66:7d:57:4a:80:42:c3:76:35:03:ab:5d: 5d:48:35:d3:a5:6e:c5:ec:b3:a0:0a:a0:56:bc:85:7d:f0:fa: 87:68:c9:ad:10:65:87:01:ab:68:a2:f4:85:39:ba:fd:7b:0a: c4:c7:b9:a3:fb:b2:b7:ad:29:13:17:c3:c8:fc:26:de:c4:31: 87:ce:8e:d3:ae:54:c7:e6:79:22:41:50:64:1d:87:18:4c:25: a6:11:71:97:25:f4:87:2e:de:31:73:63:17:25:00:59:72:3a: eb:be:9d:91:e7:3c:91:f2:20:36:9a:75:b2:cb:fc:b6:7c:5c: 99:9c:30:2d:3a:78:17:f5:e0:1a:7d:96:e1:f5:cc:99:b8:9b: df:fd:a4:3e:a1:a7:a3:fa:8a:24:62:69:47:9d:a8:61:86:ca: 0a:5e:b2:78:0d:8e:df:f4:08:8c:64:f2:f5:a5:3a:6f:ff:92: f7:f1:46:9a:aa:4d:13:3a:85:e7:59:4f:de:38:92:36:86:48: f7:ac:e0:03:53:98:16:d7:3d:8b:c3:ae:49:c5:6c:8e:05:3a: 6d:dc:a8:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDKRm6+2PE/oTYkHblVBEsHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjYwOTIyMTgwMDA4WhcNMjYwOTIzMTgwMDA4WjAzMTEwLwYDVQQD EyhjZWJjZDQwYzk4ZjM5MjFkNWExZDc0YTgwMDQ0NWM2ZjZlYWZlNDE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gjpypUhXFXKG5TAbVHzBSRnPGzB BwzzS/wpt2Ieesac5I9SvI9FIx+feJjGlJb0Znn3mivz1HzfPxK5YcNx1KmPVtzJ cmHWJBI2B3FdHQ0Nf4cJEVMgUi51NGpjXDrP7xB+YUQGzJCx4n5/TZAdNW4f/gt9 5o1gz20JAWdCG9t+j+YFSVmDq0PfWroW3LU0kTiJd4slLx8Tth7wGfi7IXcXp/9a gKZXT002U9sXbLbP0RduaN+2F2HtlCIO9X8ZAdebZgVZ/wP9g1HVyu45XykDPvFg mOPnwMpN3XERkplEIrhwaQ1DnL/fPUKTsMwaO7GsIA3uQUH5gcXIKkyvUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM681AyY85IdWh10qABEXG9ur+QYMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAERMzF2AW 06EXbKsI0WmO3wJb2T4KMoEjpB3gY35cJZI/lBnSBYQ1RflIZn1XSoBCw3Y1A6td XUg106VuxeyzoAqgVryFffD6h2jJrRBlhwGraKL0hTm6/XsKxMe5o/uyt60pExfD yPwm3sQxh86O065Ux+Z5IkFQZB2HGEwlphFxlyX0hy7eMXNjFyUAWXI6676dkec8 kfIgNpp1ssv8tnxcmZwwLTp4F/XgGn2W4fXMmbib3/2kPqGno/qKJGJpR52oYYbK Cl6yeA2O3/QIjGTy9aU6b/+S9/FGmqpNEzqF51lP3jiSNoZI96zgA1OYFtc9i8Ou ScVsjgU6bdyo2A== -----END CERTIFICATE-----Generated at Wed Sep 23 04:35:54 2026 by rpki-client