$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: AbcIIYTWuJDpC+oN8EY5SymgEE9l9eBg/+X31GqIvKE= Subject key identifier: C5:D4:3D:83:B8:A9:2E:05:BE:DC:1C:06:49:84:41:DF:7F:9F:50:40 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 01A0C36909D8DDFBB312B9C430DE880B32AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 1A6B Signing time: Mon 21 Sep 2026 10:00:35 +0000 Manifest this update: Mon 21 Sep 2026 10:00:35 +0000 Manifest next update: Tue 22 Sep 2026 10:00:35 +0000 Files and hashes: 1: 5CLXXKkA4JcsyDrUBBM3fxn2kdc.roa (hash: gFWbYqwKSpr3zQtON6eHRCE0iX3y63ZJZklzBNANHsM=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: gPBBmw+Jc4DdLwXvB0+zIblzMxpJlnskmpye85uvK9s=) 3: DXIDJwT32OV423k4TIWwn2iDwyg.roa (hash: 1DgbvkANX93phDSb+AyRjq7ZFAZDrX3G2DhrbhrdrCY=) 4: Ex4sydFNNb9e9IlWuLzuPazLU44.roa (hash: tuvV0h/eTCcgOOevaItUPifNfonAkWlBsMN+IAbF80I=) 5: F0q3v2kkeTya7vdhm0lzFl3wBAA.roa (hash: BpkEUnq+/w6BrSZ1bTiqPBmMOt7WaZgSwy12/ipsBqo=) 6: GU71SIKDNqtDYi7P5ZGVJfaZ9Ng.roa (hash: 7ZQhqryE0L0rNOAz1gL32gj8EsSrO0yhlKkyCkXl4cc=) 7: PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa (hash: 5xE+UcziQ9DiquZ2A/57aqh1sjUE876lnNSATCS1lTI=) 8: TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa (hash: gEbc+tVQGYMxTiSiJNGO8DDQrrsZOyqWJhw0Dv/aKqE=) 9: XN9ItxoiVygt3a0qQVsmKKlWk9E.roa (hash: iH4X65Vs6HtOKFxQaLyaQ9nZPsCEbiHQMEBYUWCi4KY=) 10: bba2QTZrp_1uueLnjfHPBxHS3PY.roa (hash: OYrkuz8mezgI3XbKfKRWAwnwwsrmJ+JNJd03sNYC3L8=) 11: djcMZ6pGXyKmA-lIeoWfJvgd_vg.roa (hash: 2V8x5uW66gGIUCrfVlUVt3oOyIC3Jcqdd44dr46xxaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c3:69:09:d8:dd:fb:b3:12:b9:c4:30:de:88:0b:32:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Sep 21 10:00:35 2026 GMT Not After : Sep 22 10:00:35 2026 GMT Subject: CN=c5d43d83b8a92e05bedc1c06498441df7f9f5040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:04:60:6b:07:8a:57:04:d0:a9:fc:d9:5a:20: bf:23:d2:45:12:a3:cb:65:85:49:00:48:79:9a:45: 4f:38:a5:21:68:b8:59:5a:0f:03:01:0d:d6:e4:76: 18:4b:0d:f9:38:35:52:78:3b:33:df:79:c6:7f:b2: 12:04:05:73:71:c8:75:1c:65:e5:ab:8c:4f:6e:0f: 2a:e0:8c:fa:18:4c:e7:dc:8b:69:d5:14:5d:61:40: fb:65:3f:77:7d:ff:45:f3:3b:fa:29:47:f4:17:6c: 39:8b:13:01:19:59:ff:cd:76:31:17:ff:dc:6e:1a: f3:a8:f1:e4:b1:8e:f4:08:b8:36:a6:57:cd:0f:11: e6:fe:32:4a:dc:6a:8b:04:e3:a2:89:b6:ff:74:2a: 6a:26:25:c5:6f:18:9e:8c:99:17:93:48:60:91:5f: eb:d4:7d:c5:6f:33:6a:e5:21:3f:72:cf:b7:86:56: 03:b3:5d:84:62:8e:ca:72:d0:b8:08:04:b5:ec:5d: 92:c6:a1:b3:99:ed:56:8b:66:85:08:70:06:10:35: 74:da:6f:77:cb:b9:b2:d2:a8:98:1c:cd:05:bb:22: 86:fb:74:85:f0:ca:b4:8b:5b:b1:1c:bc:93:ab:21: 07:c0:c5:7e:75:e5:dd:7b:22:d6:71:eb:86:40:29: 3f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D4:3D:83:B8:A9:2E:05:BE:DC:1C:06:49:84:41:DF:7F:9F:50:40 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e2:0a:25:28:68:d2:48:c9:b0:bb:07:b8:58:9e:43:72:39: 89:2b:48:c1:a2:ad:8e:1d:8c:46:21:68:62:9d:31:05:d5:20: 9b:9d:93:c1:db:83:7f:c8:fa:8c:24:a5:8e:54:9c:44:ef:37: f8:a9:80:c8:d8:3f:24:a3:00:14:a9:40:ff:22:7e:b7:01:a5: e5:78:88:99:9b:a0:cf:0e:a8:1e:16:00:6f:a6:c7:c7:f0:24: 3b:7d:c3:5b:d2:0f:0f:6b:63:0f:2a:80:7e:1f:df:41:8e:07: c0:e2:46:d7:c7:48:54:06:ae:bf:96:0c:f5:34:0f:31:c3:a2: 9c:cc:9b:3f:59:be:e2:35:a9:a2:9b:c9:62:5e:18:33:a9:e0: d5:07:a9:1a:ba:7a:bb:cd:15:a8:14:01:db:cf:2d:d4:7d:ab: 8d:f3:f8:bd:f4:18:e0:a8:4d:6e:13:f0:07:e8:73:fd:77:46: 34:8b:85:cc:5a:8b:ff:e7:1f:76:30:c3:61:4c:46:15:4f:a4: 63:9c:6f:d5:b2:af:ff:d7:24:22:69:a1:87:9f:22:a8:60:b0: f7:0f:23:a6:2d:6b:e8:14:1f:54:05:76:21:33:96:7f:7d:e4: 24:1f:eb:c0:7a:fd:5f:fb:c2:dd:bd:9e:c9:17:c7:63:92:81: a9:8f:b0:1b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDDaQnY3fuzErnEMN6ICzKqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwOTIxMTAwMDM1WhcNMjYwOTIyMTAwMDM1WjAzMTEwLwYDVQQD EyhjNWQ0M2Q4M2I4YTkyZTA1YmVkYzFjMDY0OTg0NDFkZjdmOWY1MDQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQRgaweKVwTQqfzZWiC/I9JFEqPL ZYVJAEh5mkVPOKUhaLhZWg8DAQ3W5HYYSw35ODVSeDsz33nGf7ISBAVzcch1HGXl q4xPbg8q4Iz6GEzn3Itp1RRdYUD7ZT93ff9F8zv6KUf0F2w5ixMBGVn/zXYxF//c bhrzqPHksY70CLg2plfNDxHm/jJK3GqLBOOiibb/dCpqJiXFbxiejJkXk0hgkV/r 1H3FbzNq5SE/cs+3hlYDs12EYo7KctC4CAS17F2SxqGzme1Wi2aFCHAGEDV02m93 y7my0qiYHM0FuyKG+3SF8Mq0i1uxHLyTqyEHwMV+deXdeyLWceuGQCk/JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXUPYO4qS4FvtwcBkmEQd9/n1BAMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN+IKJSho 0kjJsLsHuFieQ3I5iStIwaKtjh2MRiFoYp0xBdUgm52TwduDf8j6jCSljlScRO83 +KmAyNg/JKMAFKlA/yJ+twGl5XiImZugzw6oHhYAb6bHx/AkO33DW9IPD2tjDyqA fh/fQY4HwOJG18dIVAauv5YM9TQPMcOinMybP1m+4jWpopvJYl4YM6ng1QepGrp6 u80VqBQB288t1H2rjfP4vfQY4KhNbhPwB+hz/XdGNIuFzFqL/+cfdjDDYUxGFU+k Y5xv1bKv/9ckImmhh58iqGCw9w8jpi1r6BQfVAV2ITOWf33kJB/rwHr9X/vC3b2e yRfHY5KBqY+wGw== -----END CERTIFICATE-----Generated at Mon Sep 21 14:44:44 2026 by rpki-client