$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft File: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft (raw, json) Hash identifier: lirVtuc+39fIsEdIrYIcyYcnvVC26jyswQXtIi0cnYU= Subject key identifier: C7:F7:9C:E6:35:54:20:82:68:5D:E4:EA:F2:0A:C5:38:9E:E9:CC:7D Authority key identifier: BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 Certificate issuer: /CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Certificate serial: 01A0D8A89FE4478885BAAE3ED9FF868E7EF0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft Manifest number: 17F9 Signing time: Fri 25 Sep 2026 13:02:04 +0000 Manifest this update: Fri 25 Sep 2026 13:02:04 +0000 Manifest next update: Sat 26 Sep 2026 13:02:04 +0000 Files and hashes: 1: 1-S3N2jNYxw0tVM9fiU8_C8T-X9o.roa (hash: Ddu3dw5E5cMsctwBaCnCHBJl5vVM/XMeaSx8/U1wJfs=) 2: 1h3O8l_TW_Pt04UkNDvHQykjzBo.roa (hash: YPYjSO8A3RKdjeZ4kpCNyf7+uhxWq8m+nhKrC4aIRXo=) 3: 40ahziHyLtQx_pyEk0bHk67E8fw.roa (hash: rWZqu675dNYqvBqcBL0jVKw3VJWQVGQYGPhVN2Iiit0=) 4: 4ZDqmYbGRDS9T6I4pCkfIZz9Wog.roa (hash: X8RR+0PaypDLpsEOWttv6W/dtoMpGTgNbkp3JkclUF8=) 5: FaS74ymKW3KkSe3KPbooPnzQXrc.roa (hash: 0+tkFOlLgDDdDFc25Ta1fnHiQ2Nz9IYV/OQFd9bjg6s=) 6: IEKQdQSPHj3Cnkr1D4OpgmDW5ws.roa (hash: b9P/Bsdn0gx8DrmDgi2+/lOlYncQzapyrce4brihN78=) 7: IQvdujgainvo4C34zkOLdjKY5vg.roa (hash: w17Fv3nrN5mdxpMpocz8vqnCEddTCZeK1yywJC7rkAQ=) 8: KPzLPauPpQiWYae418r6m1gMbQ8.roa (hash: bMOA8c/Peua3MiHOsLdKNKZDG/6LBfAeWjPvZ8O4vDE=) 9: PhXZiIOr7piIHYlDtgFb-SE3XFc.roa (hash: kQ6KIuUu9lWGspD3sgkP3G1eQcAyvbDdP58M3rp8Fes=) 10: REtMs1U8A3vNupGfA8YHkLMBg20.roa (hash: 8cbxOjQg2znipTCYsgxq7I7rjGz0FDOmTb0bqODGJZQ=) 11: RgpyMW5WLsoOZ7X6sjR7zZpkUiw.roa (hash: 9bAWFuzWHv7cpnjzkHad1zJjL6nxP74Kh6dQAZysh0A=) 12: XIVBNcTJBnkT90tLXiCswsUi9O0.roa (hash: PPElf6bVEODRo+3cgHN5ArR3uE+ZQHhLBOE/ConPN30=) 13: bLty7x4_bp6bJO68Cul62fRMxlU.roa (hash: kYiMfI9JDPevUGPZ1zVTj//0LProZnsEPqeHJe8gbiQ=) 14: c1of_GGOGBpj8gjfCUC0AsJuKNg.roa (hash: f3erzVhNqOm3b2k4MQozf9a0YdwKNFSjx0Hb4KbZctc=) 15: d4N59ZWMUV8cnUC2yHnrEh-B1hc.roa (hash: ybFlHwrk0/bn9A8GTyAQQ72jsrneQsxgrXLeXX2L7mc=) 16: dCqQVizHmCbsgLcX6csX7Rciuic.roa (hash: sDGzeBpaeg3YAhNrnUWPuM/ODk832tRUJ5O2TTkUfds=) 17: gbXInfzdH2IY80mhqSI30Jnlars.roa (hash: 9Eit04hHQZCBOCzgtLSUWiMJAQOGXpRjgZEMJ23x56M=) 18: jFvJZaHKv8QwoukYCAhIunEqd4s.roa (hash: V1rH1de0PVsmx11Wg5/gIdXxuPL9QGcnJzJNtJ/w8PU=) 19: jMjm9D-4xflyL6CqFx24UnxHNto.roa (hash: zk6K2DcoWMQmkWhweos+tpn8p5/7IlXATCKSD4PHiN0=) 20: rwzolB6KaVWzX3Asr3eZ1LHkCl4.roa (hash: iB8AOxEYfvNU1/L6TivJBk9QHQFdeq4cJO6UXX1sPUM=) 21: s4XhO3zd68odlYNKfOcr66qKpYo.roa (hash: lGF4r2lhB2RKS4kFkLqdXXo14Ag7CA/0NH/w4b5IOWU=) 22: vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl (hash: j0DAU8+WcMiRQUqYCzzsi8M/kVzOsPtF8+1EI6ECcQc=) 23: yBju9251opQb0e4SsoLoTlY7kVM.roa (hash: eQSRE9eUeTSXYWB/iKLZnX5m98d5OnEnkEhe2IV+YaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d8:a8:9f:e4:47:88:85:ba:ae:3e:d9:ff:86:8e:7e:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcfdfe6dca8ac7bfa1a9450ef99fd315ed02acd9 Validity Not Before: Sep 25 13:02:04 2026 GMT Not After : Sep 26 13:02:04 2026 GMT Subject: CN=c7f79ce635542082685de4eaf20ac5389ee9cc7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:f7:26:bb:13:f7:f6:b1:71:f8:1e:c1:50:b0: e0:0b:cf:3e:4b:dc:6d:b4:6f:70:37:db:7a:47:d3: 3d:75:48:c6:15:37:b8:4c:b7:c9:39:85:0d:62:5a: 63:2f:bc:1f:de:ad:17:21:c0:ba:fc:98:39:2f:ce: c9:cb:45:16:51:c3:e1:5f:0f:ad:2d:db:4b:cc:2a: ed:25:9f:fa:66:0c:4e:5e:fc:15:b7:48:92:95:c7: 88:1d:da:6f:44:d0:9f:90:2e:5c:f8:0a:a4:50:89: 3c:2a:a2:54:20:c3:04:81:42:10:5f:7a:af:a0:32: bf:33:9e:12:63:5f:6c:61:4f:f0:f7:12:1f:84:55: 16:29:c5:eb:b4:e9:c6:a7:d9:d0:90:2c:2c:72:ce: 5b:c7:82:44:04:6d:21:c2:1b:0d:f3:5c:ae:00:41: 99:44:62:84:f1:99:4e:77:e7:fe:fd:d3:e0:5b:4a: ae:27:87:30:d4:8b:69:35:6c:84:5c:b9:c2:25:40: 58:da:b7:d4:a5:99:39:d0:24:70:28:79:9c:40:94: 3d:8e:83:26:52:f1:47:4a:d4:d7:8d:a1:3f:92:91: 75:84:dc:fd:b7:de:b5:d4:d2:64:ff:d2:0e:fc:1e: fb:14:a7:1d:0c:74:1e:0c:df:80:11:7f:98:63:8d: 35:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:F7:9C:E6:35:54:20:82:68:5D:E4:EA:F2:0A:C5:38:9E:E9:CC:7D X509v3 Authority Key Identifier: keyid:BC:FD:FE:6D:CA:8A:C7:BF:A1:A9:45:0E:F9:9F:D3:15:ED:02:AC:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/c9de13-5b74-413d-b2fb-1af2465a8eec/1/vP3-bcqKx7-hqUUO-Z_TFe0CrNk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:cd:aa:c8:05:2f:c6:82:81:8e:48:45:99:7f:38:f6:6b:0e: 8e:22:fa:a3:ea:67:28:d4:19:47:cf:b3:69:18:77:df:f8:2c: c3:25:3a:9a:92:dd:c9:0e:de:e1:c3:8a:42:99:22:50:ab:23: e4:a7:dd:de:fd:24:ee:d6:02:55:ac:97:ab:a8:8d:36:98:1b: 5d:7e:ba:58:8b:e7:80:7f:f8:d6:bb:87:2d:19:e3:db:27:ab: 54:65:38:19:ca:31:05:96:b0:f1:89:d7:a9:b8:9c:cf:a3:c9: 2b:4f:d6:65:5a:eb:f3:06:bc:79:df:c0:bc:54:54:f7:f0:12: 87:cc:aa:fb:3c:68:46:68:2b:7f:66:52:3d:19:93:fb:f3:14: 09:88:d5:11:cc:39:5c:f2:60:31:e1:e7:e3:26:65:f7:b5:3c: 87:8f:c6:7f:87:8b:f8:50:ab:f5:25:c2:63:68:ae:8c:5f:72: fd:3b:c8:6e:dd:56:67:4b:79:8d:ea:47:61:01:f2:07:ef:17: 96:19:da:99:2e:71:a1:c7:93:60:12:fb:35:3f:3e:0f:d4:d5: a7:2f:a1:f2:ac:25:78:7a:47:df:e4:d7:e4:3f:9c:9c:9e:cd: b7:6e:70:9d:ca:84:da:a5:fc:b2:3f:7e:5c:a0:63:af:b3:f1: 36:5b:35:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDYqJ/kR4iFuq4+2f+Gjn7wMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJjZmRmZTZkY2E4YWM3YmZhMWE5NDUwZWY5OWZkMzE1ZWQw MmFjZDkwHhcNMjYwOTI1MTMwMjA0WhcNMjYwOTI2MTMwMjA0WjAzMTEwLwYDVQQD EyhjN2Y3OWNlNjM1NTQyMDgyNjg1ZGU0ZWFmMjBhYzUzODllZTljYzdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/cmuxP39rFx+B7BULDgC88+S9xt tG9wN9t6R9M9dUjGFTe4TLfJOYUNYlpjL7wf3q0XIcC6/Jg5L87Jy0UWUcPhXw+t LdtLzCrtJZ/6ZgxOXvwVt0iSlceIHdpvRNCfkC5c+AqkUIk8KqJUIMMEgUIQX3qv oDK/M54SY19sYU/w9xIfhFUWKcXrtOnGp9nQkCwscs5bx4JEBG0hwhsN81yuAEGZ RGKE8ZlOd+f+/dPgW0quJ4cw1ItpNWyEXLnCJUBY2rfUpZk50CRwKHmcQJQ9joMm UvFHStTXjaE/kpF1hNz9t9611NJk/9IO/B77FKcdDHQeDN+AEX+YY401kQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMf3nOY1VCCCaF3k6vIKxTie6cx9MB8GA1UdIwQY MBaAFLz9/m3Kise/oalFDvmf0xXtAqzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmIt MWFmMjQ2NWE4ZWVjLzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9jOWRlMTMtNWI3NC00MTNkLWIyZmItMWFmMjQ2NWE4ZWVj LzEvdlAzLWJjcUt4Ny1ocVVVTy1aX1RGZTBDck5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJc2qyAUv xoKBjkhFmX849msOjiL6o+pnKNQZR8+zaRh33/gswyU6mpLdyQ7e4cOKQpkiUKsj 5Kfd3v0k7tYCVayXq6iNNpgbXX66WIvngH/41ruHLRnj2yerVGU4GcoxBZaw8YnX qbicz6PJK0/WZVrr8wa8ed/AvFRU9/ASh8yq+zxoRmgrf2ZSPRmT+/MUCYjVEcw5 XPJgMeHn4yZl97U8h4/Gf4eL+FCr9SXCY2iujF9y/TvIbt1WZ0t5jepHYQHyB+8X lhnamS5xoceTYBL7NT8+D9TVpy+h8qwleHpH3+TX5D+cnJ7Nt25wncqE2qX8sj9+ XKBjr7PxNls15g== -----END CERTIFICATE-----Generated at Fri Sep 25 17:20:43 2026 by rpki-client