$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json) Hash identifier: h5iedpMaTyqvdV0XFjeglQzz1gaPBGF20STBFrRGff4= Subject key identifier: B3:E5:3F:5D:E2:F4:96:37:48:36:1D:A5:11:70:57:CC:D8:5A:AB:24 Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 01A0C5C572988DA415CD18DC9F83BE9AC08E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft Manifest number: 1AB5 Signing time: Mon 21 Sep 2026 21:00:46 +0000 Manifest this update: Mon 21 Sep 2026 21:00:46 +0000 Manifest next update: Tue 22 Sep 2026 21:00:46 +0000 Files and hashes: 1: 1-Wl5nNIYq_W3pgo34yEVZQdbxyU.roa (hash: G+7+XKaWZcYGhV9Z4DnGNMnW/7HpmVdpN8SBoPugm7A=) 2: 6R28sM8NerO2u18G_AMWCWlWH18.roa (hash: NDy+Juig3WdCXI1JH5AcQ2fEURwLEtaXUjO+rQmeRKY=) 3: NFl71PMJau8OoVT-JEiyhHLSIZE.roa (hash: 3lKUsUjSDTNYTFbKVTbGnC0rr8zeipPM6TGCp1smax4=) 4: PFVc5BAK70p3Vmf86UTReTfUHsA.roa (hash: tXQaExvpiAm59XavOkqrv4KBgL817eSwAqiUyiq6cLE=) 5: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=) 6: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=) 7: XU-lnejjTfdYfkel9cu2qcj3jOg.asa (hash: 162FwGPbBSAqHbgij5iWFOSWYdvU5C2K98+sNPEBfXc=) 8: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: wooOo+NabcLA+baN/ZJZ8JiWfbm17pV/I4+vDD12paU=) 9: cpt1ugrQd2rHwxe5DoZShXs9qzA.roa (hash: mY1xZ8RVFs4GaD6HtiYmaN9LhtKWxyqpPX89QA8Zdpk=) 10: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=) 11: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:c5:72:98:8d:a4:15:cd:18:dc:9f:83:be:9a:c0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Sep 21 21:00:46 2026 GMT Not After : Sep 22 21:00:46 2026 GMT Subject: CN=b3e53f5de2f4963748361da5117057ccd85aab24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:94:f6:52:91:73:33:a9:bf:7c:e4:07:bf:48: b4:81:ab:05:e0:bf:61:2f:d6:7c:1e:60:2c:3c:24: a9:60:5d:61:d5:c1:6e:58:3f:6b:85:08:f9:e8:68: e1:7c:2a:a1:2c:b9:13:6a:bf:6e:13:ae:45:8f:5f: 6b:2b:5e:f6:74:b5:33:ca:e5:dd:d5:cb:4f:21:02: 38:71:4f:d9:3f:6d:71:c4:db:6c:a1:16:ba:ca:f7: cb:7d:34:ca:e5:fb:e3:05:3f:d8:45:b4:ad:01:14: ac:30:73:37:bc:77:89:90:6c:f4:c0:c3:f9:08:38: a0:2e:b5:de:87:f6:13:29:86:0a:cd:ca:33:66:e2: a5:37:9d:4c:2e:af:b8:01:8c:91:d3:9c:d6:b5:33: b1:bf:a0:f0:f8:da:08:70:d7:68:e7:08:a5:3d:28: a5:21:a8:f2:40:73:37:74:80:2a:07:e7:27:02:4b: a5:38:1e:be:02:26:46:2e:74:55:d7:ee:2d:6a:fb: 09:5b:ce:35:3e:30:1a:b4:33:b9:b1:93:03:45:5a: 63:ce:0a:9f:85:ce:e9:3e:21:7f:9e:21:da:52:05: da:01:99:12:29:59:91:78:89:64:de:fd:34:fb:55: e5:9a:45:d4:ab:9c:d7:32:a4:ad:68:0b:50:59:af: a1:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:E5:3F:5D:E2:F4:96:37:48:36:1D:A5:11:70:57:CC:D8:5A:AB:24 X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:b8:d2:03:07:51:bb:05:ff:55:4f:2c:0e:ca:1c:47:93:10: 23:11:e6:d9:f5:36:d8:c0:8b:26:34:30:31:80:28:66:cf:36: 08:09:1e:66:3f:99:a3:78:8e:0f:28:0d:33:35:f2:08:e4:3f: 54:76:30:38:57:87:d3:10:42:88:e3:b0:f0:bd:02:96:a6:51: f8:d9:49:8e:00:21:6b:91:73:d3:46:6c:fc:37:c0:70:7d:24: 8a:d8:12:af:f6:b6:41:ca:c3:10:08:1f:cd:7c:26:46:87:49: 26:bf:fc:ae:e6:42:4c:02:5c:34:eb:b4:11:bc:19:97:ba:ad: 89:9c:b5:66:a6:92:83:8b:1d:e6:45:27:59:db:a4:20:c6:a7: cb:fc:f2:26:46:a7:bd:38:c1:5c:61:12:9a:c3:b4:fe:19:e9: 90:23:38:9c:2f:da:66:f1:7a:8b:66:1e:7a:30:e5:38:52:08: 4f:1b:ba:39:4a:fe:7b:ae:0c:09:10:38:f9:21:0c:bb:75:6d: 55:9b:06:ab:33:97:7d:e0:25:5a:2e:be:b2:b4:bf:45:2f:f2: 6b:fb:2e:b0:1e:8d:6d:2b:9a:f7:55:82:7f:f5:22:bf:87:86: e8:a4:5c:f5:09:8d:b0:61:f0:24:ab:10:76:10:8b:d9:7b:6f: c7:35:0e:1f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFxXKYjaQVzRjcn4O+msCOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjYwOTIxMjEwMDQ2WhcNMjYwOTIyMjEwMDQ2WjAzMTEwLwYDVQQD EyhiM2U1M2Y1ZGUyZjQ5NjM3NDgzNjFkYTUxMTcwNTdjY2Q4NWFhYjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJT2UpFzM6m/fOQHv0i0gasF4L9h L9Z8HmAsPCSpYF1h1cFuWD9rhQj56GjhfCqhLLkTar9uE65Fj19rK172dLUzyuXd 1ctPIQI4cU/ZP21xxNtsoRa6yvfLfTTK5fvjBT/YRbStARSsMHM3vHeJkGz0wMP5 CDigLrXeh/YTKYYKzcozZuKlN51MLq+4AYyR05zWtTOxv6Dw+NoIcNdo5wilPSil IajyQHM3dIAqB+cnAkulOB6+AiZGLnRV1+4tavsJW841PjAatDO5sZMDRVpjzgqf hc7pPiF/niHaUgXaAZkSKVmReIlk3v00+1XlmkXUq5zXMqStaAtQWa+hUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLPlP13i9JY3SDYdpRFwV8zYWqskMB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLjSAwdR uwX/VU8sDsocR5MQIxHm2fU22MCLJjQwMYAoZs82CAkeZj+Zo3iODygNMzXyCOQ/ VHYwOFeH0xBCiOOw8L0ClqZR+NlJjgAha5Fz00Zs/DfAcH0kitgSr/a2QcrDEAgf zXwmRodJJr/8ruZCTAJcNOu0EbwZl7qtiZy1ZqaSg4sd5kUnWdukIMany/zyJkan vTjBXGESmsO0/hnpkCM4nC/aZvF6i2YeejDlOFIITxu6OUr+e64MCRA4+SEMu3Vt VZsGqzOXfeAlWi6+srS/RS/ya/susB6NbSua91WCf/Uiv4eG6KRc9QmNsGHwJKsQ dhCL2XtvxzUOHw== -----END CERTIFICATE-----Generated at Tue Sep 22 01:24:13 2026 by rpki-client