$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft File: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft (raw, json) Hash identifier: gIWydzV4mS0mmXIRNnXvzNui4V2Upv7P8YVBwCR9DCQ= Subject key identifier: CD:39:FA:B4:4B:7F:BD:E5:24:86:89:A2:7E:04:DA:17:B3:F7:80:36 Authority key identifier: 6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A Certificate issuer: /CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Certificate serial: 01A0C9A24B8F82BB3E5B3DF0F9DAD9C5D0BE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft Manifest number: 1AB7 Signing time: Tue 22 Sep 2026 15:00:51 +0000 Manifest this update: Tue 22 Sep 2026 15:00:51 +0000 Manifest next update: Wed 23 Sep 2026 15:00:51 +0000 Files and hashes: 1: 1-Wl5nNIYq_W3pgo34yEVZQdbxyU.roa (hash: G+7+XKaWZcYGhV9Z4DnGNMnW/7HpmVdpN8SBoPugm7A=) 2: 6R28sM8NerO2u18G_AMWCWlWH18.roa (hash: NDy+Juig3WdCXI1JH5AcQ2fEURwLEtaXUjO+rQmeRKY=) 3: NFl71PMJau8OoVT-JEiyhHLSIZE.roa (hash: 3lKUsUjSDTNYTFbKVTbGnC0rr8zeipPM6TGCp1smax4=) 4: PFVc5BAK70p3Vmf86UTReTfUHsA.roa (hash: tXQaExvpiAm59XavOkqrv4KBgL817eSwAqiUyiq6cLE=) 5: Qcb6MBj1jVMY5YJV__nFQrA67wU.roa (hash: eNJ8rbIWqEmXeV+vpidHVif1VOtq0n7KG9qEAuZBikM=) 6: TYbMVOnA1vB-wjFD6xsvHrGkVuw.roa (hash: gch7cDWOheOnpIwvXzaiQbw92kRVsDtErv7998avG0Y=) 7: XU-lnejjTfdYfkel9cu2qcj3jOg.asa (hash: 162FwGPbBSAqHbgij5iWFOSWYdvU5C2K98+sNPEBfXc=) 8: bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl (hash: +/Nf89SH6Z2tOlCdvRoES9RIn37a5dxR1yumG93+PbE=) 9: cpt1ugrQd2rHwxe5DoZShXs9qzA.roa (hash: mY1xZ8RVFs4GaD6HtiYmaN9LhtKWxyqpPX89QA8Zdpk=) 10: eQvbuB-WIfPaU-Lzc20AVEFS6m8.roa (hash: kWCTa5bd0F2DthD4hV3kmVTOiwhDV1nanw9wkMyWs8c=) 11: lOg--qFlBmx76-ubYUaKmA6pugY.roa (hash: aef1dmSLDMXhGIpZWewz/Jm1+VbIUIAUbF9tc8qTQqk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:a2:4b:8f:82:bb:3e:5b:3d:f0:f9:da:d9:c5:d0:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d69da44ae067fc1a98a5f6f05f12e545d0fc62a Validity Not Before: Sep 22 15:00:51 2026 GMT Not After : Sep 23 15:00:51 2026 GMT Subject: CN=cd39fab44b7fbde5248689a27e04da17b3f78036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c9:ff:53:ef:75:b5:2d:06:26:5f:f7:e6:49: b0:e6:3e:87:38:4a:c4:09:d6:7a:91:fd:88:a5:5c: 0f:8c:65:8f:40:ca:51:b0:4f:70:4b:cb:dc:1f:7c: e7:1c:48:57:6c:5d:ed:27:c5:7d:29:fc:79:3f:5b: 5c:af:e1:8d:9b:4d:37:70:9e:e5:77:73:80:a2:53: 35:ce:96:b7:21:62:8e:37:19:13:22:0e:38:2e:d9: 11:c3:a1:6a:79:9c:a1:ff:ff:a9:29:ca:63:9c:2a: d6:c3:b5:48:af:13:c0:38:16:e5:f0:51:4d:21:fb: b4:73:03:02:5c:17:85:e7:05:41:03:c7:b7:ba:14: 5c:45:30:5a:15:5a:d5:ff:3b:ab:63:11:f6:20:47: a5:ef:ec:e3:c8:45:4e:05:8e:a0:43:00:c3:cf:23: 7e:dc:35:b1:9e:f5:71:47:1e:2d:52:9d:8d:f3:10: 7f:49:a2:c3:79:ac:28:b3:36:ba:ae:15:4f:33:5e: 6f:b4:8c:41:89:71:0e:a7:4b:57:3a:f2:7c:68:75: 9d:fc:3c:00:8d:a8:10:b8:7a:29:d3:3c:cf:22:77: 0c:a8:8d:a6:77:03:a1:b9:db:ac:65:10:22:1e:6a: 16:6e:ac:11:da:a3:80:5f:32:a7:67:e9:62:77:8d: 35:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:39:FA:B4:4B:7F:BD:E5:24:86:89:A2:7E:04:DA:17:B3:F7:80:36 X509v3 Authority Key Identifier: keyid:6D:69:DA:44:AE:06:7F:C1:A9:8A:5F:6F:05:F1:2E:54:5D:0F:C6:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/b1a82a-490f-43fb-986e-26170da4a0b1/1/bWnaRK4Gf8Gpil9vBfEuVF0Pxio.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:05:84:6d:f0:8e:24:65:2f:df:bf:f3:13:00:82:85:f1:5f: bb:44:2c:af:4f:da:cc:2f:78:b2:5e:fa:82:dc:2b:e2:67:f5: c2:c6:89:86:13:b4:96:4b:a0:2b:e1:e9:f9:f3:7d:19:97:ca: d4:1b:13:4f:3d:99:e0:75:3e:c8:f0:25:ad:1a:af:2d:98:6c: 3d:f2:ad:f0:53:34:d0:d2:ba:ff:df:80:ac:51:44:69:f6:7f: e0:e3:7e:85:37:20:04:13:b2:69:26:8e:7b:a7:94:71:5a:15: 02:07:b0:0a:6f:e7:d1:2b:0e:89:d3:4e:47:b5:a3:0c:4c:92: 5f:c2:29:63:2d:de:64:1f:5e:4e:e8:f7:35:63:1c:64:76:f1: 01:e5:18:42:cf:9e:82:cd:5e:a1:bd:42:fd:e4:cf:a4:e9:76: 3b:34:9d:a4:9f:8e:94:41:e1:6f:06:3a:46:c6:f1:5f:b6:ae: 13:9e:c9:89:4c:f8:19:8f:6e:b9:40:ac:e6:97:75:2d:ee:1f: ff:72:5b:97:d3:4c:6a:71:f6:47:0b:36:f8:b6:a5:10:31:1d: dc:08:79:5c:e5:7c:fb:69:f1:fd:f0:d3:e8:12:28:5b:7c:db: ae:b3:aa:7d:67:2f:28:53:45:e7:4b:41:82:18:42:78:53:6f: f6:f2:9d:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDJokuPgrs+Wz3w+drZxdC+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkNjlkYTQ0YWUwNjdmYzFhOThhNWY2ZjA1ZjEyZTU0NWQw ZmM2MmEwHhcNMjYwOTIyMTUwMDUxWhcNMjYwOTIzMTUwMDUxWjAzMTEwLwYDVQQD EyhjZDM5ZmFiNDRiN2ZiZGU1MjQ4Njg5YTI3ZTA0ZGExN2IzZjc4MDM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzMn/U+91tS0GJl/35kmw5j6HOErE CdZ6kf2IpVwPjGWPQMpRsE9wS8vcH3znHEhXbF3tJ8V9Kfx5P1tcr+GNm003cJ7l d3OAolM1zpa3IWKONxkTIg44LtkRw6FqeZyh//+pKcpjnCrWw7VIrxPAOBbl8FFN Ifu0cwMCXBeF5wVBA8e3uhRcRTBaFVrV/zurYxH2IEel7+zjyEVOBY6gQwDDzyN+ 3DWxnvVxRx4tUp2N8xB/SaLDeawosza6rhVPM15vtIxBiXEOp0tXOvJ8aHWd/DwA jagQuHop0zzPIncMqI2mdwOhudusZRAiHmoWbqwR2qOAXzKnZ+lid401ZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM05+rRLf73lJIaJon4E2hez94A2MB8GA1UdIwQY MBaAFG1p2kSuBn/BqYpfbwXxLlRdD8YqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUt MjYxNzBkYTRhMGIxLzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS9iMWE4MmEtNDkwZi00M2ZiLTk4NmUtMjYxNzBkYTRhMGIx LzEvYlduYVJLNEdmOEdwaWw5dkJmRXVWRjBQeGlvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgWEbfCO JGUv37/zEwCChfFfu0Qsr0/azC94sl76gtwr4mf1wsaJhhO0lkugK+Hp+fN9GZfK 1BsTTz2Z4HU+yPAlrRqvLZhsPfKt8FM00NK6/9+ArFFEafZ/4ON+hTcgBBOyaSaO e6eUcVoVAgewCm/n0SsOidNOR7WjDEySX8IpYy3eZB9eTuj3NWMcZHbxAeUYQs+e gs1eob1C/eTPpOl2OzSdpJ+OlEHhbwY6RsbxX7auE57JiUz4GY9uuUCs5pd1Le4f /3Jbl9NManH2Rws2+LalEDEd3Ah5XOV8+2nx/fDT6BIoW3zbrrOqfWcvKFNF50tB ghhCeFNv9vKd8A== -----END CERTIFICATE-----Generated at Tue Sep 22 21:23:20 2026 by rpki-client