$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json) Hash identifier: 8lMegmWfknGO5Yez6vmNunztKciyJkV4J6cRfMMFqIk= Subject key identifier: 42:98:8E:57:5B:F8:24:B7:2A:69:0E:BA:8E:A6:A1:C7:DB:4E:FF:61 Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 01A0CCA2F7D2975E1929AFF3D8C421AD44C7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft Manifest number: 190E Signing time: Wed 23 Sep 2026 05:00:27 +0000 Manifest this update: Wed 23 Sep 2026 05:00:27 +0000 Manifest next update: Thu 24 Sep 2026 05:00:27 +0000 Files and hashes: 1: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (hash: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4=) 2: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (hash: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs=) 3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: SNo/98uEiFsmqg330KWRnxlkVjwd5SJH5K2L/JiC8bY=) 4: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (hash: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs=) 5: LKPNjW0FwzxJuXJJO8QeVx8xVKA.roa (hash: 7aAIkZ00eO3qTrf1/VDBo5PmzNCovWfeD3QFFzPD2+k=) 6: OhdvuW1MhWIplOiaXjr0jKrnav0.roa (hash: J4+sEU+gHBe6CqLgaPIzNFJg58JXNWIbDProtv3aR8c=) 7: XWplAHLb4h-dRGf7GRqU5aYBne4.roa (hash: vcUnwVhvidom6bWizccTCS7wF3vMreiwdFHr11qyWHQ=) 8: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (hash: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04=) 9: bu5zIhc9syS0fhKBovFQXcGQRxQ.roa (hash: /Bq2k4bmIQ5EUPK41v03YcsLqkRVvDHXfxrIn2yzw5A=) 10: epRr3ot_tO1I-RC0EsosxizeUW8.roa (hash: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo=) 11: hIAZzuP6Gsu6ylCAGgkd82Ycc_M.roa (hash: SQISDbvDjBaLkSadlmENoao3YxR8/bK49Sgx969cf+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cc:a2:f7:d2:97:5e:19:29:af:f3:d8:c4:21:ad:44:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Sep 23 05:00:27 2026 GMT Not After : Sep 24 05:00:27 2026 GMT Subject: CN=42988e575bf824b72a690eba8ea6a1c7db4eff61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:bb:7a:6b:a3:c4:f7:87:12:0c:da:bd:c1:02: 18:f2:99:4b:68:a5:c0:3e:15:56:9f:69:04:4b:11: d2:de:ed:34:4d:84:c5:5e:c9:b8:0c:54:80:bd:f4: d0:19:8b:8c:92:3a:bf:7e:54:52:88:22:90:63:23: b3:0c:db:6d:0c:74:a5:3c:e5:f0:43:1c:21:bc:10: 43:92:09:ff:61:f8:32:be:81:73:19:47:c7:08:e0: d3:6c:75:04:23:cc:a2:76:41:3d:a9:27:c7:eb:68: cf:c3:a1:c1:e0:33:19:b2:97:91:10:a6:58:14:63: 97:62:10:0a:7c:7a:92:a7:ad:f5:f5:be:f7:f9:4f: ad:4d:ae:d7:79:75:1e:5a:3d:8b:f0:0d:1c:96:6e: 87:4d:05:dd:dd:70:8a:12:ba:69:f0:6c:be:37:50: 2c:b0:63:4e:e8:48:a0:aa:8c:53:2c:2d:4b:81:c1: 16:91:67:1d:fe:d8:bb:f4:00:9c:df:1a:c8:3b:d8: e8:a6:08:02:20:f2:de:c7:65:13:c6:a1:8e:c1:c5: 08:8b:1c:e0:d3:6b:db:55:6c:d5:06:5e:37:e8:87: 2a:c1:27:67:e2:4a:40:78:94:57:f3:49:e1:a6:25: 84:ce:bf:d8:2f:11:6a:91:46:f2:b5:56:9a:35:c6: 4f:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:98:8E:57:5B:F8:24:B7:2A:69:0E:BA:8E:A6:A1:C7:DB:4E:FF:61 X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:1b:b9:e1:00:d7:f9:61:03:3e:9b:32:49:b7:f6:2f:d9:73: 20:da:3f:cb:56:9f:a7:80:8f:be:0e:29:be:48:2c:b5:f2:5a: aa:4b:95:04:64:92:f3:93:47:2b:e9:82:1d:2d:fa:d0:b0:4d: 2c:f6:70:32:ca:36:8e:c0:c8:4f:24:0f:17:4a:de:4a:03:60: ad:13:1f:1a:02:d8:7a:3b:c5:ad:5e:1c:d9:ac:af:56:4f:56: 0a:56:ec:c0:3b:55:a3:bb:9b:15:95:83:66:c6:66:8c:50:5b: 26:47:6d:00:00:2b:ec:26:3a:dd:bd:fc:eb:53:b6:62:cf:1f: 12:08:6e:1b:c2:e5:7e:70:91:fd:be:13:54:95:33:85:26:56: 97:f3:04:09:24:53:28:36:d5:55:a6:c9:be:bb:82:93:fe:65: ca:15:3b:c2:93:74:2b:ba:ea:9c:62:7e:e6:5d:1e:f8:d6:43: e2:03:1f:16:ff:e3:6a:f4:f6:c5:38:bc:e9:6e:01:bc:5b:d4: b1:d7:12:68:c3:07:f2:ed:e7:0d:ae:70:d6:01:7a:04:21:db: 2f:4d:47:f9:57:e1:f8:8b:6d:e2:87:8b:3f:e4:e1:50:78:fe: 9d:f2:b5:c1:b2:40:27:ce:dc:1c:fd:d2:5e:4e:41:d6:ed:0d: 40:46:2e:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDMovfSl14ZKa/z2MQhrUTHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjYwOTIzMDUwMDI3WhcNMjYwOTI0MDUwMDI3WjAzMTEwLwYDVQQD Eyg0Mjk4OGU1NzViZjgyNGI3MmE2OTBlYmE4ZWE2YTFjN2RiNGVmZjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLt6a6PE94cSDNq9wQIY8plLaKXA PhVWn2kESxHS3u00TYTFXsm4DFSAvfTQGYuMkjq/flRSiCKQYyOzDNttDHSlPOXw QxwhvBBDkgn/YfgyvoFzGUfHCODTbHUEI8yidkE9qSfH62jPw6HB4DMZspeREKZY FGOXYhAKfHqSp6319b73+U+tTa7XeXUeWj2L8A0clm6HTQXd3XCKErpp8Gy+N1As sGNO6EigqoxTLC1LgcEWkWcd/ti79ACc3xrIO9jopggCIPLex2UTxqGOwcUIixzg 02vbVWzVBl436IcqwSdn4kpAeJRX80nhpiWEzr/YLxFqkUbytVaaNcZPpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEKYjldb+CS3KmkOuo6mocfbTv9hMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATRu54QDX +WEDPpsySbf2L9lzINo/y1afp4CPvg4pvkgstfJaqkuVBGSS85NHK+mCHS360LBN LPZwMso2jsDITyQPF0reSgNgrRMfGgLYejvFrV4c2ayvVk9WClbswDtVo7ubFZWD ZsZmjFBbJkdtAAAr7CY63b3861O2Ys8fEghuG8LlfnCR/b4TVJUzhSZWl/MECSRT KDbVVabJvruCk/5lyhU7wpN0K7rqnGJ+5l0e+NZD4gMfFv/javT2xTi86W4BvFvU sdcSaMMH8u3nDa5w1gF6BCHbL01H+Vfh+Itt4oeLP+ThUHj+nfK1wbJAJ87cHP3S Xk5B1u0NQEYu1A== -----END CERTIFICATE-----Generated at Wed Sep 23 10:21:10 2026 by rpki-client