$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: iuJK1X4U9WNdobLFusvXx+XsdG7R9ESgrVCG2MQlMDc= Subject key identifier: 92:04:4E:39:D8:17:2C:A7:E2:BD:D2:E5:DD:22:78:DC:00:B2:7D:46 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 01A0C6A0AFC81C7BA2E62DA1325DE5EB4D7D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1A7B Signing time: Tue 22 Sep 2026 01:00:14 +0000 Manifest this update: Tue 22 Sep 2026 01:00:14 +0000 Manifest next update: Wed 23 Sep 2026 01:00:14 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 4: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: 1XMmb+EFxx9DCaeXo4wOZtEFoQCqJTwN9UQRkk7TMSA=) 5: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 6: WimZdTjw5Lm8MtebopYruWKL5rI.roa (hash: ZsNGt4iJIvs0TYMA8I/lIAfczIzjQsE/8A1JQl2JcVU=) 7: a7uJpq_z_q_yhJkmebNUtHZmFJc.roa (hash: KAwQnqnyhO/yRaqgGOzpu3c6bjgpIJkUCJpunP3swCs=) 8: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 9: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 10: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 11: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 12: iKMbSLMsYD3IPy4aFTgWFbR5-7Q.roa (hash: FLy0rWO0Tm6EmloSEokoF4mkm9Xo/LOqQZJUxQFOv+k=) 13: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 14: wK7E2CITjHSS2oNwJxLPpiywZOo.asa (hash: oIOlXpucAgwg2lcnJgT+OLAJmqqKdwc6n/6fCi8en3s=) 15: waZz0IyLkJZ2XZs5mcy2zeGt7KA.roa (hash: PLFFtAchWYCJ5jmh6ddgth619HvoXK3NBze7KzilKF8=) 16: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c6:a0:af:c8:1c:7b:a2:e6:2d:a1:32:5d:e5:eb:4d:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Sep 22 01:00:14 2026 GMT Not After : Sep 23 01:00:14 2026 GMT Subject: CN=92044e39d8172ca7e2bdd2e5dd2278dc00b27d46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:fe:a6:23:05:b0:b5:08:2c:12:11:6a:28:54: eb:6f:3a:e4:6e:f7:02:2f:c6:f7:6c:43:8a:e5:e7: 63:79:63:95:bb:d2:02:e0:57:84:87:2f:cc:74:d1: aa:3e:ee:c5:c4:f3:14:b7:f3:56:39:fb:00:76:9f: bf:a2:80:bf:86:ae:a7:16:7e:3a:4e:96:ee:87:9d: 90:7e:ee:10:18:ed:28:04:d0:e7:71:5d:b8:b3:e7: a4:f4:c5:00:0d:96:51:2f:fd:b8:ad:38:7c:7a:19: bc:3f:09:b7:a4:d8:3a:33:11:b8:9b:92:55:0c:df: 09:a4:2e:ef:34:f6:bc:0b:f4:97:a8:e6:3c:ee:4a: b4:72:02:34:6a:fd:09:18:00:52:25:23:20:83:33: 9c:02:37:b2:7f:ea:39:e8:a9:6d:cd:73:18:2b:d8: 59:7b:07:4e:d9:d7:9d:6d:49:8d:59:d9:07:78:77: 2b:02:ba:96:06:10:af:59:30:f4:8c:63:13:21:3c: c7:9b:5d:05:1e:f8:56:ad:d3:6a:cd:37:84:94:db: d4:b2:92:b6:d9:b7:7e:be:94:ee:f9:96:24:ac:3a: c1:c9:55:80:e5:55:52:55:4e:37:26:62:5c:c6:81: 75:70:51:78:f9:28:b4:dc:e9:e4:d5:27:7c:05:0c: 3c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:04:4E:39:D8:17:2C:A7:E2:BD:D2:E5:DD:22:78:DC:00:B2:7D:46 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:3f:2f:06:3d:63:ee:06:b6:68:24:2f:08:71:ff:89:5d:81: 97:ab:9f:98:18:54:cc:0c:4f:50:1b:cf:80:12:4c:ba:dd:61: 1b:6e:ab:1d:95:2b:94:1e:3c:e4:6c:2d:e8:38:ba:70:6b:fd: 01:49:04:33:c1:aa:d3:50:2a:86:66:24:7a:bc:d6:4e:fb:05: d1:3e:c3:05:b0:91:22:d7:45:b5:70:27:d8:b3:69:39:ab:1c: ca:ab:84:88:91:74:d4:69:8e:8f:9c:a9:8e:f8:1d:8f:7c:32: 17:dd:3e:73:c0:9d:02:4d:a4:36:60:80:9a:2f:76:bd:7b:4b: a0:b4:95:88:28:86:97:db:e5:80:96:cc:c7:8f:11:29:6d:b3: a2:50:67:ef:f5:97:91:cd:48:c2:bd:b4:2a:46:2b:40:9c:2e: ad:25:06:94:da:01:39:4a:c5:f8:83:62:a4:26:09:92:d0:09: d3:40:46:6d:51:bc:f0:cc:21:ae:92:96:03:52:57:1b:7b:30: e6:aa:ce:f6:70:68:17:96:5b:72:8d:60:1d:9b:17:d7:fd:79: 84:5b:a0:3e:0a:85:f4:d2:4e:b7:11:7c:f4:a2:39:e9:81:99: dd:45:c5:02:39:70:3e:c0:6a:cc:89:ca:42:bb:ac:a0:db:36: bf:36:b1:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDGoK/IHHui5i2hMl3l6019MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwOTIyMDEwMDE0WhcNMjYwOTIzMDEwMDE0WjAzMTEwLwYDVQQD Eyg5MjA0NGUzOWQ4MTcyY2E3ZTJiZGQyZTVkZDIyNzhkYzAwYjI3ZDQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxv6mIwWwtQgsEhFqKFTrbzrkbvcC L8b3bEOK5edjeWOVu9IC4FeEhy/MdNGqPu7FxPMUt/NWOfsAdp+/ooC/hq6nFn46 Tpbuh52Qfu4QGO0oBNDncV24s+ek9MUADZZRL/24rTh8ehm8Pwm3pNg6MxG4m5JV DN8JpC7vNPa8C/SXqOY87kq0cgI0av0JGABSJSMggzOcAjeyf+o56KltzXMYK9hZ ewdO2dedbUmNWdkHeHcrArqWBhCvWTD0jGMTITzHm10FHvhWrdNqzTeElNvUspK2 2bd+vpTu+ZYkrDrByVWA5VVSVU43JmJcxoF1cFF4+Si03Onk1Sd8BQw8WQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJIETjnYFyyn4r3S5d0ieNwAsn1GMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYD8vBj1j 7ga2aCQvCHH/iV2Bl6ufmBhUzAxPUBvPgBJMut1hG26rHZUrlB485Gwt6Di6cGv9 AUkEM8Gq01AqhmYkerzWTvsF0T7DBbCRItdFtXAn2LNpOascyquEiJF01GmOj5yp jvgdj3wyF90+c8CdAk2kNmCAmi92vXtLoLSViCiGl9vlgJbMx48RKW2zolBn7/WX kc1Iwr20KkYrQJwurSUGlNoBOUrF+INipCYJktAJ00BGbVG88MwhrpKWA1JXG3sw 5qrO9nBoF5Zbco1gHZsX1/15hFugPgqF9NJOtxF89KI56YGZ3UXFAjlwPsBqzInK QrusoNs2vzaxyw== -----END CERTIFICATE-----Generated at Tue Sep 22 05:04:25 2026 by rpki-client