$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: /HQHrf+UTGlii4g9W0tlVAl0n2pNzx7NuWUfiaUGhbg= Subject key identifier: F1:FB:33:06:F0:79:43:15:E0:8C:6F:79:D6:E5:52:E6:47:6F:5B:0A Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 01A0E81CD996F9F7BF9337D40D8EF4C2A6B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 193F Signing time: Mon 28 Sep 2026 13:03:19 +0000 Manifest this update: Mon 28 Sep 2026 13:03:19 +0000 Manifest next update: Tue 29 Sep 2026 13:03:19 +0000 Files and hashes: 1: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (hash: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU=) 2: FQ-zr24LwDkwYEmw_FlDbzx5P4s.roa (hash: 72rsnmpdkRSkNBR0uk4zMj5njaCBagS3GBHGnSWVLYw=) 3: h_0cAkv9bRuqII55SmmjCPAtEkY.roa (hash: f3qXMN3stUSn8npXGtiCTxgNOHC/rASxYRfTCA56R9E=) 4: kxHXeC-RgFki1x0jEKzH48eBz8c.roa (hash: E6qamccMc25rG9FxeXNYkNGoky+PcxFg+Xq4GlM3NUs=) 5: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (hash: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk=) 6: plMF4273xJNdefV7r7jo8RJ8QbU.roa (hash: D9odZxGtxbDzG6OiIstvUcJ7z0OpJ5jME5X2lJ31p5A=) 7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: cFyjDsps0rVz36zOfWBdvT3IwU9wcCDZmWVUlbG8Jr8=) 8: un_1tb4ETb7dJsP5Mq8V0llGT80.roa (hash: cP4I0MaCsjRNc87FbMAxnApmXsIjWX9M4UbopOynI2E=) 9: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (hash: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk=) 10: zLCHjeiw_ejDI_VbLsjC7k1DbE4.roa (hash: 5Mti0up92969Oa1c08K/2LG50PP0mj7MqErSz+8DQcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 13:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e8:1c:d9:96:f9:f7:bf:93:37:d4:0d:8e:f4:c2:a6:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Sep 28 13:03:19 2026 GMT Not After : Sep 29 13:03:19 2026 GMT Subject: CN=f1fb3306f0794315e08c6f79d6e552e6476f5b0a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d6:22:40:6a:b0:ae:93:1d:13:b4:c2:f2:e8: 63:70:51:9c:7f:d9:84:db:e0:4e:24:07:b4:11:1e: 25:c6:9a:27:eb:76:ef:f1:a2:ea:45:9f:b4:6c:42: a6:77:52:71:3b:e0:cd:09:f1:70:33:d3:5b:75:13: 89:ee:39:a2:b6:a3:68:ff:3f:94:2b:dc:64:38:65: 00:79:74:49:22:f3:61:80:48:79:f2:43:92:74:c3: 9a:99:04:25:68:46:d6:50:fa:7e:5a:29:d7:97:57: 1b:81:d4:51:99:82:f4:8f:02:c3:af:ec:ba:7e:a8: 18:78:79:4e:e8:cb:05:7b:d6:37:45:7d:96:6f:9a: 91:bf:e6:ad:e3:c4:bd:98:99:b6:95:b1:ff:20:26: fe:10:3a:f0:96:aa:21:9a:47:fd:25:fd:75:01:5c: f9:a3:51:82:c0:d5:60:23:18:83:86:62:3e:e4:89: 8a:00:d8:c9:be:57:ae:3f:70:05:cb:40:5e:58:0a: 99:d1:bd:3e:e1:0e:68:a4:68:33:fb:4d:64:85:0e: bd:36:50:b3:05:e9:57:18:5e:e6:b8:fb:5f:6d:93: 10:93:fa:d8:47:55:9b:44:aa:fb:06:8e:11:5d:e4: 16:91:f7:b9:52:ec:ed:11:11:5b:c8:bc:95:4a:d9: a3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:FB:33:06:F0:79:43:15:E0:8C:6F:79:D6:E5:52:E6:47:6F:5B:0A X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:dd:a3:77:4f:03:68:d2:36:5e:7f:bd:53:c0:0d:1c:e8:d6: 20:b8:c0:1e:be:ba:af:2c:7b:80:1e:5d:48:af:72:d1:75:af: 2e:fd:8d:83:83:26:6e:65:b4:e6:9a:7f:99:4d:a3:d4:83:26: ab:e4:75:c7:a4:15:31:2c:74:3b:d4:0d:20:e4:be:d0:b5:41: 2a:39:9b:59:01:f0:35:9c:37:fb:88:86:a8:71:67:1e:55:36: 2f:32:03:57:a0:e8:89:14:01:1e:5e:21:f3:6f:9d:32:7f:65: ea:2b:37:08:97:1d:39:2a:fa:5f:31:f8:9c:7c:93:c8:3d:80: cf:a5:43:82:03:74:79:f8:7f:f7:4b:ca:11:c4:9c:a0:2a:61: 07:7e:9c:30:34:e2:92:96:87:91:8f:16:cd:f2:7a:5d:2f:41: 39:63:0b:9a:d5:df:07:2c:c7:a2:29:f4:aa:a8:b6:f6:1b:85: 7f:59:cc:71:21:11:11:8e:54:30:e3:90:42:27:a4:db:3e:8e: 7e:1c:f1:f7:23:92:ae:ca:9f:5a:f9:10:f9:71:09:80:cc:10: 63:ca:17:56:dc:de:ee:a3:0d:69:9c:20:89:5c:87:cf:a9:7b: a8:f1:4b:2e:47:63:cb:4f:ac:5d:06:99:d9:d2:60:49:05:06: 1c:f0:af:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDoHNmW+fe/kzfUDY70wqa4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjYwOTI4MTMwMzE5WhcNMjYwOTI5MTMwMzE5WjAzMTEwLwYDVQQD EyhmMWZiMzMwNmYwNzk0MzE1ZTA4YzZmNzlkNmU1NTJlNjQ3NmY1YjBhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNYiQGqwrpMdE7TC8uhjcFGcf9mE 2+BOJAe0ER4lxpon63bv8aLqRZ+0bEKmd1JxO+DNCfFwM9NbdROJ7jmitqNo/z+U K9xkOGUAeXRJIvNhgEh58kOSdMOamQQlaEbWUPp+WinXl1cbgdRRmYL0jwLDr+y6 fqgYeHlO6MsFe9Y3RX2Wb5qRv+at48S9mJm2lbH/ICb+EDrwlqohmkf9Jf11AVz5 o1GCwNVgIxiDhmI+5ImKANjJvleuP3AFy0BeWAqZ0b0+4Q5opGgz+01khQ69NlCz BelXGF7muPtfbZMQk/rYR1WbRKr7Bo4RXeQWkfe5UuztERFbyLyVStmjNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPH7MwbweUMV4IxvedblUuZHb1sKMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGt2jd08D aNI2Xn+9U8ANHOjWILjAHr66ryx7gB5dSK9y0XWvLv2Ng4MmbmW05pp/mU2j1IMm q+R1x6QVMSx0O9QNIOS+0LVBKjmbWQHwNZw3+4iGqHFnHlU2LzIDV6DoiRQBHl4h 82+dMn9l6is3CJcdOSr6XzH4nHyTyD2Az6VDggN0efh/90vKEcScoCphB36cMDTi kpaHkY8WzfJ6XS9BOWMLmtXfByzHoin0qqi29huFf1nMcSEREY5UMOOQQiek2z6O fhzx9yOSrsqfWvkQ+XEJgMwQY8oXVtze7qMNaZwgiVyHz6l7qPFLLkdjy0+sXQaZ 2dJgSQUGHPCvTQ== -----END CERTIFICATE-----Generated at Mon Sep 28 18:58:18 2026 by rpki-client