$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft File: FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json) Hash identifier: i6eJK2UMvnfUx1HPmcOudWOB8KblGfHrlSSPlelc0lQ= Subject key identifier: 70:65:61:6E:87:E3:38:73:F5:69:C0:AC:43:26:FB:A4:31:18:53:04 Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 01A0C745F23908D132FC94EB1B3946B59043 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft Manifest number: 1A9D Signing time: Tue 22 Sep 2026 04:00:45 +0000 Manifest this update: Tue 22 Sep 2026 04:00:45 +0000 Manifest next update: Wed 23 Sep 2026 04:00:45 +0000 Files and hashes: 1: 43xKNj8d1J5ZbdUCB9huFf51dlY.roa (hash: 0C77rsfbABsBAgXhMhHrXliF4EtBR+zdrxbfWGDutkA=) 2: B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa (hash: aDzq92qdJqLonxrkAlG+0ptE83HlOqTUO72kLOAz1Z0=) 3: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: NvHjcThKL5wMCYUwhEKvNDWBlvfEiuFcceVYYCeQ0E0=) 4: IgfAmjFLqVW-uCkvUtRuUz3fQFI.asa (hash: 1m1DNwPZO7HOKfXGKGJtUoAVRSnQcqTWcdbAqBMwcJk=) 5: Mqx-zb562ywYV8pX6wNPPIxwnPA.roa (hash: OtbembzOi1Q67rhuvfY9lENyB3xApH7b2U9zu5YCpzg=) 6: NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa (hash: BsmxkgNXTeP+5y0lVg3F5Vd5iIuPFhBIw5y8AiZA+lg=) 7: OFmVOiCQetrNkOtmu3zCnKSHdbQ.asa (hash: Hjgzl6kCFsNx4hG5pItQKTRXXfWNO1jZJVBkNf2hlCc=) 8: VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa (hash: meHtFxM6jSoAy9Y7SaMHGYbPp+WrlG0Kpg1DeuyayZE=) 9: X01sfTguEZRlbViMsVbdLRhWtwM.asa (hash: ITEiwLtEtyei9oziGBBYKolA2UiS65//73HaFywy0cU=) 10: ZYc4R1ZUoLFLDb0ExiBMqNZo4PI.asa (hash: hLDXFm9fYXyP3hsrCVS9C7xEpV87H1Pnzgc7QhcK0xY=) 11: bFkaQMapJshDo2hgXls_q4kXpds.asa (hash: Sdg8D0zVBbo49fzIHdCt36EnpRZv3zi4DnsZ64hwpRw=) 12: dAyDeUp51SPbYS8fxmJNG0482Ng.asa (hash: 6/i5RS8ShUMSXbYzZlVqHGyL8kobjym9yxw0gdprH7E=) 13: oxOGLICEA4GzU1uD1B6su4tziyQ.roa (hash: TvZctkDtv5gSKLWgki0lkEZNOjTs1UPnuilELJQxzxc=) 14: plAxktASIb4YACIP-hXXxq1vBPQ.asa (hash: YS1t0iZi+tG5TRUgxqQhrFYuMkSCCdM92QwP+HVjJ7w=) 15: xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa (hash: AKh2Xxbl7XMpoBpUm83TcjMuEMCZWE9rKYeV/5q4Gew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 04:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c7:45:f2:39:08:d1:32:fc:94:eb:1b:39:46:b5:90:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Sep 22 04:00:45 2026 GMT Not After : Sep 23 04:00:45 2026 GMT Subject: CN=7065616e87e33873f569c0ac4326fba431185304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:05:6d:a6:10:21:69:82:87:22:a6:7f:b9:8d: c2:f7:72:63:a1:b5:35:a7:fc:65:57:5c:be:7c:05: 52:3c:36:c6:6a:b0:17:fa:ea:2f:61:2f:df:36:67: 01:92:8d:a6:33:b7:33:5f:d1:6a:1e:84:29:28:82: 6e:60:bf:86:bf:f3:8d:03:f0:60:9b:52:25:61:ce: 71:45:c8:69:7f:f2:99:2b:bb:d5:58:87:be:7f:60: 19:a8:86:ed:d8:f9:39:4f:51:de:a7:0c:99:ca:7b: 0e:0a:e8:22:86:a3:50:01:a7:ac:57:04:02:73:6e: 4a:66:31:46:57:da:43:41:b0:23:19:4b:e5:a3:c3: 64:46:c3:26:4a:10:c0:28:9a:a1:5e:96:ef:01:b7: 92:da:8a:25:10:bd:55:58:70:f7:07:29:bf:fa:a3: 73:94:b1:a9:1c:a4:f1:de:9a:3b:14:6a:8f:3f:d1: 3e:ca:cb:90:c5:7f:11:55:c5:85:38:17:d9:14:91: eb:04:4a:10:da:d9:83:21:2b:7c:fd:c4:51:73:40: f9:00:61:91:24:36:b1:2a:22:dc:99:e6:fc:a9:22: e6:7d:a3:76:26:3b:ab:2b:bf:6f:20:ce:22:70:3f: e5:3c:4e:36:3b:13:b9:43:33:d9:cc:79:31:1c:dc: 5e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:65:61:6E:87:E3:38:73:F5:69:C0:AC:43:26:FB:A4:31:18:53:04 X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a0:30:6c:b2:a4:a2:3a:7a:fc:f5:a4:ce:fc:4b:f9:64:84: e9:55:85:77:5f:4c:8e:84:13:51:9e:8b:ef:a2:23:01:ee:0f: 2c:c9:26:cc:20:58:9c:b8:25:c7:cc:4f:69:3b:97:e7:96:8e: 25:18:1c:ce:5a:aa:49:ec:21:84:e5:b3:9f:12:d1:e6:7f:89: e6:da:c5:06:71:d1:16:db:21:32:0d:1f:69:94:2b:8f:02:28: c6:ad:c3:da:34:04:18:06:80:01:35:f1:e4:da:f6:c6:44:ee: 15:a9:9d:7d:5b:da:a9:f9:00:38:88:de:44:bf:1c:3c:c4:df: f4:ff:3d:44:58:c4:82:5f:6d:4c:05:bb:a2:8d:40:18:9e:74: 8d:5c:40:76:f2:a7:ce:09:be:0b:22:e4:0a:f4:99:ce:21:1d: 47:2e:7d:2a:5a:3b:2d:dc:05:14:07:b3:de:ad:e4:34:66:1c: 8f:eb:a2:75:43:f5:6f:68:33:4e:82:b1:22:eb:2a:65:dc:8f: 40:41:2c:1f:f8:42:5c:00:7c:e6:92:9e:1b:36:9d:4b:66:c7: 0d:c2:c7:ef:1f:68:89:b1:23:3e:eb:36:e1:13:4c:13:01:40: 64:79:38:7a:d6:90:ca:6b:d3:37:0e:2e:d9:cc:f1:2b:6a:f2: c0:2e:9b:bc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDHRfI5CNEy/JTrGzlGtZBDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjYwOTIyMDQwMDQ1WhcNMjYwOTIzMDQwMDQ1WjAzMTEwLwYDVQQD Eyg3MDY1NjE2ZTg3ZTMzODczZjU2OWMwYWM0MzI2ZmJhNDMxMTg1MzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAVtphAhaYKHIqZ/uY3C93JjobU1 p/xlV1y+fAVSPDbGarAX+uovYS/fNmcBko2mM7czX9FqHoQpKIJuYL+Gv/ONA/Bg m1IlYc5xRchpf/KZK7vVWIe+f2AZqIbt2Pk5T1HepwyZynsOCugihqNQAaesVwQC c25KZjFGV9pDQbAjGUvlo8NkRsMmShDAKJqhXpbvAbeS2oolEL1VWHD3Bym/+qNz lLGpHKTx3po7FGqPP9E+ysuQxX8RVcWFOBfZFJHrBEoQ2tmDISt8/cRRc0D5AGGR JDaxKiLcmeb8qSLmfaN2JjurK79vIM4icD/lPE42OxO5QzPZzHkxHNxemQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHBlYW6H4zhz9WnArEMm+6QxGFMEMB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX6AwbLKk ojp6/PWkzvxL+WSE6VWFd19MjoQTUZ6L76IjAe4PLMkmzCBYnLglx8xPaTuX55aO JRgczlqqSewhhOWznxLR5n+J5trFBnHRFtshMg0faZQrjwIoxq3D2jQEGAaAATXx 5Nr2xkTuFamdfVvaqfkAOIjeRL8cPMTf9P89RFjEgl9tTAW7oo1AGJ50jVxAdvKn zgm+CyLkCvSZziEdRy59Klo7LdwFFAez3q3kNGYcj+uidUP1b2gzToKxIusqZdyP QEEsH/hCXAB85pKeGzadS2bHDcLH7x9oibEjPus24RNMEwFAZHk4etaQymvTNw4u 2czxK2rywC6bvA== -----END CERTIFICATE-----Generated at Tue Sep 22 10:12:39 2026 by rpki-client