$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json) Hash identifier: or7yAJ42qmOPFgvtGTOE6uBxV7UlKgZt/cALSSDEMvY= Subject key identifier: 6C:E1:D0:AC:B1:38:BD:8B:43:72:BA:B1:43:AD:C3:15:E5:85:5F:E2 Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Certificate serial: 01A0BDD486A9367EF01A86323ECB8CE02E05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft Manifest number: 1A84 Signing time: Sun 20 Sep 2026 08:00:16 +0000 Manifest this update: Sun 20 Sep 2026 08:00:16 +0000 Manifest next update: Mon 21 Sep 2026 08:00:16 +0000 Files and hashes: 1: 2um_rS6WPk2IN6s5x2XbXkQen_M.roa (hash: B3h5JybIRNgVZgqeJwphCEgik9Z267VqHxwbsqTyFKg=) 2: 5du9oXm-5RnmJ8KX2xj_Zy0VqSw.roa (hash: Y1EwroZc2iGhdcqssdik2/Y5BQLLil5kyZQd3CFxooI=) 3: 8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa (hash: qCD4Jc/TwmM8SzWErouUslVtMstyIPcxvXJzTBG565w=) 4: AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa (hash: ZpJgowIRgidE/63sx4+7oMD9312HUQ//RvFSY5dDQVE=) 5: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: YYSrWa1G/AXL/TbDLDODHERnIKFvyUmWZqK7f+sbTBA=) 6: DewPVx0uxJChPazGVl04iEQt-GM.roa (hash: zJ7nbS6MIVpf02vap/KhBVzOnoGcoyj3FKo3YbsVGF0=) 7: NRE_ExP25AUx8aw3isiH4EnLbWo.roa (hash: SKLRbqjSGl9WDWUOA+lP72kkE1542Czk3hD2WUZlOgE=) 8: WLsy-DnnYnQhVtIJoLpzduDgWrE.roa (hash: V18CJCRRVUNGPvZK+aRf70kDiLaxF9fIzOBbbor2Dw4=) 9: b1zJ7NbuL57-e0rkevnmNIo0USU.roa (hash: 6oXQKWkeIUo+oie2lp60DcRhSM6jyLL6Sog8QbpX/bA=) 10: mWfbcxQdC8J-VBP4j7EBWfW3Qb4.roa (hash: osYbMfspLkdv49SbR62yA1rUcvBEuqW1/Mq+AH8uZCU=) 11: pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa (hash: ZB/G3ZNzs5uxcuPvRWlbNalCCRVbwpgrXGxyYOGJMA4=) 12: xvB92g3viVT1q0eYULHN2quLguo.roa (hash: VRmr+2VnW18lzVv/zbO7wYNSjIEYoaGpdy+0x7pBFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 05:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bd:d4:86:a9:36:7e:f0:1a:86:32:3e:cb:8c:e0:2e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Validity Not Before: Sep 20 08:00:16 2026 GMT Not After : Sep 21 08:00:16 2026 GMT Subject: CN=6ce1d0acb138bd8b4372bab143adc315e5855fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:15:20:95:51:82:71:5a:1a:7f:84:a0:f5:08: d5:64:62:f0:28:14:f6:46:7e:f4:5e:7e:b7:77:6a: 10:b1:9a:d5:27:35:b7:4f:19:50:c6:94:a4:52:e3: d5:36:85:a4:35:74:eb:55:d4:f8:a3:88:6e:5e:c0: 16:9b:58:ab:63:95:84:bb:13:cc:f6:64:69:b5:47: ca:da:15:e4:55:78:4b:35:09:58:56:b2:6f:16:df: 3f:c3:8c:ee:ea:bf:46:b6:3e:7f:83:04:17:dd:22: b6:2a:64:b3:7a:b3:ad:32:a5:21:e2:02:31:de:26: e0:c8:ee:61:62:ae:c8:9f:0a:a4:2b:a8:89:6a:ce: 13:cd:6a:bf:32:37:5f:eb:b4:6e:de:d5:d3:2b:6b: b7:23:10:97:5a:f8:e5:c2:b9:b2:38:56:35:56:71: a2:23:2d:f4:5c:e7:69:d9:5c:31:ed:ca:2d:e8:88: 32:3e:c9:cc:78:d2:1a:9c:ed:c4:5c:07:51:87:39: 07:0a:f7:57:c1:47:e2:1a:f8:7c:d8:e2:4f:8c:db: 22:80:99:3b:c1:88:07:d3:3c:88:94:4e:a8:3e:b9: 9c:7c:75:a2:51:a5:6b:c0:55:4f:12:ba:64:06:6d: 48:74:82:87:1f:54:f8:89:0a:7c:95:b8:73:e0:dc: b6:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E1:D0:AC:B1:38:BD:8B:43:72:BA:B1:43:AD:C3:15:E5:85:5F:E2 X509v3 Authority Key Identifier: keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:c7:7f:da:22:d1:58:59:40:99:d3:a7:7f:5d:30:62:f2:a7: 67:56:a4:d2:1e:95:10:8a:f9:01:4f:5f:c1:f7:10:dd:64:66: 21:80:4f:d0:ea:18:88:3d:34:b9:b7:0b:95:79:fe:46:9d:f0: 35:d0:1e:b1:77:ca:24:6b:10:11:df:4a:59:13:d2:71:b3:5c: 30:56:dc:a9:0b:f3:9b:03:b1:5d:b8:05:1a:d0:52:01:df:a6: dd:11:ff:04:98:fc:61:5d:7a:28:fd:0c:f1:b4:91:c8:5b:db: 4a:9b:72:92:54:24:0b:c8:e0:6e:fc:2c:c5:39:37:c6:ef:5f: a8:fe:80:98:10:87:83:3d:fe:fd:31:67:33:b9:5e:a8:60:97: a7:c1:95:47:33:80:65:6b:8a:28:18:14:a1:a9:f0:84:21:a3: 37:2f:a0:0f:b5:ec:19:44:9b:5d:59:ec:04:ba:4c:46:9a:4d: f6:22:ae:3a:b2:22:88:75:f2:0c:40:af:8d:04:4b:9d:0c:96: 19:2a:ee:c6:4a:d1:3f:e5:a9:21:4f:bd:b1:ef:90:c7:e3:e8: 65:4e:ea:d6:83:0d:d4:3e:e4:82:d8:90:ff:e3:e8:19:9c:98: 67:15:23:62:30:fb:7f:cd:27:0e:73:c1:6a:16:da:b9:ec:4e: c6:31:6b:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC91IapNn7wGoYyPsuM4C4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh M2Q0YjUwHhcNMjYwOTIwMDgwMDE2WhcNMjYwOTIxMDgwMDE2WjAzMTEwLwYDVQQD Eyg2Y2UxZDBhY2IxMzhiZDhiNDM3MmJhYjE0M2FkYzMxNWU1ODU1ZmUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhUglVGCcVoaf4Sg9QjVZGLwKBT2 Rn70Xn63d2oQsZrVJzW3TxlQxpSkUuPVNoWkNXTrVdT4o4huXsAWm1irY5WEuxPM 9mRptUfK2hXkVXhLNQlYVrJvFt8/w4zu6r9Gtj5/gwQX3SK2KmSzerOtMqUh4gIx 3ibgyO5hYq7InwqkK6iJas4TzWq/Mjdf67Ru3tXTK2u3IxCXWvjlwrmyOFY1VnGi Iy30XOdp2Vwx7cot6IgyPsnMeNIanO3EXAdRhzkHCvdXwUfiGvh82OJPjNsigJk7 wYgH0zyIlE6oPrmcfHWiUaVrwFVPErpkBm1IdIKHH1T4iQp8lbhz4Ny2pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGzh0KyxOL2LQ3K6sUOtwxXlhV/iMB8GA1UdIwQY MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt MmUxYzBhZjRmYWE0LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0 LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfsd/2iLR WFlAmdOnf10wYvKnZ1ak0h6VEIr5AU9fwfcQ3WRmIYBP0OoYiD00ubcLlXn+Rp3w NdAesXfKJGsQEd9KWRPScbNcMFbcqQvzmwOxXbgFGtBSAd+m3RH/BJj8YV16KP0M 8bSRyFvbSptyklQkC8jgbvwsxTk3xu9fqP6AmBCHgz3+/TFnM7leqGCXp8GVRzOA ZWuKKBgUoanwhCGjNy+gD7XsGUSbXVnsBLpMRppN9iKuOrIiiHXyDECvjQRLnQyW GSruxkrRP+WpIU+9se+Qx+PoZU7q1oMN1D7kgtiQ/+PoGZyYZxUjYjD7f80nDnPB ahbauexOxjFroQ== -----END CERTIFICATE-----Generated at Sun Sep 20 14:51:35 2026 by rpki-client