$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json) Hash identifier: GKGQstqHUqGYU78u8wuDWDVvElE3YDpRmMFlK8zxqE4= Subject key identifier: 10:B6:AE:F7:BC:3D:42:25:F9:F4:76:B6:96:C3:54:F0:29:47:32:56 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 01A0C067F960BBC097229C71F2AF9543058E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft Manifest number: 045D Signing time: Sun 20 Sep 2026 20:00:34 +0000 Manifest this update: Sun 20 Sep 2026 20:00:34 +0000 Manifest next update: Mon 21 Sep 2026 20:00:34 +0000 Files and hashes: 1: 1E8AiSnlYGPXbOfAXqZEBvdti0Q.roa (hash: zg4/KmKPBBnWqoo6XqmqqOeEWKX38ZMsmowwS7V3CsY=) 2: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: SByDpuX/bGzH6HO6MtF8HTWl241WUFQikWtg8vr76xI=) 3: AB-3GTt7dKbgGDarr3rLpVJnw1Q.roa (hash: 8ZkLoQZEXsJMEKT0BvkO1TAaKtUbWVe7ZEC6sjqW8hc=) 4: EQogtfwIG0vfRIsrb83BkikUx6w.roa (hash: fnMUu9z6P/luxngyy5MILnRThzpFqtLF+/+Opl1fOk8=) 5: Fpers4ckw8vskaNRVclqUBp0SoI.roa (hash: /ASq7BRZjDqtnx4xF8bUwVqbxsy5sT2w1mwn2Hyex7s=) 6: GG4z91MdDpV2DBV_RNPbWkwIoJw.roa (hash: Eqt3BxDIeVAQpNBJJYqmZDf6uBVXq8wo47BPWDDy060=) 7: L6Ra25CjKp_mEEvb6fnLzB9z48Y.roa (hash: gAYyNL8en1bwIuDNmy096pQ8EjEcbk/vtZcx5FewlIM=) 8: M9gz-zDjcHMG72ncQoctT7Ig0gw.roa (hash: y0f77DJy/W9u5Zu+gCP6r/Or2FuJoDzwWHLtUiVFB3Q=) 9: Q9MMK2jX7oFaxPIBQ_rjAEBshOQ.roa (hash: dXmtL6fHBlnD6F3o0HvOrowNNpFXpHlehl60bZfG+XM=) 10: Rljxz94QZplQeuBAwuf9oFlx7r4.roa (hash: RKSS2AInFLgVvgo8kRCmVpguBnDnbeAsri/BPhh+zkc=) 11: ZmA7YXk1EXie8V8IljOsrQAeVMc.roa (hash: KfN3YtXoCnYtbOhys/L3JbGSTPU3Jpxa1rNO5rVZaaM=) 12: cGY6VU5LCoHNqWWYp31zTE9OfVQ.roa (hash: JmT+NXbdK0ja4GM6w1yJIVMBiCu7leyjjpmQYwjqaI4=) 13: hbHoK0o2p6Bt0sMLz48Nn7EIEws.roa (hash: AabyFao1094cA8E0S9PcCwFVPGA7d1c7Y+W9MYMaIkQ=) 14: ipNOGO-HZGeaSbGj4A_3vWbejCk.roa (hash: iX9jrw9KV78oXpLW2rMU6Z1RbiiCKzsCJE3wPvWfMKQ=) 15: khb_nHg0pSGTidoxptDUDhVpMRE.roa (hash: a1Y69sqRSLymfDktz/oYdmUj3z7+Bwa6JrhSMrXtZDY=) 16: rTCIQuB8b5-23Fe16EFzxOkFAo0.roa (hash: 85dTReYxmMkhMzb7ZnE2kpCceaZUsUjOdsiOl8VJLKg=) 17: unf0Pta1KwBim2xfa75YmFcO_NA.roa (hash: 2/UKKYn3OdWj/kHyqsLPSNx09K6m4+Me/8ccsKvqlJo=) 18: wMIGg_895xsUud_tObIdM45E8XQ.roa (hash: LP5aF2JP0E54B5AqB2G8lcqC6PTsBN6TaHhp9g0P2hY=) 19: ySkdtLpwthgQcRcY1mmiVALopO4.roa (hash: lcmNAh++zdti5i3/Z0f1GF+aPbDpUmxj40nEHbXXFoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c0:67:f9:60:bb:c0:97:22:9c:71:f2:af:95:43:05:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Sep 20 20:00:34 2026 GMT Not After : Sep 21 20:00:34 2026 GMT Subject: CN=10b6aef7bc3d4225f9f476b696c354f029473256 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:ad:b6:23:ff:e1:f1:e7:2e:61:14:95:99:cd: 00:7c:f1:f2:55:39:07:e3:22:ca:61:be:b2:48:09: cf:0c:31:0b:fb:bd:9c:a8:ea:7a:f3:a3:89:71:e4: 1e:ab:6e:34:cc:4a:3b:21:21:1f:1b:30:71:f4:ca: 08:ef:08:5c:2c:38:5d:83:9c:8b:0c:94:46:85:87: 40:d0:97:ef:2a:89:eb:1b:c2:1c:72:97:b0:85:62: e5:9b:1b:7f:3e:77:f6:c6:db:b5:ed:96:62:36:f1: f1:54:0f:08:1e:f5:9b:a7:0c:55:87:ec:c6:35:67: d3:76:b0:f1:b9:aa:0f:f9:ed:99:65:21:92:1d:09: a5:b0:6f:77:04:37:e0:17:46:13:ab:18:9f:61:b3: 4e:a3:16:b1:e7:6d:31:76:10:8d:59:0c:55:1c:47: 7f:c1:53:35:f8:b5:de:72:0f:75:3e:8f:c3:b2:ce: 29:76:74:ab:a0:03:53:b1:e8:ec:77:f6:af:2f:8e: ff:c4:66:2e:16:e3:0a:c3:2f:df:eb:3c:ed:5a:e5: 8e:c9:c0:09:33:06:c5:a9:1d:a3:d4:99:9f:55:f1: 2d:23:ca:38:ec:15:c3:a4:1a:c7:c5:8e:d9:58:1d: 97:76:cb:bd:1b:9d:03:91:11:7f:55:85:76:11:97: 8a:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:B6:AE:F7:BC:3D:42:25:F9:F4:76:B6:96:C3:54:F0:29:47:32:56 X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:2a:62:2a:f0:1f:ab:83:d1:f4:ac:cb:46:d3:f4:2d:d3:47: 4b:63:d2:73:b6:bf:de:c3:18:7c:4d:50:7c:8f:ad:9b:f5:36: 28:10:30:3c:f8:54:71:b9:60:da:5c:b0:dd:dd:fb:60:53:a4: f8:d6:51:be:12:21:b2:b4:93:cb:94:a5:dd:e4:c3:af:f2:2c: fe:a3:2d:90:e2:e9:32:c0:e5:94:08:b3:a9:ff:51:36:36:77: f5:00:c8:23:23:a4:6d:0c:49:d2:75:6b:e7:20:ac:f7:f6:c5: e6:3a:4d:0f:b0:b9:1f:f1:c5:ba:f7:d2:be:95:80:92:97:b8: 47:5a:95:cf:3c:3b:a9:48:d0:49:ba:e3:11:a4:f6:91:7e:39: 8b:40:b9:e7:cc:8c:20:36:e5:33:49:ca:96:e8:63:31:b5:8f: 38:09:4a:a5:2b:85:c6:bf:b9:6e:65:fa:ee:88:c5:d1:e7:e4: 94:ab:70:22:7c:2a:f6:6d:a9:d1:1a:a7:81:3f:be:0d:f2:0f: 17:63:eb:8b:8b:8d:70:e2:61:69:98:aa:eb:8b:d3:2b:c6:4c: 8d:a2:81:2e:e0:08:2b:6e:26:9a:5d:3d:6b:78:1f:f8:2b:5c: 93:0c:7d:ec:33:6d:e4:b2:0e:73:e2:58:1e:12:d5:18:2e:d3: 93:4b:c1:55 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDAZ/lgu8CXIpxx8q+VQwWOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwOTIwMjAwMDM0WhcNMjYwOTIxMjAwMDM0WjAzMTEwLwYDVQQD EygxMGI2YWVmN2JjM2Q0MjI1ZjlmNDc2YjY5NmMzNTRmMDI5NDczMjU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K22I//h8ecuYRSVmc0AfPHyVTkH 4yLKYb6ySAnPDDEL+72cqOp686OJceQeq240zEo7ISEfGzBx9MoI7whcLDhdg5yL DJRGhYdA0JfvKonrG8IccpewhWLlmxt/Pnf2xtu17ZZiNvHxVA8IHvWbpwxVh+zG NWfTdrDxuaoP+e2ZZSGSHQmlsG93BDfgF0YTqxifYbNOoxax520xdhCNWQxVHEd/ wVM1+LXecg91Po/Dss4pdnSroANTsejsd/avL47/xGYuFuMKwy/f6zztWuWOycAJ MwbFqR2j1JmfVfEtI8o47BXDpBrHxY7ZWB2Xdsu9G50DkRF/VYV2EZeK1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBC2rve8PUIl+fR2tpbDVPApRzJWMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATipiKvAf q4PR9KzLRtP0LdNHS2PSc7a/3sMYfE1QfI+tm/U2KBAwPPhUcblg2lyw3d37YFOk +NZRvhIhsrSTy5Sl3eTDr/Is/qMtkOLpMsDllAizqf9RNjZ39QDIIyOkbQxJ0nVr 5yCs9/bF5jpND7C5H/HFuvfSvpWAkpe4R1qVzzw7qUjQSbrjEaT2kX45i0C558yM IDblM0nKluhjMbWPOAlKpSuFxr+5bmX67ojF0efklKtwInwq9m2p0RqngT++DfIP F2Pri4uNcOJhaZiq64vTK8ZMjaKBLuAIK24mml09a3gf+Ctckwx97DNt5LIOc+JY HhLVGC7Tk0vBVQ== -----END CERTIFICATE-----Generated at Sun Sep 20 23:54:26 2026 by rpki-client