$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json) Hash identifier: QlaA9QNifA1GTl820BPLYr97dbGJHkPgmOOd/UwGM80= Subject key identifier: 2E:07:1F:2E:27:03:4E:81:9C:6E:56:E9:98:6A:B1:43:CE:90:38:78 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 01A0C2568FCA7D7FD95CB12B58717B8149E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft Manifest number: 045E Signing time: Mon 21 Sep 2026 05:00:47 +0000 Manifest this update: Mon 21 Sep 2026 05:00:47 +0000 Manifest next update: Tue 22 Sep 2026 05:00:47 +0000 Files and hashes: 1: 1E8AiSnlYGPXbOfAXqZEBvdti0Q.roa (hash: zg4/KmKPBBnWqoo6XqmqqOeEWKX38ZMsmowwS7V3CsY=) 2: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: VqWX/9ytlLq6MCql4Fhlyqds+tqS45NUcJ72c2TYc6M=) 3: AB-3GTt7dKbgGDarr3rLpVJnw1Q.roa (hash: 8ZkLoQZEXsJMEKT0BvkO1TAaKtUbWVe7ZEC6sjqW8hc=) 4: EQogtfwIG0vfRIsrb83BkikUx6w.roa (hash: fnMUu9z6P/luxngyy5MILnRThzpFqtLF+/+Opl1fOk8=) 5: Fpers4ckw8vskaNRVclqUBp0SoI.roa (hash: /ASq7BRZjDqtnx4xF8bUwVqbxsy5sT2w1mwn2Hyex7s=) 6: GG4z91MdDpV2DBV_RNPbWkwIoJw.roa (hash: Eqt3BxDIeVAQpNBJJYqmZDf6uBVXq8wo47BPWDDy060=) 7: L6Ra25CjKp_mEEvb6fnLzB9z48Y.roa (hash: gAYyNL8en1bwIuDNmy096pQ8EjEcbk/vtZcx5FewlIM=) 8: M9gz-zDjcHMG72ncQoctT7Ig0gw.roa (hash: y0f77DJy/W9u5Zu+gCP6r/Or2FuJoDzwWHLtUiVFB3Q=) 9: Q9MMK2jX7oFaxPIBQ_rjAEBshOQ.roa (hash: dXmtL6fHBlnD6F3o0HvOrowNNpFXpHlehl60bZfG+XM=) 10: Rljxz94QZplQeuBAwuf9oFlx7r4.roa (hash: RKSS2AInFLgVvgo8kRCmVpguBnDnbeAsri/BPhh+zkc=) 11: ZmA7YXk1EXie8V8IljOsrQAeVMc.roa (hash: KfN3YtXoCnYtbOhys/L3JbGSTPU3Jpxa1rNO5rVZaaM=) 12: cGY6VU5LCoHNqWWYp31zTE9OfVQ.roa (hash: JmT+NXbdK0ja4GM6w1yJIVMBiCu7leyjjpmQYwjqaI4=) 13: hbHoK0o2p6Bt0sMLz48Nn7EIEws.roa (hash: AabyFao1094cA8E0S9PcCwFVPGA7d1c7Y+W9MYMaIkQ=) 14: ipNOGO-HZGeaSbGj4A_3vWbejCk.roa (hash: iX9jrw9KV78oXpLW2rMU6Z1RbiiCKzsCJE3wPvWfMKQ=) 15: khb_nHg0pSGTidoxptDUDhVpMRE.roa (hash: a1Y69sqRSLymfDktz/oYdmUj3z7+Bwa6JrhSMrXtZDY=) 16: rTCIQuB8b5-23Fe16EFzxOkFAo0.roa (hash: 85dTReYxmMkhMzb7ZnE2kpCceaZUsUjOdsiOl8VJLKg=) 17: unf0Pta1KwBim2xfa75YmFcO_NA.roa (hash: 2/UKKYn3OdWj/kHyqsLPSNx09K6m4+Me/8ccsKvqlJo=) 18: wMIGg_895xsUud_tObIdM45E8XQ.roa (hash: LP5aF2JP0E54B5AqB2G8lcqC6PTsBN6TaHhp9g0P2hY=) 19: ySkdtLpwthgQcRcY1mmiVALopO4.roa (hash: lcmNAh++zdti5i3/Z0f1GF+aPbDpUmxj40nEHbXXFoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 05:00:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:56:8f:ca:7d:7f:d9:5c:b1:2b:58:71:7b:81:49:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Sep 21 05:00:47 2026 GMT Not After : Sep 22 05:00:47 2026 GMT Subject: CN=2e071f2e27034e819c6e56e9986ab143ce903878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:05:d8:f4:94:0b:1c:26:de:30:89:d8:8b:59: 8c:66:38:ed:35:9a:c1:66:ce:0d:bf:27:8a:9b:37: af:ad:3a:4a:73:05:19:07:58:dc:ea:f4:a9:c7:97: c5:d3:bd:72:66:66:e5:50:25:fe:22:ca:65:58:36: a5:26:03:df:f0:3f:1a:e6:16:00:cf:8b:01:16:76: 8f:0d:90:f0:47:c2:6e:cc:14:89:21:20:0f:ba:a2: ca:93:39:f4:13:bb:fa:ac:9c:2b:87:77:9b:96:22: c6:bc:17:39:ee:29:13:71:44:7e:90:e8:06:15:f8: 91:be:c1:05:e9:a3:35:dd:0e:a7:60:51:61:d2:4f: a7:ba:6a:16:44:57:67:f2:4a:f8:3b:44:3c:7c:ea: d1:d7:73:7d:81:0f:ba:3b:af:d2:97:11:60:1a:46: ca:f5:86:cc:8f:6d:77:1c:fe:2c:a8:24:61:36:72: 41:61:41:db:aa:9f:07:f0:ba:55:7a:28:a8:31:65: 68:58:80:52:8f:c1:37:ed:29:e3:81:85:aa:56:31: 7d:27:4c:e8:a8:af:28:21:7a:8b:82:14:76:1f:44: 6f:95:09:1a:59:6d:c9:c8:3a:91:81:9d:b7:c3:49: 60:a3:55:d4:05:65:68:f6:8b:9e:07:f0:6f:f1:b4: b7:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:07:1F:2E:27:03:4E:81:9C:6E:56:E9:98:6A:B1:43:CE:90:38:78 X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:01:9a:85:a4:5e:b5:b0:bc:9a:d9:bb:8c:a2:d8:d1:65:54: 21:0d:b0:47:9e:a3:8a:d0:0d:e8:46:06:de:fb:d9:ac:28:2f: 4a:c3:41:4d:14:64:cd:ff:99:c8:e5:8a:41:21:61:13:d5:6f: 95:68:75:59:b6:d3:1e:85:18:97:da:81:79:e6:9e:d3:9f:3d: e1:e9:a4:56:39:32:e6:cb:80:a0:ce:82:d3:4a:7b:a3:5b:a5: ad:e1:99:80:bd:cf:13:d5:8a:61:18:c2:31:fb:f0:54:c3:77: d5:c3:d3:49:69:a5:8b:da:32:cd:da:08:fb:4e:dc:82:09:c4: 50:82:31:c6:ff:52:12:c0:f6:92:96:c3:f2:13:1d:35:75:0c: d4:e7:63:d4:be:ba:82:1e:bc:6f:3c:a4:96:3f:5b:fd:e3:23: 0a:e7:e4:c1:e7:d8:d9:d8:d1:be:4f:b6:5d:04:af:a0:65:40: ac:24:05:2d:b4:2e:e1:c0:7f:ed:ac:df:bd:cd:3e:d4:f1:f8: 5e:61:59:66:d7:54:94:7a:e6:c3:5d:c1:89:93:f9:65:a4:28: 35:44:75:48:b9:76:6c:aa:d1:ca:3a:0c:51:f7:b4:53:a0:2a: f6:19:f3:b5:32:28:28:de:ee:1a:97:5b:41:7b:3b:bf:b4:6a: e1:c1:dc:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCVo/KfX/ZXLErWHF7gUniMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwOTIxMDUwMDQ3WhcNMjYwOTIyMDUwMDQ3WjAzMTEwLwYDVQQD EygyZTA3MWYyZTI3MDM0ZTgxOWM2ZTU2ZTk5ODZhYjE0M2NlOTAzODc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwXY9JQLHCbeMInYi1mMZjjtNZrB Zs4NvyeKmzevrTpKcwUZB1jc6vSpx5fF071yZmblUCX+IsplWDalJgPf8D8a5hYA z4sBFnaPDZDwR8JuzBSJISAPuqLKkzn0E7v6rJwrh3ebliLGvBc57ikTcUR+kOgG FfiRvsEF6aM13Q6nYFFh0k+numoWRFdn8kr4O0Q8fOrR13N9gQ+6O6/SlxFgGkbK 9YbMj213HP4sqCRhNnJBYUHbqp8H8LpVeiioMWVoWIBSj8E37SnjgYWqVjF9J0zo qK8oIXqLghR2H0RvlQkaWW3JyDqRgZ23w0lgo1XUBWVo9oueB/Bv8bS3ZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC4HHy4nA06BnG5W6ZhqsUPOkDh4MB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvgGahaRe tbC8mtm7jKLY0WVUIQ2wR56jitAN6EYG3vvZrCgvSsNBTRRkzf+ZyOWKQSFhE9Vv lWh1WbbTHoUYl9qBeeae05894emkVjky5suAoM6C00p7o1ulreGZgL3PE9WKYRjC MfvwVMN31cPTSWmli9oyzdoI+07cggnEUIIxxv9SEsD2kpbD8hMdNXUM1Odj1L66 gh68bzyklj9b/eMjCufkwefY2djRvk+2XQSvoGVArCQFLbQu4cB/7azfvc0+1PH4 XmFZZtdUlHrmw13BiZP5ZaQoNUR1SLl2bKrRyjoMUfe0U6Aq9hnztTIoKN7uGpdb QXs7v7Rq4cHcbA== -----END CERTIFICATE-----Generated at Mon Sep 21 15:35:05 2026 by rpki-client