$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: pYU1g9ONxr09x+RNHWj5pm3koty/D/30HEMGt+eo0GY= Subject key identifier: F0:4C:E2:A4:73:1B:11:93:9F:24:42:21:EC:7A:15:82:CE:A1:91:19 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 01A0D048DBF092419FA5FA364F4C74172056 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0E21 Signing time: Wed 23 Sep 2026 22:00:30 +0000 Manifest this update: Wed 23 Sep 2026 22:00:30 +0000 Manifest next update: Thu 24 Sep 2026 22:00:30 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: WqL3yV21a1eMidtByPnyshI9zjbQ4DhIs9GFX2DHnoc=) 9: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 10: aV15c49lSGl3dteQSHc3IvNZ2Yw.roa (hash: idSDFzUORIOI2C3DdmyZjUWIVKrr2rvoia+URiMKZUk=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 14: jdhRRSqw1KV-OBkZuUAJ-tCWDik.roa (hash: PZnlHT69L4VcU/X0HEwE+Wn3yCWoZ+g03Z4fHifOKPg=) 15: ta9QPHmvElN9LQbU3Ml0S8yt9cs.roa (hash: pWwk3bYPZv/2DLVIuX6tB76kOFRVtUjaqBNqlUqnu+g=) 16: wea1j7CCiOwKhbp9xRs9xEsak8o.roa (hash: hckz/qMoMAZzO9HmBfzADkSbkz16uEss9Ro4N3hyVDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:48:db:f0:92:41:9f:a5:fa:36:4f:4c:74:17:20:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Sep 23 22:00:30 2026 GMT Not After : Sep 24 22:00:30 2026 GMT Subject: CN=f04ce2a4731b11939f244221ec7a1582cea19119 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5e:b6:ca:42:96:82:b5:32:95:01:f8:60:62: 92:e8:30:31:e3:53:7a:21:3d:6e:28:29:82:38:01: 76:24:12:be:bf:f7:0e:f8:b8:46:da:8c:9f:75:b1: 53:c6:be:39:f2:c2:87:20:c2:93:98:39:a7:09:5a: 47:41:7d:17:82:43:ed:f2:c5:3d:67:38:87:65:16: a4:42:d4:37:ce:4f:d6:dc:85:b3:69:a2:04:3f:c7: 1c:41:0d:b1:0f:97:54:59:1b:b1:c3:3b:04:26:3d: 77:6e:7b:28:1e:d0:c3:11:7a:c2:70:85:ff:ae:34: 4b:1c:9a:35:7c:50:ca:4a:38:ee:82:17:76:5c:3d: 2e:a0:14:3a:e4:f1:6a:b7:ac:c8:ec:91:74:df:49: 72:28:35:af:48:ca:46:ef:be:12:77:af:c7:2e:39: 0a:f6:a2:a3:41:e9:e4:38:7a:48:bc:0e:c3:cf:43: 08:ab:d4:c9:46:c5:ac:f8:e1:b9:82:ca:88:3d:11: 47:96:20:7b:b1:d5:71:03:ff:d7:33:fe:0d:61:af: 5e:59:e3:a1:d8:6b:8a:a9:85:bb:ff:03:6e:38:fd: 5b:98:47:27:ff:03:ff:b5:0b:45:6d:5e:bd:a7:3d: 9d:b0:4d:94:78:0a:bb:92:96:9d:61:1b:02:dd:ac: 6b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:4C:E2:A4:73:1B:11:93:9F:24:42:21:EC:7A:15:82:CE:A1:91:19 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:17:6c:72:53:49:9c:79:6b:a9:f3:ff:83:16:9b:44:d9:13: 89:d6:4c:5c:2c:df:5b:b0:79:82:84:8d:0b:be:91:87:6d:26: 90:b3:a3:bc:9f:6a:43:ff:0f:6a:30:ae:b5:47:8c:45:12:ef: ac:aa:e9:25:d7:0f:2d:87:f3:98:7e:2d:1d:95:b0:94:a7:4f: 56:0d:db:9c:48:50:08:ee:c8:c5:47:35:91:e8:64:c7:1f:50: cf:a9:68:ad:90:15:ae:5a:16:fd:4b:d9:7a:14:a4:97:39:b6: 7a:6b:86:35:a0:7c:7d:7c:f4:c6:b2:4e:7c:bd:dd:86:a9:0c: 89:34:93:77:a0:6a:80:30:b0:a8:b5:7a:3a:8e:8b:2d:c2:67: 30:d6:14:16:96:17:07:ce:34:f6:ab:0a:fa:e0:14:92:f4:e7: 5f:3c:bc:f5:ca:b8:be:de:ac:30:9b:40:e3:d7:64:c9:b4:46: 20:5b:e0:a4:7d:92:3e:bc:8b:d5:b1:e7:b5:0d:7d:f1:04:0a: 29:3f:b4:a7:e1:3d:54:03:ca:14:b6:4d:da:a9:a8:96:80:5c: 57:27:a8:61:f4:68:52:cf:41:73:b8:7d:0e:4b:fa:64:96:28: 54:76:37:e4:8d:18:3e:a8:3c:97:8e:a7:9c:4c:ac:91:cb:e5: f8:ed:35:69 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQSNvwkkGfpfo2T0x0FyBWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYwOTIzMjIwMDMwWhcNMjYwOTI0MjIwMDMwWjAzMTEwLwYDVQQD EyhmMDRjZTJhNDczMWIxMTkzOWYyNDQyMjFlYzdhMTU4MmNlYTE5MTE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAul62ykKWgrUylQH4YGKS6DAx41N6 IT1uKCmCOAF2JBK+v/cO+LhG2oyfdbFTxr458sKHIMKTmDmnCVpHQX0XgkPt8sU9 ZziHZRakQtQ3zk/W3IWzaaIEP8ccQQ2xD5dUWRuxwzsEJj13bnsoHtDDEXrCcIX/ rjRLHJo1fFDKSjjughd2XD0uoBQ65PFqt6zI7JF030lyKDWvSMpG774Sd6/HLjkK 9qKjQenkOHpIvA7Dz0MIq9TJRsWs+OG5gsqIPRFHliB7sdVxA//XM/4NYa9eWeOh 2GuKqYW7/wNuOP1bmEcn/wP/tQtFbV69pz2dsE2UeAq7kpadYRsC3axr9QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPBM4qRzGxGTnyRCIex6FYLOoZEZMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThdsclNJ nHlrqfP/gxabRNkTidZMXCzfW7B5goSNC76Rh20mkLOjvJ9qQ/8PajCutUeMRRLv rKrpJdcPLYfzmH4tHZWwlKdPVg3bnEhQCO7IxUc1kehkxx9Qz6lorZAVrloW/UvZ ehSklzm2emuGNaB8fXz0xrJOfL3dhqkMiTSTd6BqgDCwqLV6Oo6LLcJnMNYUFpYX B8409qsK+uAUkvTnXzy89cq4vt6sMJtA49dkybRGIFvgpH2SPryL1bHntQ198QQK KT+0p+E9VAPKFLZN2qmoloBcVyeoYfRoUs9Bc7h9Dkv6ZJYoVHY35I0YPqg8l46n nEyskcvl+O01aQ== -----END CERTIFICATE-----Generated at Thu Sep 24 06:33:02 2026 by rpki-client