$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: Jat0q83IFPYmmuymsHUXMxS98ToJs3LJ78Ah8RkSbF4= Subject key identifier: 1C:4A:9A:69:0D:A4:A1:9F:71:EC:43:5C:18:74:10:AF:00:D0:2F:16 Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 01A0BFC2D28CCA2E967AB8198EB2B888701D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 1727 Signing time: Sun 20 Sep 2026 17:00:11 +0000 Manifest this update: Sun 20 Sep 2026 17:00:11 +0000 Manifest next update: Mon 21 Sep 2026 17:00:11 +0000 Files and hashes: 1: 1-0M2Obo2Q8e967SGkmQDEfXZayM.roa (hash: fDXFZQjR8P2lB0fAkk+7Ytji6EhqtxGESPHwfw5J/OQ=) 2: 9KmD2QWCWBlnwQGlpEbIoP4V2l8.roa (hash: tmNVZ8FS/BqbujEOEGH/IyBGDDmBs9A8TZDITWSm8kc=) 3: Cc0WT5EG6n9oDAQd6h8lVsf8JaQ.roa (hash: Eb0kwzwy039z3kdPuDAhVSjmubzFKvvOj2jQKrMMEP8=) 4: TELMN1j3BWZ-Y7ZZjfQBqUpiQng.roa (hash: md2tirz0mP2OIU0FtRsAw71+7MT16uq7hTVoqxoBwJg=) 5: XtYBo7scN26cbmzcEVBSKA0js4k.roa (hash: V1uChYYVpkx2xi1qTYcQbi6Z/gGYxugEuQ9a8AaoEE4=) 6: ZFC2U3uQIhdNpB72KbpGlziRc2o.roa (hash: z5uebA6QMfVds8/qjjHA8y0xgv3fGyNQU+YomK8H6Hs=) 7: ZiR6ZrA3XKmOMdSYn1nbkvoJfuc.roa (hash: H0dHPUEpABR63APcnlQrAzJqRe+rMqjbSQQKwlGf7xo=) 8: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: IojiOAgsJsfQo67OsL9sFbj1lMO6tzu+dUGQcJJvSd4=) 9: fW8PLqV6_vNiTwM0XlvAZ0oPEog.roa (hash: Ylr0PAtkX4RnnqQhXO7hSlCB/mcGM2aeVz/spIqCG+s=) 10: lWg7vkHZKoUTr9NcDvXsJHiO9NI.roa (hash: hnXLBiYzcA6j2q9gin73kUQrdgupmbTcJczhf1x1FMQ=) 11: nGzzJL4Yv_aQObEQUHJtbYnCiVQ.roa (hash: NjUVAsdLKWryk+3mwcD6964vU7goGX2Nf5HmoKEaetY=) 12: q2PFrb86M-sx3oGt2HPK3a2tuMo.roa (hash: dRMMjShGGPzyUsWgtJ/udfTIxmOFqTOi+aPEPCOEsA8=) 13: sflx_C0NTLGDBGXbovVvVoJubd0.roa (hash: 6zPtQTreVgkFM6C6TvdscESKrFS1e5qwp4OWXjvVi+A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 17:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:c2:d2:8c:ca:2e:96:7a:b8:19:8e:b2:b8:88:70:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: Sep 20 17:00:11 2026 GMT Not After : Sep 21 17:00:11 2026 GMT Subject: CN=1c4a9a690da4a19f71ec435c187410af00d02f16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:dd:e1:b8:e2:f5:99:39:44:77:67:46:24:20: 78:77:9b:ce:ea:d8:79:bb:4e:dd:71:cc:32:25:ec: d2:01:38:1d:16:82:f7:52:59:c2:1a:68:d0:6d:4d: b6:55:cc:1b:f6:7b:35:0d:42:f1:2c:86:4a:fe:7e: 88:af:50:68:32:3a:ba:a9:bb:78:93:dc:3a:e9:48: 3f:76:ee:9a:e7:a2:53:d4:66:d0:d6:ba:b6:f6:4b: e3:82:23:ab:5b:8d:e0:85:fd:a9:fa:0a:69:a0:69: 73:3d:85:d8:fe:2e:1b:5e:4b:0b:fe:3d:b8:21:47: e1:aa:bb:9a:22:bd:05:92:b8:97:32:1b:18:d9:f4: 32:22:0b:6b:e2:51:66:75:cd:78:ba:f5:96:f8:44: 5d:1e:e8:c4:b9:47:fc:b9:8e:5e:15:2e:1b:0e:37: 90:f2:46:d0:db:e6:cb:23:e7:e6:10:bc:fe:5b:f3: 2a:bb:80:ed:93:ea:3e:2d:9e:04:a2:7f:37:70:a5: eb:23:54:46:11:e0:3b:cd:55:d4:d8:a0:ff:4c:c6: c9:91:37:64:77:1e:65:9c:fa:29:d9:d2:25:f0:74: 68:ee:fe:8f:31:fb:7e:36:a2:74:c8:bb:cb:42:85: 28:b4:27:55:ce:fb:b4:66:27:7a:ee:1f:df:71:5a: 7c:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:4A:9A:69:0D:A4:A1:9F:71:EC:43:5C:18:74:10:AF:00:D0:2F:16 X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:04:36:8b:b2:21:08:64:67:09:e7:5b:7a:ed:a0:ea:c9:d9: 5b:eb:a4:1e:f7:df:5b:39:19:8f:71:4e:cb:b5:a5:f4:4c:de: 0f:56:39:85:c0:ce:4e:14:81:d9:f2:bf:b6:52:98:5d:a8:fb: e7:5e:b9:28:45:88:9e:c9:95:af:3d:64:82:8b:a7:de:66:67: 74:8f:ea:c4:43:5b:9b:1f:35:85:4a:84:4d:46:1c:5c:5a:e9: 1e:bc:2a:a8:65:b9:2e:ba:67:b4:20:b2:6f:e3:94:ee:81:e1: 52:f3:08:e7:84:94:76:f0:b0:7e:c9:bb:1e:50:55:ee:58:fc: 60:e5:6d:57:43:d2:55:4d:1e:15:29:9b:d0:85:da:e2:ee:49: 1c:f9:81:e4:f3:81:69:0d:1a:0b:f0:39:b6:58:37:51:fd:fc: d5:99:0a:ea:33:53:23:8b:05:18:a8:68:be:60:66:96:44:ea: ba:27:61:9c:ed:d2:8c:47:19:13:a2:55:54:e6:32:0b:19:07: 7b:c6:31:92:2e:a9:46:9e:8b:34:d1:09:87:90:2d:54:0f:ee: d7:47:95:90:cc:90:20:67:cc:b2:66:cb:1e:d3:35:8f:94:1d: 5d:6d:24:66:e5:ac:7b:31:5a:6a:fd:08:77:d5:2e:6e:a4:b2: 4b:e2:65:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/wtKMyi6WergZjrK4iHAdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjYwOTIwMTcwMDExWhcNMjYwOTIxMTcwMDExWjAzMTEwLwYDVQQD EygxYzRhOWE2OTBkYTRhMTlmNzFlYzQzNWMxODc0MTBhZjAwZDAyZjE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd3huOL1mTlEd2dGJCB4d5vO6th5 u07dccwyJezSATgdFoL3UlnCGmjQbU22Vcwb9ns1DULxLIZK/n6Ir1BoMjq6qbt4 k9w66Ug/du6a56JT1GbQ1rq29kvjgiOrW43ghf2p+gppoGlzPYXY/i4bXksL/j24 IUfhqruaIr0FkriXMhsY2fQyIgtr4lFmdc14uvWW+ERdHujEuUf8uY5eFS4bDjeQ 8kbQ2+bLI+fmELz+W/Mqu4Dtk+o+LZ4Eon83cKXrI1RGEeA7zVXU2KD/TMbJkTdk dx5lnPop2dIl8HRo7v6PMft+NqJ0yLvLQoUotCdVzvu0Zid67h/fcVp8MQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBxKmmkNpKGfcexDXBh0EK8A0C8WMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAowQ2i7Ih CGRnCedbeu2g6snZW+ukHvffWzkZj3FOy7Wl9EzeD1Y5hcDOThSB2fK/tlKYXaj7 5165KEWInsmVrz1kgoun3mZndI/qxENbmx81hUqETUYcXFrpHrwqqGW5LrpntCCy b+OU7oHhUvMI54SUdvCwfsm7HlBV7lj8YOVtV0PSVU0eFSmb0IXa4u5JHPmB5POB aQ0aC/A5tlg3Uf381ZkK6jNTI4sFGKhovmBmlkTquidhnO3SjEcZE6JVVOYyCxkH e8Yxki6pRp6LNNEJh5AtVA/u10eVkMyQIGfMsmbLHtM1j5QdXW0kZuWsezFaav0I d9UubqSyS+JlAw== -----END CERTIFICATE-----Generated at Mon Sep 21 03:34:46 2026 by rpki-client