$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: Ks1kIdlMM3BeeaG2jj+eUsWlPelDGJKz2v8y548B6GI= Subject key identifier: F3:F2:D2:D6:59:6C:52:A0:63:9F:3A:DA:EF:5C:A8:81:A7:D5:2E:99 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 01A0C58E16337D389732AB8A318904264D11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0F69 Signing time: Mon 21 Sep 2026 20:00:18 +0000 Manifest this update: Mon 21 Sep 2026 20:00:18 +0000 Manifest next update: Tue 22 Sep 2026 20:00:18 +0000 Files and hashes: 1: 1BUsNPvxh-nEaW12HiIotyTOmeE.roa (hash: Eb+LrSVeh6nCpX6RDLUkP/OBvISRkTfhNDgbqOiV4vY=) 2: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: hGt64srpHucP1NZAUKjlKQu7x+Ai46YCeQ/C9oki6v4=) 3: ARSSC9zHIGL8uPCTzOB-i0uK97g.roa (hash: xCWcyeUZ+Gey9KypecDF2UwLJVOuDsCEWO1xuzT51Jc=) 4: DNw48YVZHSvMBEUuvya7j6ydIIE.roa (hash: GQAHxbg19rDLpPVxP7BsuOIaocVhRmeV7czR8XW3KEM=) 5: Hc1-eWA2FbYrQtAUjfotRVnvebo.roa (hash: +wyBxaU8SXxYP9llfsxrS9RJyhJbGb3UqzpK5s4+GG4=) 6: SkR9OA9_dcUyBRQNQpyR0J3fL7U.roa (hash: ZkaVuswuFGESnBKz9fl3MI+QLEQQbxe2PSzXDPH+HoU=) 7: Yi680tyzJGfIAumOzsiKpDqyZ-g.roa (hash: k3JeaICryRPO3kOoypJyQPVZrn3TdIMe/T4lvOZb9yo=) 8: _Mqv_JYiF8FH_vcrUd6z5iBTnaA.roa (hash: wgYSTyAlZdDyfFsa4EFJ55y+CMO3Ta5R634E3wfbtNM=) 9: fJW7EYfD-50gKtZxv7Uhc3IrH24.roa (hash: w436OnY6qjYWmprn/yHiq2hzXNy8k69Hv/EWXbmw8n0=) 10: kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa (hash: CrMe+KpHmjRar77RkffCDnmY1XQPJsNcEG8vS6cPsZI=) 11: mFW4zADWbotzoU0wzEidrSWH-UQ.roa (hash: v8M/uk7P0Ux+9wY32sSP1YJp6v/XbIvApRLKBpQlUaU=) 12: o0J93e2ynPAO_ooBBrsbWpkJmVk.roa (hash: 9+ceM91NO20zNjq2ssN5ZXrUJuK961JXQqmxnpqcpFM=) 13: qIXOSdQAmM-9W59tIvFrjCOacag.roa (hash: t9/LH8Ao84MhMXwBIeg/CGYXSM84XUqQW9CXizDPd2g=) 14: scmHvFPvVyV9IKgskiPXIFZZliA.roa (hash: x+i//mSRz34wAqe4SEf89qg0Z8YDvymsxjLahBkl1LM=) 15: tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa (hash: Ptc+FGC+cpAZyzLKTVYPy89IR+7KjxXcG3j40Vai/9Y=) 16: uNRa4zAzcrZDnOveV1CME0I3J4w.roa (hash: OR0NOoULuJszdvy9CmwD+cwSKbUxjzkFUFY9AzTSQAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 14:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:8e:16:33:7d:38:97:32:ab:8a:31:89:04:26:4d:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Sep 21 20:00:18 2026 GMT Not After : Sep 22 20:00:18 2026 GMT Subject: CN=f3f2d2d6596c52a0639f3adaef5ca881a7d52e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:eb:e7:e9:b6:8e:ae:ff:d4:b6:76:fa:58:58: 04:e5:30:ee:1e:bb:0d:51:66:aa:4a:28:d8:51:03: 4f:61:32:1c:9d:b6:82:64:b0:84:c9:e0:ec:2d:36: 21:2a:51:85:8c:db:c6:5f:78:6d:ba:8c:61:16:69: dc:91:e6:33:da:1e:22:40:94:76:fa:b8:b5:4a:34: 26:da:d7:eb:45:6f:92:18:81:f5:a5:90:48:87:7b: 8e:06:5f:b4:a1:c0:ab:9a:59:06:58:06:8f:74:a4: 5b:70:79:e2:ab:3a:87:6d:54:e2:dc:16:ac:ec:78: 22:4f:af:cb:2b:54:92:65:45:a6:42:d5:61:18:5a: ca:74:4e:c9:59:3c:c5:f2:0d:0f:a5:26:17:56:78: 52:12:7d:bc:58:85:7d:9a:6b:ae:3e:e6:3e:36:75: 47:26:56:42:6b:8e:7b:aa:f2:b8:6e:a1:51:d9:31: 5a:86:2d:ea:fe:4d:ca:c7:ad:16:44:86:a2:22:eb: 70:77:06:5c:1e:b1:5d:43:5e:8b:ed:f1:d3:72:09: 06:20:d3:5e:28:b9:a7:19:a2:df:c0:ee:6a:e6:2b: b7:e0:1b:0d:6a:c7:89:ed:d2:2e:06:1b:2e:35:94: 1b:98:4f:c2:fe:1e:75:2b:bd:f6:ab:31:0b:26:4e: a8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:F2:D2:D6:59:6C:52:A0:63:9F:3A:DA:EF:5C:A8:81:A7:D5:2E:99 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:59:f1:5d:e1:14:8f:c0:8a:c4:a3:6d:f7:7e:09:9d:c2:e8: 96:23:cd:97:db:ae:cc:31:01:60:1c:b3:b4:82:76:34:ff:12: fc:1a:05:1b:e8:b9:73:85:d8:8b:a9:a7:48:35:fa:44:ed:3f: 0e:a8:2f:4e:cc:04:77:a1:2e:5d:a4:d4:b3:0e:94:cc:6e:96: d1:af:4e:38:5b:30:b0:07:e1:d9:48:86:43:be:77:35:44:ab: 54:78:d2:0a:6f:24:43:e4:02:e3:14:16:42:f6:62:32:7e:90: 3c:b3:e6:44:b0:3b:06:69:10:66:65:5f:f4:67:c3:63:ef:1f: 28:c0:7e:91:6d:d2:c0:95:3b:c9:16:04:e0:fb:00:d8:15:ee: c0:c1:fd:e8:5d:6a:68:59:ee:6d:38:0d:a3:4f:1b:26:20:54: 8e:f2:e2:7a:91:a8:3f:cf:b5:9c:31:43:84:06:86:41:7d:3d: 92:49:fd:cd:33:aa:f4:e7:69:cf:7b:50:41:a2:78:be:6f:ec: 51:e7:39:44:4c:64:6b:6c:f7:1e:91:7c:7d:de:7d:9b:20:78: b7:7d:fc:51:de:bf:7e:ab:bc:65:e6:cf:ba:0e:ca:bf:3f:8f: d2:10:7b:86:e0:7f:2a:0f:09:77:7b:11:9a:21:9e:73:b9:71: e7:99:77:ef -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFjhYzfTiXMquKMYkEJk0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYwOTIxMjAwMDE4WhcNMjYwOTIyMjAwMDE4WjAzMTEwLwYDVQQD EyhmM2YyZDJkNjU5NmM1MmEwNjM5ZjNhZGFlZjVjYTg4MWE3ZDUyZTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+vn6baOrv/Utnb6WFgE5TDuHrsN UWaqSijYUQNPYTIcnbaCZLCEyeDsLTYhKlGFjNvGX3htuoxhFmnckeYz2h4iQJR2 +ri1SjQm2tfrRW+SGIH1pZBIh3uOBl+0ocCrmlkGWAaPdKRbcHniqzqHbVTi3Bas 7HgiT6/LK1SSZUWmQtVhGFrKdE7JWTzF8g0PpSYXVnhSEn28WIV9mmuuPuY+NnVH JlZCa457qvK4bqFR2TFahi3q/k3Kx60WRIaiIutwdwZcHrFdQ16L7fHTcgkGINNe KLmnGaLfwO5q5iu34BsNaseJ7dIuBhsuNZQbmE/C/h51K732qzELJk6oJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPPy0tZZbFKgY5862u9cqIGn1S6ZMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtFnxXeEU j8CKxKNt934JncLoliPNl9uuzDEBYByztIJ2NP8S/BoFG+i5c4XYi6mnSDX6RO0/ DqgvTswEd6EuXaTUsw6UzG6W0a9OOFswsAfh2UiGQ753NUSrVHjSCm8kQ+QC4xQW QvZiMn6QPLPmRLA7BmkQZmVf9GfDY+8fKMB+kW3SwJU7yRYE4PsA2BXuwMH96F1q aFnubTgNo08bJiBUjvLiepGoP8+1nDFDhAaGQX09kkn9zTOq9Odpz3tQQaJ4vm/s Uec5RExka2z3HpF8fd59myB4t338Ud6/fqu8ZebPug7Kvz+P0hB7huB/Kg8Jd3sR miGec7lx55l37w== -----END CERTIFICATE-----Generated at Tue Sep 22 00:19:16 2026 by rpki-client