$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft File: e5RH_ppKzH1v9y1seY1D1mzVDD8.mft (raw, json) Hash identifier: NfyEOiqkGHnE1RzZ9AfHrWmbGEpyZLcRbX72aD7AKjE= Subject key identifier: A3:EB:99:77:33:8B:CF:FD:6C:C7:8B:82:00:D1:91:44:29:22:F2:8F Authority key identifier: 7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F Certificate issuer: /CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Certificate serial: 01A0C2C46DDF7C258609B39EBC2CD2729E36 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft Manifest number: 05AF Signing time: Mon 21 Sep 2026 07:00:48 +0000 Manifest this update: Mon 21 Sep 2026 07:00:48 +0000 Manifest next update: Tue 22 Sep 2026 07:00:48 +0000 Files and hashes: 1: 3WwCnnTd8cSzdKjbYhNI8g53NPE.roa (hash: aIhbguXWgQO1tJI+20Jt3xw4Dn8zy1ZDD/ntTtEtp2c=) 2: 4kwKLdh3RM_T2CHdwfr7djNqFPw.roa (hash: fMhCuCyOrPdsWFDfGoHBSeCFarYrpqQUzcCOvftK41o=) 3: 5aspwc_EZRXz1DI0gfzYlq249Jw.roa (hash: z9a5ybEJbOBjedVWskB8FQIQDP7WVIXqlcDq4xwBtUE=) 4: FwV9_soW4dQWq_CwmZwM9y_Yg24.roa (hash: xPzL9Tf4VzlH+kYxMAxG9MOUeYhbFQVm/oBhO2qB2hw=) 5: KFPTzEg4Y0L6aJGjreTB0eGWtcY.roa (hash: 8tieHB2/IwsPF3XmJYABOmkTWjKNGkzX0/aPiwcDseA=) 6: KvNF-GNwZ3nupnOa4r1l2jy1zCI.roa (hash: atOFPKEzfFHxFdsBH5bVAxThEg5GX7FYolGtUJKktyc=) 7: M5z_FJkpC3bqs6y8rNLlO6L7mt4.roa (hash: pnzeAaisjISO2SuVi7e+PqwovvETfQV3LOc/UO86oM4=) 8: RFitIfzbelUgTTUVvMm_6P7Qua4.roa (hash: k1QiINtX4yKyCSBsMvwbViWzQ/ACbhcMG/vPDPVXV8c=) 9: S1JnSXKRylQf_Uh5rIFy-LkjUjc.roa (hash: vNnVXt5NopYDCqipg2PS3dWJG6ySbA9t5QTX1gIkUow=) 10: VaLOykeeFU8I2YIJdyOEx8ZVuUc.roa (hash: kAYhfT6Miw9r4z05yf2O6XBU1ToH3EWuwwXPo6D2N2A=) 11: X6gkbQD7XKjlpDCPmtrSBjhNhNY.roa (hash: J9AA0VeAPAZJB/+l+EvDES1QGP6dLWqo5ps91vAe5bc=) 12: bY71skCcBRy3_7E1b-YloIxj3EI.roa (hash: wz4302B/D0gTMZmb2I2/ICofgsbTDyh3vJJUmvhGTb4=) 13: dIdr6CdHDFmEHdvXrAfl7icIYxY.roa (hash: WfzmExFAW5iLs+d61FaP+J5J9DI0CoXqdTMcrCDFzqo=) 14: e5RH_ppKzH1v9y1seY1D1mzVDD8.crl (hash: Pdv6VgpSVjP8XS9GZf3BXW8DT6HwQUosGZwqAx9XB+k=) 15: hgcz_S5xSTbLKn2JgFiffzoE0Lc.roa (hash: DEovq/0Otm5xzo+ikKL6F1zlfXWLyId8aTGFI9Mt6iE=) 16: lwr4ujjVRZ9lTT6n38RaTmGl6zA.roa (hash: 0muOjArSKM5mL3HgrEoutlOx4J3NtUU/jA3sEiadzN8=) 17: oaPiDgiUp4N6eHimpviCBvIRiXs.roa (hash: gi5GPHcvQqzHHbSUnrSphPBhz1cqoAOg4ko/yRoF0WM=) 18: w0LVoZ_uYiC7toDXnKtxvHDd4Jo.roa (hash: 6prvU2oZ/9BgwQzBcdZM3Omry4kQSL9zaJJkXMdKxqU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 07:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:c4:6d:df:7c:25:86:09:b3:9e:bc:2c:d2:72:9e:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7b9447fe9a4acc7d6ff72d6c798d43d66cd50c3f Validity Not Before: Sep 21 07:00:48 2026 GMT Not After : Sep 22 07:00:48 2026 GMT Subject: CN=a3eb9977338bcffd6cc78b8200d191442922f28f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:65:dd:79:9a:0e:a4:8c:41:d2:42:69:bf:6c: 3b:f6:e0:94:e7:38:e6:06:99:03:05:60:e5:73:63: 2d:df:b0:b8:aa:76:8c:db:73:0d:76:a8:9c:21:30: 0d:83:0f:a8:b3:85:bc:22:3c:8d:21:11:fb:b6:40: 5c:87:39:1f:d9:40:70:06:c6:f4:24:e4:72:f3:c3: 02:39:2f:e1:e8:61:39:92:47:a2:e6:9d:1f:2b:69: ba:4c:d0:f0:0c:28:89:97:fc:8f:95:66:6b:f8:9a: d3:f4:eb:e9:f0:56:19:28:c0:1e:01:eb:c4:79:94: d0:3e:2a:d4:dd:b9:b1:dd:b3:00:f6:57:f8:e0:28: cc:b1:6a:a0:24:4c:c7:20:04:e8:d0:84:ae:7c:6a: c7:21:a7:46:5d:52:69:0e:6e:20:74:4f:e0:a8:31: e6:ae:08:d1:96:19:2f:95:65:8f:ee:26:c1:c1:9e: 54:9c:56:8e:dc:a3:40:64:2d:4b:3f:43:5f:80:c6: 56:f6:f5:a5:42:a7:cb:76:38:5c:06:9d:a5:16:96: ee:9c:d2:5a:3b:06:84:b8:98:1a:6c:e0:af:05:6d: f4:d0:39:aa:5f:5f:74:7b:53:fa:db:1b:df:f2:c3: 2b:9c:74:86:93:7e:60:95:2e:1e:37:76:08:61:44: 55:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EB:99:77:33:8B:CF:FD:6C:C7:8B:82:00:D1:91:44:29:22:F2:8F X509v3 Authority Key Identifier: keyid:7B:94:47:FE:9A:4A:CC:7D:6F:F7:2D:6C:79:8D:43:D6:6C:D5:0C:3F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5RH_ppKzH1v9y1seY1D1mzVDD8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/ac24df-09d6-4457-9d2e-9fceb45d6fdb/1/e5RH_ppKzH1v9y1seY1D1mzVDD8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:d4:31:bf:d5:be:d8:82:a5:ed:1c:33:a0:8d:c7:7a:11:d4: e7:f3:c4:5a:bc:e2:bc:a7:f3:55:ea:2c:e7:43:df:39:99:d1: e0:ec:a1:36:8a:21:0f:23:cb:79:9d:23:c9:cc:83:51:e2:12: b4:5f:3e:60:8a:4d:7e:92:a1:9a:e3:1a:a6:e1:50:4e:71:e5: 8e:85:10:b1:44:9c:75:d6:f0:5d:88:39:3a:58:5a:a3:9a:5e: f3:69:a3:08:12:95:b7:5f:ef:e6:06:20:94:25:27:96:b0:d7: 5d:f7:7f:f0:c2:fb:8d:b2:75:af:eb:6f:44:bc:1e:9b:c1:c5: 20:71:76:bf:dd:68:9b:e7:30:b1:3b:4a:98:dd:70:30:51:17: 21:65:23:3c:12:fe:71:1e:c4:67:e0:16:37:18:53:f1:71:89: 77:4c:68:f0:34:55:35:6e:6f:65:f1:8c:a8:f8:78:43:a8:ea: 11:d3:4d:7d:fb:f6:a8:b3:a7:79:d8:c8:d9:60:a6:7e:35:58: 8b:85:d3:1d:f3:da:d4:d5:b8:aa:e2:35:d4:ba:f2:cc:f6:79: ce:d0:58:94:f7:36:87:b6:1a:83:12:27:b6:a1:d2:34:bc:54: aa:57:a5:16:2e:9c:22:02:64:1e:1c:da:75:0e:93:25:b7:bc: fb:d3:d1:d4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCxG3ffCWGCbOevCzScp42MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdiOTQ0N2ZlOWE0YWNjN2Q2ZmY3MmQ2Yzc5OGQ0M2Q2NmNk NTBjM2YwHhcNMjYwOTIxMDcwMDQ4WhcNMjYwOTIyMDcwMDQ4WjAzMTEwLwYDVQQD EyhhM2ViOTk3NzMzOGJjZmZkNmNjNzhiODIwMGQxOTE0NDI5MjJmMjhmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+GXdeZoOpIxB0kJpv2w79uCU5zjm BpkDBWDlc2Mt37C4qnaM23MNdqicITANgw+os4W8IjyNIRH7tkBchzkf2UBwBsb0 JORy88MCOS/h6GE5kkei5p0fK2m6TNDwDCiJl/yPlWZr+JrT9Ovp8FYZKMAeAevE eZTQPirU3bmx3bMA9lf44CjMsWqgJEzHIATo0ISufGrHIadGXVJpDm4gdE/gqDHm rgjRlhkvlWWP7ibBwZ5UnFaO3KNAZC1LP0NfgMZW9vWlQqfLdjhcBp2lFpbunNJa OwaEuJgabOCvBW300DmqX190e1P62xvf8sMrnHSGk35glS4eN3YIYURV1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKPrmXczi8/9bMeLggDRkUQpIvKPMB8GA1UdIwQY MBaAFHuUR/6aSsx9b/ctbHmNQ9Zs1Qw/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUt OWZjZWI0NWQ2ZmRiLzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMy9hYzI0ZGYtMDlkNi00NDU3LTlkMmUtOWZjZWI0NWQ2ZmRi LzEvZTVSSF9wcEt6SDF2OXkxc2VZMUQxbXpWREQ4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoNQxv9W+ 2IKl7RwzoI3HehHU5/PEWrzivKfzVeos50PfOZnR4OyhNoohDyPLeZ0jycyDUeIS tF8+YIpNfpKhmuMapuFQTnHljoUQsUScddbwXYg5Olhao5pe82mjCBKVt1/v5gYg lCUnlrDXXfd/8ML7jbJ1r+tvRLwem8HFIHF2v91om+cwsTtKmN1wMFEXIWUjPBL+ cR7EZ+AWNxhT8XGJd0xo8DRVNW5vZfGMqPh4Q6jqEdNNffv2qLOnedjI2WCmfjVY i4XTHfPa1NW4quI11LryzPZ5ztBYlPc2h7YagxIntqHSNLxUqlelFi6cIgJkHhza dQ6TJbe8+9PR1A== -----END CERTIFICATE-----Generated at Mon Sep 21 19:48:36 2026 by rpki-client