$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft File: hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft (raw, json) Hash identifier: o2jMjvGIE2QAlNZ1PjodwMRRFg/negYp+hKUVBzZKZU= Subject key identifier: 69:00:50:49:CF:12:0A:E3:E9:A1:AB:D4:D3:10:91:C0:AB:D2:9D:6D Authority key identifier: 84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 Certificate issuer: /CN=8452b03e1b01709638940d9592983cde77ecab77 Certificate serial: 01A0C5C547C0D0103038640F04E18A437B17 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft Manifest number: 1A77 Signing time: Mon 21 Sep 2026 21:00:35 +0000 Manifest this update: Mon 21 Sep 2026 21:00:35 +0000 Manifest next update: Tue 22 Sep 2026 21:00:35 +0000 Files and hashes: 1: 9XLB2pGNOPbljEVUBZRkKE3gDsg.roa (hash: yFaKRkjlVIE/J3Dt9Swl2M9fjwmRRjL86LSGNcqFa2o=) 2: FllgV1uq3gnfxzgcQ6YncIh4JMQ.roa (hash: xP/yiKvXIB14qyF8rqguFru71C1q8PJ2Qa43mcie0iQ=) 3: Gjz0mygWmIZxLbOtZYh8gSNFZzY.roa (hash: h0qTYnLbIysZ9bLj3Ec2bVq0IWOpYfY2WhPaY9ABSWU=) 4: MZB1UqbipBpVhmhIAAIPCSUm9tE.roa (hash: zYMw6mBm4z/9+C34n4tABKKlDK/AXIGy+SsUTUFBU8w=) 5: TaW1xof2_FS-y1oMd64DHywlLM8.roa (hash: wpTtq6XsXybW5bFqRgDMjejQMJ2CiWnuwczXgfVlZ+M=) 6: fXpzmIEAnbtmNcx0rqptqG5QnQg.roa (hash: 5iU3booTwnLztG+lAWV3dZKWKwiQOKD5sGh5Wy5gwWk=) 7: hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl (hash: tLNAM+/wrvoJkaP94IXuSDzBwmuZ66cOOSSI66f9Y44=) 8: hTBE-AfXHoIR0eXyurn7fldr3Uw.roa (hash: h5l8+NwGnElycHcZimGiomdSgVS5UzfYH7eaKNxeRxk=) 9: mTw_KV9L-hpI5Nu8b0XPe3ZJbgw.roa (hash: HG8VsquQ+FnSEapJw68ywW3TpFwS/T5f8VjxgSgr5P4=) 10: o1g6d4IpK0z2pKch2obiVEvKpo0.roa (hash: ogKpeh7KtOQ7CbX8yF/mDVAEfUbLY6d/B58Q/R7K4YE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:c5:47:c0:d0:10:30:38:64:0f:04:e1:8a:43:7b:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8452b03e1b01709638940d9592983cde77ecab77 Validity Not Before: Sep 21 21:00:35 2026 GMT Not After : Sep 22 21:00:35 2026 GMT Subject: CN=69005049cf120ae3e9a1abd4d31091c0abd29d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8a:5f:97:98:f6:f4:54:20:ec:93:4a:8e:e4: eb:0b:74:93:c8:bc:73:49:f6:af:e3:fb:fb:4f:f7: 81:f5:02:29:29:b1:69:f0:92:05:a0:42:be:ff:a7: eb:4c:f6:f2:11:63:2f:4d:77:ce:ec:8b:6c:f0:0e: 76:9a:ef:6f:c2:72:dc:bb:2f:34:ba:2a:e5:06:4e: f0:22:0f:73:26:88:51:3f:c7:4c:69:06:22:61:43: f8:b2:77:1d:00:94:2e:7a:51:8b:51:f6:3a:e7:73: 14:87:ff:33:01:22:28:0e:77:90:8f:a8:2f:a2:76: 0f:a0:47:d2:dd:a2:4c:a8:be:b1:d9:c4:0d:63:c3: 09:91:3d:77:84:7b:de:d5:79:c5:8e:41:68:24:11: ca:0c:42:de:ea:03:1f:6d:08:4f:f0:c4:93:81:50: 53:4b:99:3d:34:4c:82:9d:88:e3:5e:06:02:53:fb: a8:d2:f2:04:8a:37:78:09:7a:73:8d:b7:fb:27:68: 64:68:e7:ef:63:e9:d2:41:d2:ac:5d:f0:50:cf:b8: 85:f0:58:0c:01:65:cf:ef:94:bc:70:5b:80:16:14: 87:1d:53:c1:3d:12:2c:8c:f6:4d:5b:99:54:95:a0: 11:e7:b9:c0:dc:80:10:82:79:e2:b4:45:55:5d:e2: e3:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:00:50:49:CF:12:0A:E3:E9:A1:AB:D4:D3:10:91:C0:AB:D2:9D:6D X509v3 Authority Key Identifier: keyid:84:52:B0:3E:1B:01:70:96:38:94:0D:95:92:98:3C:DE:77:EC:AB:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hFKwPhsBcJY4lA2Vkpg83nfsq3c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/011f6e-e928-4f2b-aa24-200fc274cb01/1/hFKwPhsBcJY4lA2Vkpg83nfsq3c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:04:b9:86:37:56:8b:67:fa:fb:e5:30:15:a3:0e:46:69:7e: d5:59:dc:a0:4d:25:90:f6:bf:0c:53:1e:67:87:22:58:4d:6b: 90:09:52:c6:96:f2:dd:29:fc:42:8e:13:53:ce:a9:d5:6e:b2: cc:53:aa:97:6b:88:17:e7:d2:97:59:df:5e:21:03:74:fd:76: 50:ca:53:6b:2c:52:82:cb:6d:88:95:cd:e4:83:b0:02:cc:66: 6f:d4:09:de:71:9c:20:e8:00:77:2a:04:e7:ce:5a:fe:dc:9b: 92:0f:ff:27:87:ad:e4:a3:1a:6b:d9:2d:74:b3:29:7a:67:e8: 7e:68:c7:a5:f8:a8:81:d5:1e:4b:f2:d2:22:06:d6:d5:8a:b2: ef:d9:78:81:80:4e:da:ae:ba:fb:28:88:69:fe:2c:23:1a:00: 02:ed:83:dc:4b:a4:86:e5:da:ca:96:83:e8:e5:24:cf:ff:6d: 1d:d6:da:a5:66:07:75:e1:38:ce:ec:15:48:f6:b2:87:0e:5e: 33:29:b0:67:2d:bd:c0:d1:a0:9d:1c:9b:36:99:a1:20:cd:f1: 29:65:14:49:f7:05:5e:20:7a:4d:0a:72:7f:ad:8e:aa:8f:1b: 10:ae:b5:62:72:ed:5e:da:72:ce:48:c1:04:b1:e7:21:49:90: f5:72:43:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFxUfA0BAwOGQPBOGKQ3sXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg0NTJiMDNlMWIwMTcwOTYzODk0MGQ5NTkyOTgzY2RlNzdl Y2FiNzcwHhcNMjYwOTIxMjEwMDM1WhcNMjYwOTIyMjEwMDM1WjAzMTEwLwYDVQQD Eyg2OTAwNTA0OWNmMTIwYWUzZTlhMWFiZDRkMzEwOTFjMGFiZDI5ZDZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzopfl5j29FQg7JNKjuTrC3STyLxz Sfav4/v7T/eB9QIpKbFp8JIFoEK+/6frTPbyEWMvTXfO7Its8A52mu9vwnLcuy80 uirlBk7wIg9zJohRP8dMaQYiYUP4sncdAJQuelGLUfY653MUh/8zASIoDneQj6gv onYPoEfS3aJMqL6x2cQNY8MJkT13hHve1XnFjkFoJBHKDELe6gMfbQhP8MSTgVBT S5k9NEyCnYjjXgYCU/uo0vIEijd4CXpzjbf7J2hkaOfvY+nSQdKsXfBQz7iF8FgM AWXP75S8cFuAFhSHHVPBPRIsjPZNW5lUlaAR57nA3IAQgnnitEVVXeLj6QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkAUEnPEgrj6aGr1NMQkcCr0p1tMB8GA1UdIwQY MBaAFIRSsD4bAXCWOJQNlZKYPN537Kt3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQt MjAwZmMyNzRjYjAxLzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC8wMTFmNmUtZTkyOC00ZjJiLWFhMjQtMjAwZmMyNzRjYjAx LzEvaEZLd1Boc0JjSlk0bEEyVmtwZzgzbmZzcTNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigS5hjdW i2f6++UwFaMORml+1VncoE0lkPa/DFMeZ4ciWE1rkAlSxpby3Sn8Qo4TU86p1W6y zFOql2uIF+fSl1nfXiEDdP12UMpTayxSgsttiJXN5IOwAsxmb9QJ3nGcIOgAdyoE 585a/tybkg//J4et5KMaa9ktdLMpemfofmjHpfiogdUeS/LSIgbW1Yqy79l4gYBO 2q66+yiIaf4sIxoAAu2D3EukhuXaypaD6OUkz/9tHdbapWYHdeE4zuwVSPayhw5e MymwZy29wNGgnRybNpmhIM3xKWUUSfcFXiB6TQpyf62Oqo8bEK61YnLtXtpyzkjB BLHnIUmQ9XJDGQ== -----END CERTIFICATE-----Generated at Tue Sep 22 03:15:43 2026 by rpki-client