$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft File: fcSs7cuGzd_tf23oyt_KAEabvI4.mft (raw, json) Hash identifier: amrKsl1oBqyW1ds3yKwRcHP9WwSYZkH4G0s5hM6hrNk= Subject key identifier: 2D:03:F9:03:B6:97:F4:09:B0:2A:8F:EA:B5:90:EA:EF:8D:54:0E:1F Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e Certificate serial: 01A0C85951B5D80DBF5C112C15D47CE4E7F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft Manifest number: 1A82 Signing time: Tue 22 Sep 2026 09:01:31 +0000 Manifest this update: Tue 22 Sep 2026 09:01:31 +0000 Manifest next update: Wed 23 Sep 2026 09:01:31 +0000 Files and hashes: 1: 4f6D0SNzuRXBbH2RbycyEIN6aXM.asa (hash: 1uuayDkYWB05PWzl5Hlu7wA5idmb3vxmFZgTB95rRu0=) 2: 8r-SXvmyY8xSeamcpDwi2q3FtQU.asa (hash: vb6RtAuj6AJepb8Z5VeJ1W39+t+GyunhQkNqyLWbWNg=) 3: BjhAjUhVgw0Dos1VVwuky5gCkDo.asa (hash: +vYt6dSkdkJAkU8WEingMStESMqO1C4Sl1HfVbVXuyw=) 4: Cl9almC-MnHRf79Rx17mqL3de4s.roa (hash: au7aQyBRsleKEfcWTbTtfB//oyWFLd+LaOHUvN6wKBA=) 5: FRs40rH1nsbuTD3XEyCW5bV_Pds.asa (hash: cZJXay+u0fbI+PrPs4z5BwTR1CMRlGSWGEvUhPzA/As=) 6: G0KXXMrHyj_SfN6yM879XTrSmKw.asa (hash: QjCDa7CkqNWLlmNAHi/GInMdrUqsYZ7eya45/kmGxtk=) 7: JWmuS5l58_oI3gHX2Kc1MJOZwmM.asa (hash: g0CHKSUHFNoaFRlL4R5UeNrwnEpdUxGYYAXLjA8nNd8=) 8: KTUTCaxYQXGAP2Q2CO619vsXhAs.roa (hash: Xxd+caKVzEv01E0Ajz1dp8J3+CKdNysugtSY7+ulyW8=) 9: Pge3FHys36yCTMnr7OFTphwCI-g.asa (hash: XE66QDXYoXBZ/BEvECA6R7jkyUnI5l3VLBsSGsToEn0=) 10: R7AO6IcvjTtY4l0ByEe_0R_j0AU.roa (hash: MxomD2zeC9vv3+OGbCN11f0B1+3GrxfrkJYc0+4VX6I=) 11: Y_--MQK54naD7fpUVFPfwfY6o28.asa (hash: kg46g53Aa38snduq2UGa72Yp4mJfDgCyso9Db03AZTs=) 12: ZSFvFvOHpvhz9jdVYyPf-qedyuc.roa (hash: y2p8lWtao0cmGhQ7xMI9uO+GzRfpUJD6YxLs8A6673A=) 13: fcSs7cuGzd_tf23oyt_KAEabvI4.crl (hash: Lm+XYk5SHupcg7+3hincx0M93uFTEG5TxzQ/eQnMer4=) 14: kNbGOrnfq0gzHfqRL4k4kQHJqi0.asa (hash: cC2GU/9BHYBvQG2eT+9DYoAdn2wHGg8+/Gm7GNob5z0=) 15: lHWMLrOWJPIs4BBwC991DrKwGo4.roa (hash: y28g4c7JhwolCgwgEN4bgF07Be1DrEjj6ZIL1k4Kjr4=) 16: uLwRD0x9KPEEnzN2MgZWi2x40-E.asa (hash: 1PaplIqaqZ7NhDyll0CiuYqKUbg4HgZz8hzTJAx8oF0=) 17: y5gnKCstj08QbZOxZlqBAhmGTdc.asa (hash: ozTLg4xL3aC+x+H/y3W2njsNr13IpvS8JUU4zkKOwL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 05:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c8:59:51:b5:d8:0d:bf:5c:11:2c:15:d4:7c:e4:e7:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e Validity Not Before: Sep 22 09:01:31 2026 GMT Not After : Sep 23 09:01:31 2026 GMT Subject: CN=2d03f903b697f409b02a8feab590eaef8d540e1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7a:39:07:c0:d7:9b:41:bc:61:af:67:51:84: ff:23:9e:14:fd:f8:1e:45:0c:dd:c1:07:0d:e3:b6: 40:4e:df:1e:09:82:27:3e:88:13:0d:ec:c0:90:97: 3c:cb:43:56:8e:9b:f6:f0:7f:49:58:3c:3b:0c:ad: 2c:4c:be:95:18:fb:ac:3b:df:a3:9e:e0:fb:4d:ac: df:0b:3d:e5:9a:58:a7:44:1d:db:db:47:ad:d7:b1: f8:66:46:82:a3:14:34:90:00:60:6a:e5:ca:a7:6e: 18:bd:ef:60:66:91:3e:b9:71:e9:3c:9c:7b:8c:70: 26:86:7d:cf:8c:b3:a0:bc:7f:a0:52:68:e4:87:15: b5:7d:1a:a9:8b:2b:b6:a0:e4:82:98:30:ce:c7:af: d3:26:d6:5c:75:79:73:15:65:f2:2b:47:1e:d2:b6: ff:6a:bc:8d:e5:c4:d9:57:db:ac:5d:27:48:96:f0: 3c:70:96:c1:01:d5:89:db:38:50:87:63:98:15:14: 92:fd:57:18:19:ff:3a:6c:c5:f0:35:4f:70:25:95: 81:68:43:9b:74:81:62:c0:0f:1b:80:bc:c4:a3:f2: 53:10:14:7d:41:11:f9:33:ad:c0:38:97:32:df:4c: 0b:2e:fd:78:c4:58:fb:c8:77:93:ea:e7:ce:b3:17: 8f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:03:F9:03:B6:97:F4:09:B0:2A:8F:EA:B5:90:EA:EF:8D:54:0E:1F X509v3 Authority Key Identifier: keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:6e:85:eb:82:6f:f8:4c:50:ee:b1:23:24:4c:d4:ee:ba:87: 43:29:c1:33:8e:9f:08:46:9e:c0:63:9b:b6:9d:a7:e0:2a:c3: be:a1:54:40:b6:9c:72:93:0a:35:06:b0:0f:3a:9f:4e:1b:55: af:27:59:65:6f:56:88:7f:ea:08:99:b9:83:3a:3a:d3:ba:e0: 6e:3f:d5:26:63:aa:a0:7c:af:9f:89:70:5f:18:a1:0a:8a:df: 20:b7:70:b5:23:4e:c8:38:19:c8:f5:78:d4:d9:13:3e:8c:fa: b7:d7:75:2a:02:53:2f:1e:81:33:72:b9:6a:88:e0:56:5a:73: de:8a:73:19:e1:55:32:ba:a4:c4:e8:0f:e7:95:fb:70:5c:27: 02:5d:01:29:fa:35:1c:e5:25:20:67:0e:42:7e:1b:f3:8d:e7: b2:94:71:60:65:de:72:4a:6e:1f:04:d9:ec:85:34:18:1d:6a: e9:34:9f:49:e5:58:8f:5a:a5:60:a0:60:a0:48:7e:f8:5e:77: 7a:29:86:26:ad:2b:c5:8e:59:4b:df:06:18:ba:ff:48:28:c0: d7:aa:04:5e:88:bb:4d:c0:e8:7d:47:e5:83:ea:c2:9e:0b:ce: 0e:24:db:0f:83:ac:1a:88:18:3a:48:e4:ae:7a:24:e3:03:c4: ca:f8:60:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDIWVG12A2/XBEsFdR85OfwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzRhY2VkY2I4NmNkZGZlZDdmNmRlOGNhZGZjYTAwNDY5 YmJjOGUwHhcNMjYwOTIyMDkwMTMxWhcNMjYwOTIzMDkwMTMxWjAzMTEwLwYDVQQD EygyZDAzZjkwM2I2OTdmNDA5YjAyYThmZWFiNTkwZWFlZjhkNTQwZTFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsno5B8DXm0G8Ya9nUYT/I54U/fge RQzdwQcN47ZATt8eCYInPogTDezAkJc8y0NWjpv28H9JWDw7DK0sTL6VGPusO9+j nuD7TazfCz3lmlinRB3b20et17H4ZkaCoxQ0kABgauXKp24Yve9gZpE+uXHpPJx7 jHAmhn3PjLOgvH+gUmjkhxW1fRqpiyu2oOSCmDDOx6/TJtZcdXlzFWXyK0ce0rb/ aryN5cTZV9usXSdIlvA8cJbBAdWJ2zhQh2OYFRSS/VcYGf86bMXwNU9wJZWBaEOb dIFiwA8bgLzEo/JTEBR9QRH5M63AOJcy30wLLv14xFj7yHeT6ufOsxeP2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC0D+QO2l/QJsCqP6rWQ6u+NVA4fMB8GA1UdIwQY MBaAFH3ErO3Lhs3f7X9t6MrfygBGm7yOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zZDJhMTQtNmI3OS00Njg5LTk1Nzkt Mzk0ODAyODVhOTQ4LzEvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zZDJhMTQtNmI3OS00Njg5LTk1NzktMzk0ODAyODVhOTQ4 LzEvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1G6F64Jv +ExQ7rEjJEzU7rqHQynBM46fCEaewGObtp2n4CrDvqFUQLaccpMKNQawDzqfThtV rydZZW9WiH/qCJm5gzo607rgbj/VJmOqoHyvn4lwXxihCorfILdwtSNOyDgZyPV4 1NkTPoz6t9d1KgJTLx6BM3K5aojgVlpz3opzGeFVMrqkxOgP55X7cFwnAl0BKfo1 HOUlIGcOQn4b843nspRxYGXeckpuHwTZ7IU0GB1q6TSfSeVYj1qlYKBgoEh++F53 eimGJq0rxY5ZS98GGLr/SCjA16oEXoi7TcDofUflg+rCngvODiTbD4OsGogYOkjk rnok4wPEyvhg2A== -----END CERTIFICATE-----Generated at Tue Sep 22 14:04:23 2026 by rpki-client