$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft File: M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json) Hash identifier: RnjT/EZgy8jcKN9WQlAzeOEY+OJHEarpPmlYBqN6R80= Subject key identifier: D4:EA:79:39:7B:6D:2B:A7:91:E4:BD:12:E8:12:B0:72:4B:D6:7E:67 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 01A0E777408AE1680507762F62EA82A90C78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft Manifest number: 1A78 Signing time: Mon 28 Sep 2026 10:02:27 +0000 Manifest this update: Mon 28 Sep 2026 10:02:27 +0000 Manifest next update: Tue 29 Sep 2026 10:02:27 +0000 Files and hashes: 1: 0_H--D3ld_V5A2GDwFkKX4GOiA0.roa (hash: 4e5kO9YfPo607NKs0GfVmGK8Ay03F7orhMQubGrK5s8=) 2: 2Y22JjtWrl0_nviPCh47UcoiEMc.roa (hash: MjixCwl1roku3r8M7cAmmfjxaUIrhcvJpiUdNlV6IQQ=) 3: 7aJymM8-A-Vzxrith_gpYUCnxLA.roa (hash: yavsVrmsFDM2twygwL9ROfhNDdkXtjYh0veEc5aPL6U=) 4: BREu-oLiWRVnvmr0OZpze-1yZho.roa (hash: JOSLUiFQMXinZ2s3xJFw5vOALrZZO+Y0VQuZomqNcNc=) 5: KQsPApaYWV1_80rHUTYo4kduGEc.roa (hash: DMlh9LVsGQgoH2sC6mgiD6McwaNhSBUcv3JC9I342EY=) 6: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: 91EFlL9O3Gwrj4C5RyUt6uWxBbEkbnFFQ/8gxMqeH6w=) 7: QWYP1a7mE-901Npm0STCw-0_494.roa (hash: GGXXSRYOhg9nYn3L4Ohy/bvCK7SIobkN33noxERxNSE=) 8: TTEzQtE5d70mBmiMli4rrHXXguQ.roa (hash: xIxbskYOAuc9Yjyt/8RKTk7K32KNqi0KQcR/yqDrqdI=) 9: XiniKmHk48PTd4AWdTNpS7pWYPM.roa (hash: LdHpQkrTcb3/m2EigJdifn4oDDnwzMObaFnPm4GQZsE=) 10: ajM6u9AhobNFWsjqV0zszbZBQgg.roa (hash: 9dpjav4k95AK45D3gY5gAwzQc5Jmp0J5EfW5NA6MQrY=) 11: dal6AFPAMOKunkfF7hTY8Cuz5HU.roa (hash: IVF4Tz8JdO1RxYBDwDE4cvUkOAHOkcCD98baar1MrRo=) 12: hRwQ4mV8u9tsYeBBJi9cjl-qxEg.roa (hash: Z+XgNcTxGhoujnKCI9mZu3tfZCPpFoVHO4a9tPmkGVA=) 13: m7yZ_UyERPPI7rtLGNSBX9Jm9bw.roa (hash: ykcmm9r12Ob1/PzXbUDHvDBzZdTDZhIzOR7w4XuLSwc=) 14: qxewd6X7cZwHTA-zQMlA_OAvlN8.roa (hash: Ry7YnXFLSUjxQaaprtnh0Xvr7Lu/H9g4ex/4yimbRx4=) 15: shE5nirJjfzwtVvRNs6B8132Y90.roa (hash: bZPp9AYR6VCS07rIaJOgsQumohQ23Ohhw0oW9Q96CQ4=) 16: uRrZsstrzGEOJvLMKb6O233tS-U.roa (hash: hfakJlnSmscUlq1SwhM8hNCbJeeub/2zpsFlue2e450=) 17: wuPeAwGhCGGyy1vUlZnoXQ_te9w.roa (hash: Ya4gfqovf3JM8yFavds8OzJvokLnz9/3YHuh2owqYdI=) 18: y-LHl9JCf1vCgH9ww0oXT09BT3E.roa (hash: U2dDyow3uUPlXZ81c884FwuRrB1qQId+nf/6dQa9SLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 10:02:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e7:77:40:8a:e1:68:05:07:76:2f:62:ea:82:a9:0c:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Sep 28 10:02:27 2026 GMT Not After : Sep 29 10:02:27 2026 GMT Subject: CN=d4ea79397b6d2ba791e4bd12e812b0724bd67e67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4d:66:cb:bd:7e:c0:60:ef:3a:3e:f7:b3:4c: fe:8f:cb:3c:da:22:94:3f:4b:d7:b4:fc:74:7c:ea: 00:16:4f:1c:cc:2f:47:bd:61:59:98:7d:1c:a4:c6: 10:86:3f:13:81:3f:92:36:6d:3f:93:ed:fa:a0:fc: b2:3c:01:df:df:74:36:23:d6:3a:48:35:11:23:8f: b1:6a:8a:97:3f:7e:b2:ca:f5:cd:d5:bb:07:3c:fd: f6:5f:cc:c6:7d:7c:e7:5e:b2:12:2d:51:ac:12:bd: 08:49:12:e2:d6:57:7c:d1:52:b4:12:80:3c:d5:d7: 44:a0:a8:bc:8b:5f:fe:70:96:08:39:7b:f4:95:c6: 5d:6d:99:40:ae:c3:44:04:cf:ae:ab:71:e3:25:95: 6e:4f:44:67:83:91:b3:83:0b:c6:86:bf:83:ce:9a: 53:64:de:5d:6c:a7:f1:26:a5:01:c5:61:3a:62:62: 0d:30:1d:99:f0:aa:fa:95:40:bf:10:77:a5:15:9f: 22:8e:49:55:54:51:4b:3c:fd:30:39:07:62:db:bd: 69:85:44:7c:2d:cf:d7:9a:a7:36:25:23:d2:01:20: 99:c3:56:76:e6:c4:fe:83:ec:ad:ab:a4:71:bc:0d: cc:53:18:8b:f0:3c:f1:b1:c3:71:db:b0:5d:37:40: e9:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:EA:79:39:7B:6D:2B:A7:91:E4:BD:12:E8:12:B0:72:4B:D6:7E:67 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:e0:c2:28:db:ad:eb:b0:36:5a:ca:4c:96:7f:22:05:29:d1: c9:95:ec:0c:b4:2c:be:60:d3:82:85:97:71:32:1f:f4:b6:d8: 17:31:f1:d5:81:49:76:71:eb:4c:77:9c:2e:99:c8:bc:1d:e9: 3f:28:25:51:b4:e6:a3:04:b5:64:73:be:4f:7d:cd:aa:2d:4a: 99:af:14:e2:24:c5:8e:5e:30:8a:fc:0c:49:b9:0d:00:c9:27: 1e:b8:83:d9:67:fe:56:db:0c:3c:ce:42:22:6c:02:e7:bb:7f: b9:62:3c:17:68:67:55:ab:25:80:3f:c0:30:0b:e7:9a:bc:4c: 47:a0:6d:ee:1b:8c:7d:3d:24:6e:4f:05:68:5f:d0:5a:63:86: 30:d9:1d:ba:89:e6:7a:82:3c:d3:98:e6:47:8e:dc:fa:77:f0: 1c:c0:7e:1b:22:7d:4c:53:fc:86:30:f1:c4:9d:0c:cd:f2:ea: 12:37:9a:ac:ac:21:a7:d6:e0:21:c0:88:59:c7:18:4d:76:0c: 43:9a:26:df:c6:0d:55:4b:22:73:b6:eb:b1:7b:42:cc:8f:6f: ab:3e:20:bd:f3:d3:00:4a:d6:d3:f1:a2:2c:d6:e8:4b:80:c2: 13:73:f7:ad:75:73:ef:7c:13:e8:bd:d9:19:26:49:04:10:7c: 53:5a:18:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDnd0CK4WgFB3YvYuqCqQx4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwOTI4MTAwMjI3WhcNMjYwOTI5MTAwMjI3WjAzMTEwLwYDVQQD EyhkNGVhNzkzOTdiNmQyYmE3OTFlNGJkMTJlODEyYjA3MjRiZDY3ZTY3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr01my71+wGDvOj73s0z+j8s82iKU P0vXtPx0fOoAFk8czC9HvWFZmH0cpMYQhj8TgT+SNm0/k+36oPyyPAHf33Q2I9Y6 SDURI4+xaoqXP36yyvXN1bsHPP32X8zGfXznXrISLVGsEr0ISRLi1ld80VK0EoA8 1ddEoKi8i1/+cJYIOXv0lcZdbZlArsNEBM+uq3HjJZVuT0Rng5GzgwvGhr+DzppT ZN5dbKfxJqUBxWE6YmINMB2Z8Kr6lUC/EHelFZ8ijklVVFFLPP0wOQdi271phUR8 Lc/Xmqc2JSPSASCZw1Z25sT+g+ytq6RxvA3MUxiL8DzxscNx27BdN0DpvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNTqeTl7bSunkeS9EugSsHJL1n5nMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAguDCKNut 67A2WspMln8iBSnRyZXsDLQsvmDTgoWXcTIf9LbYFzHx1YFJdnHrTHecLpnIvB3p PyglUbTmowS1ZHO+T33Nqi1Kma8U4iTFjl4wivwMSbkNAMknHriD2Wf+VtsMPM5C ImwC57t/uWI8F2hnVaslgD/AMAvnmrxMR6Bt7huMfT0kbk8FaF/QWmOGMNkduonm eoI805jmR47c+nfwHMB+GyJ9TFP8hjDxxJ0MzfLqEjearKwhp9bgIcCIWccYTXYM Q5om38YNVUsic7brsXtCzI9vqz4gvfPTAErW0/GiLNboS4DCE3P3rXVz73wT6L3Z GSZJBBB8U1oYVA== -----END CERTIFICATE-----Generated at Mon Sep 28 18:36:10 2026 by rpki-client