$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json) Hash identifier: oEC3LMUYZh2na+0wWNrk3OkAllX2lQLzTDs3OxgMrlM= Subject key identifier: 57:0E:FD:09:E8:6E:7C:4A:15:4D:4E:80:FD:6C:6F:45:44:70:F2:FA Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 01A0C21FE72670095273D6A3DDB5933985A3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft Manifest number: 0B9A Signing time: Mon 21 Sep 2026 04:01:05 +0000 Manifest this update: Mon 21 Sep 2026 04:01:05 +0000 Manifest next update: Tue 22 Sep 2026 04:01:05 +0000 Files and hashes: 1: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=) 2: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=) 3: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=) 4: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=) 5: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=) 6: DPMVT21xt_FxJ1sn3UX-_U68dhM.roa (hash: W+9Q7HyRT/GtNJeWW1rH3dBewR4z6axBBAIPrMJ0PUU=) 7: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=) 8: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=) 9: IFDEhJ7WdnMP_iOIFV_PEMyMTFY.roa (hash: 3abxPKBoQtYdBt0dEdvRfKPwIMD697ubAlSThgqLZRY=) 10: OGHkr0sseqVyPYMaosc0EKOfAbE.roa (hash: wHhBT3+BNkPQLV5c3JD9yLqsApNS0AOyvlFX/QBAowQ=) 11: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=) 12: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: dvLpaEn7g6a8uInJE3ob6UAO80JOrmY2/bRLXCQPDn4=) 13: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=) 14: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=) 15: WgBBESiMNBhg0ejLbo4ygFVFK_g.roa (hash: fOGX3A1MJMqw5iFjseRV1GnR/NKzbA2c83gmI0QyUAc=) 16: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=) 17: cLp8aoUEerNehAr3h59hozd_gn0.asa (hash: H0H1PRm+pfO0EaD/QilESt/v2w81RZ9KkTdDOLHz0OM=) 18: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=) 19: r-jH3K8gcLw126eQ4FkoGo2cj9Q.roa (hash: WprvCGc4fvgZRtpPYXPu9X3gBWvFU60j9mgBknNXAj8=) 20: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=) 21: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=) 22: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c2:1f:e7:26:70:09:52:73:d6:a3:dd:b5:93:39:85:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Sep 21 04:01:05 2026 GMT Not After : Sep 22 04:01:05 2026 GMT Subject: CN=570efd09e86e7c4a154d4e80fd6c6f454470f2fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:e9:32:68:8c:9c:fc:cf:5a:de:21:bc:4a:6a: 17:5c:5d:6e:f9:73:0d:b0:c1:8c:5e:ce:6b:fc:14: 36:76:1c:59:48:e1:9d:59:df:3c:7a:d1:98:9d:fd: 35:82:e8:12:f4:aa:39:c3:b4:1b:40:83:c7:6e:39: 4c:60:22:70:7f:79:4b:74:50:6e:5d:ae:a2:49:75: 5c:e0:87:5c:ec:37:74:df:e1:60:33:92:77:32:c4: da:5e:bf:5d:b7:7a:7b:1e:c8:62:b8:75:6d:fe:fc: 01:26:0f:70:80:cf:d9:fe:59:a7:5c:6b:52:19:cf: 99:72:04:20:d0:61:e5:a2:b3:ef:fc:7d:8b:6e:46: 1f:7e:4e:a4:3d:b7:bd:c3:31:6d:ff:bd:6a:ab:f0: c4:ab:01:ec:4c:f6:3f:1a:bd:4d:12:c6:62:d4:96: e3:9a:b0:57:e1:02:0a:ea:ef:5e:7e:d3:90:de:3c: a5:cf:34:2e:b2:53:a2:c4:2d:77:25:c4:13:fe:aa: 2a:01:83:dc:71:2a:13:18:34:20:7c:9e:60:7f:e0: 30:08:70:e2:0a:ca:4d:a0:03:e6:23:6c:c7:fb:46: 4b:ae:e4:f3:01:51:18:84:02:e1:98:b5:7d:3b:d9: ea:35:76:c7:d3:d3:e2:b6:de:97:09:9f:36:93:6c: 63:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0E:FD:09:E8:6E:7C:4A:15:4D:4E:80:FD:6C:6F:45:44:70:F2:FA X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:12:4e:53:19:eb:51:72:0c:22:1e:50:5b:87:dc:ed:bc:28: 32:23:d4:f0:fe:5f:66:b3:af:84:9a:eb:15:6b:75:ed:33:4e: cc:5b:53:43:6b:d1:b0:0e:7e:0d:02:25:32:00:06:b4:ef:eb: e3:75:07:0a:0d:e1:88:ee:cc:00:67:c0:9c:08:ea:d3:2a:c8: 61:75:5a:d4:65:50:2c:50:ad:1b:c1:80:04:dc:20:ac:0f:c4: 58:14:7b:cf:28:6c:37:b5:1c:8c:5f:a8:21:9e:26:17:18:bc: 00:6c:60:8e:07:2f:4f:6c:e7:3d:88:f0:e2:6a:9d:2c:c6:4e: d4:1c:2b:2c:de:5f:e0:9c:05:19:28:cb:f5:14:80:4b:3b:9f: 9b:9b:7f:2a:60:85:46:a2:7f:f5:cb:7f:96:e5:d1:1f:6e:8c: 15:9b:6b:ad:e1:8f:be:57:5c:18:87:dc:71:6b:1b:35:b6:a0: a8:79:44:c8:75:47:fe:5d:ed:d7:9a:21:ca:7c:8d:ee:62:04: 62:c2:11:10:75:d8:b3:8e:87:d6:97:8a:84:ef:4c:41:af:76: db:ff:21:17:cb:b9:6b:0f:4c:c8:bb:4c:38:c6:29:c7:99:59: 63:3a:d7:ef:44:d3:95:27:17:1d:df:8b:8b:92:1d:fb:4e:50: 6c:b0:1a:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDCH+cmcAlSc9aj3bWTOYWjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwOTIxMDQwMTA1WhcNMjYwOTIyMDQwMTA1WjAzMTEwLwYDVQQD Eyg1NzBlZmQwOWU4NmU3YzRhMTU0ZDRlODBmZDZjNmY0NTQ0NzBmMmZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoukyaIyc/M9a3iG8SmoXXF1u+XMN sMGMXs5r/BQ2dhxZSOGdWd88etGYnf01gugS9Ko5w7QbQIPHbjlMYCJwf3lLdFBu Xa6iSXVc4Idc7Dd03+FgM5J3MsTaXr9dt3p7HshiuHVt/vwBJg9wgM/Z/lmnXGtS Gc+ZcgQg0GHlorPv/H2LbkYffk6kPbe9wzFt/71qq/DEqwHsTPY/Gr1NEsZi1Jbj mrBX4QIK6u9eftOQ3jylzzQuslOixC13JcQT/qoqAYPccSoTGDQgfJ5gf+AwCHDi CspNoAPmI2zH+0ZLruTzAVEYhALhmLV9O9nqNXbH09Pitt6XCZ82k2xjDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFcO/QnobnxKFU1OgP1sb0VEcPL6MB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxJOUxnr UXIMIh5QW4fc7bwoMiPU8P5fZrOvhJrrFWt17TNOzFtTQ2vRsA5+DQIlMgAGtO/r 43UHCg3hiO7MAGfAnAjq0yrIYXVa1GVQLFCtG8GABNwgrA/EWBR7zyhsN7UcjF+o IZ4mFxi8AGxgjgcvT2znPYjw4mqdLMZO1BwrLN5f4JwFGSjL9RSASzufm5t/KmCF RqJ/9ct/luXRH26MFZtrreGPvldcGIfccWsbNbagqHlEyHVH/l3t15ohynyN7mIE YsIREHXYs46H1peKhO9MQa922/8hF8u5aw9MyLtMOMYpx5lZYzrX70TTlScXHd+L i5Id+05QbLAacQ== -----END CERTIFICATE-----Generated at Mon Sep 21 11:01:01 2026 by rpki-client