$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: 9PxcEtni/U/+VA2fPxeP3q0fcbGjmq1uOx3vQKsF0G8= Subject key identifier: 3C:99:A9:6D:F7:C4:A1:DF:75:C3:CC:D2:9A:56:A3:FD:52:D5:E2:A9 Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 01A0C09F8E6EB61C1C544760A3A923BC23C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 1A8B Signing time: Sun 20 Sep 2026 21:01:17 +0000 Manifest this update: Sun 20 Sep 2026 21:01:17 +0000 Manifest next update: Mon 21 Sep 2026 21:01:17 +0000 Files and hashes: 1: 0D14gN2WiBa54cFbuKlrQUOrf8M.roa (hash: 2wB51bMRZ+T+HK/B9Edc9OpYAvR825v+i0duj5mr6/E=) 2: 8alVrjrWY968nNzLuKlTYJqWO5s.roa (hash: n3cPQVf1JqZIIBHl4vdLfSmHsel7C5NhWsG2ov9U0fE=) 3: AfDFx5CztN26DfCfFCFVeLtbfYk.roa (hash: 6hydPd19IUZH5tUXaWmgrdl0J31zdN4Hkjua9Sst5JQ=) 4: Fe9Xj78mLtBv56f9jO8i3r-s8qM.roa (hash: wNTnsyJdnh8/6vp2voiL35CQyX5QiogzfMfKCFUPFDM=) 5: Go3pOTuap2_fsOG2Cy2Y4VT2pN0.roa (hash: 0oyx4eIX+vmWlDNgh2kGWbDg44/BIpYISvXYVe/lRmI=) 6: OsaS-W05X64hVseLWVJ98CCH4bg.roa (hash: ZOdWLGxsnjVKDfjbUq3CekoJyLOWeoL5aqMKIGP91V8=) 7: ZGek-6HBksI7UR516vE0gk5R-L4.roa (hash: t0Obkj8sK06HaBNs4kmLvSB4hxDxnIEARfCn1Ni3RSc=) 8: axdSVqIzRJIZuL4bUaXgsCZR0GA.roa (hash: o1y1RiYLt8sTd8RRJ89cjZcmfxt/0UhXCW4mXlZ2wPw=) 9: cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa (hash: 3JUexyB8UKFK23yZaQJY7snnPpz1rOPKcvmbdq5kUeg=) 10: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: yW04fPtQRyfY+oe2bHSPaoMH6Wj46AD3ocYbuFRrpHg=) 11: nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa (hash: 4zzXn53ZU7R+himiAEAxl3zTsYnZiM207WqrGti69uY=) 12: pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa (hash: FZmisnstiTUOgcPXpHL2ZJ5p2aJPRBsk+SIz8t4Ftlc=) 13: rQ8ohk71V4ClseY7wRU6uUdfWw0.roa (hash: +Un59zWJ5v19ef4G1vmVABla4G6FDYt+TwXokRhf32c=) 14: t6LGbWPehA5-4bGA_0I8d0ATs2A.roa (hash: VJvhwVfSb8eKnL2DGvlH1c5C6AHV73YvtD/x841o6yw=) 15: xpxQq-XYLTeZi1RJOWi2RhOZm6M.roa (hash: stugu/O0ZbeQlykuDSWoq5P19xqk7ytCQZZAgWlL1aI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 21:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c0:9f:8e:6e:b6:1c:1c:54:47:60:a3:a9:23:bc:23:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Sep 20 21:01:17 2026 GMT Not After : Sep 21 21:01:17 2026 GMT Subject: CN=3c99a96df7c4a1df75c3ccd29a56a3fd52d5e2a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:fe:ac:cb:20:93:4f:d5:74:82:b9:93:c4:8c: c3:57:f3:fe:b0:02:ba:48:28:53:7f:5d:85:f3:b4: c3:b4:6a:58:17:13:f2:e9:3e:e5:48:3d:58:60:77: 85:f6:9a:53:fe:5c:02:da:e7:52:98:37:b6:1d:0d: ec:80:7f:3a:97:ee:c8:74:04:73:d6:6b:12:c5:af: 4f:32:af:4f:55:ad:0c:08:6a:05:40:8b:da:59:98: 69:18:92:9b:ef:a0:c0:94:f8:b7:6f:58:4d:57:69: 72:37:73:b6:c7:36:46:14:44:03:09:c8:6e:79:bc: fc:03:c0:c4:8e:56:42:63:c8:c1:8b:7d:04:18:b9: fe:07:4c:11:bf:5f:9d:f4:20:3f:0a:73:c0:5a:66: 37:80:9f:fd:d8:c7:40:46:b0:39:4d:e5:5e:58:ff: 43:1e:6e:ef:03:c5:3b:59:31:81:d1:58:11:34:8a: b1:e1:5e:ca:0a:95:5d:61:f2:97:93:6d:e8:59:f0: da:8c:ba:0e:7a:d0:5e:07:9c:33:94:3f:d1:71:81: ce:87:e9:74:8a:80:5b:de:e2:d4:5d:a5:c3:7e:89: a1:f6:53:1f:dd:f2:83:f5:e6:e7:1a:16:8b:2c:a0: 6c:cb:60:8b:e6:a3:23:88:26:9f:97:61:a9:05:b9: d7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:99:A9:6D:F7:C4:A1:DF:75:C3:CC:D2:9A:56:A3:FD:52:D5:E2:A9 X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:3c:74:4d:07:bc:89:3d:ed:71:71:a9:b8:ea:cc:94:88:b4: 56:b5:ef:21:48:af:31:ed:6d:a8:19:c5:6e:04:02:36:21:c7: 93:f6:6b:70:77:06:07:9f:18:9b:12:99:d4:7b:2b:ea:d0:79: ca:57:87:a0:04:5a:18:11:b9:51:8f:a8:1b:18:f3:39:70:c2: 2e:e0:56:11:83:de:89:eb:9b:19:4b:1d:0c:c6:3a:87:0a:29: 67:ee:09:19:17:c1:a3:19:51:2f:5c:a9:22:72:bb:e4:29:34: dd:25:60:61:fc:c2:80:63:e2:dc:96:a2:a2:72:4c:07:f3:a5: 3f:3e:d6:06:d1:3a:ff:e7:47:84:ac:56:d7:bf:b1:05:eb:ee: b6:2f:6d:d8:2e:0b:b1:d8:56:45:36:e4:ee:7c:9a:27:f4:d9: f1:17:68:42:49:11:85:7c:53:76:51:5f:cf:29:f3:4f:0e:19: 50:45:64:63:c1:da:fb:4e:37:aa:c3:26:53:39:78:73:bd:86: e4:91:50:69:e5:11:3b:93:e1:72:4d:df:9b:45:b8:a9:a2:3d: b0:bb:60:5e:5b:9b:53:2a:c1:33:81:d3:e2:eb:d8:87:e0:4e: 5e:13:07:4c:c5:61:fb:a5:b0:28:da:b0:1e:46:ec:36:42:74: d8:77:b6:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDAn45uthwcVEdgo6kjvCPEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjYwOTIwMjEwMTE3WhcNMjYwOTIxMjEwMTE3WjAzMTEwLwYDVQQD EygzYzk5YTk2ZGY3YzRhMWRmNzVjM2NjZDI5YTU2YTNmZDUyZDVlMmE5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/6syyCTT9V0grmTxIzDV/P+sAK6 SChTf12F87TDtGpYFxPy6T7lSD1YYHeF9ppT/lwC2udSmDe2HQ3sgH86l+7IdARz 1msSxa9PMq9PVa0MCGoFQIvaWZhpGJKb76DAlPi3b1hNV2lyN3O2xzZGFEQDCchu ebz8A8DEjlZCY8jBi30EGLn+B0wRv1+d9CA/CnPAWmY3gJ/92MdARrA5TeVeWP9D Hm7vA8U7WTGB0VgRNIqx4V7KCpVdYfKXk23oWfDajLoOetBeB5wzlD/RcYHOh+l0 ioBb3uLUXaXDfomh9lMf3fKD9ebnGhaLLKBsy2CL5qMjiCafl2GpBbnXmQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyZqW33xKHfdcPM0ppWo/1S1eKpMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhTx0TQe8 iT3tcXGpuOrMlIi0VrXvIUivMe1tqBnFbgQCNiHHk/ZrcHcGB58YmxKZ1Hsr6tB5 yleHoARaGBG5UY+oGxjzOXDCLuBWEYPeieubGUsdDMY6hwopZ+4JGRfBoxlRL1yp InK75Ck03SVgYfzCgGPi3JaionJMB/OlPz7WBtE6/+dHhKxW17+xBevuti9t2C4L sdhWRTbk7nyaJ/TZ8RdoQkkRhXxTdlFfzynzTw4ZUEVkY8Ha+043qsMmUzl4c72G 5JFQaeURO5Phck3fm0W4qaI9sLtgXlubUyrBM4HT4uvYh+BOXhMHTMVh+6WwKNqw HkbsNkJ02He2yg== -----END CERTIFICATE-----Generated at Mon Sep 21 06:32:12 2026 by rpki-client