$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft File: 9E3jbOZUNyHyemiTo7Orf_-eEiE.mft (raw, json) Hash identifier: K0ktSUzHc2I4X4pcgydbClcQzLOgjBMq/HtotJ5MMy4= Subject key identifier: E8:06:DD:8D:A7:DE:3A:C3:A1:2C:A1:88:C2:E3:A7:E5:12:17:EC:7C Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21 Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221 Certificate serial: 01A0C58E8D68A22D6C8BC89E6B50D160025A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft Manifest number: E1 Signing time: Mon 21 Sep 2026 20:00:48 +0000 Manifest this update: Mon 21 Sep 2026 20:00:48 +0000 Manifest next update: Tue 22 Sep 2026 20:00:48 +0000 Files and hashes: 1: 1u-gUa9URlrodTmkGb9LRYX3OVU.roa (hash: oC9ByTbYQvO/MlLyyCdsGNzkRESBDij4okyToSMwSRU=) 2: 8d6xXk1vEJlOmHGXhwKrF5m6GFc.roa (hash: hIwaksOJP0zxQbZYSD2p0uscCDCl37ZQQd1k8/2OOCo=) 3: 9E3jbOZUNyHyemiTo7Orf_-eEiE.crl (hash: DXhlQ7QaVXjH/HOdG1N5KUwCbHCidSIuZdh+fUmcjTw=) 4: H_PLuXMHXk9aQMMSv9PL8d9I4p4.roa (hash: lLlcVWkBzyqFZaScNM4rXUJUhmBYgLuz/mF4DSCZsow=) 5: SF34wbOtYdRuApVr6Gux8pIJkSQ.roa (hash: iRP53qSEiGHrITXx04bly+wQA2RkGJTTrL0VEYAoBNk=) 6: bBOHRRkkkTWmeJdZ-1MsrhkPDoY.roa (hash: ORVCT7FJ02Pf6zwRRTxkzn72Y3WbAChmuKaE2k5xVLE=) 7: bya_A4puBY8ZcMoQu4n_j-KniIA.roa (hash: Qnp+qZ0rKbMVjnECifAEcvAP55imofsc5AlVKksg0kc=) 8: cNx7jbTPJ0BRJbQGyp87GkEn9Mo.roa (hash: xhs6LS1Q1Mh7UyOa5htlvASV20ak+TW1Eqf9IPtVEL0=) 9: kQcRJHwrPUjV6MFCrcBkC_Mkn60.roa (hash: wZlAb2i6Q85EuSipXQW0wySIWm8YuhMljUtSh1EvtjE=) 10: xeKZmPgvPMOy0KwEWStwZbewpmQ.roa (hash: FQj3XVymc2AHbwvXpX69Y9LJlgObeqHhy7xHy0+4/mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 19:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c5:8e:8d:68:a2:2d:6c:8b:c8:9e:6b:50:d1:60:02:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221 Validity Not Before: Sep 21 20:00:48 2026 GMT Not After : Sep 22 20:00:48 2026 GMT Subject: CN=e806dd8da7de3ac3a12ca188c2e3a7e51217ec7c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8f:1f:ba:fa:5f:64:6e:e7:e3:a8:5a:34:4a: 43:cd:92:5a:8f:cb:93:32:c6:3e:96:11:5f:50:ff: d1:6e:47:fb:0b:cc:07:1d:84:dd:64:18:26:1a:56: a5:23:ff:88:ab:e8:c6:f0:83:6b:10:05:11:43:1c: 3d:21:36:9f:02:65:5e:2d:5f:ea:8b:a8:a6:c6:87: 79:1b:f6:b2:4a:c8:e3:8a:71:a0:d4:41:e0:99:1a: 31:cd:6a:2e:a6:eb:eb:86:94:a1:3f:62:88:8f:ab: ba:5b:0a:6a:72:34:32:72:66:02:c2:56:03:1e:dd: e8:1a:bb:04:fc:20:3d:28:74:37:71:97:85:3d:91: fd:ec:3d:86:9a:b5:a2:c3:fd:a4:55:15:6e:d5:19: 54:96:72:cd:19:14:2a:b4:25:90:77:6f:c8:a7:d4: 53:f8:ed:c6:93:ce:da:4b:9e:9b:ca:d4:64:45:90: 36:f9:4b:a0:06:89:f7:27:ef:5d:f3:46:47:d7:b1: 0f:54:8d:2f:91:4f:4f:e9:56:a9:88:3b:02:af:6d: ad:c7:10:ab:98:ae:c3:14:b5:bd:39:41:92:af:5a: 51:20:94:da:a1:9b:78:fc:5a:4d:76:5f:c0:4d:ef: 21:e5:8f:63:be:53:28:29:bd:7a:0f:d8:98:fc:5c: 08:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:06:DD:8D:A7:DE:3A:C3:A1:2C:A1:88:C2:E3:A7:E5:12:17:EC:7C X509v3 Authority Key Identifier: keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:3f:4e:e7:b9:ce:ba:5d:89:f5:70:36:da:e2:4d:8d:b8:38: 92:b2:f8:1f:87:26:0e:64:47:a1:6a:87:2e:a7:62:ac:c9:48: d5:89:a8:e5:31:07:0d:4a:d2:1f:62:17:f0:4c:76:ef:33:e4: 01:4c:14:cd:73:c1:1f:59:47:4c:b1:04:28:a1:a5:9a:44:f6: 6e:ff:7b:09:21:5d:e2:5e:9a:13:9a:6e:70:5a:d1:99:67:80: 10:fa:2d:bd:4e:bb:7b:ce:0a:bf:33:59:72:c3:69:f2:74:e1: 04:1c:ff:27:07:63:44:50:25:48:23:d9:9a:0f:94:87:ce:87: f3:30:97:65:25:f1:ea:34:88:42:1c:d5:37:ac:24:18:fd:be: 8f:05:b8:a2:f4:02:08:53:88:99:8b:78:a2:31:f9:af:ea:df: 6b:a8:73:65:a4:73:ce:09:78:8b:95:57:5a:b5:bf:94:f2:58: a7:4e:b3:68:9e:f9:8d:82:5a:07:5a:8a:99:ce:ed:a3:7b:31: 00:ea:26:d4:23:4f:c6:12:15:26:f0:c3:ef:ff:90:ee:6f:fc: 9e:37:ea:06:30:9e:a0:49:66:ac:b0:19:97:5c:70:f1:a7:c8: c9:de:01:66:35:46:bf:91:6c:02:7f:d7:7e:58:be:1f:31:6d: 47:18:0c:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDFjo1ooi1si8iea1DRYAJaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NGRlMzZjZTY1NDM3MjFmMjdhNjg5M2EzYjNhYjdmZmY5 ZTEyMjEwHhcNMjYwOTIxMjAwMDQ4WhcNMjYwOTIyMjAwMDQ4WjAzMTEwLwYDVQQD EyhlODA2ZGQ4ZGE3ZGUzYWMzYTEyY2ExODhjMmUzYTdlNTEyMTdlYzdjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi48fuvpfZG7n46haNEpDzZJaj8uT MsY+lhFfUP/Rbkf7C8wHHYTdZBgmGlalI/+Iq+jG8INrEAURQxw9ITafAmVeLV/q i6imxod5G/aySsjjinGg1EHgmRoxzWoupuvrhpShP2KIj6u6WwpqcjQycmYCwlYD Ht3oGrsE/CA9KHQ3cZeFPZH97D2GmrWiw/2kVRVu1RlUlnLNGRQqtCWQd2/Ip9RT +O3Gk87aS56bytRkRZA2+UugBon3J+9d80ZH17EPVI0vkU9P6VapiDsCr22txxCr mK7DFLW9OUGSr1pRIJTaoZt4/FpNdl/ATe8h5Y9jvlMoKb16D9iY/FwIRQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOgG3Y2n3jrDoSyhiMLjp+USF+x8MB8GA1UdIwQY MBaAFPRN42zmVDch8npok6Ozq3//nhIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt MjRkOGU3NDdjMzhmLzEvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm LzEvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAND9O57nO ul2J9XA22uJNjbg4krL4H4cmDmRHoWqHLqdirMlI1Ymo5TEHDUrSH2IX8Ex27zPk AUwUzXPBH1lHTLEEKKGlmkT2bv97CSFd4l6aE5pucFrRmWeAEPotvU67e84KvzNZ csNp8nThBBz/JwdjRFAlSCPZmg+Uh86H8zCXZSXx6jSIQhzVN6wkGP2+jwW4ovQC CFOImYt4ojH5r+rfa6hzZaRzzgl4i5VXWrW/lPJYp06zaJ75jYJaB1qKmc7to3sx AOom1CNPxhIVJvDD7/+Q7m/8njfqBjCeoElmrLAZl1xw8afIyd4BZjVGv5FsAn/X fli+HzFtRxgM/g== -----END CERTIFICATE-----Generated at Tue Sep 22 03:08:34 2026 by rpki-client