$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: 5geuyHuRZs0jtv8P6ovLDrQ9nbwMVI6iqeeniUxph50= Subject key identifier: 62:95:8C:5A:A0:07:6D:D0:2F:8C:01:69:13:5E:79:39:80:AD:19:0F Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 01A0BFFA53ACC33B800949426FF0730C805F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 1AC5 Signing time: Sun 20 Sep 2026 18:00:48 +0000 Manifest this update: Sun 20 Sep 2026 18:00:48 +0000 Manifest next update: Mon 21 Sep 2026 18:00:48 +0000 Files and hashes: 1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=) 2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=) 3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=) 4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=) 5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=) 6: 4V-9xblXh3p4hsMcELpD2FlsUlA.roa (hash: kRr8MpAPoenaKhVsIA64eElM5LVWHVB6/SUqnX6gbUI=) 7: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=) 8: 67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa (hash: L8+iE4412JG/GqWOxLjJAzwI6Ft8pIvwH1MR+Hkkdb4=) 9: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=) 10: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=) 11: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=) 12: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=) 13: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=) 14: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=) 15: MxzqwWMUSsptURJMzavxSHfUO8w.roa (hash: poWnPXle6XHD8AxyCDLX0yoA7QSiBEOVvbwg5OVZcvQ=) 16: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=) 17: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=) 18: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=) 19: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=) 20: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=) 21: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=) 22: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=) 23: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=) 24: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: SjkojBdsFk77Aa0TBQ2lCsbl9UDk196Eg0iOzgoHeyE=) 25: dbcdybGv00nsOtltVa4dyFU_6EE.roa (hash: usoQZJzAP9Yyuh6A0tgLlXKSV5FhHtp8AP7C2gTLa9A=) 26: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=) 27: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=) 28: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=) 29: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=) 30: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=) 31: qUwK9s2mmBLTPQlCS2E3qnCndLo.roa (hash: dl9QrW5kzVjvXWRYqlw9UrndrhoQTxzNmZ6VZwh8ncM=) 32: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 16:19:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:bf:fa:53:ac:c3:3b:80:09:49:42:6f:f0:73:0c:80:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Sep 20 18:00:48 2026 GMT Not After : Sep 21 18:00:48 2026 GMT Subject: CN=62958c5aa0076dd02f8c0169135e793980ad190f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:24:5a:2b:14:de:74:53:f7:fc:c3:69:21: b8:39:77:6c:06:1d:af:24:6d:df:8f:c0:3c:a5:d3: 2b:db:3b:7d:62:45:ff:01:d2:37:c4:a9:86:a1:32: 62:1a:9e:cd:28:a7:de:73:b0:0f:9e:36:d2:53:c0: 6b:e7:45:e3:8c:5f:e0:33:9a:89:35:2a:7d:cc:0b: 67:6a:bf:c8:0d:11:ef:0b:bf:aa:32:b3:68:4c:14: a6:aa:66:56:33:7c:6a:11:17:3a:ed:ee:d7:d2:87: df:f7:4f:fc:e1:4c:19:c7:6c:7e:cb:6b:63:1b:e8: 79:39:64:e9:96:78:a6:c3:f2:27:54:4a:a9:c9:26: 30:21:12:65:24:bc:b3:9f:a3:8f:09:ae:c4:cb:2d: 27:dc:35:02:ff:ae:63:ff:3d:e8:15:9c:0c:5c:ee: 8b:55:92:d1:06:58:c6:37:1d:e9:94:c7:6d:7d:51: e1:79:08:e9:94:ad:d3:e2:96:42:06:b1:ab:87:b4: 35:72:a4:61:c2:52:87:f7:d6:19:97:d8:bb:7d:8c: 26:11:14:aa:64:83:7a:65:27:7f:35:b1:25:cd:64: 5b:ef:34:a7:21:73:53:c8:14:06:af:98:f5:99:20: 3a:27:6f:ac:81:a3:d5:7a:26:41:af:df:05:57:f5: b4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:95:8C:5A:A0:07:6D:D0:2F:8C:01:69:13:5E:79:39:80:AD:19:0F X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:85:5b:f3:ac:23:12:7e:37:fa:d1:f7:a5:e4:86:44:3f:db: 91:be:51:13:7c:75:38:08:fc:91:ce:51:17:5f:13:f2:66:ed: 10:0b:91:43:4e:7b:84:81:45:da:cf:e9:70:6c:aa:ff:ce:ff: 34:72:57:9f:c7:76:b4:cd:28:94:cd:bf:a6:26:36:c6:58:ff: 5f:ca:ce:8b:0f:d9:14:6e:fb:e1:40:66:8b:e6:6e:88:83:56: 3e:1e:28:44:3f:50:4d:48:e4:5d:cb:84:ec:3e:71:c0:42:aa: fd:31:a6:26:cb:bb:62:e4:f9:a3:a0:cb:ca:38:f5:42:32:8e: 7d:41:bd:c2:ba:cf:15:c5:f6:fb:bf:fa:a2:17:58:06:8d:a1: 4c:aa:3d:4d:f4:15:e4:9f:3b:4b:92:71:e9:23:1c:3d:d1:d8: 20:ff:dc:dd:0e:be:94:40:c0:cb:83:db:e5:c8:b2:68:d5:b5: 35:22:2c:9c:73:4e:fc:94:3d:ec:5c:10:f9:91:91:c3:00:ec: 20:65:4f:c9:69:b8:7f:e3:5c:44:46:22:b6:23:b5:1e:04:b0: 51:6a:cc:fa:b3:82:f2:3a:96:cf:63:c1:c4:d0:03:ee:36:20: 51:fd:ba:42:85:bf:20:0a:0a:6a:50:45:0e:3e:f0:e8:3b:7c: a4:48:5d:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC/+lOswzuACUlCb/BzDIBfMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwOTIwMTgwMDQ4WhcNMjYwOTIxMTgwMDQ4WjAzMTEwLwYDVQQD Eyg2Mjk1OGM1YWEwMDc2ZGQwMmY4YzAxNjkxMzVlNzkzOTgwYWQxOTBmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1kkWisU3nRT9/zDaSG4OXdsBh2v JG3fj8A8pdMr2zt9YkX/AdI3xKmGoTJiGp7NKKfec7APnjbSU8Br50XjjF/gM5qJ NSp9zAtnar/IDRHvC7+qMrNoTBSmqmZWM3xqERc67e7X0off90/84UwZx2x+y2tj G+h5OWTplnimw/InVEqpySYwIRJlJLyzn6OPCa7Eyy0n3DUC/65j/z3oFZwMXO6L VZLRBljGNx3plMdtfVHheQjplK3T4pZCBrGrh7Q1cqRhwlKH99YZl9i7fYwmERSq ZIN6ZSd/NbElzWRb7zSnIXNTyBQGr5j1mSA6J2+sgaPVeiZBr98FV/W0IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGKVjFqgB23QL4wBaRNeeTmArRkPMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj4Vb86wj En43+tH3peSGRD/bkb5RE3x1OAj8kc5RF18T8mbtEAuRQ057hIFF2s/pcGyq/87/ NHJXn8d2tM0olM2/piY2xlj/X8rOiw/ZFG774UBmi+ZuiINWPh4oRD9QTUjkXcuE 7D5xwEKq/TGmJsu7YuT5o6DLyjj1QjKOfUG9wrrPFcX2+7/6ohdYBo2hTKo9TfQV 5J87S5Jx6SMcPdHYIP/c3Q6+lEDAy4Pb5ciyaNW1NSIsnHNO/JQ97FwQ+ZGRwwDs IGVPyWm4f+NcREYitiO1HgSwUWrM+rOC8jqWz2PBxNAD7jYgUf26QoW/IAoKalBF Dj7w6Dt8pEhd9w== -----END CERTIFICATE-----Generated at Mon Sep 21 01:32:56 2026 by rpki-client