$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: pOhZo4wZ2jeHOk3t9cpALbv0CvCn/ffS/lbo3uDy94o= Subject key identifier: 2F:BD:CD:48:06:B5:8A:09:59:43:E0:07:38:AB:4C:EA:B0:AD:FC:2B Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 01A0D9BB762D54DDB772E9671335D07BE13F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 1A96 Signing time: Fri 25 Sep 2026 18:02:16 +0000 Manifest this update: Fri 25 Sep 2026 18:02:16 +0000 Manifest next update: Sat 26 Sep 2026 18:02:16 +0000 Files and hashes: 1: 3Uhad0KFSfjXI_TbydoftNMdE3g.roa (hash: j9tyqYt4el5e/EHBRQPaMKBm+kYVSqQDGKdC5+GV1fw=) 2: EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa (hash: BrnZ+O7PpPP2CgQz6l0MWy62IQSvfZEBI+G8ayJnLRE=) 3: GCKLMhjEZ4tgpahsAAW0b7v-pbY.roa (hash: vfauSOW8KSxhKm84diH34kDOUYgfp1RoadLmCV5cdWc=) 4: W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa (hash: fb2PFmFnYQYmWpVf2HANiiXyOyVRMMcnLRhOHSluDkI=) 5: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: TviKOeusZYbMfT8Rz7iRTVB3bJXX9tD0/T4OQZ9Out0=) 6: fuQjo-R8V7RgupEifO88mUFsfq4.roa (hash: XgKKf+T/JHflu47fZ8lbK7Ea+coPaRrFsg001BzHny4=) 7: m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa (hash: RVNHVX31tSGpQABOxa6EqSIdwiAZEEfgy9G0c8Rv6CQ=) 8: njVUBNP2pawlmJYfjO-aqV7rHxg.roa (hash: KsrtTqSnlW3K+gpEPkMgT8sO+EsW0Fbd90twROTiMXk=) 9: qSxlathEcN6ZfWcqIYKI4rq_zNk.roa (hash: LYI2xAakIbFGxMC1GmxnDwbT1/w57IsHNS5Uguz6j68=) 10: tA_6j6gquShwOWQHuXqZmv-DGJ8.roa (hash: MBd1V9peNX1ONVT7gAUeTBj/y3gvMH+RO35qWdORDv4=) 11: xrlQxD2aCilEx5MBkW5ICdMkjmI.roa (hash: XyJhHEW8YK45zRLRx/h09ilca39SOfBBhQAfbZq7s3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 15:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d9:bb:76:2d:54:dd:b7:72:e9:67:13:35:d0:7b:e1:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Sep 25 18:02:16 2026 GMT Not After : Sep 26 18:02:16 2026 GMT Subject: CN=2fbdcd4806b58a095943e00738ab4ceab0adfc2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:7b:ba:17:86:45:bb:6c:1d:51:7b:c5:82:27: 52:74:5f:b3:66:b7:ec:f3:18:e0:6c:cf:85:93:25: 3b:1c:53:f3:8f:01:5a:4f:66:e7:f6:ad:bc:5e:73: 1d:3e:0c:3d:c3:f2:15:d3:9e:a5:56:9c:e1:c4:9a: 78:85:42:32:3a:05:56:a0:fb:fa:00:5d:2b:44:a5: 93:4f:b1:a9:b7:49:f2:77:b5:fd:ba:f1:d4:bd:40: 29:be:7f:db:7b:59:35:77:3a:4e:ea:3b:2a:91:16: 80:7b:6d:df:24:0a:91:bf:0a:d8:c1:3e:eb:27:20: 53:2b:ca:87:b2:dc:b8:a9:11:51:6f:05:4f:32:fe: 30:0c:2d:31:fa:85:cc:8c:91:85:52:c0:f6:6f:1e: 9b:b5:9c:79:cc:ec:3f:01:76:4e:ed:e9:d0:a8:ee: d2:6b:5c:63:a3:44:76:40:b5:b4:93:c5:cb:75:64: 18:5e:68:39:76:61:46:cd:c7:25:01:78:6e:9a:4a: 41:21:f7:6f:98:98:ac:f2:8c:fd:c4:29:84:e4:c8: 1b:71:7b:da:a9:7d:63:c8:4a:9f:b1:b5:8a:78:63: 2c:33:16:76:66:be:98:ec:ec:ee:c7:dd:cb:1e:1d: a6:68:e5:f5:91:76:77:e8:ab:31:dd:3c:96:86:b8: 82:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BD:CD:48:06:B5:8A:09:59:43:E0:07:38:AB:4C:EA:B0:AD:FC:2B X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:82:eb:fc:d0:9c:e9:53:69:5b:8b:58:c6:c5:8c:fc:57:08: b2:88:43:48:81:7d:00:58:d1:54:e0:59:16:7d:3d:94:57:c0: b5:b7:71:50:03:45:16:6a:d8:9a:90:14:0d:1f:f2:99:7a:23: b0:10:f6:b6:9b:47:1f:42:a2:16:a3:32:6a:ad:b8:ec:c6:01: 9e:45:50:e6:63:57:61:18:95:bb:80:d3:e2:ed:7f:54:92:77: 9d:5f:0e:3b:74:31:19:69:48:d6:77:f6:60:b0:c1:56:e2:cf: 5a:4f:f9:8d:62:40:f9:55:b9:9a:4b:a5:e4:32:b2:38:82:ca: 3a:5a:fd:02:01:09:d3:ba:78:9d:f0:60:06:0d:3b:5f:c6:c6: 58:ab:d3:77:af:cc:c4:fa:bb:ff:02:82:80:07:49:cb:a1:3f: 3a:1a:8d:dc:55:93:06:40:b4:41:33:7a:40:6b:06:54:59:f5: 0b:f2:c0:da:c3:c2:16:3a:4d:51:0f:46:53:b0:b1:33:ac:a3: 38:24:9c:68:45:33:18:70:8a:47:8c:d4:b5:9b:93:97:06:c4: f5:d9:ed:b9:4a:23:4d:1c:87:a6:2a:16:57:30:37:96:91:f7: 8e:82:9b:ff:47:86:92:18:02:2c:81:01:89:c9:e6:6c:32:25: ca:3a:c2:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDZu3YtVN23culnEzXQe+E/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjYwOTI1MTgwMjE2WhcNMjYwOTI2MTgwMjE2WjAzMTEwLwYDVQQD EygyZmJkY2Q0ODA2YjU4YTA5NTk0M2UwMDczOGFiNGNlYWIwYWRmYzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXu6F4ZFu2wdUXvFgidSdF+zZrfs 8xjgbM+FkyU7HFPzjwFaT2bn9q28XnMdPgw9w/IV056lVpzhxJp4hUIyOgVWoPv6 AF0rRKWTT7Gpt0nyd7X9uvHUvUApvn/be1k1dzpO6jsqkRaAe23fJAqRvwrYwT7r JyBTK8qHsty4qRFRbwVPMv4wDC0x+oXMjJGFUsD2bx6btZx5zOw/AXZO7enQqO7S a1xjo0R2QLW0k8XLdWQYXmg5dmFGzcclAXhumkpBIfdvmJis8oz9xCmE5MgbcXva qX1jyEqfsbWKeGMsMxZ2Zr6Y7Ozux93LHh2maOX1kXZ36Ksx3TyWhriC6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC+9zUgGtYoJWUPgBzirTOqwrfwrMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoLr/NCc 6VNpW4tYxsWM/FcIsohDSIF9AFjRVOBZFn09lFfAtbdxUANFFmrYmpAUDR/ymXoj sBD2tptHH0KiFqMyaq247MYBnkVQ5mNXYRiVu4DT4u1/VJJ3nV8OO3QxGWlI1nf2 YLDBVuLPWk/5jWJA+VW5mkul5DKyOILKOlr9AgEJ07p4nfBgBg07X8bGWKvTd6/M xPq7/wKCgAdJy6E/OhqN3FWTBkC0QTN6QGsGVFn1C/LA2sPCFjpNUQ9GU7CxM6yj OCScaEUzGHCKR4zUtZuTlwbE9dntuUojTRyHpioWVzA3lpH3joKb/0eGkhgCLIEB icnmbDIlyjrCFQ== -----END CERTIFICATE-----Generated at Fri Sep 25 22:37:34 2026 by rpki-client