$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json) Hash identifier: FkHw8q9C0hpcIW7N+BUl6QB2LP+ooEt+oy1NnGI9cjs= Subject key identifier: AF:E8:3B:FB:8E:48:79:3D:84:77:A3:20:63:35:04:D0:A2:9D:E9:87 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 01A0CD110F2273A7BAEC913381F627B1707C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft Manifest number: 1988 Signing time: Wed 23 Sep 2026 07:00:42 +0000 Manifest this update: Wed 23 Sep 2026 07:00:42 +0000 Manifest next update: Thu 24 Sep 2026 07:00:42 +0000 Files and hashes: 1: 55lTuhAI20BHIf-zeSdkeAFaMAg.roa (hash: 6WOjfM5Zbb9/cs9Lu29lst5KqtNeJQ6bLtoEOKJiPTQ=) 2: 7NA2LegCljPM-6ilz2F5cnaoBJw.roa (hash: qjOTsmyHG6MOUTIadkX/zmkZDlAkqPzHJKetzF1R3ds=) 3: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=) 4: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=) 5: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=) 6: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=) 7: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=) 8: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=) 9: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=) 10: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=) 11: OOZCU9RDZbWm90IHhggbkADAyok.roa (hash: yzkJaDkuzS/Q97fyxLhVwM/SdV10qs3BxmQUOzU77kU=) 12: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=) 13: X3TOXxPWXzlBaEZ6x5xVJV0GN2g.roa (hash: lAKtM50aILYHfyj/dnL/G2PsJlkpfMmR8vppwS3z8KU=) 14: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=) 15: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: JGZp42o5ZSQFtw7t+4EminWxOB5Uz+qiP6t6JENpLpE=) 16: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=) 17: e9owlvY-NY5qGBDhXZ7WFxeggIc.roa (hash: QGa2zFUrPTeR+OERG79pTeFCAO6qtUgwUx98rjXhrvE=) 18: jVvCjidFfK-8IL92OyEeuSlStW0.roa (hash: 95JD6YEa33c2IW5jEGSMsvaX4Vq46tjO1+Oed4maTyw=) 19: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=) 20: twRPR7YMxdedDnIoOoDSSMLLV5I.roa (hash: iG5iFiWGGZ1ctfdvgUYVkBJLEXDfn4PbykZkkKVwlz8=) 21: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (hash: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM=) 22: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=) 23: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 07:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:11:0f:22:73:a7:ba:ec:91:33:81:f6:27:b1:70:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Sep 23 07:00:42 2026 GMT Not After : Sep 24 07:00:42 2026 GMT Subject: CN=afe83bfb8e48793d8477a320633504d0a29de987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:3a:b6:16:9c:e7:65:9d:72:6a:ae:f1:5e:f2: 15:2e:04:76:ef:1e:74:5e:16:25:38:c5:e9:dc:79: eb:f1:fc:d0:49:56:74:d1:28:a3:34:86:01:8f:c5: d1:5f:ac:e6:99:02:6f:03:b0:40:9c:b8:35:6e:2d: 33:17:10:3c:f8:40:db:0a:8a:5a:c0:ef:c6:bf:d4: 22:15:11:c1:67:bb:00:2f:c6:88:df:d9:e7:9f:4a: 6a:b5:8c:18:b7:91:ef:6a:e2:10:52:4a:c4:ee:10: b4:f4:56:2f:0f:31:0b:1f:c7:5d:3a:b7:fd:43:1e: 08:4d:12:ff:81:c8:13:5b:60:e9:36:cb:56:6d:77: c0:f0:f6:0c:c7:ea:2a:5a:cc:32:ff:e4:d4:42:8e: b9:05:bd:46:be:5c:84:cd:d2:ec:ab:e2:d3:36:f7: 11:fd:98:be:95:54:fa:65:3e:d0:86:4c:b5:34:e5: 5b:74:70:74:4e:84:c0:f3:49:43:7c:cf:8d:fe:d9: 66:ae:0c:ed:d4:31:3c:64:68:1a:04:4f:eb:1a:45: 0c:86:2a:b4:fb:70:99:6f:9a:94:07:07:3f:7e:0f: 22:08:1e:59:6a:4a:78:b5:ff:c5:40:1d:c7:aa:7c: 85:be:4c:4c:b7:ed:23:a1:17:c7:d4:98:3d:87:95: 09:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E8:3B:FB:8E:48:79:3D:84:77:A3:20:63:35:04:D0:A2:9D:E9:87 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:13:f8:f1:3d:64:a0:aa:f3:1a:b2:8a:ba:0e:2c:78:1d:6b: 48:0b:2c:c9:15:49:a0:5b:5f:43:fc:9d:de:76:e1:08:6d:a5: 74:f9:14:be:70:2c:57:21:c9:03:bc:3f:b4:52:d8:0d:a9:6b: 71:c1:37:7a:7d:0a:0a:7e:4a:ad:a6:93:74:f2:a8:6d:aa:1c: 7f:ce:1c:fb:c0:cb:ff:96:1c:18:e2:55:52:fb:49:1e:3f:e6: 2f:13:2d:02:68:3c:2c:36:54:a6:e8:6f:51:21:c3:2e:c6:26: 8d:9f:15:f7:4c:6d:99:0f:2a:27:76:71:41:e1:ca:d9:5d:a7: dd:ee:69:0b:24:1c:e1:36:51:a7:c4:26:d4:57:cf:f4:15:18: 27:9b:ae:98:81:b0:f6:0c:18:75:63:53:b4:2c:29:bb:38:d0: 55:b3:de:d0:0c:af:fc:f7:91:26:be:3e:6d:9a:43:a7:5a:c0: f1:e6:42:2a:8c:77:47:56:cc:46:26:dd:4e:4b:19:94:22:0d: d5:a1:88:4f:d3:d9:bf:44:47:fe:86:a5:69:f7:99:53:9e:18: df:d4:8a:b3:c4:aa:02:bb:c0:ea:53:22:bd:6c:b5:3f:83:2c: 1a:d7:dd:85:2e:c7:aa:05:00:9b:07:5f:6d:e5:0a:c1:cf:fa: 5e:70:05:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNEQ8ic6e67JEzgfYnsXB8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYwOTIzMDcwMDQyWhcNMjYwOTI0MDcwMDQyWjAzMTEwLwYDVQQD EyhhZmU4M2JmYjhlNDg3OTNkODQ3N2EzMjA2MzM1MDRkMGEyOWRlOTg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozq2FpznZZ1yaq7xXvIVLgR27x50 XhYlOMXp3Hnr8fzQSVZ00SijNIYBj8XRX6zmmQJvA7BAnLg1bi0zFxA8+EDbCopa wO/Gv9QiFRHBZ7sAL8aI39nnn0pqtYwYt5HvauIQUkrE7hC09FYvDzELH8ddOrf9 Qx4ITRL/gcgTW2DpNstWbXfA8PYMx+oqWswy/+TUQo65Bb1GvlyEzdLsq+LTNvcR /Zi+lVT6ZT7Qhky1NOVbdHB0ToTA80lDfM+N/tlmrgzt1DE8ZGgaBE/rGkUMhiq0 +3CZb5qUBwc/fg8iCB5Zakp4tf/FQB3HqnyFvkxMt+0joRfH1Jg9h5UJxwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK/oO/uOSHk9hHejIGM1BNCinemHMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhP48T1k oKrzGrKKug4seB1rSAssyRVJoFtfQ/yd3nbhCG2ldPkUvnAsVyHJA7w/tFLYDalr ccE3en0KCn5KraaTdPKobaocf84c+8DL/5YcGOJVUvtJHj/mLxMtAmg8LDZUpuhv USHDLsYmjZ8V90xtmQ8qJ3ZxQeHK2V2n3e5pCyQc4TZRp8Qm1FfP9BUYJ5uumIGw 9gwYdWNTtCwpuzjQVbPe0Ayv/PeRJr4+bZpDp1rA8eZCKox3R1bMRibdTksZlCIN 1aGIT9PZv0RH/oalafeZU54Y39SKs8SqArvA6lMivWy1P4MsGtfdhS7HqgUAmwdf beUKwc/6XnAFag== -----END CERTIFICATE-----Generated at Wed Sep 23 18:52:25 2026 by rpki-client