$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft File: axBPHkq67B7_gPJixi-WwlQ4yOE.mft (raw, json) Hash identifier: vkSaaNiTk6D7AOfR26zrvgpL3dDakDRjc2qnnBi/Xpc= Subject key identifier: 05:08:03:D7:7C:AA:09:83:33:E5:CE:90:4E:9A:B1:A2:07:0F:17:78 Authority key identifier: 6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 Certificate issuer: /CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Certificate serial: 01A0CAB57B6E3114EFD454D1DCF85BD596A7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft Manifest number: 12D0 Signing time: Tue 22 Sep 2026 20:01:26 +0000 Manifest this update: Tue 22 Sep 2026 20:01:26 +0000 Manifest next update: Wed 23 Sep 2026 20:01:26 +0000 Files and hashes: 1: 0H1fWdcgbIVkDrtIX60zLRSDmfk.asa (hash: m+WvR7qD+ymh6yt2x5AGaH23y1MbYzEZgWfbmCnzaQw=) 2: 5tQrTl4ImzQdNGlHAgT-IuX1vY8.roa (hash: GxBCnowP4ZtGzuuaVaDDg4RHg88+PQm56YQPyTz22qs=) 3: AVqIsvmEjZSiT_RRCLhHWqXRj8E.roa (hash: bLqmsGK7/2ZHL3HZwqfJ+vP8kGQVsSwKiV5n2kXAj5s=) 4: BZcnD-tmErBEiB7QcJrqQ989pOo.roa (hash: cUC9ZHrkqmNKaBOeR4eTnUCwVEP+4beM1Gn8IQ8IXNI=) 5: DT0PQm3KFAOHbbVUZ17DY8HvvFE.asa (hash: BarfhuAuoCRLDCgvqKuWLXb1LEEPOJ8pteMWw1ACFFU=) 6: NcRF1eojyuc4J2Qe4PiTr1CaXTk.roa (hash: aViSA/HDXPYiP0oiBue47ud2Jb/yeLRTWtG0amjMQnw=) 7: Q6nx47WK-TIPeGJfoAcbD3_cmuA.asa (hash: YsbIxuDdlulN9sTEsjlvvtUQ0EWP8MmMnGxaWWzj4YU=) 8: Xe0J2fy4oVg3QXL7klruWZtuHvw.roa (hash: YXUiQPNKd3l5WjbM/fjv6lhaHwQbFJ0v83be14OVndw=) 9: ZOnph3q2WtDrgVbQvKechjGXvdo.roa (hash: mqSglzZHwuU9kYmNDMKPxX1vq6m9qHBB/8zS+STdMB4=) 10: Z_zuqvMRPvpefT3OEi-qCPipGXo.roa (hash: 7LwZjvv6rQTVsN12z5AMTE+LxA5Zh9KFfsjLkX5+wWY=) 11: axBPHkq67B7_gPJixi-WwlQ4yOE.crl (hash: 9VTLSBCGwrMlIA2w7xEKW0iBtnUMocm8u30nP92j6Sc=) 12: dLMQNSNoy3Yg1yS8kmfRfucDKeg.roa (hash: 5JV59shBqFh4YXN4lIw9oJhTTek/noywBiyWTkSMXxI=) 13: gFnSYExosWORufIRtLpKLOHGnuw.roa (hash: 3yvPJUqSbLs/JITNOHoGmZnrzFIDl+3H/JB4K+j8KTA=) 14: jEnUatV1_SEhSjb3lDhT-OJx_y4.roa (hash: aVu8qJMaxfh7cIHUjfKGtBtrMLn+MJI16CoDMroLUGY=) 15: p-ohAQEkyhq9O3wYEDu-QLlzeVo.roa (hash: TVhAaIvW3w0pl9GKvfq9WCxfWizgy/rRiS6zkWcQJgc=) 16: q0WTkteUjice7A7HxM9H09oezsI.roa (hash: lfgBegUoN1X7J69hWCSBOlVFuWF7yV6CuCLUK0Dd7TA=) 17: qM93UF_5cbChcOUVot8OLZ6-sP8.roa (hash: yvZ4rCsGHbSUv2j2btQgGFEN/qR7LuIWsmgIOXsHjNM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ca:b5:7b:6e:31:14:ef:d4:54:d1:dc:f8:5b:d5:96:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6b104f1e4abaec1eff80f262c62f96c25438c8e1 Validity Not Before: Sep 22 20:01:26 2026 GMT Not After : Sep 23 20:01:26 2026 GMT Subject: CN=050803d77caa098333e5ce904e9ab1a2070f1778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:74:08:93:8a:42:bb:5c:24:39:21:58:83:7a: fa:54:38:f2:2c:d9:c6:ca:db:2b:aa:bf:56:05:b2: 00:e5:8c:5c:60:c3:e5:e1:46:7e:79:3f:65:d8:cf: 33:34:36:6f:e3:48:60:9d:74:4d:03:69:ba:dd:65: 55:21:20:d7:d2:2b:26:73:ef:fd:9b:84:ec:b9:37: 3a:75:7c:0a:a2:4c:86:01:86:3f:40:b9:4c:03:cc: bb:7a:63:45:5c:99:4c:54:2b:d0:a6:16:ed:71:70: 57:c9:d2:0d:4b:c0:e9:1d:ef:7e:1e:c6:8b:f3:bd: 3d:bb:fb:12:a5:40:ab:60:94:b9:77:4a:14:eb:31: f4:9f:3f:02:58:51:c8:a5:37:2d:f1:b9:a5:7d:04: ec:7f:50:f8:c1:66:a3:7b:c2:5a:80:e4:fc:65:5d: 88:91:37:06:37:09:1e:29:32:40:93:d0:bc:81:b0: c1:05:08:15:25:20:22:54:64:20:0c:15:1e:34:51: 42:28:67:78:92:22:57:c7:fc:19:48:22:c1:f5:40: ac:6d:0a:0b:5b:59:cc:e4:b2:a1:31:96:30:2b:ad: 45:81:98:d0:bb:a1:34:88:dd:90:f6:b2:b6:1a:bc: fe:18:5e:56:2e:1b:3a:29:3d:d7:1e:2c:7f:75:5f: ba:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:08:03:D7:7C:AA:09:83:33:E5:CE:90:4E:9A:B1:A2:07:0F:17:78 X509v3 Authority Key Identifier: keyid:6B:10:4F:1E:4A:BA:EC:1E:FF:80:F2:62:C6:2F:96:C2:54:38:C8:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/axBPHkq67B7_gPJixi-WwlQ4yOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/05/653c24-68e5-4ad8-b763-30c9de205afc/1/axBPHkq67B7_gPJixi-WwlQ4yOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:34:24:c4:0f:ee:8e:af:75:ae:5c:11:09:bf:4a:47:8c:13: 39:0b:28:3c:18:fe:53:7b:de:e4:e2:23:f1:8f:6c:88:c7:98: 3e:1c:b7:f9:4a:81:ed:36:2f:c1:27:ea:a8:a2:e1:51:03:27: 8f:9a:1e:fe:d8:6e:84:02:dc:a2:b0:f2:da:a2:fe:56:f1:22: b7:08:68:1e:5b:eb:0f:01:11:5f:1f:50:68:0c:90:f5:81:60: e4:cc:b0:a7:66:f8:28:2d:13:54:c2:2c:e8:3c:90:c6:61:d0: 8b:19:07:4f:d3:f0:12:9a:6d:04:3c:f6:13:b9:89:e5:7f:4a: 75:f2:45:73:4a:5b:aa:4a:e0:fc:78:3d:b9:85:15:11:64:fe: 68:15:c8:c8:41:7c:f0:ec:17:a9:a6:82:bd:a3:b4:33:3f:d3: f2:b8:ff:b2:e0:76:5b:7d:6c:52:30:9c:b2:c1:ec:5a:46:77: 56:39:ac:20:5a:be:55:8d:dd:cf:bd:82:be:5c:59:24:32:2d: a6:47:89:6c:de:80:9b:64:45:b6:3d:37:6e:11:06:ae:5f:26: c4:be:4c:f9:35:b0:36:9d:1f:4d:c2:dc:63:e6:42:98:1d:bd: fc:c3:b5:30:bc:ff:f6:91:d1:64:a1:13:3c:22:0a:09:14:ea: 05:b0:b3:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDKtXtuMRTv1FTR3Phb1ZanMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiMTA0ZjFlNGFiYWVjMWVmZjgwZjI2MmM2MmY5NmMyNTQz OGM4ZTEwHhcNMjYwOTIyMjAwMTI2WhcNMjYwOTIzMjAwMTI2WjAzMTEwLwYDVQQD EygwNTA4MDNkNzdjYWEwOTgzMzNlNWNlOTA0ZTlhYjFhMjA3MGYxNzc4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHQIk4pCu1wkOSFYg3r6VDjyLNnG ytsrqr9WBbIA5YxcYMPl4UZ+eT9l2M8zNDZv40hgnXRNA2m63WVVISDX0ismc+/9 m4TsuTc6dXwKokyGAYY/QLlMA8y7emNFXJlMVCvQphbtcXBXydINS8DpHe9+HsaL 8709u/sSpUCrYJS5d0oU6zH0nz8CWFHIpTct8bmlfQTsf1D4wWaje8JagOT8ZV2I kTcGNwkeKTJAk9C8gbDBBQgVJSAiVGQgDBUeNFFCKGd4kiJXx/wZSCLB9UCsbQoL W1nM5LKhMZYwK61FgZjQu6E0iN2Q9rK2Grz+GF5WLhs6KT3XHix/dV+61QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAUIA9d8qgmDM+XOkE6asaIHDxd4MB8GA1UdIwQY MBaAFGsQTx5Kuuwe/4DyYsYvlsJUOMjhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMt MzBjOWRlMjA1YWZjLzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNS82NTNjMjQtNjhlNS00YWQ4LWI3NjMtMzBjOWRlMjA1YWZj LzEvYXhCUEhrcTY3QjdfZ1BKaXhpLVd3bFE0eU9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeTQkxA/u jq91rlwRCb9KR4wTOQsoPBj+U3ve5OIj8Y9siMeYPhy3+UqB7TYvwSfqqKLhUQMn j5oe/thuhALcorDy2qL+VvEitwhoHlvrDwERXx9QaAyQ9YFg5Mywp2b4KC0TVMIs 6DyQxmHQixkHT9PwEpptBDz2E7mJ5X9KdfJFc0pbqkrg/Hg9uYUVEWT+aBXIyEF8 8OwXqaaCvaO0Mz/T8rj/suB2W31sUjCcssHsWkZ3VjmsIFq+VY3dz72CvlxZJDIt pkeJbN6Am2RFtj03bhEGrl8mxL5M+TWwNp0fTcLcY+ZCmB29/MO1MLz/9pHRZKET PCIKCRTqBbCzwg== -----END CERTIFICATE-----Generated at Tue Sep 22 22:39:36 2026 by rpki-client