$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json) Hash identifier: 9moojPMkV5ig6wHJcb5T1PuppQ2/SNbwZGN7rnZiJHY= Subject key identifier: 47:A7:24:10:C5:21:C4:49:F6:54:15:53:FB:0B:93:6C:55:5C:FD:5B Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 01A0D048F9AE1F12B4E8CF2DA7BF0528D39A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft Manifest number: 146F Signing time: Wed 23 Sep 2026 22:00:38 +0000 Manifest this update: Wed 23 Sep 2026 22:00:38 +0000 Manifest next update: Thu 24 Sep 2026 22:00:38 +0000 Files and hashes: 1: 2_M3hjSd7CTsmWcIflPRCb5WQkA.roa (hash: lb+AroYfcHpsLjtLQUflH3VlWHXn0bD5oDoLv70oXjU=) 2: 3kcbw-dgnF65c9CDIHb6oRz5mbE.roa (hash: QQtdRKDztrBVpT4Kn//rOIxZPrmQ8oKjnI8387RYNPY=) 3: 96rJsHAOGztIiBmuIQwVgfCnCEg.roa (hash: HXlUgu5VkFQPapP9Km2yXuNEvNC7tZuuwjHTBZv9OfU=) 4: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=) 5: JBKG2fPxha4I8eVa__ciDh4peDo.roa (hash: 0ESzwcVpkMcL4vVEqYna3uF1a7dneXlkBnlxJhgD8vY=) 6: OYv_dkuy_Y2dlLzuuRzwRfbuYvE.roa (hash: CC0Q+2nNKezsmgtyWfzEhTdriEmSy+Gje/Gosq8c8Uw=) 7: ROEHK_G3SXoguSIySITojCyt7gk.roa (hash: fmVPdgS70cBiSz2OhfXWCfYCFMDOn+khWDbE3US4h/Q=) 8: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=) 9: Uclczo4m3YFGZzaBjS7wUFsNjj4.roa (hash: RzME+AM4xoxLjN4Iilm7nRafVtW/4U1QaD/Olg4yRQM=) 10: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: 6VU1N4lJF5WyDb6BK+cO2nXbEbdG6F+3smpVJ5jv1pg=) 11: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=) 12: ghqGXV9jPiUhtjyXqrqV0bWR1FA.roa (hash: JhqWV5YE42ZkEuBGzNHEweX5ScPkIholme9X8e62de0=) 13: h8XDp3DDphz-qzuGmGW4Nyqxx5w.roa (hash: befsJFXVxRWhhVswwqWlhSMWy+Fjjq0lJLvYTlqPXpg=) 14: hVE0-LBCE_tncgEsqz7BMTazayw.roa (hash: wVNCRt/H0Wqed1L+d4bjTNofNjKPKn3Yt16DdTXaykc=) 15: jeJjQTbi3buFTK0Rd0N3acScMvk.roa (hash: konzzCvZCQAeqI0lUlmLQesMfmRzbICQy/UJADyxvc0=) 16: jtUzZB59QbTOM17jd9By2IaF-ZY.roa (hash: T2ghb7+ADXX8s8FHjWRFHJGKKRC9TODHrHf0sh2ohnE=) 17: mBhjPfGVJG9ZGT8iRdHP0MIOueY.roa (hash: xIs0dwRIC5rfrVJwL9ieANY/4F7I159Hw9/dNHaXeVw=) 18: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=) 19: pvdxW0h9aFPze864ivZVpgPRpb0.roa (hash: 85/eS4oRTkOHemGg/ZPqiubdMegp/0IRFyauSlAmyRE=) 20: r8wF2OXMB_9Dwl4OqLwAGoqB14E.roa (hash: hrHAOe2h0QoqTlJJp+6hxC5CoPl4npWeklLV6pbne5o=) 21: v7sb-ddXVntsBTLD_1XCaXcDAcQ.roa (hash: biM1aFHbCZlBUo4OzDJSYEHppH1aAPsD2cIhIW+wz1U=) 22: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 18:27:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:48:f9:ae:1f:12:b4:e8:cf:2d:a7:bf:05:28:d3:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Sep 23 22:00:38 2026 GMT Not After : Sep 24 22:00:38 2026 GMT Subject: CN=47a72410c521c449f6541553fb0b936c555cfd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:df:58:89:92:e3:ed:c0:03:60:c9:7a:fb:d5: 6f:c3:5b:d7:5e:e5:51:f7:f4:45:fc:1b:51:23:38: 60:c1:21:d3:f4:df:b6:16:8d:3e:fd:fd:b1:8e:6e: f1:cd:d8:5b:67:cb:1c:78:10:db:2e:a1:70:7f:fa: ca:02:5c:c2:4d:8c:8f:ac:ee:19:6d:3a:3b:96:bb: ee:6e:17:f9:0e:bc:7b:83:c4:db:b6:cd:b6:9c:95: cb:39:4a:50:f7:55:8f:be:4d:55:96:91:c9:67:2e: a1:54:ef:46:1a:a7:34:26:07:80:b5:a1:83:40:a6: 34:2b:75:3b:c9:0e:8e:d8:af:01:03:84:ae:d0:1d: 9d:63:5e:16:b3:7d:28:d6:b2:4b:57:12:0f:94:5f: a9:28:8d:73:ca:3f:68:20:ec:49:bb:27:03:9f:fd: 8b:ab:f5:c0:30:d6:9e:e2:16:c5:99:f1:59:ef:52: d8:39:e0:d1:3f:c1:34:09:6c:c7:0b:a8:8b:44:38: 6a:b4:d6:af:3a:62:21:e2:31:80:f4:bf:61:c8:65: 4e:aa:4f:62:ae:4d:d2:f0:e4:b4:78:6d:da:e4:6e: e8:a2:27:54:04:39:e7:ff:47:3b:ac:33:f6:b4:10: ab:94:fc:f6:9b:c1:ef:69:1e:67:13:d5:c3:23:25: 48:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:A7:24:10:C5:21:C4:49:F6:54:15:53:FB:0B:93:6C:55:5C:FD:5B X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:d4:b2:32:4f:db:90:96:a6:95:65:6c:40:c9:7c:53:26:ed: 4a:2f:c5:3c:c6:5c:12:42:0b:6b:87:b1:85:cd:43:a7:70:dd: 53:9b:e8:aa:ac:d7:a7:ee:a6:47:df:59:d2:b1:9d:ea:60:6e: 23:d4:30:bf:21:4b:d8:d5:b1:26:1b:56:8f:c2:c7:a2:9c:fc: a4:8f:b7:14:4e:a3:94:5a:3f:38:4a:91:e6:c9:39:6f:33:6a: bd:28:80:97:12:29:bc:b7:93:6d:8a:cb:08:96:47:5d:4a:9d: 42:f6:64:6c:5d:8e:e7:06:f9:93:e5:d3:0d:bd:a1:e5:59:91: 44:9d:84:c4:50:56:20:70:cc:be:c5:72:d7:53:e5:26:28:38: 99:bf:7e:fb:ce:3a:7c:33:90:47:d3:cd:69:7a:17:77:0c:50: 6a:f5:a7:fc:da:26:10:3a:56:2a:a2:ce:55:07:0d:6b:a0:ec: ae:f6:73:e0:1d:26:ca:8f:73:78:1a:5d:1f:3e:fc:32:7c:26: b8:72:68:67:e6:78:67:95:99:e3:5a:01:c3:fa:ee:7e:81:26: 6d:b8:93:a4:72:71:3a:60:8c:31:9e:98:bc:8e:3a:93:b4:b8: 2d:e8:2f:a7:cc:69:4c:1b:ed:d6:66:cd:92:ca:99:ed:4a:1f: 3d:f2:1f:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQSPmuHxK06M8tp78FKNOaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjYwOTIzMjIwMDM4WhcNMjYwOTI0MjIwMDM4WjAzMTEwLwYDVQQD Eyg0N2E3MjQxMGM1MjFjNDQ5ZjY1NDE1NTNmYjBiOTM2YzU1NWNmZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd9YiZLj7cADYMl6+9Vvw1vXXuVR 9/RF/BtRIzhgwSHT9N+2Fo0+/f2xjm7xzdhbZ8sceBDbLqFwf/rKAlzCTYyPrO4Z bTo7lrvubhf5Drx7g8Tbts22nJXLOUpQ91WPvk1VlpHJZy6hVO9GGqc0JgeAtaGD QKY0K3U7yQ6O2K8BA4Su0B2dY14Ws30o1rJLVxIPlF+pKI1zyj9oIOxJuycDn/2L q/XAMNae4hbFmfFZ71LYOeDRP8E0CWzHC6iLRDhqtNavOmIh4jGA9L9hyGVOqk9i rk3S8OS0eG3a5G7ooidUBDnn/0c7rDP2tBCrlPz2m8HvaR5nE9XDIyVIdwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEenJBDFIcRJ9lQVU/sLk2xVXP1bMB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALtSyMk/b kJamlWVsQMl8UybtSi/FPMZcEkILa4exhc1Dp3DdU5voqqzXp+6mR99Z0rGd6mBu I9QwvyFL2NWxJhtWj8LHopz8pI+3FE6jlFo/OEqR5sk5bzNqvSiAlxIpvLeTbYrL CJZHXUqdQvZkbF2O5wb5k+XTDb2h5VmRRJ2ExFBWIHDMvsVy11PlJig4mb9++846 fDOQR9PNaXoXdwxQavWn/NomEDpWKqLOVQcNa6DsrvZz4B0myo9zeBpdHz78Mnwm uHJoZ+Z4Z5WZ41oBw/rufoEmbbiTpHJxOmCMMZ6YvI46k7S4Legvp8xpTBvt1mbN ksqZ7UofPfIfSg== -----END CERTIFICATE-----Generated at Thu Sep 24 03:04:28 2026 by rpki-client