$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft File: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft (raw, json) Hash identifier: SnefNYsk2PREat2hWVDFwl8BmfE3fDtCzzWnkyAf0gs= Subject key identifier: AF:8A:7D:37:82:B8:A1:E0:A9:30:17:4A:AD:67:A5:6A:B3:26:CA:CD Authority key identifier: 32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 Certificate issuer: /CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Certificate serial: 01A0E853BA906C48C144250CF9CF55E04063 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft Manifest number: 1A7C Signing time: Mon 28 Sep 2026 14:03:16 +0000 Manifest this update: Mon 28 Sep 2026 14:03:16 +0000 Manifest next update: Tue 29 Sep 2026 14:03:16 +0000 Files and hashes: 1: 2UPTAgiJvUFj9KxwMHk_neJV1Ts.roa (hash: chaCLnBUf8VW3Cyy0U4Y2DmReJ/YoQuLRxfoEk9G/Zs=) 2: 5r35RdY0vy4lh3WOV010F9-QFXw.roa (hash: G+I8XeYNJKZwLdV9Hm/0m91ziGrBNMHkmj6EJpZj11c=) 3: CIsoBMnJ1HH2_kjCOniPyHt_zdo.roa (hash: rIsVKuNDzl7s31Uqv2wlQw7E8fHntXl7uQadNq2LiGk=) 4: LU_rRpVG0rNU5sbORgmoor-WG8E.roa (hash: v6SXttNOyzn7P8hwnB7Tofa/4Bnu7wdokfdtafR2ixc=) 5: Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl (hash: HvEYigkHgM8OPymYZcsN4yBDoTdeJphR8iAay1bqiiE=) 6: SP8ZFm--93L34rMKDZHfL8Eh_ro.roa (hash: cp6DWhPPeKxvKEzaDsnvDh3dMYI9vYEIXkFKulFhNyA=) 7: aZAulIKVvXbN8omq0JhX_jGTQpQ.roa (hash: a1Ep0d4JmHuZC92VG94ayoNuXL+o7ITThTyrhPBbaU4=) 8: exjfT9uAFU7f_gIJUid1TXJtR8A.roa (hash: 4rc5j3Of5lWDlFZbenegwws4HWNu69CTDYEmMKe9DAY=) 9: o6k4KBPjdil3WuB7HudYZFQVuio.roa (hash: 5XEGVtaoTy/OrakXg9NARGFxY6y76Ds7hBFFlDQicdE=) 10: rcsE8T3loa9paQtOZYTdGqYZZdQ.roa (hash: aTqIKXOe4lJEG0nzJ4iYV8aOwdLjU0r2z02TUxqz12s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 14:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e8:53:ba:90:6c:48:c1:44:25:0c:f9:cf:55:e0:40:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=320b24a740f2e61632050adc146c1ee6a3e686c5 Validity Not Before: Sep 28 14:03:16 2026 GMT Not After : Sep 29 14:03:16 2026 GMT Subject: CN=af8a7d3782b8a1e0a930174aad67a56ab326cacd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:37:bb:1a:1a:19:74:08:87:fe:d7:bc:81:22: eb:42:1c:dd:a0:cd:10:d1:b9:72:c6:9f:fd:7f:c3: f6:18:cf:a1:76:57:f0:9c:10:7b:43:e5:e2:e0:85: 1d:0a:60:b0:11:d9:d6:e0:95:31:98:2e:c7:a0:37: bf:cd:18:be:fd:ee:48:57:d2:4c:98:27:22:94:a7: 78:43:c9:be:9f:69:c1:06:65:e8:4c:e3:b1:c5:ab: 28:91:6c:44:dd:d2:29:92:59:e3:2a:b8:32:7e:ed: aa:df:b2:da:7c:c5:e0:df:c8:6b:76:5a:ec:3f:ab: b8:2f:3c:8c:ea:25:95:c9:49:63:41:54:f6:3c:16: 5c:ca:5a:3c:72:3b:27:e6:f3:b7:b2:7f:6f:a4:de: 0b:9b:df:fe:8b:e1:ab:e8:96:1a:e6:f0:5e:7a:8b: 14:cf:2f:9e:61:97:e0:b8:07:29:86:41:1a:91:e3: 71:f5:1a:1e:ea:dd:eb:d5:9d:54:b8:96:6a:db:d7: 8e:c0:d0:62:dc:67:c0:00:ab:4d:e6:29:fc:3b:df: 5a:6c:fe:ee:67:64:13:d4:73:34:ad:6e:17:01:c3: 86:d3:d8:37:b5:15:8e:02:69:c7:ca:0d:76:15:b6: 94:0a:ca:69:b2:52:c6:4c:59:6a:7c:09:3d:67:fa: da:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:8A:7D:37:82:B8:A1:E0:A9:30:17:4A:AD:67:A5:6A:B3:26:CA:CD X509v3 Authority Key Identifier: keyid:32:0B:24:A7:40:F2:E6:16:32:05:0A:DC:14:6C:1E:E6:A3:E6:86:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/9c27e4-d7b1-43c1-a38f-94914f5ddb3c/1/Mgskp0Dy5hYyBQrcFGwe5qPmhsU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:fe:49:dd:14:0f:05:f0:bc:df:1e:f3:9a:c2:86:bd:3a:dc: 05:e1:de:5e:5a:b2:8c:8f:16:84:9e:aa:96:f5:04:11:d4:19: 09:0d:92:47:55:dd:78:d1:e3:11:cb:46:23:b7:94:d3:0d:ed: d5:66:ae:a2:19:19:9e:ff:75:69:ac:5f:e4:3c:db:9e:77:ae: b3:87:20:7f:98:8f:75:d6:94:24:67:e2:01:3a:9a:ca:2a:ce: 77:db:fe:46:61:71:72:46:ad:a7:d6:bd:7f:e9:94:da:a3:db: 01:b2:49:28:ca:f5:9a:1e:c8:27:59:0e:91:70:00:7a:44:7b: a5:79:ac:67:9e:ac:72:cd:ea:70:19:13:9c:60:43:9a:05:3e: c7:f5:df:04:f5:1f:54:33:ba:12:d5:52:f1:af:0f:f3:2f:79: bc:3a:36:ea:ff:d9:8c:5d:c3:5b:b9:7d:58:ad:02:06:b2:ec: 7f:37:bb:58:90:1a:7f:15:4b:1f:c1:aa:c1:c6:c4:13:99:d4: 63:54:23:69:07:f7:72:fd:cc:c9:51:12:29:4f:65:0b:5b:92: 24:f7:ea:35:87:35:85:42:52:c1:f0:6f:a8:c9:56:a7:35:f0: 01:28:35:f5:24:fb:bd:86:58:56:dd:9a:e2:2a:1e:c6:55:bf: 84:a8:a8:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDoU7qQbEjBRCUM+c9V4EBjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyMGIyNGE3NDBmMmU2MTYzMjA1MGFkYzE0NmMxZWU2YTNl Njg2YzUwHhcNMjYwOTI4MTQwMzE2WhcNMjYwOTI5MTQwMzE2WjAzMTEwLwYDVQQD EyhhZjhhN2QzNzgyYjhhMWUwYTkzMDE3NGFhZDY3YTU2YWIzMjZjYWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTe7GhoZdAiH/te8gSLrQhzdoM0Q 0blyxp/9f8P2GM+hdlfwnBB7Q+Xi4IUdCmCwEdnW4JUxmC7HoDe/zRi+/e5IV9JM mCcilKd4Q8m+n2nBBmXoTOOxxasokWxE3dIpklnjKrgyfu2q37LafMXg38hrdlrs P6u4LzyM6iWVyUljQVT2PBZcylo8cjsn5vO3sn9vpN4Lm9/+i+Gr6JYa5vBeeosU zy+eYZfguAcphkEakeNx9Roe6t3r1Z1UuJZq29eOwNBi3GfAAKtN5in8O99abP7u Z2QT1HM0rW4XAcOG09g3tRWOAmnHyg12FbaUCsppslLGTFlqfAk9Z/raewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK+KfTeCuKHgqTAXSq1npWqzJsrNMB8GA1UdIwQY MBaAFDILJKdA8uYWMgUK3BRsHuaj5obFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYt OTQ5MTRmNWRkYjNjLzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy85YzI3ZTQtZDdiMS00M2MxLWEzOGYtOTQ5MTRmNWRkYjNj LzEvTWdza3AwRHk1aFl5QlFyY0ZHd2U1cVBtaHNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlf5J3RQP BfC83x7zmsKGvTrcBeHeXlqyjI8WhJ6qlvUEEdQZCQ2SR1XdeNHjEctGI7eU0w3t 1WauohkZnv91aaxf5Dzbnneus4cgf5iPddaUJGfiATqayirOd9v+RmFxckatp9a9 f+mU2qPbAbJJKMr1mh7IJ1kOkXAAekR7pXmsZ56scs3qcBkTnGBDmgU+x/XfBPUf VDO6EtVS8a8P8y95vDo26v/ZjF3DW7l9WK0CBrLsfze7WJAafxVLH8GqwcbEE5nU Y1QjaQf3cv3MyVESKU9lC1uSJPfqNYc1hUJSwfBvqMlWpzXwASg19ST7vYZYVt2a 4ioexlW/hKiofQ== -----END CERTIFICATE-----Generated at Mon Sep 28 18:05:50 2026 by rpki-client