$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft File: dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json) Hash identifier: hqo52hIYp4vbHpHn6tdsrx1gfGjRwwZ5hjoo8/uvZN0= Subject key identifier: AC:8C:17:31:C9:70:93:D8:75:34:A0:B6:95:6A:82:62:7A:24:44:C5 Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 Certificate issuer: /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Certificate serial: 01A0CFDB3108BF79DC17A34B74C1840DDC44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft Manifest number: 1A82 Signing time: Wed 23 Sep 2026 20:00:43 +0000 Manifest this update: Wed 23 Sep 2026 20:00:43 +0000 Manifest next update: Thu 24 Sep 2026 20:00:43 +0000 Files and hashes: 1: 1A0OgYXG3iVS7dYyDn-eVIhO8eM.roa (hash: FrUEKKMZAguXIpXWScc68qO/IKUabeFzGLn6njmAiyg=) 2: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=) 3: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=) 4: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=) 5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=) 6: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=) 7: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=) 8: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=) 9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: J4d05x2936MVWs3oTvPGI0W/+/SN7ESVrZ4fsp5kDbc=) 10: nZHqQhlAUfpi-xyQQIlLnT_5zVY.roa (hash: pyPCsxzb7EcyMnd9eFCWZ2gNgE3Dkb4SSpOIKliViJ8=) 11: x0ebLIn0t6JXubFvQS7oR3d-wBo.roa (hash: ZkNINB/VjvBW0O1ekeXPpLo6DfUsQAyBCtiUYgei5OI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:db:31:08:bf:79:dc:17:a3:4b:74:c1:84:0d:dc:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56 Validity Not Before: Sep 23 20:00:43 2026 GMT Not After : Sep 24 20:00:43 2026 GMT Subject: CN=ac8c1731c97093d87534a0b6956a82627a2444c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5c:9c:e7:57:fe:91:90:23:64:2f:82:3c:90: 2f:e5:2c:ad:cf:c2:ff:48:47:85:28:58:71:a9:bf: c7:eb:e9:87:e5:ec:d6:50:89:ad:ae:d2:12:99:1f: 69:6f:0b:d6:92:59:92:77:24:7e:c2:4e:b9:11:ac: 9a:fa:f0:f8:84:c3:6f:a6:62:4c:cb:4c:31:bc:17: 02:d0:3b:0c:83:1b:ee:2f:f2:25:1d:20:05:cb:1d: c0:01:08:e6:80:00:c2:4a:d2:92:13:27:bf:c6:4b: 06:2b:58:71:86:1f:fd:b7:25:3f:77:51:3d:2f:d4: 66:d6:83:c9:43:71:1d:b1:ea:bb:eb:f8:88:2b:ef: 41:71:6e:e9:9b:cf:bd:2f:51:27:0f:86:19:fc:da: f3:53:4e:3f:ba:c0:ba:0a:81:19:fc:39:f5:fa:52: 30:9f:ba:7f:01:a5:f8:6b:8e:c8:23:77:2d:38:9a: 6c:96:ba:78:af:7d:67:55:f0:65:17:a5:95:ff:c3: 23:c4:57:a0:55:6a:43:d7:23:90:b5:00:ae:9f:09: cf:75:96:ff:b9:25:da:1a:fc:aa:16:c2:88:d0:b5: 7e:b0:3a:45:f3:03:81:c1:48:cf:4a:a3:af:20:0d: 21:01:15:48:72:d5:98:74:ac:56:ca:18:a1:2e:45: c6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:8C:17:31:C9:70:93:D8:75:34:A0:B6:95:6A:82:62:7A:24:44:C5 X509v3 Authority Key Identifier: keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:3d:b6:c5:0f:2b:cf:0d:fd:41:af:d2:27:0e:af:0b:30:97: 47:f3:a2:37:58:b6:5b:81:b1:a6:6f:62:77:97:27:95:fd:8e: 66:23:8c:d3:0b:ad:87:24:71:13:86:bd:d5:4d:61:df:6b:fd: 56:91:e8:71:ef:33:97:31:77:9a:0b:e0:7c:fa:aa:fe:60:c5: d6:55:79:ef:2d:1c:f4:97:db:86:37:65:90:e3:42:7f:f7:5d: 29:71:25:fc:48:c7:e5:f2:23:8f:2f:ed:0c:03:bb:71:c2:40: 92:7f:ee:13:b0:24:5c:82:9c:31:af:53:18:40:84:32:96:5e: d0:79:75:26:f8:b7:37:c0:33:22:0f:52:87:a9:4f:f0:13:31: af:ce:04:97:cb:7d:5c:25:76:f6:07:cc:b0:9a:c0:c1:94:5a: 76:4a:74:6c:28:ed:18:04:97:cc:92:2f:3d:3f:7e:94:14:02: d6:a6:cd:ec:56:f9:ed:fe:03:d0:53:50:1a:c8:0f:92:3b:a8: 69:b9:52:54:41:bf:4d:76:80:f7:29:7a:eb:e3:fb:89:d5:d2: e8:c6:2a:54:c9:6d:da:19:0f:ef:ba:21:1a:c8:43:0a:3d:cb: 93:a5:90:89:9f:84:0a:98:25:dd:59:8c:56:17:8a:20:74:da: fc:2f:e8:4d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDP2zEIv3ncF6NLdMGEDdxEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NTRhYzRjN2Y0NTFjNWJiOTM4MmZiY2Q0NmQ3MGM0YzBm OWRlNTYwHhcNMjYwOTIzMjAwMDQzWhcNMjYwOTI0MjAwMDQzWjAzMTEwLwYDVQQD EyhhYzhjMTczMWM5NzA5M2Q4NzUzNGEwYjY5NTZhODI2MjdhMjQ0NGM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVyc51f+kZAjZC+CPJAv5Sytz8L/ SEeFKFhxqb/H6+mH5ezWUImtrtISmR9pbwvWklmSdyR+wk65Eaya+vD4hMNvpmJM y0wxvBcC0DsMgxvuL/IlHSAFyx3AAQjmgADCStKSEye/xksGK1hxhh/9tyU/d1E9 L9Rm1oPJQ3Edseq76/iIK+9BcW7pm8+9L1EnD4YZ/NrzU04/usC6CoEZ/Dn1+lIw n7p/AaX4a47II3ctOJpslrp4r31nVfBlF6WV/8MjxFegVWpD1yOQtQCunwnPdZb/ uSXaGvyqFsKI0LV+sDpF8wOBwUjPSqOvIA0hARVIctWYdKxWyhihLkXGUQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKyMFzHJcJPYdTSgtpVqgmJ6JETFMB8GA1UdIwQY MBaAFHVUrEx/RRxbuTgvvNRtcMTA+d5WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4Mjgt ZDkzMzdkYjM5ZDFmLzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy84N2EwMGEtYjZmNi00NzIxLWE4MjgtZDkzMzdkYjM5ZDFm LzEvZFZTc1RIOUZIRnU1T0MtODFHMXd4TUQ1M2xZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVT22xQ8r zw39Qa/SJw6vCzCXR/OiN1i2W4Gxpm9id5cnlf2OZiOM0wuthyRxE4a91U1h32v9 VpHoce8zlzF3mgvgfPqq/mDF1lV57y0c9JfbhjdlkONCf/ddKXEl/EjH5fIjjy/t DAO7ccJAkn/uE7AkXIKcMa9TGECEMpZe0Hl1Jvi3N8AzIg9Sh6lP8BMxr84El8t9 XCV29gfMsJrAwZRadkp0bCjtGASXzJIvPT9+lBQC1qbN7Fb57f4D0FNQGsgPkjuo ablSVEG/TXaA9yl66+P7idXS6MYqVMlt2hkP77ohGshDCj3Lk6WQiZ+ECpgl3VmM VheKIHTa/C/oTQ== -----END CERTIFICATE-----Generated at Wed Sep 23 23:18:19 2026 by rpki-client