$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: /nKVV1RtGGkEZSGmOc6fcgIlZcXoyExDbZeiWEGMx9A= Subject key identifier: 0A:0A:46:7B:47:72:AD:B6:A3:9D:FF:7F:A5:AA:7C:8C:C1:61:22:24 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 01A0CFDB4BA0080043B0F571D9F44C9FA9BC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 1ACC Signing time: Wed 23 Sep 2026 20:00:50 +0000 Manifest this update: Wed 23 Sep 2026 20:00:50 +0000 Manifest next update: Thu 24 Sep 2026 20:00:50 +0000 Files and hashes: 1: 1-Dw7363-gcZT5BcZS3h3DULOLy8.roa (hash: ycAjWS2LKG3rf+AnuA7L1QjlHbaxU1ClqDSIOlIjNCE=) 2: BiYRVVML9NNTA_8LHQsEIyn-udM.roa (hash: MQi6PP1rzRM1KN1VV4mGhoaMI5G3SPq1bp7SEkx+KmA=) 3: Nc3Qv6HWCUL0coHdhzehCvqorjQ.roa (hash: 1cr7/XMm8bJJ1VGTZJBo+emXZtefD8zXujejZu9BwnE=) 4: UBIi44YElhqYA3_XPQMiMHY33Ug.roa (hash: oMX079Hs0rsRW/ukFok6HicF7IaxGAO9FzHNhpkuS/A=) 5: cd86fuGEpcvGitdJ6j4qmONtrs4.roa (hash: OyWo2jddiuk9oXVabZhwBWcG9HobQGDOXj6VfpvDkjo=) 6: deTEkBZi5H7AIejV16ysjHwAbxY.roa (hash: l0JbGg+HLxrf5Ag/2z2pTojVken0ajBmDjhItX+Hm3I=) 7: i-f-GFNW7EWY7uYw_DjdHPLZIEc.roa (hash: Lu14Av/K1ThdwY4U86jUJpa6Z2xIOpuEfesYLD//+vY=) 8: oKVovXTv2aNAyZu9y-AHgX6RbJ8.roa (hash: UsgdfjEOvyD+5ioDpDRHljoPckkLzWdsqZQnU51Gug0=) 9: ocHryKy0JCZoZXuWFydbiaPAXvA.roa (hash: VJkfS4R1R0/kVOkQFygl/eqzEOXMlTWCdbkGDaHwbCQ=) 10: our5ihUuGcgcU0KjT-Q2_hJRSYY.roa (hash: fFr4tZX1VGxnmEddwX1C01U/hs/f3oFzPhvXVoAW6YQ=) 11: pGPZirCKZzbNWc11cAMZui5y53g.roa (hash: x16id1SP+uWE4b9i/PFLiuYNReYseV++lthZDwFfk5U=) 12: pKSlP4qI-iIWoFFAgY7hZYUI5lE.roa (hash: fJiLeKrrQ0jkNTOG3gU1SfB8kCZt5PRpsv9OHklxoM8=) 13: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: CUiI0EO4IrcQEjeXhUePBVqlwiBlUOCK9SPWdWcn8RM=) 14: sQ8qQg5RChJp9JsfMBZ7VZwT8WE.roa (hash: obNWII8S7VxaHifOdhDpl8/q/V3M1i4VuliV8Z+MBow=) 15: vfuime7XKLq_IMU4DAnX4Nx6jzE.roa (hash: kg5X5HNbnuBqdxjeSjsj/XEZpdxo6lTx2YGUed/0woM=) 16: wGWwo0E6K55d816ADtVpaqGsYoE.roa (hash: Qv1Am1EocmBUM6XTSjIqfN+fr9y61yBhGrH08ROvpPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:db:4b:a0:08:00:43:b0:f5:71:d9:f4:4c:9f:a9:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Sep 23 20:00:50 2026 GMT Not After : Sep 24 20:00:50 2026 GMT Subject: CN=0a0a467b4772adb6a39dff7fa5aa7c8cc1612224 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:89:63:65:6e:3c:96:8a:02:6e:71:c5:aa:65: fb:a5:7b:8d:bd:df:e2:db:8f:98:48:f2:7f:67:02: bf:cb:96:e2:9c:6f:cd:7a:45:ea:66:45:20:7a:bf: e8:5b:d9:b5:5f:92:dc:b6:33:84:a2:6e:b8:e8:87: e6:ac:16:52:6e:06:d3:d4:81:30:5b:cf:c5:7e:5a: ac:9a:98:7e:fc:c0:a5:25:fb:6d:e6:cd:f7:60:4d: 4e:c1:25:f0:17:56:dd:6e:03:72:3d:8a:99:4d:86: 3b:f7:b7:eb:9d:99:16:f7:8f:3f:e1:9e:38:c5:cb: 17:ed:14:04:33:e8:56:4e:f4:be:e5:51:aa:ad:8d: 18:4f:24:2f:fa:02:4a:a3:02:ed:de:46:92:92:d2: 19:7d:27:e7:df:fd:2a:1b:79:53:d0:5b:04:a8:e5: 71:ed:ec:24:e6:1d:36:b8:62:54:86:86:da:78:e8: 79:fb:0b:8f:e2:07:c5:2d:85:95:08:33:0f:c9:f7: 4f:ac:6e:4c:4c:c9:77:e0:07:5e:25:45:55:97:5f: 17:b2:19:c3:3c:8f:d7:50:8c:a7:f9:31:9a:70:52: 10:44:14:0c:a6:70:88:93:3a:6b:72:50:44:86:bb: 29:f2:4b:04:21:cb:3e:2d:65:8c:b2:0f:ad:6e:b9: 7f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:0A:46:7B:47:72:AD:B6:A3:9D:FF:7F:A5:AA:7C:8C:C1:61:22:24 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:5b:6c:c0:b2:8a:61:83:46:13:bc:83:83:4f:2b:91:de:72: 02:a2:53:f5:bc:d4:34:93:6e:7a:54:0a:1e:db:72:5f:ad:d6: 41:0a:32:bf:ee:3d:5f:dc:36:f5:e9:f8:9e:de:79:0b:72:20: ef:08:ac:4d:d3:78:4e:31:9f:a8:92:6c:19:fa:95:2c:a6:2b: ab:2f:a1:9c:db:01:c4:7e:c6:34:5a:0e:6f:8f:dc:fe:f6:ff: 9c:8f:42:74:1a:0f:ff:b7:81:d7:d6:ce:64:9e:7a:54:79:b1: 6e:b5:bc:b9:a3:ce:e9:c0:02:65:bc:a7:62:75:83:af:f7:09: c8:6b:76:c1:e3:5d:6b:7a:df:dd:a0:2f:96:79:8c:45:69:ad: 61:0f:17:7c:08:76:de:10:7b:9d:ea:71:bc:88:a5:33:d9:07: 3b:c6:da:4c:76:cf:9b:2c:b2:f6:d2:55:9d:d3:79:aa:8a:60: e7:42:bf:9e:c5:2d:42:b1:8a:99:aa:ee:90:20:b9:be:fd:0a: 56:21:93:d0:17:62:a3:08:13:a8:ad:e9:0b:97:51:a8:f7:be: a4:ba:6d:9a:fe:01:a6:d5:70:57:dc:13:9c:da:c5:55:6d:4a: 02:7d:7a:86:fa:28:6e:97:17:2f:c8:80:50:f8:98:48:ae:73: 1d:3d:4a:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDP20ugCABDsPVx2fRMn6m8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwOTIzMjAwMDUwWhcNMjYwOTI0MjAwMDUwWjAzMTEwLwYDVQQD EygwYTBhNDY3YjQ3NzJhZGI2YTM5ZGZmN2ZhNWFhN2M4Y2MxNjEyMjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIljZW48looCbnHFqmX7pXuNvd/i 24+YSPJ/ZwK/y5binG/NekXqZkUger/oW9m1X5LctjOEom646IfmrBZSbgbT1IEw W8/Fflqsmph+/MClJftt5s33YE1OwSXwF1bdbgNyPYqZTYY797frnZkW948/4Z44 xcsX7RQEM+hWTvS+5VGqrY0YTyQv+gJKowLt3kaSktIZfSfn3/0qG3lT0FsEqOVx 7ewk5h02uGJUhobaeOh5+wuP4gfFLYWVCDMPyfdPrG5MTMl34AdeJUVVl18XshnD PI/XUIyn+TGacFIQRBQMpnCIkzprclBEhrsp8ksEIcs+LWWMsg+tbrl/6wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAoKRntHcq22o53/f6WqfIzBYSIkMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARFtswLKK YYNGE7yDg08rkd5yAqJT9bzUNJNuelQKHttyX63WQQoyv+49X9w29en4nt55C3Ig 7wisTdN4TjGfqJJsGfqVLKYrqy+hnNsBxH7GNFoOb4/c/vb/nI9CdBoP/7eB19bO ZJ56VHmxbrW8uaPO6cACZbynYnWDr/cJyGt2weNda3rf3aAvlnmMRWmtYQ8XfAh2 3hB7nepxvIilM9kHO8baTHbPmyyy9tJVndN5qopg50K/nsUtQrGKmarukCC5vv0K ViGT0BdiowgTqK3pC5dRqPe+pLptmv4BptVwV9wTnNrFVW1KAn16hvoobpcXL8iA UPiYSK5zHT1KIw== -----END CERTIFICATE-----Generated at Wed Sep 23 23:43:43 2026 by rpki-client