$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft File: 520NqzR6OOK4e1oiovfJ4hwYybw.mft (raw, json) Hash identifier: Vi8BWBZziGWYXfz1FKPXraP1oI038cEI5a8cYIkdrPg= Subject key identifier: 29:D5:32:26:B9:93:F5:C0:2E:7E:DB:50:22:F9:6D:B7:1C:10:5B:E5 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 01A0CDEC87703C3463726C00B247D2D2DD9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft Manifest number: 1558 Signing time: Wed 23 Sep 2026 11:00:25 +0000 Manifest this update: Wed 23 Sep 2026 11:00:25 +0000 Manifest next update: Thu 24 Sep 2026 11:00:25 +0000 Files and hashes: 1: 520NqzR6OOK4e1oiovfJ4hwYybw.crl (hash: O4xQWNBdN7SI1MKfNu8FkDr7nner4iMGF9xeBOQTl0o=) 2: 7EPxlfzuNdNfziGNw3Hj7EoZj1Q.roa (hash: fYUfx118C/cw672kHDWSH3DD1Ik9WuMEeaQ/qAV9tYE=) 3: 9APVRCMV0aD4aoinCZAU6dTzv6o.roa (hash: eAlTYE6nYoq2zXMMLGCxVShv5D16kuVpMGM7yMSDORo=) 4: 9EzrkfCb3685-QENXXhTIl2uZz4.roa (hash: 4o0MB77YQKRQiZHQrZxR1nkb/HsRFN1Kq0iR4K53WZA=) 5: DVIKLwP8b0UVJE_X0Zz4hLCMFmU.roa (hash: 2ROrixfhF0UtgJihhtThPaEztRX+VVHt8WTM1ZfZQ1o=) 6: FQRb71bWD6shffXHJwVxCbwHPwk.roa (hash: pGalM2d2H9Jqz6EfqZRh9cBkrVl+lAOWHYOdCpXe268=) 7: Fn3txwFOnsHfJqp3dmOvAMcvgHc.roa (hash: 0tFPd6mFP89u9IcgrQmVyEuYoDxe9S4zwwRr4qndNks=) 8: RqZv9lI-beWajs98dICrEK2DwUM.roa (hash: z0DWSEDfb+oWc/lkT9R9ehjWWb2y0A0CPcHglnAYRf8=) 9: Ud0XI3ub85_CL2l55YZW3cXrctA.roa (hash: 2gMJyy7om8/uY1IqvCz0ubvDeUV63nAu6cUom48+3U0=) 10: ao5k8aMHz2Rr-UFohnKN0Vsy0ts.roa (hash: qeXz8tDdKItxGK8qtWsvUAbM0Ooz+MmMiDN8cvBIyTQ=) 11: bbXWGNkALy-ajnXnVwsq6VcslC8.roa (hash: lOmBCerqz+GglurufDI5e+15DQVwzjxcTvAfkACkLYE=) 12: jTMEUhkl6sKPDlW6gGgXZsH4VwQ.roa (hash: bLe2Zk8IquF+7aI/fXPQxZklmLIeFhH3W5DkdYCydQA=) 13: r-NoE_XHTABnwPRM9GdFHoEeHJo.roa (hash: qsD5Rt9CKRxXFQG5JSeN7cqv7sQvsG2HbFGsWmdhdi8=) 14: rIIpXZCn7E3HgJjpCaYYUR4k6ZI.roa (hash: Vvylnj2QqF4AFfq4GCTBxANmDk4TfXB5W5GNlTLI/Qw=) 15: s9E0mrs6RE5G3diI6qJ2dNaQlCY.roa (hash: ALHEFczsxrK3P9zm6czuHQOWsz9Vxib3j6fIwRLXdsA=) 16: smuPovOHBHHaIAv32qcc0ZyhNkQ.roa (hash: HcQ/8p3eoCWjnnKfMtVzm8focRBIq46dCnVV7vdjMxQ=) 17: v94LL-qGGgahldRNvzQc-ZVS3KI.roa (hash: a3YAXYAGQiNiI/eRCe9RKvTaP1hHvgR2d27wk4bq6Cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 11:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:ec:87:70:3c:34:63:72:6c:00:b2:47:d2:d2:dd:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Sep 23 11:00:25 2026 GMT Not After : Sep 24 11:00:25 2026 GMT Subject: CN=29d53226b993f5c02e7edb5022f96db71c105be5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:d6:ed:10:db:9d:ca:7a:16:fe:ff:97:7e:e7: 7c:8f:3c:d4:77:60:9f:a4:22:21:5b:c7:5f:99:09: 6a:6a:c5:25:9a:d9:98:f8:0e:f1:86:5b:ec:60:fa: 7f:56:e7:d2:e5:d9:5f:9d:a2:a8:29:ee:bd:36:d9: d8:9f:e9:4c:9c:58:61:7f:8d:02:28:7a:26:fc:81: c4:39:01:33:9e:52:38:42:7a:13:9f:8e:8e:9e:38: 20:f1:77:71:f0:a2:f7:ab:67:aa:aa:16:85:be:5f: 51:4c:fe:ec:19:99:b8:11:95:2d:01:4e:a5:52:9a: 05:26:55:d1:19:47:ca:5f:22:5d:e9:87:52:07:7f: 6a:45:66:fb:04:52:f5:8e:15:1f:64:a6:c2:16:13: 3b:31:84:eb:6b:f3:3d:83:ea:e8:ca:e3:d4:09:77: cb:52:09:7a:9e:28:57:44:5c:f3:29:95:98:eb:90: 7d:ed:a6:62:7d:3a:3b:8c:c9:26:89:45:f2:43:ba: 9e:eb:1b:aa:34:c0:da:8d:3a:9b:0a:71:a9:6c:62: 20:c8:b8:54:6c:3d:31:ce:55:fc:30:53:61:f6:6c: 00:ba:17:33:cc:e7:f4:27:b9:a1:d2:85:74:d6:33: 9f:25:0f:20:f8:b5:25:4a:5d:55:0b:eb:a3:1d:b0: ed:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:D5:32:26:B9:93:F5:C0:2E:7E:DB:50:22:F9:6D:B7:1C:10:5B:E5 X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:cb:2f:92:d6:c7:6a:ed:40:d8:dc:fe:92:f0:bd:9d:c7:29: db:9d:fe:c9:3a:c9:1c:44:24:f6:2a:6d:02:f6:a0:11:bf:4e: e6:1f:56:ac:e8:19:27:60:fe:61:52:0b:05:c7:3c:15:73:d2: a3:85:e7:a9:9a:cd:87:94:80:34:73:c1:c6:09:1b:1d:56:31: 48:5e:79:bf:ad:32:a0:84:8c:6f:21:40:85:18:46:3d:d6:6b: f9:db:ef:50:71:2d:41:9b:b8:79:39:24:6d:47:ef:97:9f:e1: b2:c2:8a:51:ef:71:54:35:e9:08:8b:31:95:9d:eb:c8:a3:2d: c3:69:b3:d7:a1:c6:f2:59:a4:58:22:21:da:77:56:f3:5b:ab: 0b:91:51:da:fb:ac:fd:d5:69:18:9f:58:44:59:da:be:51:68: ba:04:6b:39:b3:50:68:a7:25:06:00:f6:3b:82:0b:a1:ad:75: 8e:88:10:ab:1f:cb:8a:f8:d5:cb:fe:84:9d:df:f1:b9:95:e9: a0:5c:52:d5:dd:46:84:8f:df:fe:c6:2e:cb:4a:ca:b5:08:27: a8:2e:5c:1b:2d:6f:b3:58:c9:e2:0a:42:ef:d7:b3:bd:3a:c1: e8:4a:6d:7f:57:ec:a9:5f:4d:3e:50:73:81:fd:ce:bf:28:50: 78:b2:36:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDN7IdwPDRjcmwAskfS0t2eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwOTIzMTEwMDI1WhcNMjYwOTI0MTEwMDI1WjAzMTEwLwYDVQQD EygyOWQ1MzIyNmI5OTNmNWMwMmU3ZWRiNTAyMmY5NmRiNzFjMTA1YmU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNbtENudynoW/v+Xfud8jzzUd2Cf pCIhW8dfmQlqasUlmtmY+A7xhlvsYPp/VufS5dlfnaKoKe69NtnYn+lMnFhhf40C KHom/IHEOQEznlI4QnoTn46Onjgg8Xdx8KL3q2eqqhaFvl9RTP7sGZm4EZUtAU6l UpoFJlXRGUfKXyJd6YdSB39qRWb7BFL1jhUfZKbCFhM7MYTra/M9g+royuPUCXfL Ugl6nihXRFzzKZWY65B97aZifTo7jMkmiUXyQ7qe6xuqNMDajTqbCnGpbGIgyLhU bD0xzlX8MFNh9mwAuhczzOf0J7mh0oV01jOfJQ8g+LUlSl1VC+ujHbDtswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCnVMia5k/XALn7bUCL5bbccEFvlMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMsvktbH au1A2Nz+kvC9nccp253+yTrJHEQk9iptAvagEb9O5h9WrOgZJ2D+YVILBcc8FXPS o4XnqZrNh5SANHPBxgkbHVYxSF55v60yoISMbyFAhRhGPdZr+dvvUHEtQZu4eTkk bUfvl5/hssKKUe9xVDXpCIsxlZ3ryKMtw2mz16HG8lmkWCIh2ndW81urC5FR2vus /dVpGJ9YRFnavlFougRrObNQaKclBgD2O4ILoa11jogQqx/LivjVy/6End/xuZXp oFxS1d1GhI/f/sYuy0rKtQgnqC5cGy1vs1jJ4gpC79ezvTrB6Eptf1fsqV9NPlBz gf3OvyhQeLI2Ew== -----END CERTIFICATE-----Generated at Wed Sep 23 20:45:01 2026 by rpki-client