$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft File: E9rSS2ZH6yz6hzmJxtZtF060tYY.mft (raw, json) Hash identifier: Z/d67xn4MUsdRr5z3mSxmUiDIY70mJ1Ov2j5nE0re/E= Subject key identifier: 2E:9F:D9:A3:A3:18:C8:25:92:5D:52:99:A7:F4:CE:E7:57:96:7F:87 Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86 Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586 Certificate serial: 01A0D42654489017E1D97E0F68B4DBAD9BD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft Manifest number: 01EE Signing time: Thu 24 Sep 2026 16:01:16 +0000 Manifest this update: Thu 24 Sep 2026 16:01:16 +0000 Manifest next update: Fri 25 Sep 2026 16:01:16 +0000 Files and hashes: 1: 5FYGYJ3CTJgz_RO6RtjrvdukztM.roa (hash: WXX9l7hN5GLWTcdL5pzYOVjuzZXZGjSqNLVxArCt+5I=) 2: E9rSS2ZH6yz6hzmJxtZtF060tYY.crl (hash: SCwwl38mY97e+r393Lq3ZjkjsiuxHyebfeBy4ftaFy8=) 3: EU6S0HJNgtU92lCj2E5oAPOEdLs.roa (hash: 1lpHBr2sLsew7tFbnn94rLgLk3IsikjEq2tOn5QLKjw=) 4: MDPAodA0zvA2NWT7ER8dOVR7L88.roa (hash: mJmiRwrgZ5I3NJ+cWSYWfQPR/ysaLHDjUSeXrv0sX/Y=) 5: TOpSp8N8inyCCRSUbFq7bgDiwZI.roa (hash: FJio1I2qAIA9DwKgU1NmquliJzX0e/Kc95cX9EOp7Z4=) 6: dpL5ZtEitf4atUPkEQBrdg3AXa4.roa (hash: rbxc/D01AOG8KldlHELzWOgJqjk9Wg1ayGFfbIWBJws=) 7: hOGDR0EybYX5uiEIH4dx1wBVH0I.roa (hash: YqwjG2i8QtY5ZfAttTtEJOybBG61FVR5wpzHYZpRL/g=) 8: jY3UCSn5SIqE6D7R33WIRi-Qpnc.roa (hash: P4ee7fsjy47kxDvjwPwpXo+ufHLr43WngBeFPsDCjZc=) 9: lBW5YHPb8dUMIQp7Ni-iMJP_E4Y.roa (hash: cbZo3D7fpp0X2deua8SfRD7Y1+8SplMIfDE6x9KtmDE=) 10: q9AZ9P7QUfekPrQysKLIfDnMJbU.roa (hash: LLX9K9xCwxCQlj+HJY24QlDZarm7oVsZ3lkpY8WxkSM=) 11: uNi1GWE-vm98aOz8PbUTScKWUd0.roa (hash: 2DDJ/sYmsUqQUvarD2q6Qibfp+tAmVVdlr8pKbLjGSg=) 12: yRZVehU6pPF-e8bf4h76KS5NUpg.roa (hash: kz7zsud3YYXglVH2w964aIAQdIKUpEdRIscf5oZrTlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:26:54:48:90:17:e1:d9:7e:0f:68:b4:db:ad:9b:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586 Validity Not Before: Sep 24 16:01:16 2026 GMT Not After : Sep 25 16:01:16 2026 GMT Subject: CN=2e9fd9a3a318c825925d5299a7f4cee757967f87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:72:81:1b:0c:a2:85:c6:47:3c:76:70:e5:f0: d0:b3:b0:d2:fc:73:0b:d9:d9:2e:53:98:e4:c5:db: d2:3b:39:6c:cb:ef:8d:ab:01:4e:df:d9:1b:33:ea: ef:70:d5:d2:53:d5:3d:d7:50:09:9b:c6:40:92:34: fc:cb:ed:1c:5a:5a:d1:b8:06:38:91:9c:ab:dd:50: ce:03:05:87:da:62:64:83:69:af:bb:59:73:82:45: f6:8e:f2:79:e1:a1:55:56:71:c1:a4:71:41:3f:1c: d7:51:0f:d8:76:5e:86:95:8b:08:45:45:b7:42:b8: ed:47:0e:30:cf:1a:8a:49:6b:4d:85:83:4a:f2:34: d0:b9:0a:54:da:d5:66:25:16:00:ae:20:aa:45:f7: 51:a0:30:ed:7c:69:70:d5:c6:44:10:25:37:d6:99: ce:37:9c:7e:11:00:d1:45:b2:04:1b:e3:82:0d:6e: 99:78:1c:b9:57:49:d1:95:7f:df:c6:c9:bf:4b:56: 1e:8b:1b:04:d9:f6:7c:b0:de:ac:18:e0:04:3c:e8: c1:ff:43:1f:45:02:ac:2b:aa:0a:91:71:48:f6:3c: 7c:28:07:a4:0a:9a:9a:6c:36:5c:f6:09:88:5e:cf: df:90:5b:a2:16:ea:b9:7e:1b:49:ae:81:58:06:a9: 81:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9F:D9:A3:A3:18:C8:25:92:5D:52:99:A7:F4:CE:E7:57:96:7F:87 X509v3 Authority Key Identifier: keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:29:df:6d:2e:e7:58:35:fc:10:9e:ae:20:2b:78:25:2f:1a: ce:51:80:12:34:26:98:8e:9c:f3:5d:1f:55:9d:82:e4:e9:d1: df:d2:3c:6b:90:24:bb:fe:a0:e2:9d:aa:6a:e3:66:f5:06:bc: 4a:11:eb:dd:10:a5:20:ae:fb:ad:68:f1:be:d2:1f:8c:c4:80: 16:b7:23:59:ce:41:22:80:a4:a2:95:fa:60:d7:63:e7:a2:e3: 37:dc:b3:02:b5:d2:24:9b:d3:ae:19:48:19:2a:8d:fa:b0:d3: 09:fa:42:ae:d6:2d:2a:b4:79:ad:41:3d:4b:52:db:5c:65:2f: 45:4a:47:c4:7f:b5:9c:ba:2d:f8:fa:2c:09:07:59:65:bb:ee: c0:59:09:02:c5:b5:9c:dc:89:cc:5b:22:e1:45:80:81:a5:5d: 2f:25:07:52:73:71:77:9f:8e:a2:d7:bb:e1:3c:bd:f6:6b:0b: 34:4c:9b:48:37:91:7f:5e:1b:e3:b9:08:f5:c9:ae:ce:04:d2: 27:2e:1d:68:ea:58:2d:ae:10:35:73:03:5f:95:28:74:b4:2c: cb:fb:2d:d0:d3:2b:48:1d:a7:da:3f:db:2c:50:a4:6f:b4:5c: fb:e4:05:b7:65:fb:c6:ef:1d:2d:52:45:ea:10:7b:f8:39:35: 25:7c:76:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUJlRIkBfh2X4PaLTbrZvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZGFkMjRiNjY0N2ViMmNmYTg3Mzk4OWM2ZDY2ZDE3NGVi NGI1ODYwHhcNMjYwOTI0MTYwMTE2WhcNMjYwOTI1MTYwMTE2WjAzMTEwLwYDVQQD EygyZTlmZDlhM2EzMThjODI1OTI1ZDUyOTlhN2Y0Y2VlNzU3OTY3Zjg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXKBGwyihcZHPHZw5fDQs7DS/HML 2dkuU5jkxdvSOzlsy++NqwFO39kbM+rvcNXSU9U911AJm8ZAkjT8y+0cWlrRuAY4 kZyr3VDOAwWH2mJkg2mvu1lzgkX2jvJ54aFVVnHBpHFBPxzXUQ/Ydl6GlYsIRUW3 QrjtRw4wzxqKSWtNhYNK8jTQuQpU2tVmJRYAriCqRfdRoDDtfGlw1cZEECU31pnO N5x+EQDRRbIEG+OCDW6ZeBy5V0nRlX/fxsm/S1YeixsE2fZ8sN6sGOAEPOjB/0Mf RQKsK6oKkXFI9jx8KAekCpqabDZc9gmIXs/fkFuiFuq5fhtJroFYBqmByQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC6f2aOjGMglkl1Smaf0zudXln+HMB8GA1UdIwQY MBaAFBPa0ktmR+ss+oc5icbWbRdOtLWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMt MWFhNmZlNDA2YTU4LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMtMWFhNmZlNDA2YTU4 LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeSnfbS7n WDX8EJ6uICt4JS8azlGAEjQmmI6c810fVZ2C5OnR39I8a5Aku/6g4p2qauNm9Qa8 ShHr3RClIK77rWjxvtIfjMSAFrcjWc5BIoCkopX6YNdj56LjN9yzArXSJJvTrhlI GSqN+rDTCfpCrtYtKrR5rUE9S1LbXGUvRUpHxH+1nLot+PosCQdZZbvuwFkJAsW1 nNyJzFsi4UWAgaVdLyUHUnNxd5+Oote74Ty99msLNEybSDeRf14b47kI9cmuzgTS Jy4daOpYLa4QNXMDX5UodLQsy/st0NMrSB2n2j/bLFCkb7Rc++QFt2X7xu8dLVJF 6hB7+Dk1JXx2EA== -----END CERTIFICATE-----Generated at Thu Sep 24 18:55:22 2026 by rpki-client