$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: LcDO2cu6bmk+br7e8+9+6+i/u2jQUbyGQqDk6XQ9aHs= Subject key identifier: BB:D2:54:14:01:9B:48:86:FD:C3:42:9E:B0:90:3A:A0:FA:A5:5C:9B Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 01A0CAB45A74F86A6B85E0C624B8B7B7F049 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1B08 Signing time: Tue 22 Sep 2026 20:00:12 +0000 Manifest this update: Tue 22 Sep 2026 20:00:12 +0000 Manifest next update: Wed 23 Sep 2026 20:00:12 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: 5vt9R7dMLkSv2y8he+J+wmFjfdeqCE9CUW2Nmcsx3Sc=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 3geV6AQmnNE3--gs3xHupJZtVFw.roa (hash: sNT96XO64aXnjNnHk7Dhs9S+Zq3PRzmgEqOTblaXNls=) 6: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 7: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 8: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 9: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 10: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 11: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 12: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 13: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 14: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 15: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 16: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 17: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 18: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 19: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 20: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 21: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 22: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 23: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 24: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 25: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: gdiJRVH83qzM0Hc5PweB6gWC6-8.roa (hash: pgZ+GtjefMqu429BIRcG12cEE/zIXfPx6RFdA+xRHiE=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ca:b4:5a:74:f8:6a:6b:85:e0:c6:24:b8:b7:b7:f0:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Sep 22 20:00:12 2026 GMT Not After : Sep 23 20:00:12 2026 GMT Subject: CN=bbd25414019b4886fdc3429eb0903aa0faa55c9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:10:40:f8:35:cb:c3:d1:0e:d2:d1:e7:97:58: 11:e2:73:51:46:2b:c9:a9:1b:a2:96:f6:88:78:ce: 56:7d:3c:08:b1:16:52:85:4d:dd:f8:a0:16:7d:d0: 81:d8:dc:91:69:19:ea:3b:27:86:50:a1:84:a6:f3: eb:ec:6c:8d:8f:99:d9:3b:a5:56:d4:54:4d:bc:fc: 09:1e:5f:44:1b:eb:c7:ff:f6:9f:a1:ff:1f:3d:6b: 79:bf:55:7b:e4:9b:75:59:c1:f9:07:64:30:ef:35: c1:1a:5e:18:aa:4c:d5:1b:5d:6a:04:d5:f2:66:99: a4:9a:fd:73:55:4a:50:24:ef:c9:6a:c8:4c:78:d0: d6:1f:a7:03:21:23:c5:cc:b8:a7:65:2f:4a:26:ef: 13:2a:6f:2d:77:5a:a9:c3:6b:fa:69:04:5e:76:bb: 83:c4:35:b3:2e:5e:d5:f7:ad:d6:9b:96:a4:fe:b0: 36:7e:0c:e4:fd:8e:cc:fd:2f:b3:65:a6:5d:f2:86: be:07:06:39:89:2c:b3:88:b0:75:ff:62:64:df:ee: ab:84:4a:a7:b4:95:48:e4:25:9c:1f:42:8f:3d:96: ec:01:46:54:f9:82:06:72:7a:6c:32:71:52:61:95: eb:b4:1a:e6:96:ae:07:0c:d7:64:61:f8:43:4d:8c: e6:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D2:54:14:01:9B:48:86:FD:C3:42:9E:B0:90:3A:A0:FA:A5:5C:9B X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:da:82:83:9c:29:f6:9d:b4:70:28:c7:b0:30:3c:8e:9d:08: 21:fd:4d:70:3c:0e:2c:5c:bb:87:d0:62:34:41:fe:0c:f6:ca: af:8f:99:30:08:d9:96:7a:e9:95:d3:db:e1:f2:b9:a6:96:f1: a9:79:b0:48:d5:96:48:80:a7:0c:52:dc:9a:09:e6:25:39:6e: d9:fb:18:71:08:d2:8a:e2:b5:6e:e3:3f:44:5d:f0:72:69:df: 8c:8a:f5:d4:bd:f3:e2:73:aa:73:93:2f:d3:84:5d:20:2a:ba: 9f:ea:24:64:9c:01:1d:1e:ce:49:c2:d8:c6:28:de:73:62:4d: b4:32:64:8e:c8:d3:24:c4:13:65:2f:85:1a:79:dd:bd:30:ba: 8a:4f:42:f8:92:d9:23:82:dd:7f:38:59:6c:c9:11:c6:87:06: 85:0d:a7:cc:1d:25:19:9e:cb:ff:80:ea:9d:cf:6b:82:31:af: e8:cb:e6:68:bf:46:f9:48:82:9f:21:14:50:f3:b6:93:82:e7: 70:1f:d2:d0:52:d9:ad:c4:f0:3b:d0:52:bb:17:33:a7:ea:ef: 96:d0:50:2a:14:dc:54:6e:6b:a9:0d:75:31:14:64:77:0a:86: 91:f3:9f:14:eb:ef:40:6d:af:72:63:80:3f:3e:18:b9:a2:24: 22:e5:ca:05 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDKtFp0+GprheDGJLi3t/BJMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwOTIyMjAwMDEyWhcNMjYwOTIzMjAwMDEyWjAzMTEwLwYDVQQD EyhiYmQyNTQxNDAxOWI0ODg2ZmRjMzQyOWViMDkwM2FhMGZhYTU1YzliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwRBA+DXLw9EO0tHnl1gR4nNRRivJ qRuilvaIeM5WfTwIsRZShU3d+KAWfdCB2NyRaRnqOyeGUKGEpvPr7GyNj5nZO6VW 1FRNvPwJHl9EG+vH//afof8fPWt5v1V75Jt1WcH5B2Qw7zXBGl4YqkzVG11qBNXy Zpmkmv1zVUpQJO/JashMeNDWH6cDISPFzLinZS9KJu8TKm8td1qpw2v6aQRedruD xDWzLl7V963Wm5ak/rA2fgzk/Y7M/S+zZaZd8oa+BwY5iSyziLB1/2Jk3+6rhEqn tJVI5CWcH0KPPZbsAUZU+YIGcnpsMnFSYZXrtBrmlq4HDNdkYfhDTYzmBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLvSVBQBm0iG/cNCnrCQOqD6pVybMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ9qCg5wp 9p20cCjHsDA8jp0IIf1NcDwOLFy7h9BiNEH+DPbKr4+ZMAjZlnrpldPb4fK5ppbx qXmwSNWWSICnDFLcmgnmJTlu2fsYcQjSiuK1buM/RF3wcmnfjIr11L3z4nOqc5Mv 04RdICq6n+okZJwBHR7OScLYxijec2JNtDJkjsjTJMQTZS+FGnndvTC6ik9C+JLZ I4LdfzhZbMkRxocGhQ2nzB0lGZ7L/4Dqnc9rgjGv6MvmaL9G+UiCnyEUUPO2k4Ln cB/S0FLZrcTwO9BSuxczp+rvltBQKhTcVG5rqQ11MRRkdwqGkfOfFOvvQG2vcmOA Pz4YuaIkIuXKBQ== -----END CERTIFICATE-----Generated at Wed Sep 23 03:38:40 2026 by rpki-client