$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft File: 668NIPmOOiBVDJltdCkmiPDSJ50.mft (raw, json) Hash identifier: 8y7ymwBs/gzOKz3+0yawrsIIGLyAgzNW/LL0VOPAYlc= Subject key identifier: 19:D3:F9:62:F3:07:EB:A1:D4:71:3A:DD:DB:26:90:4D:E0:0E:91:00 Authority key identifier: EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D Certificate issuer: /CN=ebaf0d20f98e3a20550c996d74292688f0d2279d Certificate serial: 01A0D1932BF9D55AD1A784721C19FBDB8071 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft Manifest number: 0251 Signing time: Thu 24 Sep 2026 04:01:18 +0000 Manifest this update: Thu 24 Sep 2026 04:01:18 +0000 Manifest next update: Fri 25 Sep 2026 04:01:18 +0000 Files and hashes: 1: 2opF5RUsv3XDc1My0IeDj7X6rkY.roa (hash: rLnnTlMpS3ub6k4swr9VWzMlA8CfLQoDtyjmLZJnpi4=) 2: 668NIPmOOiBVDJltdCkmiPDSJ50.crl (hash: qqLGyoapzgWenFw/zn4UJDd6xgf43hrBfgeSCUb/0FQ=) 3: 8_uN9lxayPNFYSFMe_-SzdqsN_M.roa (hash: JquMORB08SkqUpDd0r0GoDrQiAxCIucTbEwQ0tt/Va0=) 4: 9TylcBs9Ho8y2i-aAz0F0fzBnms.roa (hash: zXNgdYhWm8/zmEj+NeyJwKpEXxYhwOhYzf0Mg1Ifeyc=) 5: EgUddJnQyW-DZo-6cboASv4IDkM.roa (hash: E6KKUo7CLQIRbYpxq6kq88AYxp+VGIoTBpmzfke9TAA=) 6: KmrQG8ABSDDoPWxM0MmmDyWHCmA.roa (hash: g70sdgkDbYrQc1kwIhz+eBYDzl0gJbikJ8mXpxog+G0=) 7: M26BQVuNMK835dm83OV-Sr2CkQs.roa (hash: 9jTxXoCPeLHjBT+DdTQIMj47gOx4+kmiPGKh+dU2Lpc=) 8: TVEdarLnlUkZhd4uc5HWaM7C1F4.roa (hash: XXiBDhnQsTykczo/2NACBKND800VuRzS+V0RgxdJm/s=) 9: ZPKSvekrJYA0upvIat_-JC6BKfQ.roa (hash: PPL2NdzyPwz7LPgdAhUxcAJSYob0YB4sCtiY0icE9zo=) 10: lwR4CDLvnTUuVyA34wT6tah5mv0.roa (hash: JomOdXVvYDHYetjFnHtJimdxkzg8t7h8C+QxsLpI72o=) 11: vcuseHHUp2SFcc7WFCquL547C34.roa (hash: W+undj5Tz3EQlz8nELOD/EX3UtN6Yso7VOiTqtTp3ys=) 12: zRMtSyG0erquHg8eDcLfOh4BpSs.roa (hash: fv01yx8YQE61hN1VLmCbWMtgYoNsmN10wZe2YdF/txM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 04:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:93:2b:f9:d5:5a:d1:a7:84:72:1c:19:fb:db:80:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebaf0d20f98e3a20550c996d74292688f0d2279d Validity Not Before: Sep 24 04:01:18 2026 GMT Not After : Sep 25 04:01:18 2026 GMT Subject: CN=19d3f962f307eba1d4713adddb26904de00e9100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:5a:03:66:06:f3:37:4c:a8:bf:e0:81:8a:24: 90:ca:ed:d9:cb:50:79:c1:bc:89:47:d5:a8:f1:1a: 03:ef:02:98:8b:6f:e0:ba:44:58:ac:b6:dd:c9:4d: 14:b4:25:32:17:1c:4e:08:59:20:fb:dc:37:4c:33: da:0e:2e:40:4e:4d:27:b4:f6:5d:00:9c:9a:ca:73: cc:fb:c5:8b:d5:c7:50:d1:4d:42:b3:b2:42:bf:7e: 2d:ce:a0:c5:e0:05:66:eb:1e:a1:9a:40:00:e9:49: 03:26:42:f2:7a:65:2d:10:19:97:1b:94:99:5d:9d: fc:66:79:17:41:3d:13:93:8e:cb:40:83:a0:13:53: 84:62:42:aa:f5:49:56:19:9f:fc:33:c3:3d:02:bb: 5e:64:1c:da:b0:1d:72:f0:3e:6a:89:44:c9:5a:26: 9e:25:36:92:3c:18:c6:53:0c:d3:a5:41:65:d5:21: d9:84:7f:a6:ee:e9:49:d5:c8:f0:a9:94:5c:da:dc: f0:00:a7:2f:25:ba:93:d0:e3:31:20:4f:d2:c0:89: 3a:83:3d:62:c5:f5:c8:86:4f:70:c4:6e:d1:34:d1: 00:ea:11:9f:78:39:29:34:d7:09:9a:9e:b4:84:28: bf:e9:58:9c:c3:06:cc:52:bf:56:0e:b3:52:97:71: 90:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D3:F9:62:F3:07:EB:A1:D4:71:3A:DD:DB:26:90:4D:E0:0E:91:00 X509v3 Authority Key Identifier: keyid:EB:AF:0D:20:F9:8E:3A:20:55:0C:99:6D:74:29:26:88:F0:D2:27:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/668NIPmOOiBVDJltdCkmiPDSJ50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d0be06-ef5f-4418-af1c-320936288e95/1/668NIPmOOiBVDJltdCkmiPDSJ50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:f3:50:c7:17:7a:07:e8:83:18:e2:52:27:41:4a:35:33:0e: d3:5b:73:d3:e6:29:4f:6a:6e:88:9a:04:2c:b5:81:77:50:0c: 3f:e6:3d:d3:5b:63:e5:5a:f5:3c:19:25:60:6d:a7:49:89:99: 14:39:aa:e0:8a:e2:b9:26:ae:bf:bd:43:ce:e2:6a:21:c1:cd: a9:f3:1c:59:f4:93:5f:4e:b0:a4:7d:fa:db:b1:bb:47:d2:87: 26:4b:1a:2f:a2:24:fc:c4:49:1b:ea:3a:cd:d4:f6:27:c8:c6: e8:19:67:3f:03:e1:80:dc:a2:66:74:5d:2d:ed:b1:04:af:68: 62:c7:62:4b:b7:89:ad:f4:08:b7:6a:d6:55:00:7a:c2:7a:d0: 98:fe:b4:00:0c:54:5b:b5:28:92:e3:7e:ef:23:df:9b:5c:7a: 13:b8:8f:bf:2e:9a:d5:a3:6f:25:04:b1:fe:ac:1a:fc:15:46: d0:dd:23:89:61:f8:e3:f1:35:16:6a:28:9c:6a:ef:40:99:75: ea:4e:d3:f8:57:f7:bd:36:66:05:29:5b:b2:9a:12:f6:2e:3c: c4:14:39:a6:e2:02:9d:31:78:3a:29:2a:73:22:d3:04:8c:4e: 96:5d:12:be:ed:34:55:40:83:cd:d4:23:d1:2e:7f:4f:f5:95: 8b:40:dc:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRkyv51VrRp4RyHBn724BxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViYWYwZDIwZjk4ZTNhMjA1NTBjOTk2ZDc0MjkyNjg4ZjBk MjI3OWQwHhcNMjYwOTI0MDQwMTE4WhcNMjYwOTI1MDQwMTE4WjAzMTEwLwYDVQQD EygxOWQzZjk2MmYzMDdlYmExZDQ3MTNhZGRkYjI2OTA0ZGUwMGU5MTAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVoDZgbzN0yov+CBiiSQyu3Zy1B5 wbyJR9Wo8RoD7wKYi2/gukRYrLbdyU0UtCUyFxxOCFkg+9w3TDPaDi5ATk0ntPZd AJyaynPM+8WL1cdQ0U1Cs7JCv34tzqDF4AVm6x6hmkAA6UkDJkLyemUtEBmXG5SZ XZ38ZnkXQT0Tk47LQIOgE1OEYkKq9UlWGZ/8M8M9ArteZBzasB1y8D5qiUTJWiae JTaSPBjGUwzTpUFl1SHZhH+m7ulJ1cjwqZRc2tzwAKcvJbqT0OMxIE/SwIk6gz1i xfXIhk9wxG7RNNEA6hGfeDkpNNcJmp60hCi/6VicwwbMUr9WDrNSl3GQOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBnT+WLzB+uh1HE63dsmkE3gDpEAMB8GA1UdIwQY MBaAFOuvDSD5jjogVQyZbXQpJojw0iedMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kMGJlMDYtZWY1Zi00NDE4LWFmMWMt MzIwOTM2Mjg4ZTk1LzEvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC9kMGJlMDYtZWY1Zi00NDE4LWFmMWMtMzIwOTM2Mjg4ZTk1 LzEvNjY4TklQbU9PaUJWREpsdGRDa21pUERTSjUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdfNQxxd6 B+iDGOJSJ0FKNTMO01tz0+YpT2puiJoELLWBd1AMP+Y901tj5Vr1PBklYG2nSYmZ FDmq4IriuSauv71DzuJqIcHNqfMcWfSTX06wpH3627G7R9KHJksaL6Ik/MRJG+o6 zdT2J8jG6BlnPwPhgNyiZnRdLe2xBK9oYsdiS7eJrfQIt2rWVQB6wnrQmP60AAxU W7UokuN+7yPfm1x6E7iPvy6a1aNvJQSx/qwa/BVG0N0jiWH44/E1FmoonGrvQJl1 6k7T+Ff3vTZmBSlbspoS9i48xBQ5puICnTF4OikqcyLTBIxOll0Svu00VUCDzdQj 0S5/T/WVi0Dckg== -----END CERTIFICATE-----Generated at Thu Sep 24 12:10:23 2026 by rpki-client