$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: m4oV6uNG0aJjhj5VlDH4SNTs7TmPdHfLVpo9EeEBKQg= Subject key identifier: F5:9C:D1:2B:A6:F2:A9:81:0B:66:95:48:81:AF:2D:B7:77:03:EF:47 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 01A0CAEBEB714753C281990DDA631469B0D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0FAC Signing time: Tue 22 Sep 2026 21:00:53 +0000 Manifest this update: Tue 22 Sep 2026 21:00:53 +0000 Manifest next update: Wed 23 Sep 2026 21:00:53 +0000 Files and hashes: 1: 1raBdrG8cJ9Bp5UTf1-3ySXpvNU.roa (hash: nidyHf42+8qviczWax8TG8WbQgA/HNtQCPEG+F+WBIY=) 2: 2kDI2fX-vOvB11NNeAS3cg-93eM.asa (hash: NA7gOR6dP2dN+8of3Z/jNBI4ucvB9u9QIPByWzroYZo=) 3: 4p-Cm-GajEDg95U2oK6uzfsp0JU.asa (hash: 5kxjukz9UrNDQRzs1WDtvD2HHIl/VN2fV1l1vptM11w=) 4: D20r0Dc3ziO-pvHNC0RCH6WWn4M.asa (hash: iaKS5DFhrhjGhN9Po/Gl1SfI1i51StPCSZ9Lx4T3V/o=) 5: JLWdtgjMTs_4Sq7DTqKgddlwfrY.asa (hash: 9mBXiLiJ86zw/4udWl2MUcosM1kylDDeUDtsF/0LHfI=) 6: KeXwRGdfZ0moU2iD3Q2mbtR6C3k.asa (hash: kKAEUwnnTtlt/PROwq+dzQgzZQgqzq3CPnTsKxDqyks=) 7: L2QCsrjPe2KM3zZLG_j-necXdRQ.asa (hash: WdEBpYb6JsNA+UMdvTX09oNiIH0VyRdO15C/0tlTHTA=) 8: OGZW3EGUH5W_Sl4Rah9ArDm_EJo.asa (hash: q8G/683GpwIgrnSyD7lVID7X1jS34HiXZGHtfK+B8v4=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: bqKa0YRsYxH7tFUT4rHgcN42asw.roa (hash: 8oWhUO/dKOps3lszSUNTka8Z4cLC6TKDR/CwR798z8A=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: p5zNzQPaIB94IBWFj0Evjw09b6Y.asa (hash: eOPidDTFtzDIvGAErv5iz3BORzDmQalbdnPuHerit6s=) 13: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: EZK9ThpyLXpnsUm2bDycmlzK2DaV+oBXHWXuSNejTzU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ca:eb:eb:71:47:53:c2:81:99:0d:da:63:14:69:b0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Sep 22 21:00:53 2026 GMT Not After : Sep 23 21:00:53 2026 GMT Subject: CN=f59cd12ba6f2a9810b66954881af2db77703ef47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:4a:93:ff:7a:27:6e:e4:b3:38:26:ee:9e: a5:e9:a8:4f:9e:e3:95:0a:da:29:ac:9c:52:06:bd: b7:87:d2:74:de:b8:99:31:73:57:75:a5:5d:f1:67: 2b:11:81:28:e7:32:df:1d:2f:42:b7:61:28:81:3e: 0c:78:3d:06:86:f7:56:69:05:5c:29:4a:82:ea:0c: f0:63:6f:0d:8d:83:35:b9:bc:f1:93:dd:fe:e1:e9: 5d:40:73:41:aa:2a:5e:df:43:d9:ff:80:21:dd:b9: de:0e:fd:3c:57:bb:8b:cd:6d:64:7c:d6:90:4f:f5: 83:db:f4:25:e0:64:19:76:9d:94:8b:5b:5b:cc:f3: 4e:af:6f:de:04:d7:57:f7:60:ca:3c:fc:cf:5d:1e: ec:8d:fb:98:6e:59:c4:68:15:5e:3d:3c:7c:fc:9c: 14:55:3d:17:d0:72:8a:b3:58:25:49:f8:d9:df:58: 35:f1:c8:b9:b8:3b:0b:99:e8:93:f9:58:7c:80:b6: 48:19:c1:ad:ab:f6:7c:b4:7e:1f:22:03:9b:e4:90: e5:b1:ce:c7:18:96:54:50:3f:1a:0a:cd:a1:4b:b1: 2d:ba:8d:32:68:2f:03:7c:d2:97:bf:96:c3:87:f1: 56:78:01:cb:f3:06:de:91:b0:6e:62:fe:af:24:61: 78:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:9C:D1:2B:A6:F2:A9:81:0B:66:95:48:81:AF:2D:B7:77:03:EF:47 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:d2:98:39:35:e1:91:5e:05:ed:45:80:21:45:7e:20:94:26: 12:00:ee:e3:53:ab:f8:71:20:59:00:71:e6:7b:4f:65:c0:9f: 92:d4:6c:ca:8e:f1:c8:f9:4a:13:49:b2:52:23:67:7b:1c:19: 9a:57:d3:38:da:ff:fe:76:73:55:98:a0:05:b5:1c:e6:1a:b3: c0:f3:f1:33:7e:b6:e4:0a:f1:7d:bf:af:2f:07:12:2b:8a:d9: ad:f6:6b:5f:e9:9f:3f:f8:7a:75:ec:8c:8d:75:c8:e4:c0:2c: e7:ae:62:36:0b:cd:19:6d:76:2c:20:e1:e6:55:05:10:5c:f0: 80:3f:ae:ca:e3:37:92:1e:62:15:a6:ca:17:8b:a9:c4:1b:2a: 59:a3:77:c2:74:ed:96:5c:67:67:70:64:86:90:dd:c8:e6:35: 3e:77:f4:59:57:1c:02:c3:2d:b9:06:82:36:5d:00:26:3a:b7: d8:30:40:00:4c:00:bf:ea:99:7a:e5:3e:5d:9c:78:43:2b:f3: 01:76:68:34:f0:65:2b:21:7f:b1:35:14:4c:4f:ff:31:96:a7: bf:dd:65:8c:c9:dc:24:ba:87:3b:4b:e8:6c:89:8d:a2:b4:a5: 04:ce:00:74:40:25:5f:20:b9:be:f8:f4:56:98:92:4a:64:e6: 71:37:e2:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDK6+txR1PCgZkN2mMUabDQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwOTIyMjEwMDUzWhcNMjYwOTIzMjEwMDUzWjAzMTEwLwYDVQQD EyhmNTljZDEyYmE2ZjJhOTgxMGI2Njk1NDg4MWFmMmRiNzc3MDNlZjQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1KBKk/96J27kszgm7p6l6ahPnuOV CtoprJxSBr23h9J03riZMXNXdaVd8WcrEYEo5zLfHS9Ct2EogT4MeD0GhvdWaQVc KUqC6gzwY28NjYM1ubzxk93+4eldQHNBqipe30PZ/4Ah3bneDv08V7uLzW1kfNaQ T/WD2/Ql4GQZdp2Ui1tbzPNOr2/eBNdX92DKPPzPXR7sjfuYblnEaBVePTx8/JwU VT0X0HKKs1glSfjZ31g18ci5uDsLmeiT+Vh8gLZIGcGtq/Z8tH4fIgOb5JDlsc7H GJZUUD8aCs2hS7Etuo0yaC8DfNKXv5bDh/FWeAHL8wbekbBuYv6vJGF4PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPWc0Sum8qmBC2aVSIGvLbd3A+9HMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADNKYOTXh kV4F7UWAIUV+IJQmEgDu41Or+HEgWQBx5ntPZcCfktRsyo7xyPlKE0myUiNnexwZ mlfTONr//nZzVZigBbUc5hqzwPPxM3625Arxfb+vLwcSK4rZrfZrX+mfP/h6deyM jXXI5MAs565iNgvNGW12LCDh5lUFEFzwgD+uyuM3kh5iFabKF4upxBsqWaN3wnTt llxnZ3BkhpDdyOY1Pnf0WVccAsMtuQaCNl0AJjq32DBAAEwAv+qZeuU+XZx4Qyvz AXZoNPBlKyF/sTUUTE//MZanv91ljMncJLqHO0vobImNorSlBM4AdEAlXyC5vvj0 VpiSSmTmcTfi2Q== -----END CERTIFICATE-----Generated at Wed Sep 23 04:11:14 2026 by rpki-client