$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: sp+088yVNitEvPjbxNovyRGzpmihY4j3AfqAp+GELTU= Subject key identifier: 50:3B:9B:2D:BE:22:62:15:CB:D1:75:38:65:2E:E4:82:0C:C7:F0:38 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 01A0CFA3CEB8CAF9102F106790525AF4C99B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 143E Signing time: Wed 23 Sep 2026 19:00:14 +0000 Manifest this update: Wed 23 Sep 2026 19:00:14 +0000 Manifest next update: Thu 24 Sep 2026 19:00:14 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: BKZ4AiIR4HJymEbg7yBDaPjsNEc.roa (hash: NSmqFNuVNWWHUV4DP4w7GZulXixMLjJyMk9Zl8PMqNA=) 3: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 4: IT-G9anfftKLn-JNHdB3nhqaHRg.roa (hash: 8S5tnd+3z64Mysha0HCn0KENKA3IjsNdvVfiIIaQQlM=) 5: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 6: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 7: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 8: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 9: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 10: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 11: g40nZDbHYl7qlSg77AKf4r37XCM.roa (hash: bENh9i+XtP2fEGRFJH3lV6YIPsznIq+IWHYPSo2J8bA=) 12: mQVVU0yW21pC8IYFai3gUt7H-pE.roa (hash: H5zFgqItky5UWDxQkcovYBDjwRGeK4Gj998+PN5ijik=) 13: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: q4tS4vPSj+m//JL23OuaTDvmvb36Fh6YaUCxnaSCdSQ=) 14: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:a3:ce:b8:ca:f9:10:2f:10:67:90:52:5a:f4:c9:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Sep 23 19:00:14 2026 GMT Not After : Sep 24 19:00:14 2026 GMT Subject: CN=503b9b2dbe226215cbd17538652ee4820cc7f038 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:23:ed:1d:e7:91:91:04:59:de:29:70:ef:b2: d6:de:94:85:4d:8b:c1:cb:91:2c:3d:99:1b:91:ce: 8c:34:1b:e4:b2:c9:99:ad:3a:bb:e3:07:b5:58:95: 3a:a4:54:08:14:4a:cf:2e:38:a6:da:4f:5d:25:79: 75:88:df:59:94:f4:7b:9f:d1:dc:fa:66:29:eb:92: 76:1b:ba:2c:19:68:b8:bd:31:95:ac:b6:8e:09:b1: de:ff:cd:24:79:be:eb:be:69:f0:4f:cf:b0:80:2c: 7e:36:7d:d9:9d:bf:18:fa:1c:3f:77:ad:10:c6:2e: 04:9a:ca:f6:ca:b0:d3:5d:d3:2f:dc:f9:13:ce:bc: 55:6d:61:31:11:90:3c:7c:93:9f:db:95:6d:aa:d3: 63:57:50:28:01:93:f3:e6:0c:5c:1b:c7:d6:f2:e6: 8c:7e:0a:00:11:d3:50:fa:28:06:78:86:5e:74:9a: 1a:7d:c6:c6:69:11:3a:1b:dc:89:f7:e6:3e:8a:56: 9d:3c:32:c8:66:0b:40:b5:33:65:b0:da:90:2c:49: 17:1a:a1:2b:02:2b:ec:fd:03:9c:13:55:01:bc:c4: 3f:67:8b:98:2f:3f:7a:63:9b:5b:d8:41:c2:24:79: 2e:7a:af:0e:f5:94:4e:a9:36:09:3e:22:1c:7e:59: 19:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3B:9B:2D:BE:22:62:15:CB:D1:75:38:65:2E:E4:82:0C:C7:F0:38 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:b8:56:7e:71:95:26:7c:32:c7:6a:d2:39:a9:cc:cc:a8:90: d1:4c:0b:e3:e6:c3:4c:f8:e5:f8:15:39:82:18:5f:c5:d2:e3: 88:33:34:97:2e:11:46:23:62:fb:db:df:dc:8e:b7:4b:5b:b2: 29:20:c2:17:57:7e:cf:bc:c3:56:71:41:e6:62:33:6a:1e:1c: f3:61:63:f6:72:b7:88:ff:8f:a0:1d:af:e9:e2:4d:37:92:0b: f3:b1:a5:f3:b8:4d:a2:ec:a3:2b:9a:83:40:8d:75:12:9a:f5: 1c:3a:d1:c5:be:13:4c:bc:24:f4:4d:16:b5:0c:a9:ae:3e:4e: ff:c8:e4:2b:34:78:4e:02:7c:a8:26:42:ed:4d:96:58:d7:42: f1:d5:1f:1d:88:5a:58:b6:8e:7b:da:08:4c:36:cd:fb:bb:a6: 24:20:06:4f:fa:6a:c7:ff:bd:95:ad:58:d0:1f:31:4f:f5:ec: c4:a4:a5:64:ef:b1:1b:9c:d3:b3:5d:64:68:8a:32:70:15:a6: c9:fd:17:80:e8:93:53:67:a4:a5:59:02:fd:74:6b:6d:13:9d: 64:d9:39:a6:a7:5a:49:54:50:95:f4:99:d9:64:ab:d9:cc:b6: fc:ff:6b:d9:11:db:b0:5d:de:4a:a5:48:19:44:2d:0d:68:fd: 6e:26:dc:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDPo864yvkQLxBnkFJa9MmbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwOTIzMTkwMDE0WhcNMjYwOTI0MTkwMDE0WjAzMTEwLwYDVQQD Eyg1MDNiOWIyZGJlMjI2MjE1Y2JkMTc1Mzg2NTJlZTQ4MjBjYzdmMDM4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCPtHeeRkQRZ3ilw77LW3pSFTYvB y5EsPZkbkc6MNBvkssmZrTq74we1WJU6pFQIFErPLjim2k9dJXl1iN9ZlPR7n9Hc +mYp65J2G7osGWi4vTGVrLaOCbHe/80keb7rvmnwT8+wgCx+Nn3Znb8Y+hw/d60Q xi4Emsr2yrDTXdMv3PkTzrxVbWExEZA8fJOf25VtqtNjV1AoAZPz5gxcG8fW8uaM fgoAEdNQ+igGeIZedJoafcbGaRE6G9yJ9+Y+iladPDLIZgtAtTNlsNqQLEkXGqEr Aivs/QOcE1UBvMQ/Z4uYLz96Y5tb2EHCJHkueq8O9ZROqTYJPiIcflkZvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFA7my2+ImIVy9F1OGUu5IIMx/A4MB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJrhWfnGV Jnwyx2rSOanMzKiQ0UwL4+bDTPjl+BU5ghhfxdLjiDM0ly4RRiNi+9vf3I63S1uy KSDCF1d+z7zDVnFB5mIzah4c82Fj9nK3iP+PoB2v6eJNN5IL87Gl87hNouyjK5qD QI11Epr1HDrRxb4TTLwk9E0WtQyprj5O/8jkKzR4TgJ8qCZC7U2WWNdC8dUfHYha WLaOe9oITDbN+7umJCAGT/pqx/+9la1Y0B8xT/XsxKSlZO+xG5zTs11kaIoycBWm yf0XgOiTU2ekpVkC/XRrbROdZNk5pqdaSVRQlfSZ2WSr2cy2/P9r2RHbsF3eSqVI GUQtDWj9bibccg== -----END CERTIFICATE-----Generated at Thu Sep 24 00:56:17 2026 by rpki-client