$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json) Hash identifier: AmBWoSGoc3JpXDV71zJHQCd6Vua1GQJH1kAzlEKK144= Subject key identifier: E8:AC:48:06:F9:1E:50:BC:EC:A8:88:8B:A8:3A:99:AF:F3:F7:4F:D3 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 01A0CBFE2F055916A008EB9D8CF2BB799FE7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft Manifest number: 0AB7 Signing time: Wed 23 Sep 2026 02:00:28 +0000 Manifest this update: Wed 23 Sep 2026 02:00:28 +0000 Manifest next update: Thu 24 Sep 2026 02:00:28 +0000 Files and hashes: 1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=) 2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=) 3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: oYQAzUOT94HPBiDCD4pZnD5C+7+JFbl4SKhcPPPUzL4=) 4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=) 5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=) 6: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=) 7: GpC8kKK46MldSup1gVZrU7Mojzc.roa (hash: 6Lu5Oq012D9LKfKVQhXUujBxyGtMssHHbOSP5uQ8bhw=) 8: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=) 9: NGpHbF0qELe-yypRyZG8QYDDkQ8.roa (hash: STZ8+oAAgWpB89YtrloGqm8ffW2z9KJfLq0rIu0hcT0=) 10: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=) 11: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=) 12: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=) 13: eSvAFbt4I_ny3rlI1qsQVvR095k.roa (hash: ASQ/McMElv2jG1XUE+eDIGnRMZkt0bsbVgcxyB63q5k=) 14: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=) 15: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=) 16: qfDAGHDDZhbG_VUXj0goKE-xsTE.roa (hash: 00PBxTZATabx2MDk9b4T2x5pqNTy64WZzmYqaLHUFhk=) 17: qp8bK0_zELwwRnea3kYnPZuv5kU.roa (hash: KKFbcXLRieVJeInE5UEIj+fyTeLEa9fncQ29NqsfdFw=) 18: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=) 19: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:fe:2f:05:59:16:a0:08:eb:9d:8c:f2:bb:79:9f:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Sep 23 02:00:28 2026 GMT Not After : Sep 24 02:00:28 2026 GMT Subject: CN=e8ac4806f91e50bceca8888ba83a99aff3f74fd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d7:c7:8e:f5:65:a9:17:18:0a:50:f4:51:d5: 7b:84:bd:c8:bb:b6:89:9d:2e:a1:fd:30:c2:ce:97: 34:6c:bf:9a:09:0a:48:92:76:6e:de:e7:5f:78:a5: ff:03:58:7f:5b:37:b1:b4:a0:51:e1:7e:db:f5:1c: 75:ef:2f:da:04:c5:fa:17:6f:63:6d:0c:3f:fc:9c: 40:a1:b3:38:b7:ed:d7:29:01:77:fc:9d:cc:0f:5a: da:74:d1:26:73:1b:10:02:b2:8f:02:be:55:a8:3a: 9f:41:16:06:69:51:73:95:0e:1e:5a:f0:e8:88:e6: 64:ac:d9:52:3b:c5:01:74:9b:b0:e7:c5:b5:7f:1c: 88:85:6f:f0:db:61:19:d8:e2:86:f7:c1:d4:d8:ad: 24:1c:db:ee:ed:66:c8:77:4b:6d:62:23:25:5b:9c: 1d:0e:db:85:a7:0e:81:97:66:34:99:30:8d:6e:9b: e4:8e:0e:c4:db:e5:b5:c7:ba:ab:40:c1:7f:f5:bb: bf:5b:20:b9:ec:ca:55:78:eb:09:f9:d8:91:1e:f2: 2b:ca:32:7b:70:b4:ee:ee:27:11:2a:f4:f0:6e:b1: 4a:c2:3f:19:0f:0d:06:ba:38:b8:a2:d4:b9:09:32: d0:43:50:8a:54:57:9c:0e:67:76:cc:93:71:eb:be: a4:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:AC:48:06:F9:1E:50:BC:EC:A8:88:8B:A8:3A:99:AF:F3:F7:4F:D3 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:7d:4d:59:b2:58:1b:11:1b:e9:67:d3:67:f6:f0:9b:0a:3d: c0:60:64:e0:a7:cd:43:b7:ec:f2:7c:2f:40:dd:b7:5e:56:43: c4:5b:16:0d:23:eb:dd:a1:61:10:cb:31:3a:fa:05:f7:64:a2: 6f:7a:1c:ff:b4:6c:eb:af:9c:57:d2:66:ff:60:1d:45:0d:2b: 77:67:cf:30:d5:df:3b:25:21:62:0f:c9:53:61:9f:76:cf:9b: e4:82:49:96:39:4d:43:35:9c:1a:c6:32:63:eb:e8:58:6c:bd: f9:81:44:d7:4d:f2:6e:81:b4:2b:01:bf:86:43:c6:e6:98:20: 19:e9:3a:97:8e:ab:cf:42:f7:92:b1:5f:d5:ed:56:af:0d:7a: 43:21:c6:e8:e8:a2:29:31:7a:31:a0:b8:3c:77:e7:2c:d2:ca: 75:db:ed:ed:c3:ac:5c:89:6b:29:7d:8d:9b:08:6e:0b:fb:06: 7b:99:64:4b:87:6a:06:09:88:48:b3:98:26:e8:19:7c:57:37: 68:f0:98:85:07:d3:fa:52:7c:2d:ab:0c:c6:18:17:95:e8:f8: 7c:a7:05:7a:e1:31:66:2b:ed:20:74:98:bd:20:49:37:a7:61: 60:2f:7f:73:c0:59:4c:4a:41:cc:63:47:f5:b4:99:08:a8:b3: f5:32:e0:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDL/i8FWRagCOudjPK7eZ/nMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYwOTIzMDIwMDI4WhcNMjYwOTI0MDIwMDI4WjAzMTEwLwYDVQQD EyhlOGFjNDgwNmY5MWU1MGJjZWNhODg4OGJhODNhOTlhZmYzZjc0ZmQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNfHjvVlqRcYClD0UdV7hL3Iu7aJ nS6h/TDCzpc0bL+aCQpIknZu3udfeKX/A1h/WzextKBR4X7b9Rx17y/aBMX6F29j bQw//JxAobM4t+3XKQF3/J3MD1radNEmcxsQArKPAr5VqDqfQRYGaVFzlQ4eWvDo iOZkrNlSO8UBdJuw58W1fxyIhW/w22EZ2OKG98HU2K0kHNvu7WbId0ttYiMlW5wd DtuFpw6Bl2Y0mTCNbpvkjg7E2+W1x7qrQMF/9bu/WyC57MpVeOsJ+diRHvIryjJ7 cLTu7icRKvTwbrFKwj8ZDw0Guji4otS5CTLQQ1CKVFecDmd2zJNx676keQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOisSAb5HlC87KiIi6g6ma/z90/TMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABX1NWbJY GxEb6WfTZ/bwmwo9wGBk4KfNQ7fs8nwvQN23XlZDxFsWDSPr3aFhEMsxOvoF92Si b3oc/7Rs66+cV9Jm/2AdRQ0rd2fPMNXfOyUhYg/JU2Gfds+b5IJJljlNQzWcGsYy Y+voWGy9+YFE103yboG0KwG/hkPG5pggGek6l46rz0L3krFf1e1Wrw16QyHG6Oii KTF6MaC4PHfnLNLKddvt7cOsXIlrKX2NmwhuC/sGe5lkS4dqBgmISLOYJugZfFc3 aPCYhQfT+lJ8LasMxhgXlej4fKcFeuExZivtIHSYvSBJN6dhYC9/c8BZTEpBzGNH 9bSZCKiz9TLgPw== -----END CERTIFICATE-----Generated at Wed Sep 23 05:54:24 2026 by rpki-client