$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft File: aNoQi85PtWVWJGsxVyb19jRYXvE.mft (raw, json) Hash identifier: UR+tPcJ4Sv/Qy7g0S2pbJyXHHrI77TKBfAJzVVXd3uk= Subject key identifier: 5F:0F:EF:1E:98:3D:24:C4:41:C9:D7:95:5A:68:98:42:A0:54:9E:29 Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1 Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1 Certificate serial: 01A0D15B6C8A1079EFFB7D69BCB8F9923812 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft Manifest number: E6 Signing time: Thu 24 Sep 2026 03:00:24 +0000 Manifest this update: Thu 24 Sep 2026 03:00:24 +0000 Manifest next update: Fri 25 Sep 2026 03:00:24 +0000 Files and hashes: 1: 3g5N4ACt53RDfqdl2Qm2kLw7iuM.roa (hash: JfcuHdPpD93vUy2ajbM4MDyRl9hTtYlGFm++NhJ4v9Q=) 2: 4rKV389CcVb18TkAtAQohjFpet4.roa (hash: bshrb45TXCLz1UeSJOO4z6EZmV9tqPYGJlGzReterCU=) 3: EU5pDQStNaoFQyco-4amRP1_FgA.roa (hash: hTHdQn7G2Zgz/0VPSb7q82WZIakSz6CsJwivy9Eitjw=) 4: HdF1Etsw4pdlSu1K8vrei4yVmKw.roa (hash: uoyjLiPTlTI461zU8sJL8PSon9F9MLbPvGcIZXxD+zQ=) 5: K8y0v8xbRIAHJNfQb92ZFS9zmkM.roa (hash: +Jvt7K7C2npld470zp55mSeL6prCT70kckBsxVr1DQU=) 6: LYy3q2HCwTVaEOOy8i76zpWQDQQ.roa (hash: 3gssksK0WKZ1ji7D3njPjIYsZOKLwjh79PXg9K+4kD8=) 7: V7Gy_xsnTYpW1R8jKT-H-yvfeY0.roa (hash: t4KBOdzw1W/nTMlVzOh3vHraukfR4inEsZhCZK2WaVE=) 8: Y6vuMNkzIPJWRuJg5TuMbsi1FcM.roa (hash: 3aMZ5jo10sNTG4r9ibdunWoGNfpF0gSMyVHFFSZbv+I=) 9: aNoQi85PtWVWJGsxVyb19jRYXvE.crl (hash: mt4aSLmvPjAwj0MX73yHHoIi77oysPjWv1GWGXMHAGI=) 10: foSOnmt17u33gfnRPRG4pNSpMq0.roa (hash: k4fSYwEDaC1MgqKDcu6ALBH1gOuaBBhjlNg8kfhU3RQ=) 11: ib5YzLoYXKZK-R3OCwLsvHBhnXY.roa (hash: IT/E+lCIfVXMpHU9raxW9uwfjlZ+Cij+nDKpT3TnewQ=) 12: oe-pRqcbnH3vKHurAZrBu43iDHo.roa (hash: /UnsYCcH9zJIeaXYRWlLI3q/VXRUYL/1eKK/V/miCRM=) 13: tW89lp5YxoMGwhuGz5wy8-1b7tA.roa (hash: 3iDgHelXEotGhsC69Iuc1srSTIuH+BgeoUU2gRFP8bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:5b:6c:8a:10:79:ef:fb:7d:69:bc:b8:f9:92:38:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1 Validity Not Before: Sep 24 03:00:24 2026 GMT Not After : Sep 25 03:00:24 2026 GMT Subject: CN=5f0fef1e983d24c441c9d7955a689842a0549e29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b1:80:b4:9d:e8:08:8a:d5:ac:33:e9:58:9c: 6d:eb:6f:91:4c:1d:db:bd:3c:7e:3f:95:10:51:ea: 4b:49:31:30:58:45:11:01:fc:c6:71:10:fc:5b:8d: ad:3f:09:dd:f7:42:ca:06:20:cc:7f:a6:39:13:04: a6:95:b9:71:59:89:e6:ee:e4:0f:e0:99:14:4a:f2: 9c:ad:c7:42:e7:d2:06:d4:e6:03:2b:03:0a:2d:87: bc:1f:a0:07:2a:d1:7a:a5:a8:b3:b0:94:6e:a2:d1: 4a:ca:64:8b:63:b9:31:26:fe:30:94:ac:5b:0d:37: d7:d0:df:b4:c3:71:ab:26:aa:57:6e:bc:40:6c:47: 91:4e:60:11:30:83:52:e9:a2:0e:81:7e:95:30:64: d5:cb:7e:05:48:38:1e:03:bd:b8:18:8f:94:cb:f6: 35:b2:df:c4:b7:14:f5:d1:53:36:fe:ee:07:f2:b8: 16:e2:68:7b:a0:74:c2:b1:06:98:49:18:93:7b:69: 02:57:6b:dc:e5:72:4f:cb:bc:f1:71:9a:4f:f2:39: e1:e7:0b:11:ab:fd:ca:87:77:82:9c:9b:0f:c1:fe: 83:05:64:90:33:29:a8:2e:86:a0:1d:28:92:72:4f: ec:1e:a8:16:59:4f:58:e8:f1:70:e6:62:99:6a:95: ae:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0F:EF:1E:98:3D:24:C4:41:C9:D7:95:5A:68:98:42:A0:54:9E:29 X509v3 Authority Key Identifier: keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ae:4f:bf:af:fd:27:60:0c:1a:06:bb:67:47:17:98:e6:a0: 67:1c:7e:ab:31:c2:ea:33:2f:6e:62:e4:98:75:d5:de:39:1b: 37:99:b0:46:57:77:9f:c0:2e:ea:a0:1e:e9:8f:48:f3:e0:60: 19:19:05:1b:b8:0b:72:23:1f:62:24:56:65:9d:b6:20:3d:55: 9e:7c:cd:05:71:01:68:72:5f:f3:12:51:a1:95:aa:05:3f:6f: 6c:29:d9:db:90:bc:48:73:ee:bc:66:04:86:c5:30:e9:26:38: 18:12:a6:db:65:50:2c:c3:e1:aa:33:b2:5d:1f:49:8c:bf:b6: 8e:ce:51:79:ee:db:f8:5f:2e:e5:39:9f:f9:24:29:f1:df:04: b5:21:1a:26:b5:88:c7:e6:4e:1a:29:27:3b:ee:09:5e:92:95: b5:dd:89:d1:59:4c:d6:79:5e:23:51:67:66:02:56:d8:8a:32: 0f:5d:91:f7:bc:49:9a:4d:d8:12:ce:46:12:b3:3b:95:0d:c1: af:45:85:10:9e:b0:5a:5d:a9:c7:56:d8:0c:ad:b3:8c:fb:ee: 94:63:4d:6c:8a:ce:46:d3:03:3b:bc:a6:92:37:0a:11:16:b6: 86:de:95:13:26:9e:ba:09:66:05:bb:5e:22:5b:6b:7e:bf:59: 14:b2:ab:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRW2yKEHnv+31pvLj5kjgSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGExMDhiY2U0ZmI1NjU1NjI0NmIzMTU3MjZmNWY2MzQ1 ODVlZjEwHhcNMjYwOTI0MDMwMDI0WhcNMjYwOTI1MDMwMDI0WjAzMTEwLwYDVQQD Eyg1ZjBmZWYxZTk4M2QyNGM0NDFjOWQ3OTU1YTY4OTg0MmEwNTQ5ZTI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobGAtJ3oCIrVrDPpWJxt62+RTB3b vTx+P5UQUepLSTEwWEURAfzGcRD8W42tPwnd90LKBiDMf6Y5EwSmlblxWYnm7uQP 4JkUSvKcrcdC59IG1OYDKwMKLYe8H6AHKtF6paizsJRuotFKymSLY7kxJv4wlKxb DTfX0N+0w3GrJqpXbrxAbEeRTmARMINS6aIOgX6VMGTVy34FSDgeA724GI+Uy/Y1 st/EtxT10VM2/u4H8rgW4mh7oHTCsQaYSRiTe2kCV2vc5XJPy7zxcZpP8jnh5wsR q/3Kh3eCnJsPwf6DBWSQMymoLoagHSiSck/sHqgWWU9Y6PFw5mKZapWuUwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF8P7x6YPSTEQcnXlVpomEKgVJ4pMB8GA1UdIwQY MBaAFGjaEIvOT7VlViRrMVcm9fY0WF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALq5Pv6/9 J2AMGga7Z0cXmOagZxx+qzHC6jMvbmLkmHXV3jkbN5mwRld3n8Au6qAe6Y9I8+Bg GRkFG7gLciMfYiRWZZ22ID1VnnzNBXEBaHJf8xJRoZWqBT9vbCnZ25C8SHPuvGYE hsUw6SY4GBKm22VQLMPhqjOyXR9JjL+2js5Ree7b+F8u5Tmf+SQp8d8EtSEaJrWI x+ZOGiknO+4JXpKVtd2J0VlM1nleI1FnZgJW2IoyD12R97xJmk3YEs5GErM7lQ3B r0WFEJ6wWl2px1bYDK2zjPvulGNNbIrORtMDO7ymkjcKERa2ht6VEyaeuglmBbte Iltrfr9ZFLKrxw== -----END CERTIFICATE-----Generated at Thu Sep 24 08:58:11 2026 by rpki-client