$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft File: 1gR16-fwfXQVPLHMozjBbYAfRfc.mft (raw, json) Hash identifier: pQCU4fyev8YIjHU4yLAj/ZxpRj/bYBWTV4phB+Dnwxc= Subject key identifier: DE:39:94:3A:E0:04:80:DE:0A:36:DC:2B:DF:7E:5F:E2:34:98:0E:70 Authority key identifier: D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 Certificate issuer: /CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Certificate serial: 01A0CEFF6E6378223E5E6A5DB09CA61EA392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft Manifest number: 1B71 Signing time: Wed 23 Sep 2026 16:00:41 +0000 Manifest this update: Wed 23 Sep 2026 16:00:41 +0000 Manifest next update: Thu 24 Sep 2026 16:00:41 +0000 Files and hashes: 1: 1AHWdqsfLZWVnpd7ySpQCvW-jsc.roa (hash: m7dz8w2hdfa6XOQ5lZQThIIgEVCr6pRG/uc4x6X1d84=) 2: 1gR16-fwfXQVPLHMozjBbYAfRfc.crl (hash: 09jN9kT31GQC2e9rr3Xm0EcShkjfU1md/E4+APjMxCY=) 3: 1xKMTxjcAyTOqPTp48dbyl1IVKs.roa (hash: USplCCSviit7LuwikiCrStcHpPZhldNMRmJaNU4sZJs=) 4: 2WrIc3-SP4DwQkwPJgua1bGNJ8U.roa (hash: 1n+jxmJd5F9eDLk5zWmpaiLv++ZbzD7Fd2FD1jx9EQI=) 5: 2tySjVTQSHiULWpIIHxe3UTXyKc.roa (hash: 11efIhc4jliYz5b7ccbbcBy+lueobimG/f4ImBFKSr4=) 6: 7osNxsXaNZ0atgy1tSk-ErRImNA.roa (hash: 8e7o+cChykZO+0/seKW+tQ6gNasSXCuNcM9hirx8EvE=) 7: 8mJ_gjPNuA1v0E8kGgFSHtyuDE8.roa (hash: iBeqVNXfdRFJ/xbLsD0hF/qTWwOBkcVA6E79gUwEHAE=) 8: 8s9uSzf6TvkzP7AMAwk-J-bBoaI.roa (hash: HhHYyz7/gaXYnl+eOQvtBscobpbKRyobYY7K5LG1gFs=) 9: CW-qcI1ohMNZFrtxwKP6h3IuUsY.roa (hash: Q0m3SYkmGKp057as4cDbrXW6Plo1d3nxk1JPEsbDaPY=) 10: KbInZ1Gpupdhphj7CkIdrL5je5o.roa (hash: q3MqxIRaBKHDKKFdix9wq0J/uM2um2WP1MbmKzjeTHE=) 11: fUY8ZLyPFO6PzdE1sHTPRnXSlKM.roa (hash: mSqtCcipoj++PAZRPkO1MS55ZKNwolFB8twWgcQV0Yk=) 12: hjwqR_BvVV3igv-VRSRakB0C0gY.roa (hash: dGn15gWRk4S5nvTCswCYk4PnSEMzXrTWJmJ53SFUgxE=) 13: iyfIsG_zCzXslesxdnK347yeiF4.roa (hash: tDXmuusqCyRHX/DQh8nnAapHWqFHXmFSmh6Yr5JKuq0=) 14: lITdQxhmX_QJLHCdZAw823-rxIE.roa (hash: LD1BnadL45zxeXJQFcYTUwoYEdwQD3yyFtEI21xm/MU=) 15: o5usRUvaTvh6G2keAnUfVT8NAfA.roa (hash: pPdHXR2AOGXsw+/jHJo3zUy9fjtPG7RWk5boxOB8T1s=) 16: wQvwuyTtVhloyL12ClFe1Tmx_YM.asa (hash: 7C5CFFl7eP926O+5F2qKTmqq4J0LTe8XElvBDea1xIg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ce:ff:6e:63:78:22:3e:5e:6a:5d:b0:9c:a6:1e:a3:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d60475ebe7f07d74153cb1cca338c16d801f45f7 Validity Not Before: Sep 23 16:00:41 2026 GMT Not After : Sep 24 16:00:41 2026 GMT Subject: CN=de39943ae00480de0a36dc2bdf7e5fe234980e70 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:e9:a1:7b:5c:d6:a0:eb:9c:a0:e9:9f:94:49: c7:2c:81:d9:5b:d1:58:5c:14:42:3e:1a:14:b0:6b: 33:d8:2d:df:c2:aa:fc:16:4f:84:ca:00:34:ff:7d: 50:11:63:67:2d:f2:4b:d6:09:b5:76:ab:d7:80:6f: a2:dc:f2:7e:b5:b5:27:fe:2a:1e:88:dd:59:a9:bf: 3d:14:b6:40:87:7a:42:ad:11:47:e4:5c:91:2c:b6: b9:be:fd:1f:c0:76:fb:4a:01:18:9c:3d:a6:84:6c: 27:43:3a:60:50:94:66:b6:e9:0d:ca:43:64:6d:20: 7c:25:ef:62:55:41:b0:ac:9c:54:0a:77:b8:8a:53: 1b:05:6a:6d:78:32:49:9b:98:4e:25:1f:fa:bb:2a: 4d:e5:70:60:97:b6:a7:9c:6d:2c:ad:a2:71:2e:32: 98:e8:f0:47:7b:0b:00:67:79:2c:b1:2d:04:bf:32: ab:62:73:7f:90:6d:de:a5:2b:bd:ae:7a:f0:58:f6: 70:72:3b:db:e7:5b:74:c8:ad:16:33:eb:49:54:e6: 92:ac:75:5c:7e:8a:de:f1:4e:d4:c7:8f:bc:4f:2e: 3d:ce:4a:20:2e:55:69:3c:9d:a6:c5:11:93:e5:5c: 12:f9:c7:7c:ca:7d:a5:9f:2d:d9:7a:15:df:6b:2c: 8a:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:39:94:3A:E0:04:80:DE:0A:36:DC:2B:DF:7E:5F:E2:34:98:0E:70 X509v3 Authority Key Identifier: keyid:D6:04:75:EB:E7:F0:7D:74:15:3C:B1:CC:A3:38:C1:6D:80:1F:45:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1gR16-fwfXQVPLHMozjBbYAfRfc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/52ebae-e006-4778-ac3c-496f8ebb2d61/1/1gR16-fwfXQVPLHMozjBbYAfRfc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:6d:08:ce:aa:a1:35:c2:0b:9e:06:ef:d2:70:70:34:43:92: ff:3e:f9:9b:0e:82:cc:e0:37:d8:c1:25:ad:f5:2e:7f:2f:a0: b2:12:d4:62:36:d7:27:e1:90:42:1b:87:98:ba:e8:bc:f6:de: 0f:84:ad:d5:46:3b:fe:33:11:16:6e:c2:f5:30:e7:fc:75:0a: d9:81:33:90:0a:62:3b:4c:e5:32:17:43:07:56:a6:4c:f2:1f: c2:27:1f:8b:df:1c:5c:e8:a7:3f:29:3c:16:26:48:de:42:55: 4a:ba:d0:1d:d2:64:a8:cb:da:3a:04:44:61:ce:48:bd:51:8a: 80:db:90:5d:d9:0e:9b:3e:e9:3f:6e:17:ad:ed:d7:44:ea:cd: f5:22:84:8f:c5:4c:3e:54:85:f1:88:a5:26:a8:42:cb:78:09: d5:d7:35:37:10:fe:6a:86:de:75:7f:76:fe:72:56:88:92:e3: 2c:30:2a:52:64:84:c2:cb:6a:1f:0d:a8:bd:08:80:7f:5e:a2: ed:0b:5f:30:0e:f3:e0:41:3b:d1:3d:b3:46:9d:4b:76:e7:61: a3:35:69:0d:f0:4b:6f:d3:d8:fd:92:73:66:6a:f0:80:d5:4f: 27:b3:db:16:53:9c:d1:77:04:52:10:48:d4:3f:75:0c:c1:44: e9:5b:95:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDO/25jeCI+XmpdsJymHqOSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2MDQ3NWViZTdmMDdkNzQxNTNjYjFjY2EzMzhjMTZkODAx ZjQ1ZjcwHhcNMjYwOTIzMTYwMDQxWhcNMjYwOTI0MTYwMDQxWjAzMTEwLwYDVQQD EyhkZTM5OTQzYWUwMDQ4MGRlMGEzNmRjMmJkZjdlNWZlMjM0OTgwZTcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0emhe1zWoOucoOmflEnHLIHZW9FY XBRCPhoUsGsz2C3fwqr8Fk+EygA0/31QEWNnLfJL1gm1dqvXgG+i3PJ+tbUn/ioe iN1Zqb89FLZAh3pCrRFH5FyRLLa5vv0fwHb7SgEYnD2mhGwnQzpgUJRmtukNykNk bSB8Je9iVUGwrJxUCne4ilMbBWpteDJJm5hOJR/6uypN5XBgl7annG0sraJxLjKY 6PBHewsAZ3kssS0EvzKrYnN/kG3epSu9rnrwWPZwcjvb51t0yK0WM+tJVOaSrHVc fore8U7Ux4+8Ty49zkogLlVpPJ2mxRGT5VwS+cd8yn2lny3ZehXfayyK3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN45lDrgBIDeCjbcK99+X+I0mA5wMB8GA1UdIwQY MBaAFNYEdevn8H10FTyxzKM4wW2AH0X3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2Mt NDk2ZjhlYmIyZDYxLzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC81MmViYWUtZTAwNi00Nzc4LWFjM2MtNDk2ZjhlYmIyZDYx LzEvMWdSMTYtZndmWFFWUExITW96akJiWUFmUmZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjm0Izqqh NcILngbv0nBwNEOS/z75mw6CzOA32MElrfUufy+gshLUYjbXJ+GQQhuHmLrovPbe D4St1UY7/jMRFm7C9TDn/HUK2YEzkApiO0zlMhdDB1amTPIfwicfi98cXOinPyk8 FiZI3kJVSrrQHdJkqMvaOgREYc5IvVGKgNuQXdkOmz7pP24Xre3XROrN9SKEj8VM PlSF8YilJqhCy3gJ1dc1NxD+aobedX92/nJWiJLjLDAqUmSEwstqHw2ovQiAf16i 7QtfMA7z4EE70T2zRp1LdudhozVpDfBLb9PY/ZJzZmrwgNVPJ7PbFlOc0XcEUhBI 1D91DMFE6VuVhA== -----END CERTIFICATE-----Generated at Wed Sep 23 23:48:19 2026 by rpki-client