$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft File: ag4WzCqLkctIP0UegTtniul1grA.mft (raw, json) Hash identifier: z8hCBPCSnwETWB//cqKAe6VMhPRow+hiRYgGtAz/sNs= Subject key identifier: 46:68:6C:6E:21:FF:8D:5B:60:CA:ED:6E:92:3E:63:73:5B:A3:96:17 Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0 Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0 Certificate serial: 01A0CB225D1AF9609C53B996FACCD5DE672A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft Manifest number: E3 Signing time: Tue 22 Sep 2026 22:00:21 +0000 Manifest this update: Tue 22 Sep 2026 22:00:21 +0000 Manifest next update: Wed 23 Sep 2026 22:00:21 +0000 Files and hashes: 1: 1-L9_xn5XwFHg99yogQ5P-JRQJno.roa (hash: saknG4EeimO2uKEX00r/busJjcraxx17Sa52KQHrOss=) 2: 1IO7D2ixQ-lvyHRtaxSutQuJrdk.roa (hash: w8VZiMHzBrWoJWSQi1dFm3cARenc5HNcqj8t4FMaUvc=) 3: 1PQllvXnPg1Cq46Iy4Rpg_2dzeE.roa (hash: KYF3xosyzq4vGix6BtHELmM/f2AEyPg2NuKi997fdec=) 4: 82--YWEKcMvIJETSOTv0fBdL6CM.roa (hash: txaVMOY8ninC/G6RFe/UwHhOENX0T290iWUIMYkdnmk=) 5: MHRGHVH_9ryY5YWmrqyOo25Yw-w.roa (hash: p0ZTTiOVdQ6jigzVZJJBkL+3fqMDD1xA2wHogGA9TUQ=) 6: P9YT4wpleippbcH7ySs9yJhewoc.roa (hash: cSxqBMShQEu5xdePejl0TQuouUbtuQWYRC9Of5i3nxw=) 7: PehZN3iXx53NNUUfpGjKtEgbtG0.roa (hash: ZF5FCAasCGxv9d43oiaKd2A5u46kRGpM48JeEUZzsOY=) 8: QcJ1_3me8VKJVSwljpvJ4RRo4bI.roa (hash: oLE/UmjEKWdlluphq/E4JLOUzru3Xt/qp1y2xi32ZuM=) 9: RoQDt4PjdwW0SoiiPvyTsxSfuY8.roa (hash: 1mJogWLp+9JQPWumTmYBS2/tf+nhYhyUXRjcoUUswLw=) 10: RvNLAe_RSP56uzDHYQxY7j2RYDA.roa (hash: 138Cifhmc2WWQk/qLf2plQLxN1qV8R840l4XB+Ds6Qg=) 11: SOdgrNHWpRExOJRc-f9cfWJ4cms.roa (hash: k5GQQCFGnAJdQAMjkz3mMLNhKN0O4TfU790kcOAiuaM=) 12: UqImUVHBq3p8NTSpUZrZaZqeIO0.roa (hash: b0cbtwxFDLQWZmYSn/tfFyO/bdt5kbBtbbVLEmIteZY=) 13: V4QNov5aUVl0kjPoDbGXWUTFf3c.roa (hash: RWwYnwshC1K5yWsQ6bl0FWPq+jSiHD0KLQ+6u/grLQo=) 14: ZXMBfEzRQgZ6XQqYEpUztP_oHuk.roa (hash: CES/AfhEQn2U94y88HLeLxHi0QZ8IQSspRKZIOPxVHU=) 15: ag4WzCqLkctIP0UegTtniul1grA.crl (hash: 4mlLe4hcGoHZv/BsgSFpMV9ZbrUMDKIiydzmaQ/gTrU=) 16: hr6KKW3gkx0Rqd2xi4SSwYOvYAo.roa (hash: AW1B3GU+CHp2dLnlTMaUnh9So+6olkFuGvAvVFpBybo=) 17: nYlDDvhL9ZKod4FxRoAJN8wFPy8.roa (hash: kUW/q0E+5ap6XJqy3o0pzyvq0pN9N7639FqeoHqln7w=) 18: vTCE3_WjlZWEHiUifn-Z3rZn-3g.roa (hash: k0eIUOFWrIqLB7Ha+lzX5IKld1csxUVRrPdDqLcQHmQ=) 19: yde-3lSgZiRr0HU1KS1x7njAoeA.roa (hash: eSGD7O7kwdqNPAeSE2PmhfFGu0OTxONTMV1cXFqWo/g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:22:5d:1a:f9:60:9c:53:b9:96:fa:cc:d5:de:67:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0 Validity Not Before: Sep 22 22:00:21 2026 GMT Not After : Sep 23 22:00:21 2026 GMT Subject: CN=46686c6e21ff8d5b60caed6e923e63735ba39617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:51:11:b8:dd:3e:47:5d:1c:41:50:88:7b:3c: b1:89:60:1a:9b:e2:56:38:60:73:66:c7:71:46:12: 61:d2:3a:17:78:88:4c:56:b4:18:f4:3e:52:5e:56: 63:f4:48:0a:43:a6:c6:cf:eb:5c:3e:8a:39:66:af: 26:b4:cf:28:03:c5:66:50:f6:5f:b4:45:65:fd:18: 19:cc:d7:8a:8c:38:9d:4f:88:f7:61:a3:9b:0c:a0: e1:70:63:44:9a:41:e1:b2:f0:7f:c3:60:f4:af:f9: 1d:fc:b8:2a:ee:69:26:87:96:84:31:71:ac:b9:2d: b3:1d:52:a4:3b:21:04:9e:20:e3:5f:d2:16:bc:09: 83:b9:bd:a5:9f:cf:ee:f7:fb:04:ed:38:ed:1e:41: 39:e9:d8:2f:d1:4d:80:25:a4:98:b0:2b:44:2b:6c: 49:f1:e6:31:be:f5:d3:8f:bc:52:42:e9:db:2c:a4: ac:e0:62:fa:10:b8:20:70:31:0b:50:1e:5b:e3:3f: ef:ab:1c:25:50:20:d4:99:fb:bb:b0:2a:7b:a2:00: 4e:a7:f4:d2:6b:45:b6:16:37:96:f6:26:8b:7e:bd: 46:bc:a8:5a:98:ec:23:88:ec:2d:00:6c:16:ac:95: ae:ee:ac:75:c9:d0:fe:10:60:69:ca:79:58:f2:85: 24:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:68:6C:6E:21:FF:8D:5B:60:CA:ED:6E:92:3E:63:73:5B:A3:96:17 X509v3 Authority Key Identifier: keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:0a:f6:da:c9:95:f6:2c:cc:a9:fe:77:9e:32:5a:eb:df:30: 7f:50:78:66:4b:00:35:4e:e3:35:93:0b:8f:7a:14:38:1a:7b: 69:e3:59:5b:39:d2:b9:1d:81:ed:b6:a9:9d:ca:a7:d5:7a:4e: 9b:cb:9a:03:fd:22:bb:69:2d:12:95:d0:3e:be:9d:7c:95:7f: 8d:a8:57:85:b6:3d:79:b1:ac:1a:ca:d8:dd:94:a4:13:d0:69: eb:2e:33:e1:02:cc:77:a9:b7:c3:78:a1:3a:9f:60:9d:11:9d: 11:26:06:5e:6a:19:6b:21:b7:0d:74:1d:d5:db:3d:02:7d:10: d8:63:f2:f6:f9:a6:6a:69:9e:f1:0a:9e:79:68:30:25:08:5e: 30:f1:f5:d5:e8:ce:31:a4:72:c0:0e:6d:fe:14:d8:b7:2f:5a: a2:ad:7c:a2:3a:8f:0a:e8:43:09:01:26:e2:c8:dc:a8:6e:ff: 37:3f:4b:0b:87:dd:2e:cd:75:29:fc:48:4a:9d:17:57:23:1b: 3f:d7:78:5c:03:4b:09:d5:ea:fa:97:07:ea:25:ff:4d:0e:9c: 46:ef:23:26:af:af:e1:b6:c0:cc:2b:52:c1:93:35:e7:8f:09: 56:9c:4f:92:05:0a:7d:d3:e6:e6:20:93:cd:84:cf:d0:33:fb: f2:90:5a:63 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDLIl0a+WCcU7mW+szV3mcqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZhMGUxNmNjMmE4YjkxY2I0ODNmNDUxZTgxM2I2NzhhZTk3 NTgyYjAwHhcNMjYwOTIyMjIwMDIxWhcNMjYwOTIzMjIwMDIxWjAzMTEwLwYDVQQD Eyg0NjY4NmM2ZTIxZmY4ZDViNjBjYWVkNmU5MjNlNjM3MzViYTM5NjE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFERuN0+R10cQVCIezyxiWAam+JW OGBzZsdxRhJh0joXeIhMVrQY9D5SXlZj9EgKQ6bGz+tcPoo5Zq8mtM8oA8VmUPZf tEVl/RgZzNeKjDidT4j3YaObDKDhcGNEmkHhsvB/w2D0r/kd/Lgq7mkmh5aEMXGs uS2zHVKkOyEEniDjX9IWvAmDub2ln8/u9/sE7TjtHkE56dgv0U2AJaSYsCtEK2xJ 8eYxvvXTj7xSQunbLKSs4GL6ELggcDELUB5b4z/vqxwlUCDUmfu7sCp7ogBOp/TS a0W2FjeW9iaLfr1GvKhamOwjiOwtAGwWrJWu7qx1ydD+EGBpynlY8oUk4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEZobG4h/41bYMrtbpI+Y3Nbo5YXMB8GA1UdIwQY MBaAFGoOFswqi5HLSD9FHoE7Z4rpdYKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt ZDFhNzc3MmRiMDc2LzEvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2 LzEvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjAr22smV 9izMqf53njJa698wf1B4ZksANU7jNZMLj3oUOBp7aeNZWznSuR2B7bapncqn1XpO m8uaA/0iu2ktEpXQPr6dfJV/jahXhbY9ebGsGsrY3ZSkE9Bp6y4z4QLMd6m3w3ih Op9gnRGdESYGXmoZayG3DXQd1ds9An0Q2GPy9vmmamme8QqeeWgwJQheMPH11ejO MaRywA5t/hTYty9aoq18ojqPCuhDCQEm4sjcqG7/Nz9LC4fdLs11KfxISp0XVyMb P9d4XANLCdXq+pcH6iX/TQ6cRu8jJq+v4bbAzCtSwZM1548JVpxPkgUKfdPm5iCT zYTP0DP78pBaYw== -----END CERTIFICATE-----Generated at Wed Sep 23 03:36:59 2026 by rpki-client