$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: YKU9A9zjdmxKjsLleHyqglM/o8DIlOdF9OaHJ0KqQqs= Subject key identifier: 7F:52:D1:68:D7:98:11:F1:1C:A9:A0:E3:14:A6:8E:50:DD:90:8C:AD Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 01A0D1C909CD27EA44F00E427F74C685B0ED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 1A82 Signing time: Thu 24 Sep 2026 05:00:08 +0000 Manifest this update: Thu 24 Sep 2026 05:00:08 +0000 Manifest next update: Fri 25 Sep 2026 05:00:08 +0000 Files and hashes: 1: 5bw3FxzpBWgCUPFGor6BeS_x13E.roa (hash: vbv6Fyo711z5Y6WllYiF1+hQCuBRfjBj2SnqOdmQ/Ko=) 2: KClfXxgk0wRzsCWY2cBjE-9OUBw.roa (hash: mZTkzVHUlv75y3/sF2jX1yQ3NF8yk3kbKCgMEXnClVc=) 3: OPUmPq2MCSSLajil_N8xjasEED0.roa (hash: 3ErCgLhuftk7qbnRHyFbXfh2aIHoI6pTjwOjuX9ybbI=) 4: PVZJLc9tODZFqXK-cJmdd7K-baM.roa (hash: nv2FNyj3NvI+l9/bwumlpSj6KXBZJHOiEr8IoIDWWBs=) 5: RD2bQy42cJtcLUpPd6bwEgSdC5g.roa (hash: EXR+FPHGsONaMy04ozJgDUBq2GB63B3p6cERU165gBY=) 6: RTtrcIMD_1Pooh2hybtppswd0Cs.roa (hash: gHzBppcBQRTrZFKZdzTeaIz8G3KIuJKhpm0DEQdKM5o=) 7: ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa (hash: 3HGI+6qeROUPLoU4ORnifqLKfR+6cyux8LhHwuDQCzI=) 8: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: HqWTo7wcMX19eM3o8VZA8bLchf7qiqk02x88NQGXNOE=) 9: iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa (hash: Xmy3joGzE7DOFCUoxtKq+8sQb3nS9R29UjEKhSZ9+oA=) 10: jwL6ZedQy9jrx6zRLmC34t2VuNI.roa (hash: JjbOSGoIoxnMnWQdAupasyiznFb2Rz/tCe7dz0MfJkM=) 11: taRmnaIWL0Lvnk8-ztV91eCLqRU.roa (hash: Duq2TEYTpeDcixHF5tGgiY61uowG5KKhAb2ieJRR8c4=) 12: vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa (hash: HHDiRi1+BOUzXevtTy1X6aaBtWS9/5nRjSa9y3Tpifg=) 13: wUgkHiQ86rCh1plfV-1fhX-AaMg.roa (hash: 86ia7TUjUS+IoQf3wQbTT6jWw8UWMBIHEfrKwtfOipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 05:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:c9:09:cd:27:ea:44:f0:0e:42:7f:74:c6:85:b0:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Sep 24 05:00:08 2026 GMT Not After : Sep 25 05:00:08 2026 GMT Subject: CN=7f52d168d79811f11ca9a0e314a68e50dd908cad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:45:07:14:df:89:ce:8d:b6:d3:bf:26:8c:e9: 7d:9d:83:b1:47:87:c8:22:77:89:d6:6f:eb:22:42: 87:2a:95:08:3c:2d:d5:91:87:27:34:a4:20:2e:b1: dc:25:c1:44:54:01:87:72:dc:92:fc:dd:d3:c5:4d: c4:15:1b:97:6f:aa:a0:50:e5:65:6b:48:d5:ee:10: c5:d1:34:2c:5d:64:eb:44:cf:1a:86:1c:5c:45:02: 92:14:ed:d7:d4:2a:4e:99:21:d2:53:7c:08:70:2b: 0a:43:c4:88:4a:cb:8f:8f:62:a0:17:77:11:4a:41: 1f:21:ca:fa:87:ad:f5:ef:8a:67:72:9c:80:4d:bc: 92:6f:a2:5f:bd:db:fa:e4:ea:e2:58:8d:b1:c6:e7: 2e:81:71:ec:ea:2d:f8:ca:22:b5:a8:9f:65:46:44: 1a:6c:b2:0e:67:fd:bf:2a:fc:11:2d:3e:31:c3:c5: 48:45:da:fa:2d:7e:f8:0f:c3:70:da:aa:18:a3:79: 77:48:8f:74:f0:4c:44:1a:4e:37:b7:46:f3:d0:0f: 9e:57:47:69:ea:73:de:f1:47:39:9a:ed:f7:5e:c9: 0e:d5:c4:6e:9e:9e:7b:24:e7:b1:8f:d5:20:0d:02: a2:80:b4:6f:b8:be:e0:7c:b5:87:21:8f:17:36:9b: 61:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:52:D1:68:D7:98:11:F1:1C:A9:A0:E3:14:A6:8E:50:DD:90:8C:AD X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:46:91:31:96:3f:66:89:b7:e1:38:12:a8:c7:0c:32:f7:43: 93:77:db:b6:05:9b:cf:76:c4:b5:b4:92:d7:b3:29:8c:d6:86: 24:cc:65:cb:b7:3e:8f:6b:76:e0:d3:4d:bd:2a:68:bf:91:23: 4c:77:54:ec:1d:a3:68:68:10:7e:9b:9f:4e:c2:3c:80:ef:40: c0:da:c0:5e:fe:81:12:eb:b6:32:24:26:9d:ec:e4:d7:21:01: 94:73:e2:6a:c8:c8:f5:51:b7:b9:28:e0:b2:39:9c:4f:3e:1c: e4:f6:92:24:1c:e7:9d:46:9e:6e:5b:36:b8:09:0b:d4:0c:8c: 3e:ac:75:f7:c8:2a:67:fd:ef:de:62:d0:c8:60:3c:74:a8:a2: 65:5a:ee:9b:4f:ec:fe:39:9f:37:18:bf:0b:c0:ce:c4:de:2b: 0f:35:03:95:52:48:ca:d1:d7:93:9f:11:20:eb:27:11:57:90: 14:75:fe:f6:25:3b:0f:e5:3d:ed:62:58:22:e9:09:7d:6e:eb: 21:15:fb:73:de:d2:6e:f6:6c:a9:28:32:09:34:f3:50:24:7a: 4b:84:99:09:a7:f0:f4:17:4e:08:39:c5:e2:55:56:56:c6:84: ea:6d:96:b7:d5:ac:7a:4a:10:b8:94:82:e4:43:80:4b:e9:ea: aa:c0:07:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRyQnNJ+pE8A5Cf3TGhbDtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYwOTI0MDUwMDA4WhcNMjYwOTI1MDUwMDA4WjAzMTEwLwYDVQQD Eyg3ZjUyZDE2OGQ3OTgxMWYxMWNhOWEwZTMxNGE2OGU1MGRkOTA4Y2FkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40UHFN+Jzo22078mjOl9nYOxR4fI IneJ1m/rIkKHKpUIPC3VkYcnNKQgLrHcJcFEVAGHctyS/N3TxU3EFRuXb6qgUOVl a0jV7hDF0TQsXWTrRM8ahhxcRQKSFO3X1CpOmSHSU3wIcCsKQ8SISsuPj2KgF3cR SkEfIcr6h63174pncpyATbySb6Jfvdv65OriWI2xxucugXHs6i34yiK1qJ9lRkQa bLIOZ/2/KvwRLT4xw8VIRdr6LX74D8Nw2qoYo3l3SI908ExEGk43t0bz0A+eV0dp 6nPe8Uc5mu33XskO1cRunp57JOexj9UgDQKigLRvuL7gfLWHIY8XNpthKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH9S0WjXmBHxHKmg4xSmjlDdkIytMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfUaRMZY/ Zom34TgSqMcMMvdDk3fbtgWbz3bEtbSS17MpjNaGJMxly7c+j2t24NNNvSpov5Ej THdU7B2jaGgQfpufTsI8gO9AwNrAXv6BEuu2MiQmnezk1yEBlHPiasjI9VG3uSjg sjmcTz4c5PaSJBznnUaebls2uAkL1AyMPqx198gqZ/3v3mLQyGA8dKiiZVrum0/s /jmfNxi/C8DOxN4rDzUDlVJIytHXk58RIOsnEVeQFHX+9iU7D+U97WJYIukJfW7r IRX7c97SbvZsqSgyCTTzUCR6S4SZCafw9BdOCDnF4lVWVsaE6m2Wt9WsekoQuJSC 5EOAS+nqqsAHfA== -----END CERTIFICATE-----Generated at Thu Sep 24 12:03:28 2026 by rpki-client