$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json) Hash identifier: 393o7xpFz4QBBBYO5xhZ9mOqCP0g30ooM5yJ+wGRs3s= Subject key identifier: D4:48:CA:4E:C0:8C:06:31:5C:66:76:0B:98:15:1C:74:23:A8:95:58 Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 01A0C9D97A5F723F9EA22AD8D67F99BCEA40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft Manifest number: 1288 Signing time: Tue 22 Sep 2026 16:01:08 +0000 Manifest this update: Tue 22 Sep 2026 16:01:08 +0000 Manifest next update: Wed 23 Sep 2026 16:01:08 +0000 Files and hashes: 1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=) 2: 9UWbCEXqjRhjC5AwqWBCIFK_AT4.asa (hash: UFf7/mopkwyI/qLLTDxzlcrPF+4ju/94DUIEHv1Zj3E=) 3: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: bWZ4h4CoObOUyKv1PDXNw5pUK4s/y6SILd4MDIcuzGg=) 4: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=) 5: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=) 6: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=) 7: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=) 8: TpSktW1NAsZq923aUoE53pMX0hw.roa (hash: ljs6mrp9Kdtic0OnoNEza6FCINLSHSxZypr5fLwF++Q=) 9: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=) 10: egQEbfnW1MXHUAUDIXi9mc2fB-c.roa (hash: 1BkfZIfCGpyU9bVzsVuHecgL4efqavb1+AuIHnc1Rt8=) 11: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=) 12: w1zIh0CnKegnO0T7ra_SO9YilV8.roa (hash: KzpnZqdHE55q0MkGU3Ic0fB1a+0zqfLi5dqRW/lkoPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 16:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:d9:7a:5f:72:3f:9e:a2:2a:d8:d6:7f:99:bc:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Sep 22 16:01:08 2026 GMT Not After : Sep 23 16:01:08 2026 GMT Subject: CN=d448ca4ec08c06315c66760b98151c7423a89558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:56:6a:39:c8:ed:99:fc:db:08:11:95:ff:28: 12:a1:54:29:41:6b:76:b0:05:6c:2c:32:77:a4:c8: 88:93:ad:bc:d9:3e:27:7d:ab:7f:4f:bf:03:35:19: 5d:c6:64:bc:8b:a4:d5:d3:4f:ec:51:bd:e6:40:2a: a2:cb:8b:f3:9e:17:01:e7:c5:ba:52:03:54:fd:59: c7:84:5f:0e:5e:94:a4:6b:2f:60:fd:db:3c:21:70: cd:36:1c:f3:65:63:d8:90:d3:25:78:fc:b8:1d:0d: 78:e6:8a:a2:a4:36:65:8b:5d:9c:be:06:65:89:d2: 84:f4:62:7f:cf:18:52:db:74:d7:15:fc:49:bd:90: db:89:c7:c0:f4:5f:7d:42:43:fc:03:27:84:29:71: 12:19:2c:7f:b2:88:42:f6:09:a0:95:82:71:94:22: cc:18:55:9c:1c:95:74:90:fd:e2:fd:dd:be:31:f6: da:cc:d9:7e:c3:e4:8c:e6:d0:b4:0c:5d:b9:e9:50: 63:c6:20:65:9e:6b:ca:cf:30:c4:38:93:19:fb:c2: c8:8c:6d:cc:47:2d:30:7c:e1:a8:d9:05:5f:a9:a2: 01:95:e5:8a:4b:56:18:ea:31:14:bf:43:49:ff:bf: ce:f5:b3:fc:a6:00:a7:39:3f:96:a9:46:eb:c9:69: 12:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:48:CA:4E:C0:8C:06:31:5C:66:76:0B:98:15:1C:74:23:A8:95:58 X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:60:97:15:b3:a7:07:ac:b3:f2:04:98:8c:85:77:9b:11:ce: b5:92:bb:a8:1d:bb:c7:97:c9:9a:63:4b:49:d8:6f:fa:9f:bc: 44:ec:99:7c:0c:9d:de:f4:df:09:97:46:5c:13:4c:5e:45:ff: 58:77:0f:d2:3e:89:f1:a3:d5:10:75:59:c2:c9:41:d7:ac:80: 60:ea:2e:c0:4a:10:88:30:0c:3b:45:49:0c:ee:2f:f3:1c:bc: 32:6d:17:05:7f:6a:2b:d1:fe:19:da:c9:b3:5a:4e:c7:f1:87: 16:b4:3d:e0:60:a3:01:a4:75:95:72:8b:0d:10:a9:b4:9e:ba: c1:89:0a:c4:2f:dd:49:54:52:bb:78:ff:2a:4a:42:cf:46:4c: 29:3b:5e:45:7d:eb:12:f6:38:a7:c7:2f:ae:8e:04:38:9f:e4: 9a:41:ce:f4:d8:bc:e4:67:12:a1:0b:51:fe:db:e4:c6:3e:09: b8:e0:d3:ca:69:7a:d5:96:7b:41:be:01:77:14:59:76:70:8a: 27:5d:36:dc:51:8d:cc:eb:f3:b9:f6:eb:fc:e1:99:ba:a6:67: 98:51:fb:75:83:58:97:b0:a2:de:11:2a:65:68:74:94:fb:61: d4:bc:2c:45:f3:2e:72:41:13:2b:cf:d8:c3:da:8f:ca:f1:a9: 15:b6:22:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDJ2Xpfcj+eoirY1n+ZvOpAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwOTIyMTYwMTA4WhcNMjYwOTIzMTYwMTA4WjAzMTEwLwYDVQQD EyhkNDQ4Y2E0ZWMwOGMwNjMxNWM2Njc2MGI5ODE1MWM3NDIzYTg5NTU4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFZqOcjtmfzbCBGV/ygSoVQpQWt2 sAVsLDJ3pMiIk6282T4nfat/T78DNRldxmS8i6TV00/sUb3mQCqiy4vznhcB58W6 UgNU/VnHhF8OXpSkay9g/ds8IXDNNhzzZWPYkNMlePy4HQ145oqipDZli12cvgZl idKE9GJ/zxhS23TXFfxJvZDbicfA9F99QkP8AyeEKXESGSx/sohC9gmglYJxlCLM GFWcHJV0kP3i/d2+MfbazNl+w+SM5tC0DF256VBjxiBlnmvKzzDEOJMZ+8LIjG3M Ry0wfOGo2QVfqaIBleWKS1YY6jEUv0NJ/7/O9bP8pgCnOT+WqUbryWkScQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNRIyk7AjAYxXGZ2C5gVHHQjqJVYMB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfWCXFbOn B6yz8gSYjIV3mxHOtZK7qB27x5fJmmNLSdhv+p+8ROyZfAyd3vTfCZdGXBNMXkX/ WHcP0j6J8aPVEHVZwslB16yAYOouwEoQiDAMO0VJDO4v8xy8Mm0XBX9qK9H+GdrJ s1pOx/GHFrQ94GCjAaR1lXKLDRCptJ66wYkKxC/dSVRSu3j/KkpCz0ZMKTteRX3r EvY4p8cvro4EOJ/kmkHO9Ni85GcSoQtR/tvkxj4JuODTyml61ZZ7Qb4BdxRZdnCK J1023FGNzOvzufbr/OGZuqZnmFH7dYNYl7Ci3hEqZWh0lPth1LwsRfMuckETK8/Y w9qPyvGpFbYipw== -----END CERTIFICATE-----Generated at Wed Sep 23 02:05:00 2026 by rpki-client