$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: 5ZaBSY9EVrpbyA56a0ccWiPXkRj5giJiyC8phvXO2uc= Subject key identifier: 70:9B:1B:49:9D:F7:D6:D0:9F:24:2A:E4:FF:5C:3D:6D:2F:8E:AE:72 Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 01A0D4265CAAC5A1A5D3245454BD10831232 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 0914 Signing time: Thu 24 Sep 2026 16:01:18 +0000 Manifest this update: Thu 24 Sep 2026 16:01:18 +0000 Manifest next update: Fri 25 Sep 2026 16:01:18 +0000 Files and hashes: 1: 3O71K1jq21K-s1uKNpoLxwxfjs4.roa (hash: 9K3ZJvCfhWt1RrhHN5T33vgZGrICVU040sK1K6zYTsw=) 2: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (hash: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI=) 3: PIJcLY46PYSHoDgSOZxEPuH417I.roa (hash: srTkWvbqzoKRLCgdMr4N/amg9swAtdMCENwqQ8aPPow=) 4: Q7kbnNNnbSsZFlsov6ILXxHCTdM.roa (hash: VhgI6TuEjkaCFM/zUTKmnIt5ZWs9IQY5K9aBKoHxwD8=) 5: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (hash: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI=) 6: WyQhrcQcI54FWZmH__lrHoE3FWU.roa (hash: 1vjfP6Nqw8yzFBCOkKdm5HoQUw0v3VTrGmhqLtnS2VE=) 7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: nVdvyBl9Ytue5X9Q31V8EkhCc/lCDa/thHD5wV8zmBw=) 8: gU8hFrAdmGCPNYOjTnvshD8WKTw.roa (hash: aIL6rAim8v0vCsXPaXDt9dqDXZOi08bdb924MpXBpn8=) 9: iZHuJcN5SGRqzNew0iuIDSSeFRo.roa (hash: xBLovi5yJfWqWf4uNxOyhNCZnh9Kt/cScch8+xkXzcw=) 10: l1MJKpxpJrooh4yYg2GeABzuRlk.roa (hash: auDKOkr78/mYWOPaTVOBS3ng5JPSWspfHkibCydvr1k=) 11: rDDIhE0qYfgop087nvS_8O3QtQQ.roa (hash: GNcKt07HGLjSb7pRK/gwNbmbWxAvVfknp/F4+LGsKVg=) 12: uQMfLgCocO-cV1Dq7f8ShCaJ1pI.roa (hash: f2D0zf6gxtDdlo1Fb2b+kXB8Dad/xNYHEZ1SOFzPCFU=) 13: xQbVNLrkghSR1KoodNn_gRkFImc.roa (hash: pt58nZViNxpnnxA6XeQ7GFV7JLxJTNDbZQ9f75iTc5I=) 14: xe57pNkOwTWSUGNF8UIEoEduU54.roa (hash: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 16:01:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d4:26:5c:aa:c5:a1:a5:d3:24:54:54:bd:10:83:12:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Sep 24 16:01:18 2026 GMT Not After : Sep 25 16:01:18 2026 GMT Subject: CN=709b1b499df7d6d09f242ae4ff5c3d6d2f8eae72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3e:97:fa:c6:e7:e5:09:b1:95:73:af:cd:7f: b1:96:35:15:c8:a9:ac:be:29:4b:08:54:e9:2e:65: 3a:ee:11:6d:87:ff:a0:e6:92:d4:87:38:ff:7d:a9: fe:bc:7a:2d:85:59:e4:13:b1:39:94:06:59:40:97: 8c:9d:a0:dd:e1:5d:94:bc:b6:d5:e7:16:ca:46:50: 84:e5:3e:eb:c8:49:60:bb:59:c3:a9:3c:15:78:3f: 4e:e9:d1:a5:f3:72:c5:37:0f:30:03:3d:6e:01:38: 67:37:2e:93:2c:d8:1c:22:78:0e:df:0f:42:7f:61: 33:e4:38:b5:c6:34:a7:eb:d4:3c:90:d1:ef:6b:38: da:ee:ac:b8:94:c7:32:43:0c:ac:bf:ea:94:22:f2: d4:80:16:a0:b2:01:92:7b:e2:9b:be:0e:df:15:4c: 56:5a:16:05:2c:88:7c:f1:9c:cb:e6:58:61:a2:34: 4c:11:30:8e:68:7c:b3:38:7c:96:d9:1d:d8:a6:b0: ba:67:2e:a8:46:8d:a9:3d:f2:81:d1:7e:b8:21:68: 0f:92:35:6c:e9:cb:cf:f9:1d:29:f7:5d:c0:9a:32: d8:bc:6c:ab:91:af:46:ca:8d:c0:5d:c0:47:d0:6a: 58:7a:24:7d:38:27:ca:e6:f3:60:3e:46:16:f8:5a: 04:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:9B:1B:49:9D:F7:D6:D0:9F:24:2A:E4:FF:5C:3D:6D:2F:8E:AE:72 X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:69:76:e2:87:ab:6e:ad:2e:9a:d7:84:25:1e:7e:7d:a2:17: fd:18:5b:f8:11:03:a4:9b:b8:63:11:3f:3e:b3:30:37:a6:4c: b7:12:4e:5a:fd:e6:09:8d:45:53:e5:66:0d:18:4d:27:2e:58: 99:f0:55:28:04:b9:ca:bc:45:28:2f:db:d9:7c:97:ac:e4:89: 31:57:76:28:e2:44:16:cd:b8:97:31:d1:3b:ea:d8:e1:58:31: a7:e3:ec:6e:3a:58:c2:37:ac:03:30:4c:46:57:af:f6:51:b1: 09:06:af:a2:42:ed:7b:fc:18:9a:58:3e:3b:bd:04:86:b7:40: 52:ec:0b:bf:a1:2c:8e:2f:ee:32:c7:6b:64:76:ca:2f:2d:21: 11:ef:a8:5d:9e:4e:a1:54:3c:42:be:4e:9a:83:20:ae:93:79: f6:e8:2d:e3:c2:f3:a8:c4:ea:a7:2e:de:e4:dd:7c:96:bd:17: 38:20:63:a6:d0:ed:1b:66:e9:fc:b4:95:b4:98:cf:a7:c8:57: b5:fc:24:df:81:c2:ac:87:a2:52:01:f8:72:4b:54:cb:ec:d9: f4:bc:12:92:45:3d:67:3a:0c:e8:49:f4:bb:23:2f:51:d5:7b: ef:db:90:56:b0:5a:37:a9:75:3f:cd:9a:40:d0:73:bc:27:9c: 1a:8a:2e:31 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDUJlyqxaGl0yRUVL0QgxIyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwOTI0MTYwMTE4WhcNMjYwOTI1MTYwMTE4WjAzMTEwLwYDVQQD Eyg3MDliMWI0OTlkZjdkNmQwOWYyNDJhZTRmZjVjM2Q2ZDJmOGVhZTcyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj6X+sbn5QmxlXOvzX+xljUVyKms vilLCFTpLmU67hFth/+g5pLUhzj/fan+vHothVnkE7E5lAZZQJeMnaDd4V2UvLbV 5xbKRlCE5T7ryElgu1nDqTwVeD9O6dGl83LFNw8wAz1uAThnNy6TLNgcIngO3w9C f2Ez5Di1xjSn69Q8kNHvazja7qy4lMcyQwysv+qUIvLUgBagsgGSe+Kbvg7fFUxW WhYFLIh88ZzL5lhhojRMETCOaHyzOHyW2R3YprC6Zy6oRo2pPfKB0X64IWgPkjVs 6cvP+R0p913AmjLYvGyrka9Gyo3AXcBH0GpYeiR9OCfK5vNgPkYW+FoEXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCbG0md99bQnyQq5P9cPW0vjq5yMB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiml24oer bq0umteEJR5+faIX/Rhb+BEDpJu4YxE/PrMwN6ZMtxJOWv3mCY1FU+VmDRhNJy5Y mfBVKAS5yrxFKC/b2XyXrOSJMVd2KOJEFs24lzHRO+rY4Vgxp+PsbjpYwjesAzBM Rlev9lGxCQavokLte/wYmlg+O70EhrdAUuwLv6Esji/uMsdrZHbKLy0hEe+oXZ5O oVQ8Qr5OmoMgrpN59ugt48LzqMTqpy7e5N18lr0XOCBjptDtG2bp/LSVtJjPp8hX tfwk34HCrIeiUgH4cktUy+zZ9LwSkkU9ZzoM6En0uyMvUdV779uQVrBaN6l1P82a QNBzvCecGoouMQ== -----END CERTIFICATE-----Generated at Fri Sep 25 02:35:51 2026 by rpki-client