$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: njH82bQ6KyGNkx2kHAN2MCIUTPcp9s0+oWh5qzgd6WA= Subject key identifier: BF:E9:C4:31:24:FF:7B:19:12:C9:2E:D4:B8:E7:75:D2:94:A7:40:3F Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 01A0CCA359937FA713CF83A5B525E64CD248 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 1A89 Signing time: Wed 23 Sep 2026 05:00:52 +0000 Manifest this update: Wed 23 Sep 2026 05:00:52 +0000 Manifest next update: Thu 24 Sep 2026 05:00:52 +0000 Files and hashes: 1: 2rTA2bFQLnTk-wBE54CdmsvNmbE.roa (hash: rTmmlhzm12lVyQhx6ghJTLh2ggevz2u8kAMqAN9SK3c=) 2: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: hTbaRDvJ/MtIqLTZbDojJ/1pIco/o/OQxM6iLAMoY3M=) 3: GiXGWF3XbNUka_6eZbMkF4lwUUU.roa (hash: Ghc0ZSrMNmrLcxpN1ogM8Bq5yh44DA/gg5TX6sTsGwk=) 4: Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa (hash: z+0vTxrgxYAsB4o2ZlASjMWqhGlPslViBNl8Jj/ge4E=) 5: JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa (hash: O/QTbkFDD3rtzSPUctcOhfkfZ3hImjATVsAJ0E69A4g=) 6: Ow_kueRJVip82pUj00XLQYjimrs.roa (hash: 85eWZxYsHFwXWd/YsiQWTMazT60hSpQui9cmEWNnT5M=) 7: RGm2lZRMnSfKm4B97NAwBPy9lYQ.roa (hash: Wjqw6vgltXyXDlwoAetJMPKopD3DI3ppoohYHWiU90I=) 8: T8B0kkg4BVlceQJgbiJPcySAVzI.roa (hash: yXFJztGLWwXHOTbokOH+zERGWTqm5J1lqmfqfodFEZc=) 9: W_-_HaUod-cjK_nA0bLneyeWAes.roa (hash: 1x91spJR0Mlu6Fz+Qjwjj0FIGT4+k9oC+PPm0TZ/70g=) 10: bUcBfMu_9o4dYCM9sDK4nJufEqY.roa (hash: iEsA+ypslVdiqyHUg8Q2SIRt6ca1DLneY25H0pJSVOc=) 11: fT61awwkD08cT0v6ICZahtW3HFI.roa (hash: OGczwb/UeMWoa3ZnMERuw+jjcJf8SRTCZaw4MXLAhCE=) 12: gndzUxO1CNccN-YEVyYR7nMztTA.roa (hash: 97uyyMTTG7hyUktNtazYQf48Ni/TGW9HZQJtjllnVwc=) 13: j9edvCOgCpRUHjoOk20-cN9wmxg.roa (hash: 6DgXQwbEU+KDyumiNCNLUw/9Wxv+6tWPT8AusYvqDwo=) 14: wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa (hash: x43Z5uj7ACBLhAYU7mriWUpP8c6bdaVxKIh05vTvKqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cc:a3:59:93:7f:a7:13:cf:83:a5:b5:25:e6:4c:d2:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Sep 23 05:00:52 2026 GMT Not After : Sep 24 05:00:52 2026 GMT Subject: CN=bfe9c43124ff7b1912c92ed4b8e775d294a7403f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:dc:38:d5:dd:d8:a3:59:84:56:76:af:f8:b0: 65:16:94:2d:6a:d1:91:40:16:db:ef:f4:5c:85:1a: b1:29:7a:69:05:2d:bb:0f:78:ae:75:81:83:3f:71: 0e:f2:d0:99:64:a1:71:b6:c7:81:8c:57:28:6a:83: d0:87:3c:11:ad:b5:96:4b:04:72:c1:25:f1:96:88: ba:87:3b:96:3e:b7:68:27:e6:4a:02:c8:c1:0c:9e: 55:4c:80:f0:81:6d:b5:d9:2a:92:2e:91:e2:b4:58: da:df:e2:3e:14:9f:99:c3:bd:35:fc:55:aa:89:46: eb:60:ff:28:74:c9:9e:95:e5:b0:cc:af:21:8d:60: 6c:88:b8:f7:4d:4b:09:52:74:ee:bc:3e:dd:2c:d8: 35:3b:68:3b:9c:5f:92:83:5b:e9:42:db:d5:a3:9a: ac:1e:d3:58:ff:98:af:c2:3d:f3:69:28:6c:33:e0: b4:69:4b:b2:ef:74:f5:78:73:10:b3:21:76:c6:f0: c7:db:78:49:e4:2f:2f:bb:1a:2f:df:00:2c:c3:1c: 1c:8a:37:7b:54:fa:76:d5:d6:bc:0e:c0:66:31:99: fa:d9:8a:43:9d:90:4e:a8:05:82:e3:75:51:a1:2a: a0:6a:93:68:d5:2c:44:94:e4:30:80:3a:99:3a:95: cc:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E9:C4:31:24:FF:7B:19:12:C9:2E:D4:B8:E7:75:D2:94:A7:40:3F X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:15:da:1c:98:85:cb:be:60:1e:c8:af:be:72:d1:cc:92:9f: 89:33:75:e0:5f:4f:69:f9:63:58:aa:e7:5d:bc:9b:b7:e5:87: 56:e6:09:c3:26:74:ab:59:99:d1:46:a3:3c:2c:e9:84:f7:f5: f1:87:2b:46:e7:1f:64:4c:51:5b:da:28:04:9f:a2:7b:5f:71: ab:36:5c:87:f4:0f:ef:76:a4:64:36:15:2a:78:b3:76:d0:74: a0:3c:db:79:ad:6e:0c:d8:2d:a6:5b:c6:98:d5:b0:35:39:10: 10:13:1d:2c:c1:51:dd:7b:6c:21:7e:d3:ae:a7:15:94:b2:0f: 62:d3:82:95:6e:80:41:30:13:9b:8a:7c:7e:ae:ab:32:f5:b9: 2e:f5:6d:8e:e0:5a:7c:17:a8:30:66:1a:60:ef:6d:46:24:56: 5d:a1:9e:e7:1b:d8:24:c4:90:bb:c1:92:3e:44:21:60:ac:47: d5:52:98:8a:d4:1d:58:f8:0a:7a:92:dc:4f:94:4d:a8:f4:57: 31:f5:8f:6a:8b:c5:db:c4:6b:5c:09:4a:29:d2:ce:d6:d9:81: 65:5a:b8:d4:ef:9b:1f:3d:48:17:66:f7:53:93:5e:4e:58:d6: 8f:f5:d3:e8:a9:81:d2:3e:8a:f8:d3:d3:ef:6f:23:9c:b7:99: fa:29:06:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDMo1mTf6cTz4OltSXmTNJIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwOTIzMDUwMDUyWhcNMjYwOTI0MDUwMDUyWjAzMTEwLwYDVQQD EyhiZmU5YzQzMTI0ZmY3YjE5MTJjOTJlZDRiOGU3NzVkMjk0YTc0MDNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5tw41d3Yo1mEVnav+LBlFpQtatGR QBbb7/RchRqxKXppBS27D3iudYGDP3EO8tCZZKFxtseBjFcoaoPQhzwRrbWWSwRy wSXxloi6hzuWPrdoJ+ZKAsjBDJ5VTIDwgW212SqSLpHitFja3+I+FJ+Zw701/FWq iUbrYP8odMmeleWwzK8hjWBsiLj3TUsJUnTuvD7dLNg1O2g7nF+Sg1vpQtvVo5qs HtNY/5ivwj3zaShsM+C0aUuy73T1eHMQsyF2xvDH23hJ5C8vuxov3wAswxwcijd7 VPp21da8DsBmMZn62YpDnZBOqAWC43VRoSqgapNo1SxElOQwgDqZOpXMQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/pxDEk/3sZEsku1LjnddKUp0A/MB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzRXaHJiF y75gHsivvnLRzJKfiTN14F9PafljWKrnXbybt+WHVuYJwyZ0q1mZ0UajPCzphPf1 8YcrRucfZExRW9ooBJ+ie19xqzZch/QP73akZDYVKnizdtB0oDzbea1uDNgtplvG mNWwNTkQEBMdLMFR3XtsIX7TrqcVlLIPYtOClW6AQTATm4p8fq6rMvW5LvVtjuBa fBeoMGYaYO9tRiRWXaGe5xvYJMSQu8GSPkQhYKxH1VKYitQdWPgKepLcT5RNqPRX MfWPaovF28RrXAlKKdLO1tmBZVq41O+bHz1IF2b3U5NeTljWj/XT6KmB0j6K+NPT 728jnLeZ+ikGAQ== -----END CERTIFICATE-----Generated at Wed Sep 23 14:44:08 2026 by rpki-client