$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft File: jNgCUSzLdFsqG48xVxTr45OVQD4.mft (raw, json) Hash identifier: 0EaME56eoG6h+K7vq1EcSQ98bB5yOjeIS9XToJNUfyE= Subject key identifier: E6:5B:9B:09:C6:B7:2B:D4:77:9D:BD:18:20:11:34:1B:8A:A2:7E:A8 Authority key identifier: 8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E Certificate issuer: /CN=8cd802512ccb745b2a1b8f315714ebe39395403e Certificate serial: 01A0CB9075AC8F17656A14FB3AFC4E5611F2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft Manifest number: 0200 Signing time: Wed 23 Sep 2026 00:00:37 +0000 Manifest this update: Wed 23 Sep 2026 00:00:37 +0000 Manifest next update: Thu 24 Sep 2026 00:00:37 +0000 Files and hashes: 1: A8zbeGZ_vFlIfUY9owp1LFdY0Qg.roa (hash: sGkTFzp72t2CXwG6Zrb6GXvi4fJs4oeqeT4NK3rHJ/w=) 2: AuCsa89iuYaLVAW-p74YRDf9z-g.roa (hash: 6v+ocE4bgTY3ojTY1zPl5Q/QHvA7Jiy2d14yNwi0ioo=) 3: CLhd68__Vp-YyeZEWfPslHaIkCw.roa (hash: m6lDWItDQfzxnVbNp7hXCoSHCG1Mi/r1rMWPQsWFRoQ=) 4: FH-HegbkfJBlYkgQDtIOilA52FA.roa (hash: vevNPAkCNe2NwwbA5K2E0UcTudDJF5vZ0Hu7+zSCHDA=) 5: FOFTEst8oF0q0X3OdQgxLZ9oed8.roa (hash: g3Bb+RZcj9ZCWcwsCCB0Hz+Q7AkmMt0+i5iC3617N+w=) 6: IqCUdBuN6Vd_3fBmcNHbMSaSYXg.roa (hash: QTmfXP7ucKMXGRXHzNc5Zcmn4GVOCNfHN2w7u+9ec/A=) 7: RJ_8MLiQcEMQljmCDmVnOOnfQyY.roa (hash: qITG72dsAnXhR2+Wt6OI6k5v+TEp09wmHQrA/LqWJPc=) 8: Sxw-Mo-rafDV0shPebN3B75uBh0.roa (hash: av9Y0PMcBgIjJMb8On2oRvK2d2VAxow0GSsvpmW5Oxk=) 9: TUcYiqaHQaxrNd_59aAcfp5PzUc.roa (hash: UNkyO1RUoB9S8RFsmJ0fXaMIKW0xpN0m4jI2P8DIeTc=) 10: WffXez4tRjvK8i61Xgp9_xyDej0.roa (hash: bMn3sIVFMxXy7m8YFxKTE0In+3PMB96dpHT4q7pYfYw=) 11: elz0WJjsYxFbofiz3y1iAAJK_EM.roa (hash: BrIsc5PixFvDSlwXziognZwHw3nQTaQ45c/0aGBgjy0=) 12: hYM7beFU-i68zuT-E-AP85h8fdI.roa (hash: Q6rivTFhzgG3KkdlD6+HA7Kyl4SyGQidk6P1eN7a4CU=) 13: hp01qqaG6ojwTceGwUYjwpMc_FA.roa (hash: +EoDWRDS7zIW8lYYUpVakjrqTS94dDcew7HVE2+smMs=) 14: jNgCUSzLdFsqG48xVxTr45OVQD4.crl (hash: brIQQf/tRE8HPyNysAAyR8aMIwTDHHFmVC7ppWreX2c=) 15: mmjz2N0jeb-OAmne9BrUvTuOa8c.roa (hash: VeJ9ypVGjvPcQwVgo5MVdxvT0Ai6b0ILCQejvfCVvqo=) 16: vtKFCgLOZ8wS2x-s6VKfUtZdS6A.roa (hash: NB2FmYbPK0dEJHV51l4eabkaH3jjAUfpLoCOp7+GBrM=) 17: y8_zhxLnTyLVMVkKCxv2htwRO6s.roa (hash: 0B0AhLTjiKxRKyJN76TunlKY12o6P7Os0KKG5Yonjjo=) 18: yTtSJ-72gvZbFezzjuP8atI2Y74.roa (hash: wldJRvptVpmVW5JI0I+zGNq+GzlHt2h7rIbCYaZ8Fsc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:90:75:ac:8f:17:65:6a:14:fb:3a:fc:4e:56:11:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8cd802512ccb745b2a1b8f315714ebe39395403e Validity Not Before: Sep 23 00:00:37 2026 GMT Not After : Sep 24 00:00:37 2026 GMT Subject: CN=e65b9b09c6b72bd4779dbd182011341b8aa27ea8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:86:09:ff:15:69:f5:e9:25:96:f9:ff:5f:a3: e3:93:c7:51:8f:cf:52:b4:d0:2f:5b:68:66:82:96: 5c:6d:26:9a:33:bb:1c:e2:fa:20:f3:8a:05:bd:e8: 5d:d9:55:6b:26:2a:b3:56:a8:8e:c5:06:48:fb:28: 23:81:73:3f:56:48:f1:57:de:37:56:7b:8c:d2:5a: cc:e3:03:62:66:78:ce:a0:57:54:42:0c:8c:ff:3e: 86:0e:78:5b:14:c2:46:f8:42:24:66:5a:07:29:7d: 36:cd:04:a6:ab:09:e1:42:4e:6a:c6:14:0f:fe:9e: 89:f3:c0:5b:ac:a5:92:79:12:2c:a4:c1:38:78:0d: 03:0b:7c:a1:c4:2d:97:75:18:cd:57:a1:b5:52:8f: fc:2b:21:b1:b0:7c:23:19:be:69:b4:cc:d2:11:b4: d0:8f:44:bd:aa:29:25:e5:45:b1:1b:81:c4:67:f1: af:73:ff:6a:53:da:09:97:45:c2:f5:a6:60:d5:08: 8b:4f:dd:57:00:10:98:75:34:ad:61:1b:8e:39:4a: 75:bd:c9:c0:d1:2b:7f:e9:3f:b8:e7:2a:1e:40:16: 36:c4:40:fd:c1:81:5f:49:6d:b2:b9:12:70:62:d3: 9d:92:bc:9b:d9:62:2f:f9:00:e9:4d:ab:8b:56:2b: 25:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:5B:9B:09:C6:B7:2B:D4:77:9D:BD:18:20:11:34:1B:8A:A2:7E:A8 X509v3 Authority Key Identifier: keyid:8C:D8:02:51:2C:CB:74:5B:2A:1B:8F:31:57:14:EB:E3:93:95:40:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jNgCUSzLdFsqG48xVxTr45OVQD4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/3d893a-5b1a-4d70-9ebb-38e068536e6b/1/jNgCUSzLdFsqG48xVxTr45OVQD4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:01:31:83:9c:06:b4:af:ef:fc:1b:ff:b2:f0:d0:04:a0:59: 29:5e:86:9d:a6:98:1f:06:45:f0:9b:bf:96:58:c6:c8:9a:86: 9d:e0:d2:09:29:7d:05:2f:64:8b:bf:e4:c4:61:33:78:eb:80: 0f:98:bc:b5:23:c1:2d:10:e7:14:f9:6c:6f:9f:d8:85:ba:e6: 6e:15:5e:d3:be:e8:44:a3:b8:ce:e5:8d:db:78:bd:f4:54:1e: 39:27:7b:9a:8c:eb:4e:6d:df:dc:ad:e3:bb:f4:34:23:25:b9: 3a:15:3f:9e:27:93:db:1e:91:f7:1a:7f:f4:54:e8:d7:ea:d1: 0f:1a:b0:11:e4:65:a6:30:3c:1a:b0:ee:44:3c:73:42:bd:a4: 94:95:f5:c3:61:c0:e2:70:22:86:e1:63:19:78:9a:e6:07:99: 0b:7d:c3:d4:37:8e:06:2d:ad:21:7a:d6:55:c3:38:bf:74:92: fb:07:b7:1f:d6:9b:95:14:43:39:82:97:fc:62:1f:90:f8:d7: 5f:77:7c:46:58:92:6d:90:a3:92:6e:06:8f:5b:98:65:40:5e: 5c:1a:ab:fb:f4:8e:5d:f3:23:d8:31:91:9e:77:4c:7a:fe:75: 8f:f4:30:6d:a7:57:6c:32:0e:92:91:37:fc:0b:dd:7e:91:6e: de:53:62:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDLkHWsjxdlahT7OvxOVhHyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhjZDgwMjUxMmNjYjc0NWIyYTFiOGYzMTU3MTRlYmUzOTM5 NTQwM2UwHhcNMjYwOTIzMDAwMDM3WhcNMjYwOTI0MDAwMDM3WjAzMTEwLwYDVQQD EyhlNjViOWIwOWM2YjcyYmQ0Nzc5ZGJkMTgyMDExMzQxYjhhYTI3ZWE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA14YJ/xVp9ekllvn/X6Pjk8dRj89S tNAvW2hmgpZcbSaaM7sc4vog84oFvehd2VVrJiqzVqiOxQZI+ygjgXM/VkjxV943 VnuM0lrM4wNiZnjOoFdUQgyM/z6GDnhbFMJG+EIkZloHKX02zQSmqwnhQk5qxhQP /p6J88BbrKWSeRIspME4eA0DC3yhxC2XdRjNV6G1Uo/8KyGxsHwjGb5ptMzSEbTQ j0S9qikl5UWxG4HEZ/Gvc/9qU9oJl0XC9aZg1QiLT91XABCYdTStYRuOOUp1vcnA 0St/6T+45yoeQBY2xED9wYFfSW2yuRJwYtOdkryb2WIv+QDpTauLVislBwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZbmwnGtyvUd529GCARNBuKon6oMB8GA1UdIwQY MBaAFIzYAlEsy3RbKhuPMVcU6+OTlUA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmIt MzhlMDY4NTM2ZTZiLzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi8zZDg5M2EtNWIxYS00ZDcwLTllYmItMzhlMDY4NTM2ZTZi LzEvak5nQ1VTekxkRnNxRzQ4eFZ4VHI0NU9WUUQ0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYgExg5wG tK/v/Bv/svDQBKBZKV6GnaaYHwZF8Ju/lljGyJqGneDSCSl9BS9ki7/kxGEzeOuA D5i8tSPBLRDnFPlsb5/YhbrmbhVe077oRKO4zuWN23i99FQeOSd7mozrTm3f3K3j u/Q0IyW5OhU/nieT2x6R9xp/9FTo1+rRDxqwEeRlpjA8GrDuRDxzQr2klJX1w2HA 4nAihuFjGXia5geZC33D1DeOBi2tIXrWVcM4v3SS+we3H9ablRRDOYKX/GIfkPjX X3d8RliSbZCjkm4Gj1uYZUBeXBqr+/SOXfMj2DGRnndMev51j/QwbadXbDIOkpE3 /AvdfpFu3lNizg== -----END CERTIFICATE-----Generated at Wed Sep 23 09:21:12 2026 by rpki-client