$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft File: pa6KPYvaq_R2X9p51V7KjGnIvyw.mft (raw, json) Hash identifier: 9C63TXUerKlyEgfxG9Gn+k9cADm0+in9O1OiGXF75mI= Subject key identifier: 33:BA:2A:85:C8:B8:84:EF:49:04:94:08:64:B1:E6:71:83:08:C7:1E Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 01A0D1932966FC291BDB7B4A254427E37625 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft Manifest number: 12EF Signing time: Thu 24 Sep 2026 04:01:17 +0000 Manifest this update: Thu 24 Sep 2026 04:01:17 +0000 Manifest next update: Fri 25 Sep 2026 04:01:17 +0000 Files and hashes: 1: 0JgDt3i_Pnuh9krPjzNeMq8un4E.roa (hash: 8rurD+AjaAV28krVdAh9BeQ4Bjdsbjm+BdrFzIixPG4=) 2: 1itGHFvjoNbs5xoAGU32cy0ec1o.roa (hash: t9DoFpID6R0VUAuMrF0Dz11ojJdiar1HFSpo+0mx3N4=) 3: 4Ujn1cM40AuK7d3M8Vb_toVHYvc.roa (hash: boLdcfFoR2CjpOaduwRGVC1N1M0qA5GCcr4Mvx/naAo=) 4: 7cFFSltaTzKar_lekHqmoQLmOjY.roa (hash: qmBTDHWY1/L+M5j3+Gq1o691+G2ktSyrcJHxvmERmfA=) 5: A0L_daKBfMV7nYJH9utldIZIYsg.roa (hash: c+FA8gvn4grDiZWDzp4xkA96h3MUDZQgiyzCt836SH4=) 6: BbqP_agnvXa4OJUdOK9QaQVVfQE.roa (hash: BytDPBfW+z3MMKn/T3Ezt+s/7on4WxSdnNftScXHcMg=) 7: FRwF0B0Gco4ROslaw5WQ_fteoU8.roa (hash: iwJlFs9CAGbFjQwYdduqrf+rBjoBjoUCcq+hhgbfg/Y=) 8: I5X54DPx7uauNQUcDefAh5kZut0.roa (hash: 8TsQWHSq4ji09j4n0lKP6UovicqKlcYG3YyDhHypqMc=) 9: ISp9QWuwBFWNWpTGWXKpOjrISzM.roa (hash: Z0OOUOdiG9qXCPvPHz7h4VNlbk+VhRmjlt/+Mjs7gCw=) 10: Io_4XzUPcXRxIinpmHUjhwf3fnw.roa (hash: PhYzR0IaxGgGRS8zLIaSr+Golc4Rgs3HH095CF1z0oY=) 11: MDJT-FAiPn_9DLYknk3j3rwfX9Y.roa (hash: t+GUu3cNGl4VMAwSsB6UVCGA1fy1PDPTWxWQhD0/oiI=) 12: Png3Vrdf7Rwvr6R60_UAOFstFhs.roa (hash: OwWHd5ARDEN0zJZ49iwTOpMY+6vycAIPXKZOSrVAHwU=) 13: QODPrlG-VFZOgZAxUGIjQpc2hgs.roa (hash: XwW86R5AwanY37CTPsNgWsJGKeOgg+VqgPHo62gPeX8=) 14: RaUqydxuVYMlyGD1qIP3Rz1-fCg.roa (hash: gWHNmFjPVrWp2UD6ztHPa+UHuG00aGXzZkvk8ZPWwWk=) 15: RgulTuZMFpRPKFFFd9iPrWv4ijY.roa (hash: H4zGvEX4msDBOcT88fZZX2ZMTrjk6+XMq/KcjDj8npU=) 16: RwWAdM2GIRIcYQbBPUmWVwH1U3o.roa (hash: X1u1g1/pf3uA5ljDrjqZKp/m+4xP9A3tl5fJOBJfvoY=) 17: U7Xzbmk0KKfocvxydq8VmFd5g0g.roa (hash: pPelJCCZZvo1A7j45CGl9+CiBnagu4yj9KWZxHJJWkc=) 18: V9DWrwihcQ7ZFKupThtMHNHamdQ.roa (hash: TolCTYmtZTtv2APrLqNfZtHWCxAsjiE7k18nwycldeA=) 19: V_VULBThI1SWyMzlduk_v5YT_-M.roa (hash: 4K3qqngjQDm7OwkvFF4NbH9BZck83XCd1/K8P6OeAw4=) 20: YrMngOCV1qYUZ2G5L0RXdbOK7Ls.roa (hash: hRmDSB2XVzgwKx2/p0YzSDUPDkJ5hlG/bnoU+nNpOPU=) 21: ZbOlnPA6eBi7lfnx-bMIDhnPlTs.roa (hash: 5nftwGk/Uz83q8GaAtwNqws3YmEvcE0dicM0TAYf3go=) 22: aG716DD0CIzYw_sjaqN49_ZDCFo.roa (hash: coSqlgZMR/vBDqAtbIH3D2F3cwarBnvEjPRCTKgXYS8=) 23: cA5JMvfVav4vIZItfGqaNwh9e5o.roa (hash: yR2XFmEbZmO4CBX8f4QWlsjNhSh6G9A18+yJWj3nzH0=) 24: cMVR_b_QBDVweUJSfI-BhE8BMHo.roa (hash: 5OkF4JXRoQO4/NuG+eaOEGFi4SIzgJACKazez2e+UPI=) 25: c_Y24ajzoAD5RlfqVgA3exca5lg.roa (hash: IFM8k/a5xafsnTSxH9J3BD1nHcUW3xulixu5BnLcwXY=) 26: cu6MjtszrBqCo3h_SmtsNHkmMvE.roa (hash: 7i5XYcZRSc2pl6AvojBH/+hEi/ppPd1TZtrZ8yaqsXk=) 27: hqCozSBIFrgOnfBvc04cLMGl6jo.roa (hash: hM1gf3lHt2gai6o5rvakzA9ssqT47EQ0Thnp6IIUJ6I=) 28: jIR7D-Y-6T9frrNQ_jB8OH3dvBM.roa (hash: 55N/2/rlO8cGYdBy6UjnVeslx4/hwZ35mqqVL8TRjTA=) 29: kplCRBMvz5FDjN9xs4gY-4Of8uI.roa (hash: hjMts3DkdNISVUxYtlx0WSdzxZDEcJo7GF5tm01HxYk=) 30: nPz-o0NMmg3ZMjn3lPMLPMpeS14.roa (hash: +nCIzLIahMHCgAiHoBvORWwAy+FTcigMvBYOrLAV22U=) 31: nzlaOINlB5NKeARZuU4upJ4rUbo.roa (hash: wvp+ZL1hcpwpL9YZftKiuaMhKzGKmWKjnp5JIlUh38E=) 32: pa6KPYvaq_R2X9p51V7KjGnIvyw.crl (hash: n2dvzLTSIHrlN+UlcQCRnleioXCM5Z8B3l2Alad16cg=) 33: rUz6HCWdiJSjjuELK4f4q_4RBwc.roa (hash: uEA3pVSZxMGWGhwdpljknpzc1pOZ1ehqti0T1frlNo4=) 34: s-krzjzxlyWMOaQcgv5asypyFx0.roa (hash: u+SEy60rPDcFIkNaLxbLV2wMnuLL/3Dxezgfctkb+TY=) 35: uKkVWLDRYXWhA8sUpH0phWL72us.roa (hash: v5Do4C/r5p09LluvO5T2+dRXbWmKv56RqUrsJhNmJL0=) 36: udPHT3MAHWQfgnKd8mzuLRmrdow.roa (hash: R7o1ivace6EgMLJTJx+PqDPGE4a4R22iqkQzk7fDc0U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 04:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:93:29:66:fc:29:1b:db:7b:4a:25:44:27:e3:76:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Sep 24 04:01:17 2026 GMT Not After : Sep 25 04:01:17 2026 GMT Subject: CN=33ba2a85c8b884ef4904940864b1e6718308c71e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c1:72:ad:65:1e:a9:e4:bb:fa:a9:84:36:0a: 9e:f2:0a:24:22:a3:47:32:19:d0:a8:b1:89:65:3c: 71:10:64:66:db:bc:43:90:6e:86:9f:0b:2f:52:62: 80:09:58:19:53:f5:f6:d8:f2:47:75:70:c7:96:26: 5a:dc:94:6b:c0:87:8a:30:74:4f:05:5e:d5:e5:6b: 4d:c0:8c:1f:9d:92:c5:f6:91:02:d7:ef:ba:33:56: ec:84:72:27:51:8a:6d:20:fa:04:bf:5b:05:c0:2a: 0e:d9:0d:02:97:d0:6f:be:09:21:aa:87:9c:b9:45: 25:c1:1b:3f:5a:1f:9d:cd:fb:55:35:7f:e4:8e:1d: db:0f:46:8a:2a:bd:35:7c:68:f5:f7:d3:33:3e:a8: be:93:5f:d5:0b:e0:81:a0:18:1d:fc:35:94:01:f0: 93:d1:bb:dd:1a:09:1a:8e:4a:90:2f:f9:06:9d:81: 1a:41:f9:34:57:08:58:a6:da:c3:82:bc:24:1d:b0: 30:25:d4:94:37:d4:4c:cf:3a:5d:6d:da:fd:4f:47: 29:36:f3:87:47:06:2d:28:2d:a3:0b:c7:dc:6f:8f: 9b:da:7e:04:5d:a2:8c:60:72:56:6b:61:f0:bd:5f: fb:82:32:d0:f3:39:72:0e:ad:7b:52:67:9b:c3:54: 74:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:BA:2A:85:C8:B8:84:EF:49:04:94:08:64:B1:E6:71:83:08:C7:1E X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:32:78:d8:61:f2:50:64:0c:76:01:63:8c:a5:ff:71:62:55: 9f:c9:50:a1:1d:8d:ec:04:9b:3b:04:5e:21:b5:d9:b6:9e:5b: b5:78:4e:20:ef:ac:cc:ac:ec:d3:c6:5f:81:0b:7a:60:97:d2: 16:c5:ef:28:b1:70:47:8d:2e:d5:57:5e:14:1a:57:73:73:5d: 06:3a:57:03:da:ce:21:32:2e:a7:25:2c:3a:46:a4:61:92:93: 5a:a6:76:ad:e3:0f:8f:49:cc:2b:d0:1b:37:ce:2b:37:e7:d5: 50:6a:2d:8d:56:b3:14:9f:0c:4e:d7:e5:69:92:74:bf:ca:d7: 75:c0:b6:2e:c3:a3:60:f5:6d:68:0c:e1:50:3b:9a:c6:19:d1: 1f:f4:f6:b6:36:df:7c:6d:02:25:54:19:08:f7:7c:29:9b:d3: ae:5e:a3:86:93:3c:7a:86:89:49:00:29:9c:9a:ba:91:12:c4: 32:0d:ea:8c:cf:e9:b3:1c:de:41:44:98:a3:7d:7d:d3:95:7d: e5:5a:a7:53:be:2e:5b:ad:10:84:f2:8c:f3:bc:a4:4f:3d:62: a5:b6:92:d5:0e:d0:af:99:f1:db:35:68:d2:2b:3d:79:8b:4d: 96:d5:65:de:04:44:97:80:a9:e5:1c:2b:12:8c:c8:9a:4b:d9: 48:1d:34:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRkylm/Ckb23tKJUQn43YlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwOTI0MDQwMTE3WhcNMjYwOTI1MDQwMTE3WjAzMTEwLwYDVQQD EygzM2JhMmE4NWM4Yjg4NGVmNDkwNDk0MDg2NGIxZTY3MTgzMDhjNzFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8FyrWUeqeS7+qmENgqe8gokIqNH MhnQqLGJZTxxEGRm27xDkG6GnwsvUmKACVgZU/X22PJHdXDHliZa3JRrwIeKMHRP BV7V5WtNwIwfnZLF9pEC1++6M1bshHInUYptIPoEv1sFwCoO2Q0Cl9Bvvgkhqoec uUUlwRs/Wh+dzftVNX/kjh3bD0aKKr01fGj199MzPqi+k1/VC+CBoBgd/DWUAfCT 0bvdGgkajkqQL/kGnYEaQfk0VwhYptrDgrwkHbAwJdSUN9RMzzpdbdr9T0cpNvOH RwYtKC2jC8fcb4+b2n4EXaKMYHJWa2HwvV/7gjLQ8zlyDq17Umebw1R0JQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDO6KoXIuITvSQSUCGSx5nGDCMceMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATzJ42GHy UGQMdgFjjKX/cWJVn8lQoR2N7ASbOwReIbXZtp5btXhOIO+szKzs08ZfgQt6YJfS FsXvKLFwR40u1VdeFBpXc3NdBjpXA9rOITIupyUsOkakYZKTWqZ2reMPj0nMK9Ab N84rN+fVUGotjVazFJ8MTtflaZJ0v8rXdcC2LsOjYPVtaAzhUDuaxhnRH/T2tjbf fG0CJVQZCPd8KZvTrl6jhpM8eoaJSQApnJq6kRLEMg3qjM/psxzeQUSYo31905V9 5VqnU74uW60QhPKM87ykTz1ipbaS1Q7Qr5nx2zVo0is9eYtNltVl3gREl4Cp5Rwr EozImkvZSB002w== -----END CERTIFICATE-----Generated at Thu Sep 24 13:54:21 2026 by rpki-client