$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: 7hh+WHgpmP8R4Hu8bxPEitsMck7uUUm/2DVXFUlE8XI= Subject key identifier: AC:B5:E0:15:E0:68:A9:48:BE:92:60:3B:BB:0D:EA:E0:29:11:71:CB Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 01A0CC6BED6B7CB8A098B2568616018860F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 1815 Signing time: Wed 23 Sep 2026 04:00:20 +0000 Manifest this update: Wed 23 Sep 2026 04:00:20 +0000 Manifest next update: Thu 24 Sep 2026 04:00:20 +0000 Files and hashes: 1: 1kKPv2wUltItuWIjU1ilVcX9VLE.roa (hash: il+uT7sf8sbrAGYBj61G15BD0mwhGRvyVxYl0y6GFnU=) 2: 8IvUmXDsIvIZsY88WglINp3k0Lg.roa (hash: 9pdQxEroH3o1IleFf85fUQafxQ/1jkbXylKXHzmqVkE=) 3: 8eTvO2TZdJIMeT5I77o8e5hLDyI.roa (hash: RW0q4KTs9SZCv80GUyltUUK1ZfZgWc4IG8Rp/qHyA3g=) 4: FMGWqh434U4Wl-h9zxOIUfhFFh0.roa (hash: 1B3UBPSlhdGSCsHwbRLbxDHeRCnBCSFAh3REZmVbN7Y=) 5: Gv8e4q6BJ1zUtoiAjDqhUlbZV_o.roa (hash: jbh9djJzVqusM48bRCJvD/4kg3ISHgaETnmYb96UgLo=) 6: JCH5cGtqMPAPpoVVGTH_0YLGvWU.roa (hash: Q1N4eCwrGIPUFAwumc4VLb5BJwzm21u2iKbnzq89mxk=) 7: JWwcCyO1rTwTxLjbz3l2SouJTAA.roa (hash: AgH3qdVNL3CHi6p+2Mst499KFQUzntafoYHZrzYZW8s=) 8: JmzkFV8qKGo54gZYkQxK29G1YJM.roa (hash: eBc9kjskLdFMdbz8zqvB4emdRVC2s9+gpM5NbsT5OzI=) 9: Lmglx6k3OhVfB6qXrSYWY-3n7wU.roa (hash: jOlTc86u7s0cDJRLkmCFCCAUXlp7wxNhr83b5DVvky8=) 10: WwuATA6TSHeY3pyjZdiQ-8jq6Vo.roa (hash: uW36/EhLhyw8heI0tUnFU6wiInPtS+CcO/PTS29AqYY=) 11: XjjwvZsrXx6sUtsiWwMw-1uwefI.roa (hash: RD/89w2/8ZIshxnP3ME483+xP0ONXiXxPqHiP1Ie+hY=) 12: bV3Qg5HtML1zUsJYAwV_qsAoITg.roa (hash: ZhHWbujHVFO1260mH7gJeRdvHPIcZ7THBcA3XZdsUfs=) 13: bqMY88hrLST-OoKyOzpz89FjW1Q.roa (hash: xtHnYzTF08Tb1QaoTYMhm3yMKBqwOq7HjIHSD5b+8eo=) 14: cOMhRxduLw18TIe2EJANKourNbc.roa (hash: vRamlKR5R5SmfC3d0sMnuMWhFKCo/1NfKoqnzL94OGM=) 15: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: 2LJQlvnp7CKO9Qqe4gFXVof+Cm5E02uUy7/oNwPOB7E=) 16: okHlLCRKW1jfeWujkLxIt5XycXI.roa (hash: 8XqeerISM4GszeKJVfQ1ZLZsJv7bqVDCw3CslmFn+r4=) 17: xOS746W5Gd1kAC2eYcLX3bKzXyc.roa (hash: wkc+zSgTtLMBNfp5Oo+8XY68pNCKHaGKsf53/5XAGSw=) 18: y7qKboIw1vY6cdl8tXLdQz3UMGU.roa (hash: UUr745eFUt/rB6XkbIpmR6LHEClSry/Rsuyz6ItDfLc=) 19: yhFaGf2_vHhBZgwwXE8xm1OTXQE.roa (hash: 3+krivSCZ6wgsfWjmVU3sW4pnSZcLq6UgbbbbMppVNI=) 20: zKma2lZxd28aMOIa5GKySj7K3F4.roa (hash: z2dVlW8SWBq0rqcswBgsfVdqo5mJ3Cgdk6gd4jQUscA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 04:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cc:6b:ed:6b:7c:b8:a0:98:b2:56:86:16:01:88:60:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Sep 23 04:00:20 2026 GMT Not After : Sep 24 04:00:20 2026 GMT Subject: CN=acb5e015e068a948be92603bbb0deae0291171cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:33:6d:49:18:59:f2:18:1a:c3:28:11:58:d6: 5a:c7:db:9c:4e:28:32:f0:d7:ed:33:60:1f:93:a8: f5:4c:00:67:e0:c0:c9:ee:1b:61:94:7e:6c:aa:97: a2:4c:69:ee:d4:1f:c7:dd:2d:da:9c:55:b4:c2:fd: 08:74:8d:d4:a3:cd:e2:a8:17:1d:4b:f5:97:f5:f0: b0:6c:66:55:b5:b2:10:df:32:da:ae:99:1a:10:70: 5e:e1:21:70:42:99:96:aa:e2:39:c0:47:25:99:72: 38:f9:95:2e:dd:73:63:67:91:50:3c:44:4d:00:32: 5d:54:7f:0c:49:aa:b6:40:ca:4b:f3:ee:af:73:a6: fa:a8:7c:42:a8:6e:7d:34:a0:63:84:cf:43:98:63: 30:8e:a5:39:e1:4c:d6:d1:cc:8c:6e:f6:69:af:31: 1b:8b:55:72:14:25:30:1b:68:b6:af:74:44:b6:95: c4:06:b8:50:12:2e:4b:e7:c7:79:67:e3:ef:55:e4: 49:6a:01:f2:f0:c2:fa:e5:d2:16:0d:7c:f1:08:f6: 05:03:b0:c4:4d:c4:dd:5e:27:98:e1:e3:4f:be:b8: 7a:b8:25:43:d2:78:2b:ea:23:58:49:3f:6b:d8:34: 77:fe:e0:85:a2:15:7a:ad:8f:7f:1b:ed:b3:fe:55: 37:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:B5:E0:15:E0:68:A9:48:BE:92:60:3B:BB:0D:EA:E0:29:11:71:CB X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:f1:ea:65:ed:aa:9c:51:2d:97:cb:4c:6f:f3:bf:8b:7d:b5: 1f:e4:c0:76:3d:94:b7:05:58:d6:43:a7:14:38:ad:ff:59:f2: bf:53:c0:d0:20:55:6d:18:ff:80:8d:0f:4c:dd:a3:a9:5e:a4: 38:4c:11:9a:ab:fb:da:17:aa:15:bf:29:b2:b2:e6:02:b9:94: 4f:55:06:be:18:45:32:9a:d4:09:0e:fc:d5:05:16:06:bc:7d: dd:4e:04:df:86:c4:e4:2b:36:28:26:99:d1:34:c4:49:44:ae: 73:43:eb:3d:25:59:1b:df:56:91:e3:85:68:98:b3:5f:73:43: 14:c1:ca:75:96:f3:ff:a5:ba:00:c2:23:ac:76:ab:30:7a:b5: b2:a8:86:4e:90:d0:d8:a6:66:2f:40:c4:2a:25:fb:53:d9:7f: 36:5e:2e:cc:4d:c7:ac:6b:c5:d5:c5:f4:14:98:a4:7b:96:e0: cb:98:02:ec:74:a2:ad:a5:59:df:87:fd:5d:a2:bc:31:1d:95: 5b:81:a1:52:a2:04:e2:82:56:f9:03:95:70:ea:14:9f:ba:17: c4:c3:ae:79:df:6e:c8:f5:16:81:52:7f:26:74:83:a9:4c:28: ce:b0:a2:f3:59:f8:81:69:84:1f:f8:67:ab:82:ec:88:82:37: ea:c0:8c:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDMa+1rfLigmLJWhhYBiGD0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjYwOTIzMDQwMDIwWhcNMjYwOTI0MDQwMDIwWjAzMTEwLwYDVQQD EyhhY2I1ZTAxNWUwNjhhOTQ4YmU5MjYwM2JiYjBkZWFlMDI5MTE3MWNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTNtSRhZ8hgawygRWNZax9ucTigy 8NftM2Afk6j1TABn4MDJ7hthlH5sqpeiTGnu1B/H3S3anFW0wv0IdI3Uo83iqBcd S/WX9fCwbGZVtbIQ3zLarpkaEHBe4SFwQpmWquI5wEclmXI4+ZUu3XNjZ5FQPERN ADJdVH8MSaq2QMpL8+6vc6b6qHxCqG59NKBjhM9DmGMwjqU54UzW0cyMbvZprzEb i1VyFCUwG2i2r3REtpXEBrhQEi5L58d5Z+PvVeRJagHy8ML65dIWDXzxCPYFA7DE TcTdXieY4eNPvrh6uCVD0ngr6iNYST9r2DR3/uCFohV6rY9/G+2z/lU3cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKy14BXgaKlIvpJgO7sN6uApEXHLMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtvHqZe2q nFEtl8tMb/O/i321H+TAdj2UtwVY1kOnFDit/1nyv1PA0CBVbRj/gI0PTN2jqV6k OEwRmqv72heqFb8psrLmArmUT1UGvhhFMprUCQ781QUWBrx93U4E34bE5Cs2KCaZ 0TTESUSuc0PrPSVZG99WkeOFaJizX3NDFMHKdZbz/6W6AMIjrHarMHq1sqiGTpDQ 2KZmL0DEKiX7U9l/Nl4uzE3HrGvF1cX0FJike5bgy5gC7HSiraVZ34f9XaK8MR2V W4GhUqIE4oJW+QOVcOoUn7oXxMOued9uyPUWgVJ/JnSDqUwozrCi81n4gWmEH/hn q4LsiII36sCMsQ== -----END CERTIFICATE-----Generated at Wed Sep 23 13:22:28 2026 by rpki-client