$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: vsygRMh2E0kzmmisgndFL+glU22fn4CxBihxJ8G8RnE= Subject key identifier: 9C:A8:53:3A:E1:81:74:EF:25:2C:28:D9:4C:6B:16:FE:62:47:66:9B Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 01A0CD4817BA1AFC614F26BB73B0F000275D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1A7A Signing time: Wed 23 Sep 2026 08:00:48 +0000 Manifest this update: Wed 23 Sep 2026 08:00:48 +0000 Manifest next update: Thu 24 Sep 2026 08:00:48 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: J_a4ymcJIY3L6HOzFARmH41d5es.asa (hash: bpzpa0qKowmOhDsx7cnZXh9EOSP6XWxhHtsK/Z/ggTU=) 6: LfkCmSO1I7GGpJ0of5l-0c5AGBc.asa (hash: UgfWuPDLjqxThrUgxhNFddbI4VXPReh33QeUjBvYjVs=) 7: LuOgAc37LU8V7dGgdj8hy6ymH64.asa (hash: pkN431oI3RFQuibIh8RwZRrzTHAA18y2t6J/hjni00c=) 8: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 9: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 10: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: vuq/z6OdjzsAcxM7TWXnNmu35v6dnvulcro0HCHEp/E=) 11: cIcqaLXZmekavhCmoIAJhBRw3JE.roa (hash: 8QflktthB1MZE1m+SbfCOvT58wwBH/AnF87SL9k5yss=) 12: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 13: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 14: oaZumtYBqB2DBSwMpqnmqOIkGm0.roa (hash: 9YqR7q1fJK+xrhMWwkV3smWMIV3JZ5y1OxTGOkJ6aPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:48:17:ba:1a:fc:61:4f:26:bb:73:b0:f0:00:27:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Sep 23 08:00:48 2026 GMT Not After : Sep 24 08:00:48 2026 GMT Subject: CN=9ca8533ae18174ef252c28d94c6b16fe6247669b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:bb:d3:26:da:4c:00:86:d2:8e:4d:a5:b4:54: 2c:c1:ae:89:f4:78:6c:05:4e:10:ed:21:1e:48:7e: 25:07:c8:93:53:63:7e:14:0f:99:21:ff:be:8a:c8: c3:a1:9e:e5:62:8f:60:c7:2b:f7:c4:ac:c1:72:c6: bc:7b:68:e4:73:11:09:5c:f7:f6:54:04:ee:33:5f: 09:8e:0b:c0:16:94:51:2a:23:8b:f9:c2:a5:ac:0a: 0a:a6:d8:59:ce:bb:04:92:20:d4:3f:94:2b:f7:1f: 49:57:f7:2d:bd:c6:b5:c2:c6:62:00:ff:4c:9a:e6: 5c:b7:02:c6:0e:5f:1d:aa:df:f8:59:d1:55:7a:1e: f2:20:ec:07:3f:ac:34:b9:85:d3:12:f8:78:55:53: c8:8e:29:3b:fb:f1:89:c5:b6:97:39:cf:08:96:57: 0a:df:cd:aa:72:0b:69:92:02:87:53:83:e1:68:e9: 99:c6:79:d0:7b:63:3d:5e:a6:21:b0:0a:03:6d:53: c8:91:1b:d1:00:f4:dd:e6:44:10:16:c7:e9:ea:c9: f5:cb:cc:d1:15:07:01:27:8d:1b:87:7e:7b:2c:01: 68:c6:08:bb:79:fc:b2:41:c6:57:94:8f:fc:cc:4c: e8:6f:f4:7f:ed:cf:79:9b:56:ea:12:c8:b5:cb:05: 9d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:A8:53:3A:E1:81:74:EF:25:2C:28:D9:4C:6B:16:FE:62:47:66:9B X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:a6:f3:b4:fb:67:0f:7f:e4:af:14:fc:d9:0b:64:dc:0c:e0: 49:2f:89:23:31:34:68:a5:e0:f5:d0:fc:34:cb:53:dd:d4:51: 9f:c4:ec:c8:37:98:bd:10:4a:1d:80:5b:4f:f7:02:1d:ca:15: c1:6c:1f:b0:08:f5:bf:5a:31:16:b8:d9:d7:0a:47:50:1a:01: 20:53:0f:13:5a:3b:a1:64:03:c4:87:de:81:ac:f5:48:8e:d3: df:f8:24:e7:8b:3e:6d:76:72:40:1b:b9:55:9e:3c:50:44:7b: 9b:cf:ab:c6:df:77:d0:d5:3e:b1:b1:60:3c:76:cf:16:76:bb: 72:c9:b2:9d:8d:dd:c9:58:5c:82:f6:28:68:18:b0:73:8f:2b: 38:24:98:73:e3:58:66:cc:c8:ab:d5:49:9d:7c:6f:6d:72:97: 4b:30:da:6d:97:c9:bc:c9:8b:f4:17:47:f4:96:b5:14:04:67: b6:93:e8:1d:be:98:df:a6:16:11:65:cb:86:63:99:38:fb:37: 65:27:7f:be:eb:fe:fd:cf:e4:33:b4:e8:10:50:61:e1:21:82: 98:12:e4:65:08:45:fa:9f:56:16:88:0e:eb:44:39:aa:02:9e: 1c:4e:fb:9d:c4:47:d4:dc:cf:e2:61:ec:21:6a:03:71:f9:64: 29:ab:2d:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNSBe6GvxhTya7c7DwACddMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwOTIzMDgwMDQ4WhcNMjYwOTI0MDgwMDQ4WjAzMTEwLwYDVQQD Eyg5Y2E4NTMzYWUxODE3NGVmMjUyYzI4ZDk0YzZiMTZmZTYyNDc2NjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobvTJtpMAIbSjk2ltFQswa6J9Hhs BU4Q7SEeSH4lB8iTU2N+FA+ZIf++isjDoZ7lYo9gxyv3xKzBcsa8e2jkcxEJXPf2 VATuM18JjgvAFpRRKiOL+cKlrAoKpthZzrsEkiDUP5Qr9x9JV/ctvca1wsZiAP9M muZctwLGDl8dqt/4WdFVeh7yIOwHP6w0uYXTEvh4VVPIjik7+/GJxbaXOc8IllcK 382qcgtpkgKHU4PhaOmZxnnQe2M9XqYhsAoDbVPIkRvRAPTd5kQQFsfp6sn1y8zR FQcBJ40bh357LAFoxgi7efyyQcZXlI/8zEzob/R/7c95m1bqEsi1ywWdGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJyoUzrhgXTvJSwo2UxrFv5iR2abMB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGKbztPtn D3/krxT82Qtk3AzgSS+JIzE0aKXg9dD8NMtT3dRRn8TsyDeYvRBKHYBbT/cCHcoV wWwfsAj1v1oxFrjZ1wpHUBoBIFMPE1o7oWQDxIfegaz1SI7T3/gk54s+bXZyQBu5 VZ48UER7m8+rxt930NU+sbFgPHbPFna7csmynY3dyVhcgvYoaBiwc48rOCSYc+NY ZszIq9VJnXxvbXKXSzDabZfJvMmL9BdH9Ja1FARntpPoHb6Y36YWEWXLhmOZOPs3 ZSd/vuv+/c/kM7ToEFBh4SGCmBLkZQhF+p9WFogO60Q5qgKeHE77ncRH1NzP4mHs IWoDcflkKastmQ== -----END CERTIFICATE-----Generated at Wed Sep 23 19:09:00 2026 by rpki-client