$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json) Hash identifier: 1ITry54JeteDPKz/I8yVnC1Pk5OcO/lNRyFkB3DQMA4= Subject key identifier: 22:D5:53:79:2E:71:31:2F:2D:B2:46:39:29:B2:A8:80:33:84:82:94 Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Certificate serial: 01A0F6E8E8D53E1B2FA5F7671A896011FC4E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft Manifest number: 1288 Signing time: Thu 01 Oct 2026 10:00:54 +0000 Manifest this update: Thu 01 Oct 2026 10:00:54 +0000 Manifest next update: Fri 02 Oct 2026 10:00:54 +0000 Files and hashes: 1: 0fPiuwb4X2weC-gKDNJaEbSPHqw.roa (hash: S57h9JaZkZt0GA+n+fixlPL0kJI1rFB4fls5bIvI/yg=) 2: 9CV2ccBp-wqUL_fP6QBnKryYIpM.roa (hash: EVfvSX2FaZ2DaE0/qfbpH/rDdeen/hkG4N8QfWHeB08=) 3: JKGW4gg3OI-zymSfSwtWhhEO1-c.roa (hash: Hj2gZmYvtr1JqmPfTXMpYrbuy1yiPpWa6zihMnTrs60=) 4: NJlkPEbvZj17oZnTPoUJnz4aYHU.roa (hash: 1OOkVDVrLB0wggxypUryE2P0Q8in33IuC2Ho6AYkBaQ=) 5: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=) 6: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: l6uVDbXx1TU3NJtTsXFwehJM9b+fihqYCMPQFTfNwgw=) 7: mwnslxanlyapMrSdoQ959onOJDo.roa (hash: 5V4ABzOc/BOKT+0CLM0NPcH5YpVerld75dduR0xdwO8=) 8: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=) 9: vZOfCIg9L8SEJQT_PB29EUcqp1o.roa (hash: D6jkKtX92Ek141r9wDvoefr0ADP2trBgJ4ZfnvX2MDA=) 10: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Oct 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f6:e8:e8:d5:3e:1b:2f:a5:f7:67:1a:89:60:11:fc:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Validity Not Before: Oct 1 10:00:54 2026 GMT Not After : Oct 2 10:00:54 2026 GMT Subject: CN=22d553792e71312f2db2463929b2a88033848294 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:23:23:98:8d:1e:da:e5:19:e1:f6:6e:a8:34: da:9d:91:0c:9e:a9:ae:72:14:0b:09:b7:84:3c:5f: de:53:56:49:e2:ae:34:cc:2a:6d:7f:29:ea:9c:28: 25:96:7d:a5:f9:0a:a4:f3:d8:30:df:bc:af:4f:17: 26:42:31:77:90:f5:b7:22:90:87:40:97:93:a3:0e: c6:0b:24:6b:86:17:aa:81:41:67:94:98:c3:8b:2e: b3:b6:2b:68:62:ad:b8:bf:80:e4:ed:94:a0:84:51: 44:8a:35:e9:7e:af:62:df:8a:a0:fc:34:16:13:31: 0b:9a:71:b3:51:3e:2a:79:99:ca:48:3a:b3:f1:e1: 6c:b6:62:d2:81:36:31:50:f0:83:59:5d:ba:40:7e: da:20:8f:de:c5:2c:ed:c4:f1:07:db:2a:34:78:2b: 43:5b:48:41:6b:fa:51:16:ec:f9:e8:ba:a3:8d:43: 08:81:c0:fa:5e:8c:8e:18:f5:15:35:0a:a5:f8:66: c8:22:78:ff:56:3d:5b:96:5b:8e:79:27:5d:2e:79: 84:1e:da:38:c7:46:27:7d:82:f1:5e:dc:6a:57:b4: 26:a5:ef:9c:77:3f:ac:0c:df:d3:79:a9:2d:ef:68: 9a:bc:0e:3c:06:59:67:d3:9d:88:a2:e0:3a:84:e9: cc:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:D5:53:79:2E:71:31:2F:2D:B2:46:39:29:B2:A8:80:33:84:82:94 X509v3 Authority Key Identifier: keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:1d:5f:8b:34:1c:6d:6d:49:fc:c8:ab:48:f8:bd:c5:a0:10: 5b:d1:47:a0:75:94:02:f5:4f:b5:2e:5c:c1:1c:0f:0a:ff:24: bc:6d:f9:4b:e6:03:97:27:c6:22:9c:7c:9b:ff:14:50:91:69: c5:21:71:9f:5c:8f:6d:36:36:a7:40:5a:35:cf:bd:14:6b:94: 6f:a7:a6:49:85:dc:d2:fc:9f:6d:64:9e:52:27:56:a6:54:4d: f9:a7:b0:35:5b:b1:40:e9:7e:5e:4d:3d:0a:b0:71:76:30:8a: 22:f1:6d:29:0b:54:ba:c8:37:eb:11:45:3b:8e:f9:e1:40:1e: 22:1a:c9:e4:0b:45:62:e4:91:47:67:e7:b5:20:69:71:0e:b4: 1a:d5:52:9d:ee:70:79:63:b9:ba:72:8a:7a:3c:e6:33:ee:85: b1:15:f5:bc:94:fb:ce:74:55:13:cd:d2:a5:a6:35:44:50:51: 02:67:d8:ee:f9:e2:12:89:46:2f:85:16:1a:f3:f0:21:e7:31: b1:aa:00:48:8c:a1:e4:eb:21:3e:a9:a8:ae:82:d0:f0:4a:7b: c6:96:7a:24:6c:9f:c7:a0:95:cc:8e:5e:31:db:68:b7:21:a7: 82:b8:d2:05:81:d7:d9:73:9a:12:05:9f:f9:a8:68:c4:45:be: 94:c7:d7:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaD26OjVPhsvpfdnGolgEfxOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2 ZGVmMjAwHhcNMjYxMDAxMTAwMDU0WhcNMjYxMDAyMTAwMDU0WjAzMTEwLwYDVQQD EygyMmQ1NTM3OTJlNzEzMTJmMmRiMjQ2MzkyOWIyYTg4MDMzODQ4Mjk0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCMjmI0e2uUZ4fZuqDTanZEMnqmu chQLCbeEPF/eU1ZJ4q40zCptfynqnCglln2l+Qqk89gw37yvTxcmQjF3kPW3IpCH QJeTow7GCyRrhheqgUFnlJjDiy6ztitoYq24v4Dk7ZSghFFEijXpfq9i34qg/DQW EzELmnGzUT4qeZnKSDqz8eFstmLSgTYxUPCDWV26QH7aII/exSztxPEH2yo0eCtD W0hBa/pRFuz56LqjjUMIgcD6XoyOGPUVNQql+GbIInj/Vj1blluOeSddLnmEHto4 x0YnfYLxXtxqV7Qmpe+cdz+sDN/Teakt72iavA48Blln052IouA6hOnMcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCLVU3kucTEvLbJGOSmyqIAzhIKUMB8GA1UdIwQY MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt MjU0NDY4M2FhMTI1LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1 LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACB1fizQc bW1J/MirSPi9xaAQW9FHoHWUAvVPtS5cwRwPCv8kvG35S+YDlyfGIpx8m/8UUJFp xSFxn1yPbTY2p0BaNc+9FGuUb6emSYXc0vyfbWSeUidWplRN+aewNVuxQOl+Xk09 CrBxdjCKIvFtKQtUusg36xFFO4754UAeIhrJ5AtFYuSRR2fntSBpcQ60GtVSne5w eWO5unKKejzmM+6FsRX1vJT7znRVE83SpaY1RFBRAmfY7vniEolGL4UWGvPwIecx saoASIyh5OshPqmoroLQ8Ep7xpZ6JGyfx6CVzI5eMdtotyGngrjSBYHX2XOaEgWf +ahoxEW+lMfX9g== -----END CERTIFICATE-----Generated at Thu Oct 1 14:13:35 2026 by rpki-client