$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft File: b14CML55nkSCnIcgyjg0cEVJTiA.mft (raw, json) Hash identifier: 2YNovjEjUpUkyDst5jRB5VjdTSnlwrn0TDQe6C1LPdA= Subject key identifier: 33:A3:91:0C:1C:B9:6C:7F:E5:AD:12:4A:D4:D2:8D:E4:11:47:F3:6D Authority key identifier: 6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20 Certificate issuer: /CN=6f5e0230be799e44829c8720ca38347045494e20 Certificate serial: 01A0D6B9AD047D87911DC5BFE023196E4BB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft Manifest number: 1AE0 Signing time: Fri 25 Sep 2026 04:01:27 +0000 Manifest this update: Fri 25 Sep 2026 04:01:27 +0000 Manifest next update: Sat 26 Sep 2026 04:01:27 +0000 Files and hashes: 1: 0ilD8kn0R7q1FBSpS_1ImAaBVIw.roa (hash: r9gpGa/Fs+XSMlMSIjeCe4Ey3b9cLg0idanhrHIE4vU=) 2: 1-ygVXvpX3v0iELiClfnmQNYwGyE.roa (hash: X5he1s+27okfT854bA2DHGCg/8azuLS5wg9wh4BAYOk=) 3: 11MSR6RwQdS9PcJnQG3HC0PzfJ0.roa (hash: CvrDms5T5mm1Pd4WoiIkr1es421j/l8bnrXNm+cQNiA=) 4: 51dyEH9mB-2TlQnmwCI1JrmBgNc.roa (hash: 8rWJfuEn+9HWKYdaijzyW6l/fo2ZUakPYbK2Xz7Khfw=) 5: 81IrEqThFJ71oZltC7sydtXNojo.roa (hash: tEfEiIXn9wfKX7SvDjdARvZLxRgzMJ/S8JlSOukelog=) 6: AMQlobx9HParaeDL7T0v3tR4_mg.roa (hash: DvsmpIh8xvNvja7LOYbDo2D2JDk07c51OKvsQR0zZ1A=) 7: AXyzBE0tybxRg9_jdKm4jNHR7bw.roa (hash: nfQgADgYeSKYxfzdRmUnB0z2SSRcFjYrl/PLdcFMeDw=) 8: B4KN2Yd9w7WkWLGwOUk8aBVr0Ko.roa (hash: +Lzs31fW3zuwQ9tYMA1nRcRlZN8oqEJ97KqkruTLEYU=) 9: Boj51944UHpw2N29rQVowThmug0.roa (hash: HUVOp2WKj5SNN9Fle4XKUb46VLI80hwlKOqPCzD07wo=) 10: CP1-ZWFt3LQXYmFLwdbDKA6-btk.roa (hash: hFhoH59R3e+GZod8NYfc3YpX1Y6SV4cXhI67xJcoHls=) 11: JxJo9qALLP7eJJE5vuTtbxNKarg.roa (hash: HkVv74vSVM+BvE4aRbMZl6E3E6sT2RpvFk2i93TTTiE=) 12: _BfUEuTWI4mH7z3tL2xj4fNLk8w.roa (hash: PZxV1RVfs2NX+n/RPHStsER54mLHjvguw+Y+i8qfbk0=) 13: _g7NYGu7EgLM-JyG677gAc99ISI.roa (hash: uHPD2j/d4/7LW+Vl6Kpwce5f7NuD1gag8TG/5Nj0SWs=) 14: b14CML55nkSCnIcgyjg0cEVJTiA.crl (hash: nqkS6m/0+95CgkMalo4rRJZCiDDJyffT5wJPYHfJDwo=) 15: bQYx_xQSdi96aXvakBARQlWzcuo.roa (hash: paxG2U4ADDtULZYvAzrh9UihW/30QbEMMaBJ7NEhmYo=) 16: d-4qmY002a-_uZF-wZrqxgBd3jo.roa (hash: wELkh8aWcGv9h9k1xpDhpOETMsDuMx2CZz3t9VUJyYk=) 17: fxuyMV_7iGJ5rjIPhk3y0WiOc-Y.roa (hash: kZWQ/Ewlc4WMwycM0JTInlzSOn7k6IqfaiPaxpvk380=) 18: g4ShtOVoK1sOm96RfSspdLumCvI.roa (hash: dbDK/BecQeIz6Zb33EjyuQY6S7PvjAP+A9ZP96sRxE8=) 19: glWxdut08Vwn-qxiS-pyw1KuV6s.roa (hash: RXAylKSGn5n8hPtBxyqJXbZqVSosVeuUL9onv9ffIJ8=) 20: p8KWXhQ17kNHqWtAUgCDpcUShPM.roa (hash: yT7/vJlEJytYxIwgAmSPUlSELtY4hqOC1H64eBjtuzU=) 21: qo7ie-ZCOxr3kULK0wr2-czci7A.roa (hash: tjSzYVU1BPWM+eWE8epAD1zQp+0FNjjYVtJc8ORfDvE=) 22: u3tBTHFA6uA1xiho6mlx2A99Pkg.roa (hash: FgLJ+SuCyCEVccEPsDGFLFFI0Fpbheu8wLy47VogJN8=) 23: vELnjGZG0HPMMI6eyVMJCb07tlM.roa (hash: hBZn4JkNx5C+fP4A7VfhJIdgWEeaLDhsZs+aBB3PMpI=) 24: wuAhjlqZE30FVLwQleXy0QZKBvk.roa (hash: 5iJlr5RtTjgZN/jpYBVCGzQoWJShbs43qhZUZnZDc2U=) 25: y85mnQhYcTqIlHoOqLBACOAgO30.roa (hash: jzPimPMQ/CRKxhNSxbGWi85rto/NzANA5JxRUar8Ci0=) 26: yJBe4wL__q5eFSy_v2lsZXclqhQ.roa (hash: waMNp3qW5tHL4UcllPTtbvZg9/Osk4C76/bHTxN/Vec=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:b9:ad:04:7d:87:91:1d:c5:bf:e0:23:19:6e:4b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f5e0230be799e44829c8720ca38347045494e20 Validity Not Before: Sep 25 04:01:27 2026 GMT Not After : Sep 26 04:01:27 2026 GMT Subject: CN=33a3910c1cb96c7fe5ad124ad4d28de41147f36d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:ff:9f:e2:a5:8c:26:14:75:c8:8f:6b:3d:a4: af:b2:0d:1e:7c:36:e6:19:9e:30:e6:ec:e7:6a:a2: f0:d1:84:49:cc:f2:cf:61:41:62:40:fc:dd:b8:3c: 31:f2:15:df:fc:1d:79:ab:aa:9a:22:a7:57:20:70: d5:44:b8:ed:2f:f6:85:10:bd:c7:a8:2f:e7:c1:7f: c7:99:af:8e:cf:26:8d:a0:f4:12:70:85:d1:d4:d6: 03:77:21:95:c3:22:7b:38:3e:9d:6b:2a:17:00:90: c6:1b:90:cb:3e:5a:74:3c:e5:60:b8:9c:46:75:e4: 48:7f:eb:ba:8b:b2:03:45:45:f3:5b:55:39:12:7b: 09:be:49:19:94:07:fa:e1:25:ce:5b:07:d1:74:7a: 6a:85:62:3a:78:e0:48:11:e2:7d:62:7c:6c:c2:c7: fe:54:14:41:d2:95:25:7e:d4:02:8f:a8:aa:3b:0d: ad:2a:b0:68:c2:2d:67:b0:fa:9a:37:61:f4:e7:9c: 73:8f:fe:11:e7:85:b3:0d:0f:f7:1c:ab:7b:b6:0a: 3a:32:e4:34:5d:64:8d:11:65:36:52:34:59:28:27: 2d:b1:a8:de:cc:0c:9f:b8:81:cc:4f:28:96:9b:d7: 1f:3c:aa:9a:ac:65:5f:1f:17:65:a5:13:d7:2a:62: 3b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:A3:91:0C:1C:B9:6C:7F:E5:AD:12:4A:D4:D2:8D:E4:11:47:F3:6D X509v3 Authority Key Identifier: keyid:6F:5E:02:30:BE:79:9E:44:82:9C:87:20:CA:38:34:70:45:49:4E:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b14CML55nkSCnIcgyjg0cEVJTiA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/67/70ccef-17f3-4928-9c0b-ba7c7d8190ca/1/b14CML55nkSCnIcgyjg0cEVJTiA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c0:27:ac:8b:7d:30:d4:ac:55:c2:1e:46:f9:c0:71:0c:07: b2:a1:9c:c7:57:4d:6a:56:28:e4:52:62:3f:ee:15:5f:12:f2: 9a:f3:99:fc:cd:67:94:57:75:99:56:3e:9b:2d:56:70:0d:72: e6:8a:22:c1:52:3f:8f:bb:a7:45:ad:e7:6e:48:c9:fb:88:c0: 83:f8:3c:d7:f6:c7:0c:84:ed:ee:9f:06:80:56:b4:03:6c:55: d5:41:96:22:a5:34:45:bc:df:cb:3a:62:b5:e4:c9:6b:79:b6: 15:9e:4f:fe:67:11:4e:d2:19:cd:c5:c7:6a:93:7d:3f:be:7a: 26:59:4d:e8:49:b5:0b:42:1a:e0:2e:b9:32:ae:e6:c0:6e:d9: 80:d3:d2:a6:54:c5:99:8b:18:4d:29:42:93:d3:1c:a1:21:2e: 7d:93:18:9c:51:59:f6:75:c7:70:fb:66:23:33:cd:92:19:d7: 0b:f2:ef:3f:6d:31:60:d6:3b:ab:50:07:31:a2:cc:fb:6f:1e: ca:9f:df:e3:32:61:9b:3f:da:4e:2f:a5:ae:fa:ac:34:cf:6f: 6f:fb:75:1b:90:7f:cf:6c:da:82:5e:4e:cf:f4:ce:40:a9:19: 8c:73:ed:33:5b:e2:52:ba:79:c5:b0:b0:8c:75:17:e0:0f:23: 15:9e:89:90 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWua0EfYeRHcW/4CMZbku3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmNWUwMjMwYmU3OTllNDQ4MjljODcyMGNhMzgzNDcwNDU0 OTRlMjAwHhcNMjYwOTI1MDQwMTI3WhcNMjYwOTI2MDQwMTI3WjAzMTEwLwYDVQQD EygzM2EzOTEwYzFjYjk2YzdmZTVhZDEyNGFkNGQyOGRlNDExNDdmMzZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/+f4qWMJhR1yI9rPaSvsg0efDbm GZ4w5uznaqLw0YRJzPLPYUFiQPzduDwx8hXf/B15q6qaIqdXIHDVRLjtL/aFEL3H qC/nwX/Hma+OzyaNoPQScIXR1NYDdyGVwyJ7OD6dayoXAJDGG5DLPlp0POVguJxG deRIf+u6i7IDRUXzW1U5EnsJvkkZlAf64SXOWwfRdHpqhWI6eOBIEeJ9Ynxswsf+ VBRB0pUlftQCj6iqOw2tKrBowi1nsPqaN2H055xzj/4R54WzDQ/3HKt7tgo6MuQ0 XWSNEWU2UjRZKCctsajezAyfuIHMTyiWm9cfPKqarGVfHxdlpRPXKmI7SwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDOjkQwcuWx/5a0SStTSjeQRR/NtMB8GA1UdIwQY MBaAFG9eAjC+eZ5EgpyHIMo4NHBFSU4gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGIt YmE3YzdkODE5MGNhLzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Ny83MGNjZWYtMTdmMy00OTI4LTljMGItYmE3YzdkODE5MGNh LzEvYjE0Q01MNTVua1NDbkljZ3lqZzBjRVZKVGlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbcAnrIt9 MNSsVcIeRvnAcQwHsqGcx1dNalYo5FJiP+4VXxLymvOZ/M1nlFd1mVY+my1WcA1y 5ooiwVI/j7unRa3nbkjJ+4jAg/g81/bHDITt7p8GgFa0A2xV1UGWIqU0Rbzfyzpi teTJa3m2FZ5P/mcRTtIZzcXHapN9P756JllN6Em1C0Ia4C65Mq7mwG7ZgNPSplTF mYsYTSlCk9McoSEufZMYnFFZ9nXHcPtmIzPNkhnXC/LvP20xYNY7q1AHMaLM+28e yp/f4zJhmz/aTi+lrvqsNM9vb/t1G5B/z2zagl5Oz/TOQKkZjHPtM1viUrp5xbCw jHUX4A8jFZ6JkA== -----END CERTIFICATE-----Generated at Fri Sep 25 09:11:55 2026 by rpki-client