$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft File: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft (raw, json) Hash identifier: GeOz82rLiJHyKE6ULAsI/Zkli47BNFqwjQjE8ghkxFo= Subject key identifier: 77:63:9A:DF:9E:D5:77:EF:B7:67:C3:77:6E:7F:A0:95:DC:77:59:9E Authority key identifier: D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA Certificate issuer: /CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Certificate serial: 01A0CAB50F1338F920F6CEB55F443039EE0C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft Manifest number: 0C9F Signing time: Tue 22 Sep 2026 20:00:58 +0000 Manifest this update: Tue 22 Sep 2026 20:00:58 +0000 Manifest next update: Wed 23 Sep 2026 20:00:58 +0000 Files and hashes: 1: 0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl (hash: K2jabgX6GZlvPJxKZRLOr5C3Il4QivHcFIUF3h6iSgQ=) 2: 8SFZw8BMAj1xVhdMMCCs15uYf7Q.roa (hash: 9ezJKc1nhlgcq48JgfbfaaUeNcn0fAJH9w4Rv8ctllY=) 3: 9iY8zZM2GSyPT4mF8aJhMS5PM8Y.roa (hash: xNWcTes1rfng2Xoo1q/dVG7NMZ8Ww7cO2s1+2Z0yWlA=) 4: DxhjENvG5OYUJvVZsM8qLwRgMX8.roa (hash: AXiwp6mvVukrTKFIByO8+UyYRveHX4/Xn2+jsMwO1nY=) 5: E9APco7X5s-y_ndtROFoXtIewVo.roa (hash: ivFiLkZ8In0JyMQIcM+7PA1jeMldEvXCr0uAAOVK9i8=) 6: Ea_6BYNPNVYXpJIw6V8w4iHsn34.roa (hash: MmpGqyxYpKQIYnf6OI/K/GvwLTjCCsiguVNJ0TpVI8A=) 7: GysgxckvU9w6RPGtRYGSjjzMaeI.roa (hash: jULcLoc2tnQVeXNdUpLnnHKQk5KFPYH+I0w28ILf6uo=) 8: MdyX1edjlp-yz1Rj3rPjziFXB9Y.roa (hash: KbrH7LcYaa394FA8k0S5gWJFBJdKc28amMjP1aLjN/M=) 9: PEzreo_YaPTvZmeHLlLFR5kVjWY.roa (hash: eXeiZ79p8Uap0Wt90BnDGjxDFdIM/UYDOLfaEdoVu7k=) 10: SAA7qyjcW84McQBC6YBfHzblJfA.roa (hash: dbjWwV6RFntCa8n+N5y1CE7UmL5X6zdxSBIazMuF9gY=) 11: SAOjAfmVta9T_Ls7ykRFr8U5SYI.roa (hash: r10sWadtpWdod9WG4HGHqPD7qRwz46PwcZV2+I/tlNM=) 12: YsTwicH1tOydKXwijh3NKIAFLS0.roa (hash: a4Esas1VFYhKGMF7C/m0rI+wkbXft/Q6b4xO9aKQj64=) 13: eExRkfPu0Gwge_hF5bZ87TMqJSc.roa (hash: GbCahJADgly+/ikqsEm4KY5sCrzG5FQDBoPzkX+HqA0=) 14: gkcGn3ENPLtTEnDqjUqXbmSRgng.roa (hash: U6oenFeqTjFDCfsFo9/G7/iGAGLsgJkrsjxoMp46oSE=) 15: k9h8QS5gEzXpkcVVNe-dAvt8_v8.roa (hash: zBG+kHBGYstuoXqKiYKOkY+fZi1x5xlU5harwXVVNII=) 16: py8kH9n_2-OnxW6spEMi6oEGK_w.roa (hash: GsXp7eLTo1qCtBBCoDFQgU12gK3EvVtwUdWIN2dH9CY=) 17: rhGX_5s3UmZjlpks20dW8Uwf5xY.roa (hash: JBHH+NoWY0D+hMChID36tmQIbWsMkAg53XmNFpTIjc4=) 18: rw4pdFSTNcqR4HSLH99TYBGU5M8.roa (hash: ArUMSjBrgFsVWtaXlYqazL0AVRoBUJiJ/pOtvA7ObNw=) 19: zFqREBgVNzI2E15fdQInesLKPTw.roa (hash: NsrPAKNCirfx6K/YKvvDtbYP5Q+iM+dl/3GgSwcg4O8=) 20: zn4F63TYgWqEf5oY3C0aSoOPaXU.roa (hash: 4XzpBGSKIpqrgzYV8bDUbJCBoMSY0ytUeCyMxChhVnE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 20:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ca:b5:0f:13:38:f9:20:f6:ce:b5:5f:44:30:39:ee:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3e97033a36aa9bcc0c2f167e620d7ca1493cbea Validity Not Before: Sep 22 20:00:58 2026 GMT Not After : Sep 23 20:00:58 2026 GMT Subject: CN=77639adf9ed577efb767c3776e7fa095dc77599e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:7c:5e:58:bf:a9:16:88:5f:a0:13:f0:43:50: 8a:25:07:2d:96:f3:d6:ba:9d:d2:7d:d8:d2:82:a0: 89:5e:6c:be:17:6e:bc:7e:ee:41:24:5d:98:f2:b3: 56:62:2c:41:bb:4a:6c:fc:87:07:54:53:b9:1a:86: 18:61:be:13:64:fc:eb:0c:86:41:64:0a:e5:63:40: f2:d8:a7:77:42:0c:24:95:f9:87:f7:c3:d5:17:3e: 07:63:f8:06:d8:be:57:e0:62:c3:ce:df:da:24:08: f6:bf:af:68:ec:f6:49:30:78:b6:87:c7:89:20:be: 24:e2:95:54:d0:dc:37:e6:67:02:4c:6f:10:06:57: 58:5f:94:9e:da:dd:02:1d:35:b8:64:c1:3f:7e:17: ec:89:a9:0f:3f:88:83:1f:d9:30:d9:1c:08:42:f4: 4b:2c:fb:cd:c3:50:eb:e7:e8:e6:e1:90:a9:ef:3a: 04:40:19:9c:33:d6:77:0e:16:4f:b9:ba:98:50:8e: 65:c8:6e:72:0f:fd:d9:5a:ad:04:c6:e7:b1:e0:c1: 2b:ab:5f:b9:12:93:26:fb:c5:86:19:8f:63:30:60: bc:22:46:15:11:02:b7:a5:e8:04:8b:c2:c2:ee:b8: 28:9c:5f:3a:24:b4:bd:f0:84:59:ee:8e:3d:13:73: 99:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:63:9A:DF:9E:D5:77:EF:B7:67:C3:77:6E:7F:A0:95:DC:77:59:9E X509v3 Authority Key Identifier: keyid:D3:E9:70:33:A3:6A:A9:BC:C0:C2:F1:67:E6:20:D7:CA:14:93:CB:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0-lwM6NqqbzAwvFn5iDXyhSTy-o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/5a320b-e94f-41c9-82f3-dbf9d41f1798/1/0-lwM6NqqbzAwvFn5iDXyhSTy-o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:20:1e:4b:a5:29:48:c2:50:4f:4a:9b:27:f0:fa:6f:98:be: b5:8c:57:c4:6a:26:fe:61:d6:e9:77:f2:96:47:0a:95:5d:4e: 05:b5:a1:8d:f0:d7:ba:53:31:f1:d8:cc:a9:dc:1c:30:c6:35: 9b:78:c1:22:8e:40:b5:34:a5:8d:92:d4:13:04:9b:7b:1a:2e: dc:94:bb:c5:6c:ee:6a:53:95:6a:dd:5c:a2:a8:0e:23:81:af: 16:ce:d9:34:3e:d4:c2:0e:85:4a:9a:f6:48:f3:4d:f5:3b:ad: 10:2d:0e:31:2d:8c:29:78:db:23:63:18:ff:7b:d6:6e:0c:8d: 70:78:a0:e7:b1:78:dc:22:31:c9:bc:18:08:a5:3c:80:3b:d8: e2:fe:11:49:6f:08:0c:83:32:41:80:0a:6a:96:f0:43:6e:91: b9:fc:97:ec:8b:07:7a:93:a2:04:83:61:70:95:fc:78:93:6b: 03:ac:61:f4:f7:a0:7e:91:f8:64:7d:f3:cd:d5:84:c6:76:fb: 88:87:8b:9d:b1:65:96:e6:07:43:05:55:72:8a:99:6b:0e:b0: 8b:82:65:58:23:48:1d:e8:11:89:cf:8a:c2:25:89:53:69:85: 04:e1:53:e2:da:da:c2:c5:24:5b:01:43:9f:79:d6:bc:ad:9f: e8:18:59:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDKtQ8TOPkg9s61X0QwOe4MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZTk3MDMzYTM2YWE5YmNjMGMyZjE2N2U2MjBkN2NhMTQ5 M2NiZWEwHhcNMjYwOTIyMjAwMDU4WhcNMjYwOTIzMjAwMDU4WjAzMTEwLwYDVQQD Eyg3NzYzOWFkZjllZDU3N2VmYjc2N2MzNzc2ZTdmYTA5NWRjNzc1OTllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXxeWL+pFohfoBPwQ1CKJQctlvPW up3SfdjSgqCJXmy+F268fu5BJF2Y8rNWYixBu0ps/IcHVFO5GoYYYb4TZPzrDIZB ZArlY0Dy2Kd3QgwklfmH98PVFz4HY/gG2L5X4GLDzt/aJAj2v69o7PZJMHi2h8eJ IL4k4pVU0Nw35mcCTG8QBldYX5Se2t0CHTW4ZME/fhfsiakPP4iDH9kw2RwIQvRL LPvNw1Dr5+jm4ZCp7zoEQBmcM9Z3DhZPubqYUI5lyG5yD/3ZWq0Exuex4MErq1+5 EpMm+8WGGY9jMGC8IkYVEQK3pegEi8LC7rgonF86JLS98IRZ7o49E3OZPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHdjmt+e1Xfvt2fDd25/oJXcd1meMB8GA1UdIwQY MBaAFNPpcDOjaqm8wMLxZ+Yg18oUk8vqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMt ZGJmOWQ0MWYxNzk4LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82YS81YTMyMGItZTk0Zi00MWM5LTgyZjMtZGJmOWQ0MWYxNzk4 LzEvMC1sd002TnFxYnpBd3ZGbjVpRFh5aFNUeS1vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABSAeS6Up SMJQT0qbJ/D6b5i+tYxXxGom/mHW6XfylkcKlV1OBbWhjfDXulMx8djMqdwcMMY1 m3jBIo5AtTSljZLUEwSbexou3JS7xWzualOVat1coqgOI4GvFs7ZND7Uwg6FSpr2 SPNN9TutEC0OMS2MKXjbI2MY/3vWbgyNcHig57F43CIxybwYCKU8gDvY4v4RSW8I DIMyQYAKapbwQ26RufyX7IsHepOiBINhcJX8eJNrA6xh9PegfpH4ZH3zzdWExnb7 iIeLnbFlluYHQwVVcoqZaw6wi4JlWCNIHegRic+KwiWJU2mFBOFT4trawsUkWwFD n3nWvK2f6BhZIQ== -----END CERTIFICATE-----Generated at Wed Sep 23 07:27:55 2026 by rpki-client