$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: vgP8q85nYacGRojSBaAzM1Y7mfa+T0mV6aLVkW1Ostk= Subject key identifier: 48:7D:30:83:FD:8A:7C:D3:52:46:0B:C5:00:21:52:34:A2:05:3A:B9 Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 01A0DFBCC075153038307E9B5E64429D8C56 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 1A7B Signing time: Sat 26 Sep 2026 22:01:24 +0000 Manifest this update: Sat 26 Sep 2026 22:01:24 +0000 Manifest next update: Sun 27 Sep 2026 22:01:24 +0000 Files and hashes: 1: 1-ccn--iq_ToEq-Oamkl9Luwspkc.roa (hash: +u0oyCBAW71aNY4BwmQ52QOilFQebxXv8bzootxTVNU=) 2: 5MS9Zy98YuF3Bcrl6mc6yIWJ4-M.roa (hash: b+PbHQ1e20uIzoz27PMH3G/dgeCEzPhT1xUbwe84ub8=) 3: 863a8A9lI1u9XrhUEHNCbgA_EM4.roa (hash: s8aH9qc4ALlhdIevLKorthvT27qew3YZnY2zui2yIks=) 4: 95n53MPAl62Bp8gdAx6GUcBNH6s.roa (hash: SFJj356Hap+M3guGi+p9KYnj5vkCtgLdD7PsVKZ7QL0=) 5: Adh10SfAMsK7XIENnMUTzkYMUd0.roa (hash: s24oidV66DuvBTW7O6p2t70lzMwu9lbI3jK2mIwlhKs=) 6: JiUg0kU1PSuNHKsUA2KSNScv8s8.roa (hash: 3ZAQiyyrgoPYw51cxNpeaspKkodxmry7TXFI3ERIuNE=) 7: QviPBhLr-CXgt9EbTIrGj_yt3o0.roa (hash: A2iZoqo4X/JrmbpOlsLJJidbfz0mL9O7JboFIKE1auY=) 8: n2rh1sLNAvS8TApOyLLtUmfkJtk.roa (hash: YnymBYUK6ZS+GcYBXKPIPAN5Vh2ciMW3IvH4r+uuS68=) 9: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: MmNcFhBNZxOmVHm5F7XhtBnYm7I4KQl/W6BrcFdCZbc=) 10: qC9TRPDEBU4tH34KGCdE-GtaQVo.roa (hash: x+3EdF/VTAf945Szb8jBK7kDYlIbSVdzVeYTbe6GNVk=) 11: vyNX_G3sd7VABBUb1_l_0mQ1seo.roa (hash: MzK7zdnu+4qWNgnGDp5G7j7MAy7ijjxyFcd9B9ucLvU=) 12: wKCBiDDf1e8BicVavixrgdQZibE.roa (hash: MHYVnslYQOZS9IPfWLJkmMuhLwMjuzTKosW1ejMPRAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:df:bc:c0:75:15:30:38:30:7e:9b:5e:64:42:9d:8c:56 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Sep 26 22:01:24 2026 GMT Not After : Sep 27 22:01:24 2026 GMT Subject: CN=487d3083fd8a7cd352460bc500215234a2053ab9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:56:b2:a2:f5:37:08:1d:94:d6:92:69:38:ee: ee:ab:5c:6c:8c:33:08:be:d2:37:b2:78:0e:1b:48: 61:37:b1:d1:23:4e:5c:da:1e:25:3f:b5:4a:e9:10: 63:f8:1d:9a:30:b3:57:a5:81:9c:14:38:3a:53:25: 48:c9:ba:e3:6e:4c:0c:92:d5:c5:7a:e5:e5:66:13: 4c:59:8e:bb:56:4d:50:1b:22:25:dc:20:9a:43:19: 80:f6:1d:e9:07:65:6e:c2:60:98:8e:13:2e:03:1b: 76:33:0c:92:d6:d4:4d:d8:87:08:15:29:98:37:1e: 4c:65:b7:d7:da:91:79:31:b8:17:70:21:2d:ee:99: e8:cd:9b:2b:ed:90:37:00:13:b8:74:63:30:ea:48: ff:92:b1:54:90:ed:53:46:d7:0b:83:00:a8:2e:49: 3a:69:1c:fa:5c:37:49:da:88:f0:75:a9:0d:ae:48: c4:41:66:97:f2:30:e8:71:5e:dd:21:bd:e9:c2:3f: 15:48:30:88:5c:8b:a2:5c:72:c2:6f:12:fd:5f:24: fc:be:fc:72:13:10:fc:68:ff:0c:c4:ef:cd:31:6f: 18:41:0d:81:28:66:f7:75:5a:bb:5b:a5:c4:4d:54: f6:1a:f4:9d:b2:84:0c:c5:1f:73:8f:48:2c:af:84: 92:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:7D:30:83:FD:8A:7C:D3:52:46:0B:C5:00:21:52:34:A2:05:3A:B9 X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:02:d4:5e:f3:44:60:70:83:dd:02:f3:c5:d1:75:39:4e:86: 84:40:a9:04:a0:2e:6d:de:a6:cb:79:ad:ff:1f:ae:51:f2:6d: 95:6b:cd:3b:87:34:1f:b4:65:a6:29:ea:ae:d6:39:ea:c6:70: 41:2a:ee:33:2b:df:dc:90:27:33:80:14:98:89:e9:b7:1f:f5: ab:14:13:0f:3a:9b:58:77:92:4e:f0:70:5f:67:15:64:9c:de: 8b:cc:f6:49:0c:a4:be:fd:06:d7:d0:1c:eb:81:c0:8e:c6:ab: 0a:4e:b4:c6:d0:96:9c:32:e5:dc:ea:a4:6d:88:b9:4c:0c:2c: df:99:78:1a:75:57:24:3c:e8:b0:ca:2f:c4:63:b1:e9:25:22: 85:6f:9a:5f:ea:d2:87:32:e0:ee:61:6a:53:a8:f1:d4:fd:f5: d5:73:90:70:45:d7:11:21:ba:ef:93:b2:af:83:7d:fa:9a:e6: 26:f2:a8:ea:1e:31:6d:c3:40:59:2e:38:04:62:7f:30:3f:5e: 2a:c2:4b:5f:78:50:0e:30:1f:0d:79:b1:8f:76:c6:b0:57:4f: e3:a0:02:ad:0d:17:51:cb:a5:60:8f:a6:c6:ff:3d:3f:ef:1a: 7b:3c:af:ab:07:00:2b:95:30:75:7f:86:8e:01:74:1f:4c:6e: e0:29:8c:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDfvMB1FTA4MH6bXmRCnYxWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjYwOTI2MjIwMTI0WhcNMjYwOTI3MjIwMTI0WjAzMTEwLwYDVQQD Eyg0ODdkMzA4M2ZkOGE3Y2QzNTI0NjBiYzUwMDIxNTIzNGEyMDUzYWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VayovU3CB2U1pJpOO7uq1xsjDMI vtI3sngOG0hhN7HRI05c2h4lP7VK6RBj+B2aMLNXpYGcFDg6UyVIybrjbkwMktXF euXlZhNMWY67Vk1QGyIl3CCaQxmA9h3pB2VuwmCYjhMuAxt2MwyS1tRN2IcIFSmY Nx5MZbfX2pF5MbgXcCEt7pnozZsr7ZA3ABO4dGMw6kj/krFUkO1TRtcLgwCoLkk6 aRz6XDdJ2ojwdakNrkjEQWaX8jDocV7dIb3pwj8VSDCIXIuiXHLCbxL9XyT8vvxy ExD8aP8MxO/NMW8YQQ2BKGb3dVq7W6XETVT2GvSdsoQMxR9zj0gsr4SSKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEh9MIP9inzTUkYLxQAhUjSiBTq5MB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfgLUXvNE YHCD3QLzxdF1OU6GhECpBKAubd6my3mt/x+uUfJtlWvNO4c0H7RlpinqrtY56sZw QSruMyvf3JAnM4AUmInptx/1qxQTDzqbWHeSTvBwX2cVZJzei8z2SQykvv0G19Ac 64HAjsarCk60xtCWnDLl3OqkbYi5TAws35l4GnVXJDzosMovxGOx6SUihW+aX+rS hzLg7mFqU6jx1P311XOQcEXXESG675Oyr4N9+prmJvKo6h4xbcNAWS44BGJ/MD9e KsJLX3hQDjAfDXmxj3bGsFdP46ACrQ0XUculYI+mxv89P+8aezyvqwcAK5UwdX+G jgF0H0xu4CmMNA== -----END CERTIFICATE-----Generated at Sun Sep 27 06:57:35 2026 by rpki-client