$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: tEai6rG9oozNmCOU12Yv69fwdGdeGbPC8SjZaYTOh/E= Subject key identifier: 7D:A0:15:00:53:18:5A:01:77:D1:47:A4:E3:EF:0E:E0:33:A0:A1:B4 Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 01A0EF2FAEAD06E7F1EA45EC98539438DCF6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 1A83 Signing time: Tue 29 Sep 2026 22:01:14 +0000 Manifest this update: Tue 29 Sep 2026 22:01:14 +0000 Manifest next update: Wed 30 Sep 2026 22:01:14 +0000 Files and hashes: 1: 1-ccn--iq_ToEq-Oamkl9Luwspkc.roa (hash: +u0oyCBAW71aNY4BwmQ52QOilFQebxXv8bzootxTVNU=) 2: 5MS9Zy98YuF3Bcrl6mc6yIWJ4-M.roa (hash: b+PbHQ1e20uIzoz27PMH3G/dgeCEzPhT1xUbwe84ub8=) 3: 863a8A9lI1u9XrhUEHNCbgA_EM4.roa (hash: s8aH9qc4ALlhdIevLKorthvT27qew3YZnY2zui2yIks=) 4: 95n53MPAl62Bp8gdAx6GUcBNH6s.roa (hash: SFJj356Hap+M3guGi+p9KYnj5vkCtgLdD7PsVKZ7QL0=) 5: Adh10SfAMsK7XIENnMUTzkYMUd0.roa (hash: s24oidV66DuvBTW7O6p2t70lzMwu9lbI3jK2mIwlhKs=) 6: JiUg0kU1PSuNHKsUA2KSNScv8s8.roa (hash: 3ZAQiyyrgoPYw51cxNpeaspKkodxmry7TXFI3ERIuNE=) 7: QviPBhLr-CXgt9EbTIrGj_yt3o0.roa (hash: A2iZoqo4X/JrmbpOlsLJJidbfz0mL9O7JboFIKE1auY=) 8: n2rh1sLNAvS8TApOyLLtUmfkJtk.roa (hash: YnymBYUK6ZS+GcYBXKPIPAN5Vh2ciMW3IvH4r+uuS68=) 9: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: 1aoj9FI3hXbnJFWgWTwJC5ZTqo3yvxfCsRMsMHQvaj4=) 10: qC9TRPDEBU4tH34KGCdE-GtaQVo.roa (hash: x+3EdF/VTAf945Szb8jBK7kDYlIbSVdzVeYTbe6GNVk=) 11: vyNX_G3sd7VABBUb1_l_0mQ1seo.roa (hash: MzK7zdnu+4qWNgnGDp5G7j7MAy7ijjxyFcd9B9ucLvU=) 12: wKCBiDDf1e8BicVavixrgdQZibE.roa (hash: MHYVnslYQOZS9IPfWLJkmMuhLwMjuzTKosW1ejMPRAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 17:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ef:2f:ae:ad:06:e7:f1:ea:45:ec:98:53:94:38:dc:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Sep 29 22:01:14 2026 GMT Not After : Sep 30 22:01:14 2026 GMT Subject: CN=7da0150053185a0177d147a4e3ef0ee033a0a1b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e1:04:ce:23:36:34:61:89:da:1e:20:d5:30: be:a8:c3:c7:f1:82:ba:93:ad:7b:0a:ee:b6:77:35: 3d:ac:b0:8c:d8:4a:d1:cb:ec:cf:31:e1:98:19:de: 7e:62:53:f5:b8:b1:55:a8:ba:fa:e1:f4:ee:e7:89: 14:1a:71:75:5a:f1:4a:c2:47:c4:09:69:f7:53:e4: 6e:c1:ec:9c:a0:6e:73:24:55:39:2a:e3:a5:c0:a2: da:e4:2a:ee:85:e6:10:07:f1:ad:a5:c2:00:fc:6a: 4d:e2:26:f4:71:70:d2:03:86:43:2e:c3:44:69:e8: 82:43:82:41:fb:83:b8:77:a0:43:93:e0:e6:12:fb: ed:06:ad:de:f0:1e:66:99:6b:76:54:72:0f:09:54: a1:af:16:8d:71:08:86:7b:95:2d:71:27:b5:4a:eb: 2a:63:1c:af:32:78:2c:8e:fd:84:09:2a:4a:db:55: ab:35:69:eb:7e:62:f5:c6:cb:4c:97:38:9d:8e:30: 5f:90:98:70:f4:6c:74:35:b7:a4:bd:a2:0b:7f:3d: 11:f0:43:f6:f4:20:13:c0:12:7f:12:da:2c:55:91: 20:1c:55:da:01:65:9d:c1:ca:32:07:b6:62:f9:f4: 60:ae:4d:73:a2:a7:b5:d5:93:23:aa:e7:9b:5e:a4: 76:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A0:15:00:53:18:5A:01:77:D1:47:A4:E3:EF:0E:E0:33:A0:A1:B4 X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:01:54:41:37:fb:86:8d:31:af:93:a2:55:d8:52:eb:66:62: 36:42:d1:47:21:a6:1d:a4:e5:84:00:59:02:f2:e1:19:2a:53: 95:de:01:6a:e0:7a:13:27:c4:9b:2d:ee:b5:ca:05:81:62:9b: 8a:3b:aa:37:d7:3a:e0:59:f8:4a:92:25:79:a2:b3:9d:06:29: 32:5c:e0:10:32:ee:4b:71:c2:a0:7b:7f:78:95:37:59:f7:83: c4:30:6b:c0:fc:21:3b:bc:4c:a1:21:f9:c4:7a:74:d8:7b:56: 24:75:1b:9f:12:0f:20:d3:db:27:2e:7e:bd:06:e2:89:38:c4: ce:4f:58:2c:52:45:5a:06:16:7f:60:e4:44:8d:84:c1:93:85: 35:66:02:3a:2e:c6:a1:30:8d:f3:e8:42:b9:dc:55:53:e6:43: 8f:81:d9:0e:7d:8f:07:65:14:b1:e7:fb:1b:83:b5:00:89:37: 83:63:19:9d:6f:59:13:96:01:3a:09:65:82:82:25:03:83:50: a7:c2:a9:9b:1b:02:8e:ec:ea:b1:06:c6:e6:71:ef:ec:35:de: 8e:ca:c0:9e:65:9e:9a:e6:76:92:1e:0d:bd:36:9d:79:fd:ca: 85:0c:5a:79:3c:c1:60:63:03:2c:43:14:26:ea:b0:e7:b1:28: 55:2b:47:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDvL66tBufx6kXsmFOUONz2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjYwOTI5MjIwMTE0WhcNMjYwOTMwMjIwMTE0WjAzMTEwLwYDVQQD Eyg3ZGEwMTUwMDUzMTg1YTAxNzdkMTQ3YTRlM2VmMGVlMDMzYTBhMWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeEEziM2NGGJ2h4g1TC+qMPH8YK6 k617Cu62dzU9rLCM2ErRy+zPMeGYGd5+YlP1uLFVqLr64fTu54kUGnF1WvFKwkfE CWn3U+RuweycoG5zJFU5KuOlwKLa5CruheYQB/GtpcIA/GpN4ib0cXDSA4ZDLsNE aeiCQ4JB+4O4d6BDk+DmEvvtBq3e8B5mmWt2VHIPCVShrxaNcQiGe5UtcSe1Susq YxyvMngsjv2ECSpK21WrNWnrfmL1xstMlzidjjBfkJhw9Gx0NbekvaILfz0R8EP2 9CATwBJ/EtosVZEgHFXaAWWdwcoyB7Zi+fRgrk1zoqe11ZMjquebXqR2uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH2gFQBTGFoBd9FHpOPvDuAzoKG0MB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArgFUQTf7 ho0xr5OiVdhS62ZiNkLRRyGmHaTlhABZAvLhGSpTld4BauB6EyfEmy3utcoFgWKb ijuqN9c64Fn4SpIleaKznQYpMlzgEDLuS3HCoHt/eJU3WfeDxDBrwPwhO7xMoSH5 xHp02HtWJHUbnxIPINPbJy5+vQbiiTjEzk9YLFJFWgYWf2DkRI2EwZOFNWYCOi7G oTCN8+hCudxVU+ZDj4HZDn2PB2UUsef7G4O1AIk3g2MZnW9ZE5YBOgllgoIlA4NQ p8KpmxsCjuzqsQbG5nHv7DXejsrAnmWemuZ2kh4NvTadef3KhQxaeTzBYGMDLEMU Juqw57EoVStH6g== -----END CERTIFICATE-----Generated at Wed Sep 30 05:02:19 2026 by rpki-client