$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft File: C1Vqy187lhtcwkoplfNO6R953BY.mft (raw, json) Hash identifier: /kabu+Gx8frmbV5OhkT+vRGmOU7Vk9O8kzkXg8wp5jY= Subject key identifier: B1:13:D4:91:7F:32:B6:F8:3B:EC:92:F5:7A:8F:D5:39:57:1C:32:EC Authority key identifier: 0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 Certificate issuer: /CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Certificate serial: 01A0CE5A4E660F88E0CF110971D904F5DFBB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft Manifest number: 1AC1 Signing time: Wed 23 Sep 2026 13:00:19 +0000 Manifest this update: Wed 23 Sep 2026 13:00:19 +0000 Manifest next update: Thu 24 Sep 2026 13:00:19 +0000 Files and hashes: 1: 7drmdAJ15T6i4kYe-A_swxHC8nI.roa (hash: C5PISbRvWJUbWPnFcmcDWqyhXX2b1jPQLRXD9uyapnM=) 2: C1Vqy187lhtcwkoplfNO6R953BY.crl (hash: QRx6B6CNXIYJ7RnhKjnmV5K4/Phq17ceFbQko9NhReY=) 3: Ot4Snb7Zi4C3emPyzdbqir7P8wg.roa (hash: 5vVU8CpinnMNDApjLeGdIl2Z5WpD2a99HQpSOKcpVyA=) 4: _qBNAwK4OK7Gc8Mq1Ci80h09-HY.roa (hash: t56c+2Ht/FaNSMyC1mKhu0HZAUXfDcSUi9DNTN8F9N8=) 5: anqzHj_RBxYK0oKafgD2zP99QsI.roa (hash: ERFHbW67bqTT3uEBCgeFptdUh/X+KRt4341hnCHBYhg=) 6: k2VMFVozqPnYzXV1s0yW14brgu0.roa (hash: iUK8Oo0pMp3EC1NmFi93MB7dSsN9F4/PHcovJ6wIZ64=) 7: kQ0io2PNAP5BY8r7GxffYcQFx9o.roa (hash: 3jWAN8RtvcrXSZtLqgReLIQU9lIS3iNu48aFnlNqCkE=) 8: mkpUVZc-vUGm02tucPpx4ITb8yc.roa (hash: 7oJEAu9SY+cshxiGPE3FgFiCATL9zFHbwSfgmHPiX+8=) 9: n8t_q3ldutHBa0_a23qWau6GJNo.roa (hash: GdNo1IC/sCy6tUXdUa/SUF/nLxc231ClZF6UXGBynLY=) 10: qEghLoN1iiF0goU1gVxwFrySfFg.roa (hash: 3jYy81C5LnlKfMQ1I0vpC9e8jd+RkWb8kU2Np75bx8o=) 11: v4-hkrmpo-sqeCMeJ_vYE4rWpjo.roa (hash: 0SUNe2XwpLFI11Ihhq2d2WPppOz2Dt6w1G3PnhDPFVg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 13:00:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ce:5a:4e:66:0f:88:e0:cf:11:09:71:d9:04:f5:df:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0b556acb5f3b961b5cc24a2995f34ee91f79dc16 Validity Not Before: Sep 23 13:00:19 2026 GMT Not After : Sep 24 13:00:19 2026 GMT Subject: CN=b113d4917f32b6f83bec92f57a8fd539571c32ec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:17:ac:94:b9:8d:f3:ff:a9:12:d7:3a:a2: 11:be:63:94:d6:fc:d9:cc:af:d8:2e:e8:a7:c0:52: ba:aa:85:33:e8:b2:46:3e:6c:3a:d4:4d:f0:ff:9f: 99:48:e4:24:83:ae:2a:92:62:bb:20:77:86:bb:12: 50:56:72:95:cd:7d:fa:c6:7a:7a:4c:f4:19:02:e6: 13:5b:ed:08:9f:f4:85:0a:c6:7b:dc:6b:ad:74:a2: 3a:a5:e2:c7:3d:18:83:72:31:bd:ca:1c:c2:8c:cb: c7:dc:ec:fa:c4:d5:82:10:e7:63:38:b2:92:d7:e8: f4:16:1a:2d:26:a5:91:bd:4f:f7:df:ab:5d:1a:39: 8e:36:1b:e6:aa:ca:86:49:e9:3e:b5:d5:93:bf:58: ab:3b:a2:64:1f:81:ef:33:85:fc:c2:2f:d9:58:51: 94:b3:e0:cc:35:19:f8:db:10:e1:90:ce:45:cb:9c: 30:9e:8c:03:93:53:b8:80:5b:07:43:36:f6:ac:f9: de:50:3e:0b:c8:c4:15:46:63:65:68:bf:48:21:f3: 5a:c1:52:ec:ef:39:3e:b1:60:82:e3:6a:44:d5:ed: c5:63:0b:60:53:9a:b9:98:bf:86:25:ed:ec:dc:98: 92:51:ea:a7:fd:ed:53:32:9a:8e:2f:ff:cf:f8:40: 6d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:13:D4:91:7F:32:B6:F8:3B:EC:92:F5:7A:8F:D5:39:57:1C:32:EC X509v3 Authority Key Identifier: keyid:0B:55:6A:CB:5F:3B:96:1B:5C:C2:4A:29:95:F3:4E:E9:1F:79:DC:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C1Vqy187lhtcwkoplfNO6R953BY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/829fdf-ba63-4c23-91d1-d2bbf37dabb4/1/C1Vqy187lhtcwkoplfNO6R953BY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:eb:50:ba:01:e3:3e:76:f4:b5:53:4a:45:8c:3c:6e:37:c2: 9c:d1:ea:b6:2f:2d:a2:fd:d2:ae:58:e1:2e:13:2e:5d:6a:4f: 38:6c:aa:62:69:b4:03:57:a5:ca:29:91:e3:ba:4e:5e:1c:fe: 7a:c1:be:77:07:b6:f9:19:92:ff:a1:d8:f8:76:ae:ce:1a:d0: fb:54:b1:99:91:d7:74:b1:83:ea:7e:81:41:ac:8e:f1:97:32: 4f:33:8d:86:20:96:5a:ea:85:e5:48:92:e4:39:91:fc:19:ba: bb:c7:b4:13:57:5f:44:5a:28:12:cf:b7:f9:b4:6b:83:33:ef: 25:9a:c9:66:09:16:fa:25:ce:b3:03:54:df:b4:2f:ad:7d:24: 20:9c:b0:f5:e3:ec:ca:6d:3f:c4:9e:74:65:d5:f6:a9:b7:35: 62:bc:9d:b6:3f:7e:b4:cb:02:2e:c2:e7:97:73:63:38:d2:9b: d5:e3:de:f0:78:34:33:84:4b:63:35:2b:60:38:e0:bb:28:3e: ae:77:e9:04:b0:96:91:e0:69:52:a3:b9:d2:fd:e6:0b:8a:8e: 26:ff:69:01:a8:5e:34:51:93:cf:2b:0f:7b:bb:d9:1a:f5:43: c4:35:3d:d2:f1:4d:13:e8:30:f9:b7:5d:6f:fa:82:f6:ba:d6: 49:91:d6:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDOWk5mD4jgzxEJcdkE9d+7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBiNTU2YWNiNWYzYjk2MWI1Y2MyNGEyOTk1ZjM0ZWU5MWY3 OWRjMTYwHhcNMjYwOTIzMTMwMDE5WhcNMjYwOTI0MTMwMDE5WjAzMTEwLwYDVQQD EyhiMTEzZDQ5MTdmMzJiNmY4M2JlYzkyZjU3YThmZDUzOTU3MWMzMmVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyoXrJS5jfP/qRLXOqIRvmOU1vzZ zK/YLuinwFK6qoUz6LJGPmw61E3w/5+ZSOQkg64qkmK7IHeGuxJQVnKVzX36xnp6 TPQZAuYTW+0In/SFCsZ73GutdKI6peLHPRiDcjG9yhzCjMvH3Oz6xNWCEOdjOLKS 1+j0FhotJqWRvU/336tdGjmONhvmqsqGSek+tdWTv1irO6JkH4HvM4X8wi/ZWFGU s+DMNRn42xDhkM5Fy5wwnowDk1O4gFsHQzb2rPneUD4LyMQVRmNlaL9IIfNawVLs 7zk+sWCC42pE1e3FYwtgU5q5mL+GJe3s3JiSUeqn/e1TMpqOL//P+EBtSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLET1JF/Mrb4O+yS9XqP1TlXHDLsMB8GA1UdIwQY MBaAFAtVastfO5YbXMJKKZXzTukfedwWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEt ZDJiYmYzN2RhYmI0LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS84MjlmZGYtYmE2My00YzIzLTkxZDEtZDJiYmYzN2RhYmI0 LzEvQzFWcXkxODdsaHRjd2tvcGxmTk82Ujk1M0JZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApetQugHj Pnb0tVNKRYw8bjfCnNHqti8tov3SrljhLhMuXWpPOGyqYmm0A1elyimR47pOXhz+ esG+dwe2+RmS/6HY+HauzhrQ+1SxmZHXdLGD6n6BQayO8ZcyTzONhiCWWuqF5UiS 5DmR/Bm6u8e0E1dfRFooEs+3+bRrgzPvJZrJZgkW+iXOswNU37QvrX0kIJyw9ePs ym0/xJ50ZdX2qbc1Yrydtj9+tMsCLsLnl3NjONKb1ePe8Hg0M4RLYzUrYDjguyg+ rnfpBLCWkeBpUqO50v3mC4qOJv9pAaheNFGTzysPe7vZGvVDxDU90vFNE+gw+bdd b/qC9rrWSZHW8g== -----END CERTIFICATE-----Generated at Wed Sep 23 23:19:38 2026 by rpki-client