$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft File: 1YghK_XazhCA3EXixVuS_4XGwZI.mft (raw, json) Hash identifier: xzpJ0teI9JCB2HibJAWoNhfxNcpH528XEcgidZqxyaQ= Subject key identifier: D2:7F:4E:EA:A7:F2:00:61:2A:93:0E:7F:A0:A3:00:4E:59:F7:CA:6E Authority key identifier: D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 Certificate issuer: /CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Certificate serial: 01A0CE2467942D557C9DB8B2DDB53610B120 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft Manifest number: 0675 Signing time: Wed 23 Sep 2026 12:01:27 +0000 Manifest this update: Wed 23 Sep 2026 12:01:27 +0000 Manifest next update: Thu 24 Sep 2026 12:01:27 +0000 Files and hashes: 1: 1YghK_XazhCA3EXixVuS_4XGwZI.crl (hash: 2IsLg0JjllJkMdRBmRdE7X3t/7U0zN9IF6gC+tws/O0=) 2: 22x8PN_1LTHR6l66GpUqyti_zA0.roa (hash: CSv7c1XejVckeMl+4KVZ0R5JwTwo6hy/rgUnKWrc8iE=) 3: JsDV0JgNIJsN-ibYdgtSHoMxIvw.roa (hash: cHo9xyUEk2HyEiBCUp1r4usf+4Crk42MuHgQ//gFieE=) 4: MN6U3VW42sb0OVdqBMcLBJ2g2zU.roa (hash: PPnAC3azWQhKiDxnnjOYt4M14J8iF87kO3d2yUA8Kfw=) 5: YbKvoesrYXHEmFEjcVByq5eynzo.roa (hash: +DYa+fe9egpPIsRsJIXZUMAsEnq8jTNkWLMhIYMd4Q8=) 6: byQ1yszhOcZFFPh_Y5AKBXMFwMw.roa (hash: b7qP0sl3+othoRFTec+oydZ8N3Jq1XUmt+VOT3v3hnY=) 7: gC5ojAbS6z97a05sXClJSkkJk3w.roa (hash: laV5VTUScUMrKJ3a9qdAMd2Oli3d8tpx9cRZCqQwMls=) 8: kHP0M6fVan_dV2bdSXbsBdJ27pU.roa (hash: z5ajzgWdArm34wD+Vi31zXSHcWy5YvyidurL0SZHcbU=) 9: snHZlA_rMzA-GJtkANTKKKsjJms.roa (hash: wWUHeupDm38JL23SWCuEwKVQP7+CZz4/f+h6ttaySF4=) 10: tIWBDaq4vNzJLG3YFrMngR6UjEI.roa (hash: 4zzhkvUoZZB4cgAYHJR/34Gu96Vut755O0lj9l2/tWQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ce:24:67:94:2d:55:7c:9d:b8:b2:dd:b5:36:10:b1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d588212bf5dace1080dc45e2c55b92ff85c6c192 Validity Not Before: Sep 23 12:01:27 2026 GMT Not After : Sep 24 12:01:27 2026 GMT Subject: CN=d27f4eeaa7f200612a930e7fa0a3004e59f7ca6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:d5:4f:a5:6f:1d:85:d9:40:d3:65:89:ff:a2: bd:e9:da:14:c9:59:ca:94:69:c7:60:42:8c:bd:ac: 64:6a:47:a1:ed:9b:17:48:f0:7e:3d:88:da:2f:8c: ba:a5:e4:e2:84:e5:b3:fd:15:68:96:b0:92:50:c7: f1:81:86:7a:5e:3d:7e:1c:a1:9f:2d:a9:ad:f2:62: df:45:85:ea:d7:e1:e9:a8:cc:0b:62:5a:b5:ef:a4: 22:0f:3f:c7:fb:1a:34:bb:03:a9:a6:1e:9c:b3:e2: 15:a7:f9:fb:8e:a9:fe:e9:bd:cf:8a:44:5c:1f:fd: af:c4:70:f8:48:75:3c:5c:e7:44:f5:d9:a8:ba:05: 62:3f:d0:da:b5:30:0b:01:0d:05:86:c1:d3:33:fb: 40:28:51:63:38:85:9e:5e:0e:2c:17:8f:85:50:70: ea:6e:7e:2e:34:78:5b:a5:03:d7:7c:3a:15:ff:63: 44:63:8a:f2:51:83:cd:11:59:2b:29:81:74:c8:16: 59:ad:21:93:a7:8d:7c:a2:13:24:9b:0e:60:59:b1: 41:6f:c6:7e:d2:d8:af:dc:14:66:30:65:8c:f0:0f: 2c:96:2c:e4:6c:21:70:c0:c3:0e:38:a8:eb:c2:06: 72:94:43:b8:28:7e:8f:3c:25:e3:de:a6:19:13:73: 12:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:7F:4E:EA:A7:F2:00:61:2A:93:0E:7F:A0:A3:00:4E:59:F7:CA:6E X509v3 Authority Key Identifier: keyid:D5:88:21:2B:F5:DA:CE:10:80:DC:45:E2:C5:5B:92:FF:85:C6:C1:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1YghK_XazhCA3EXixVuS_4XGwZI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/211354-ebe4-4797-98f3-1b2ac35c09aa/1/1YghK_XazhCA3EXixVuS_4XGwZI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a6:50:be:ca:fb:e1:1d:96:1c:d8:62:d0:26:55:ab:3c:30: f9:32:89:83:db:f5:bc:d8:6a:ba:3f:0a:59:47:62:71:09:18: a7:27:e5:99:86:c1:59:19:0c:fe:0d:83:ca:e1:33:df:92:a6: 8c:16:54:81:01:f8:da:e4:8a:52:69:2d:a1:ee:06:da:81:4f: 6b:69:ae:60:30:01:6f:d5:bc:eb:e6:57:8c:86:20:e3:bc:77: 86:3d:0d:4e:ce:b4:ec:3f:90:be:ed:e7:fc:e2:81:e5:49:ab: 2e:0e:94:e9:d0:af:07:92:a3:10:e1:7b:a4:70:0b:db:d2:10: f4:fc:b5:80:08:4d:3d:3d:44:17:ec:24:aa:5e:92:bc:8c:e2: 76:7b:84:25:65:51:3f:69:64:9e:eb:1d:a0:ff:62:7f:84:42: 49:31:e9:17:f2:fc:2b:17:c4:59:89:0d:dc:06:e0:d0:92:1d: 15:12:3b:03:5a:8f:1d:f3:e2:b0:26:19:77:50:66:4c:22:be: 7d:92:11:b2:a4:0a:8f:a6:16:06:85:ff:cb:05:48:8e:32:be: 04:49:07:ba:66:11:db:9d:c0:cd:5b:04:2a:1c:0d:3e:77:d8: 8d:8f:b9:30:74:35:a9:56:63:15:8b:d5:9b:17:fa:80:04:6a: f7:2d:66:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDOJGeULVV8nbiy3bU2ELEgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1ODgyMTJiZjVkYWNlMTA4MGRjNDVlMmM1NWI5MmZmODVj NmMxOTIwHhcNMjYwOTIzMTIwMTI3WhcNMjYwOTI0MTIwMTI3WjAzMTEwLwYDVQQD EyhkMjdmNGVlYWE3ZjIwMDYxMmE5MzBlN2ZhMGEzMDA0ZTU5ZjdjYTZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNVPpW8dhdlA02WJ/6K96doUyVnK lGnHYEKMvaxkakeh7ZsXSPB+PYjaL4y6peTihOWz/RVolrCSUMfxgYZ6Xj1+HKGf Lamt8mLfRYXq1+HpqMwLYlq176QiDz/H+xo0uwOpph6cs+IVp/n7jqn+6b3PikRc H/2vxHD4SHU8XOdE9dmougViP9DatTALAQ0FhsHTM/tAKFFjOIWeXg4sF4+FUHDq bn4uNHhbpQPXfDoV/2NEY4ryUYPNEVkrKYF0yBZZrSGTp418ohMkmw5gWbFBb8Z+ 0tiv3BRmMGWM8A8slizkbCFwwMMOOKjrwgZylEO4KH6PPCXj3qYZE3MS+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJ/Tuqn8gBhKpMOf6CjAE5Z98puMB8GA1UdIwQY MBaAFNWIISv12s4QgNxF4sVbkv+FxsGSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMt MWIyYWMzNWMwOWFhLzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Zi8yMTEzNTQtZWJlNC00Nzk3LTk4ZjMtMWIyYWMzNWMwOWFh LzEvMVlnaEtfWGF6aENBM0VYaXhWdVNfNFhHd1pJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhqZQvsr7 4R2WHNhi0CZVqzww+TKJg9v1vNhquj8KWUdicQkYpyflmYbBWRkM/g2DyuEz35Km jBZUgQH42uSKUmktoe4G2oFPa2muYDABb9W86+ZXjIYg47x3hj0NTs607D+Qvu3n /OKB5UmrLg6U6dCvB5KjEOF7pHAL29IQ9Py1gAhNPT1EF+wkql6SvIzidnuEJWVR P2lknusdoP9if4RCSTHpF/L8KxfEWYkN3Abg0JIdFRI7A1qPHfPisCYZd1BmTCK+ fZIRsqQKj6YWBoX/ywVIjjK+BEkHumYR253AzVsEKhwNPnfYjY+5MHQ1qVZjFYvV mxf6gARq9y1mEw== -----END CERTIFICATE-----Generated at Wed Sep 23 16:59:59 2026 by rpki-client