$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: i2nqX6XYDPqWBO0ISEIieCEqLJ1Ln6Y6as6jdDmm33Q= Subject key identifier: 40:F5:C8:7B:E2:53:B9:6A:09:57:55:CC:BA:60:5B:02:EE:3F:93:04 Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 01A0D501E2EA469341F00C755CDA218DDB0E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 1A74 Signing time: Thu 24 Sep 2026 20:01:05 +0000 Manifest this update: Thu 24 Sep 2026 20:01:05 +0000 Manifest next update: Fri 25 Sep 2026 20:01:05 +0000 Files and hashes: 1: 1ms-U7GStIQWyhBvk39Pmz4mWvA.roa (hash: lEZsZW9Tv4rbrMsSytyM2px+I6/78sknyWxeRiHKwJM=) 2: 465Kcfdz-gCkfuGZh8doO_u-oWc.roa (hash: +omro3YFQE2sJ1eByZhKP6jW3x+UZ2ptJKtI+7UVFM8=) 3: FudhY_GW4msTOukhgnBFXzVYoiM.roa (hash: 7UgC+06y5UTQvkQ9UgPJMOjARzvFFXEio5n7Jvg4z+k=) 4: HK6BNNsWSLGubaZl3upPyutswvU.roa (hash: WzFjY3CdZWeDvACOL+XKBEMBzEj0lVc25php/SCslcU=) 5: IBvfpHlo0nhBmzHxQLjSRpI2BSY.roa (hash: DAVNHApbGflPu1pSl2KrRTguzWmq2zUGW0dSw+3gnZ8=) 6: LTfWXRthcASup-DyG7vEDraK0EY.roa (hash: whp6f+y/ya/1LAvlaxCVtUimjkVrV3wXO989ASjx2UI=) 7: PUPZ5PDa_TnnNK5CKrAamkbA9qg.roa (hash: mlGNam5OVbUbnfHBcyzvj7iTYMgBLkQF8bhZoX4e0R8=) 8: XZ_A9oOFh615-GWf-jG9mLRl_BA.roa (hash: IjFd4KfJkkTKhVMOqjReLPHCLFxiAiN7OyTxurp0L6k=) 9: cqQ13TfAA2f3o1iYd5u_zHjR1og.roa (hash: PPVmtCcOrF5jhwXK7aADjsl4uaCgfyEm1Gbo+31zhCo=) 10: kCm_uKpWKjhNUczVOAQvBZ4TtMQ.roa (hash: S9J7ulFMDCXhT6uUyj2J+Qhp8QQOqTeuNdKWWsuYDSA=) 11: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: eaJX8LLI/dctjR9ezODRntajYtfhdQqM58JbOlKZu94=) 12: rEIw8icF5JeHNJs8hiRgw1rRnR0.roa (hash: ZktjBhuI012cqumaMif+o0oMdONZdwewIFYAJ7bf8FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 20:01:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d5:01:e2:ea:46:93:41:f0:0c:75:5c:da:21:8d:db:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Sep 24 20:01:05 2026 GMT Not After : Sep 25 20:01:05 2026 GMT Subject: CN=40f5c87be253b96a095755ccba605b02ee3f9304 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:77:73:d5:f9:90:65:c9:72:3f:15:23:9e:89: de:04:4e:cc:42:c9:56:8a:a2:cf:34:86:8f:2a:e8: 52:cb:77:40:42:50:b8:48:72:d8:15:63:49:b1:4b: 04:bb:79:53:fa:99:94:da:db:69:5e:50:cd:89:f9: 44:4a:fb:66:50:a9:cc:81:e9:84:9f:4b:f3:d4:7b: 8c:ec:7d:a4:d4:c9:3f:76:86:ac:4f:75:21:23:f7: 88:39:24:7f:ef:40:f3:5b:c6:e1:11:f5:38:e3:7a: 10:e7:88:66:54:81:19:a9:0c:77:83:a5:e9:b2:26: 10:83:68:0c:25:e8:17:3c:8e:21:0b:86:1e:02:fb: 89:da:ea:da:b4:ec:e5:61:53:ea:03:83:76:da:73: 1a:c1:2f:94:f2:c5:ea:7d:b7:10:ae:c3:65:1f:87: 3d:c7:b6:96:c5:fc:8a:f0:eb:64:4e:08:a0:59:99: f7:ab:82:60:c0:c5:b4:6a:7b:e6:87:f8:48:94:17: 00:14:d8:4e:00:31:9f:2f:9c:32:46:38:f0:46:f7: ee:39:8c:56:00:28:b0:df:37:af:67:12:6d:ad:af: 87:f2:db:05:35:f1:8d:3c:61:0e:13:73:7c:d0:bf: c5:9b:c2:53:f4:30:1e:90:40:29:99:e8:61:10:c3: 39:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:F5:C8:7B:E2:53:B9:6A:09:57:55:CC:BA:60:5B:02:EE:3F:93:04 X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:74:13:59:d6:93:bb:28:6f:6f:fe:07:11:3b:8c:e7:c4:96: ef:de:c3:c1:4d:42:bd:7b:6d:73:ca:c3:6b:01:68:94:a2:1b: 82:9b:55:e8:a1:3f:78:90:16:33:a8:9d:5e:9a:37:eb:33:07: d8:6b:27:4e:f1:46:0d:78:61:86:75:23:ed:19:a3:5d:5f:e4: 6f:38:2f:ec:e4:25:d0:1d:4a:b1:09:20:08:d0:c6:bc:4e:09: 9a:d3:89:82:64:6b:7d:c0:85:e0:1b:1a:6a:95:8c:21:39:09: b8:55:a4:20:82:a6:25:7c:74:0e:d2:73:03:f0:ee:25:e4:eb: 40:3d:e2:ab:6c:88:fa:35:9b:27:90:c0:8f:70:7b:00:29:d4: 34:1e:14:35:98:24:42:32:22:2d:45:ab:60:86:d0:5e:e5:0d: d1:fc:8b:3b:19:96:c6:13:6f:21:91:19:15:04:dc:c1:30:75: f1:cf:8f:ee:26:bb:ea:7a:2c:7f:46:cd:ec:0a:32:90:2c:ea: bd:5d:b9:8a:6f:5d:6b:48:c5:4b:9b:58:f8:b6:1e:57:d1:a7: 9b:fc:b7:54:d0:da:9b:2a:b9:60:00:ee:6d:de:f0:5b:32:01: 87:51:2e:cb:6d:24:84:0e:10:b3:e8:f4:14:5d:90:32:69:c1: 30:2d:47:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDVAeLqRpNB8Ax1XNohjdsOMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjYwOTI0MjAwMTA1WhcNMjYwOTI1MjAwMTA1WjAzMTEwLwYDVQQD Eyg0MGY1Yzg3YmUyNTNiOTZhMDk1NzU1Y2NiYTYwNWIwMmVlM2Y5MzA0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHdz1fmQZclyPxUjnoneBE7MQslW iqLPNIaPKuhSy3dAQlC4SHLYFWNJsUsEu3lT+pmU2ttpXlDNiflESvtmUKnMgemE n0vz1HuM7H2k1Mk/doasT3UhI/eIOSR/70DzW8bhEfU443oQ54hmVIEZqQx3g6Xp siYQg2gMJegXPI4hC4YeAvuJ2uratOzlYVPqA4N22nMawS+U8sXqfbcQrsNlH4c9 x7aWxfyK8OtkTgigWZn3q4JgwMW0anvmh/hIlBcAFNhOADGfL5wyRjjwRvfuOYxW ACiw3zevZxJtra+H8tsFNfGNPGEOE3N80L/Fm8JT9DAekEApmehhEMM5gQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFED1yHviU7lqCVdVzLpgWwLuP5MEMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC3QTWdaT uyhvb/4HETuM58SW797DwU1CvXttc8rDawFolKIbgptV6KE/eJAWM6idXpo36zMH 2GsnTvFGDXhhhnUj7RmjXV/kbzgv7OQl0B1KsQkgCNDGvE4JmtOJgmRrfcCF4Bsa apWMITkJuFWkIIKmJXx0DtJzA/DuJeTrQD3iq2yI+jWbJ5DAj3B7ACnUNB4UNZgk QjIiLUWrYIbQXuUN0fyLOxmWxhNvIZEZFQTcwTB18c+P7ia76nosf0bN7AoykCzq vV25im9da0jFS5tY+LYeV9Gnm/y3VNDamyq5YADubd7wWzIBh1Euy20khA4Qs+j0 FF2QMmnBMC1H0Q== -----END CERTIFICATE-----Generated at Fri Sep 25 06:28:06 2026 by rpki-client