$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: i+E2Z4j19Q2N58TMLk8QO5CynolqByOEdKw9TM4crng= Subject key identifier: 91:4F:4D:70:8E:5B:7E:79:06:89:62:53:DC:49:FE:25:07:D3:1E:4C Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 01A0E7AE82D625E9872F64CAA6E1382DF99B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 1C9F Signing time: Mon 28 Sep 2026 11:02:48 +0000 Manifest this update: Mon 28 Sep 2026 11:02:48 +0000 Manifest next update: Tue 29 Sep 2026 11:02:48 +0000 Files and hashes: 1: BheGXFkBifoYTh6TueqxOEyOs-s.roa (hash: LDgWozy8wmcMMsdbbi10Neqvku20kgLBvbOhauQzJ/E=) 2: J_Rao8XwSdeJowVZJOukzjb5984.roa (hash: yc7C55kPwJyA/Z9JdP2AgmYSU/kuUpvqz2WUy55f12A=) 3: XQN2PVO2BIAMkSThT7E-pns5qnM.roa (hash: Y7XQgYH+9nwgMwtIh2gFs5Ndo5hynElaRlQj0CaAZEk=) 4: a6Erf_tnT8pMndq3WnrW7H4B990.roa (hash: 9x4c63CxJ5UoigQePJxkpntm40rkErQOAY2jQ4vUfMc=) 5: bsp6BDSIWkrxR6u3xicw9RBKbtM.roa (hash: KBNbBNVVMKDz24iMEiDHeH6Ud37u/sKie2hM0HuZtdo=) 6: h9g_PYMZuLeSljFMXLDLfTUsqxc.roa (hash: dttrOUO+v4KY515NCQvb1Vqt92zL71t/i+3OWHk84Zc=) 7: knLrELnamRbYKI_hmZ4VPtqQHec.roa (hash: KpZhnOp+uvDR1vqjA12HnP6hCAQUJOuMRCA2L33u3s8=) 8: nSsMIk4gWxbIeigyP816DLKTC4A.roa (hash: ZUWSLLXlJsJEXgJ0xzJruxVtWPFtV5scS2gIX9A4Cdg=) 9: rJ0KQpCJ2q9Iu2VaR9rbdD7pQrE.roa (hash: ZsARQdUofsJUezwT8h2OoSjlo0PYxXFJvHqyfmrbm74=) 10: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: LijphQAsBknz5Ww51wSNYAgR/b3jdQk4AoxnW85DDoI=) 11: u7w1cEYTaI2DzzWQmZyLzaqM5sY.roa (hash: wFc0fj1o5uFkbtmZ4aVopMpmQGltmvAuiMNJULyr7/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 08:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e7:ae:82:d6:25:e9:87:2f:64:ca:a6:e1:38:2d:f9:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Sep 28 11:02:48 2026 GMT Not After : Sep 29 11:02:48 2026 GMT Subject: CN=914f4d708e5b7e7906896253dc49fe2507d31e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:94:ee:0e:7e:8e:c2:46:64:15:60:c2:e7:54: de:05:45:3d:9e:e1:d3:3f:29:79:55:21:17:a8:2b: a0:f6:15:29:64:b9:77:8a:07:56:fc:23:bf:04:4d: c2:d6:41:96:d2:72:1f:26:25:21:d3:7a:27:c9:9c: 8e:83:ff:98:38:d8:1c:10:e4:9c:38:3f:f5:16:4e: 4e:a6:eb:fc:6e:71:45:8d:11:c7:53:27:9a:58:6d: 0a:d0:7f:48:43:aa:98:88:aa:79:fe:c9:50:e3:0d: 2d:87:0b:c2:20:95:e5:7f:32:14:81:6a:b5:51:f0: 8e:3e:e2:d1:67:9b:d3:d1:ad:5a:a4:b1:30:f8:86: e0:41:fc:92:ee:67:92:a2:ba:cb:13:eb:53:f3:55: 9e:31:14:46:ff:83:e4:05:43:40:2e:4a:c9:aa:91: 80:d9:8e:bc:6f:16:2e:ee:a3:de:97:e5:59:23:a9: d6:80:6a:43:a0:1e:ff:09:6b:3c:9f:97:44:b7:4b: 79:89:80:70:b1:30:0a:49:de:1e:3d:07:95:f5:91: e3:2a:12:92:6e:0c:e2:59:ba:27:82:65:e7:bc:1d: 3f:fc:c6:ce:cf:d7:1d:28:33:a7:19:3d:90:be:a6: 50:de:65:64:9a:c5:e9:d6:84:13:a8:eb:e8:37:6e: 1b:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:4F:4D:70:8E:5B:7E:79:06:89:62:53:DC:49:FE:25:07:D3:1E:4C X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:8a:b7:ce:05:21:57:db:7a:dd:fa:d7:6a:c1:76:9b:77:9a: 1b:2a:4c:1b:08:c2:42:aa:12:bb:70:33:b2:a6:ad:f3:9b:84: 00:60:7b:22:25:1f:94:9b:88:bf:35:63:13:43:38:21:2d:91: af:80:30:96:f9:19:a8:4c:dd:16:b7:fd:4e:26:97:1e:53:08: 60:79:57:09:d0:38:29:e6:c5:f8:8b:92:29:7c:70:e8:60:d4: ae:66:1b:c1:bc:e5:f8:ba:d8:66:0d:8d:bc:43:c7:6d:10:ae: ab:a2:01:90:a4:89:1e:27:e0:37:69:90:65:fd:b8:b6:d8:15: 5e:db:58:bc:db:3c:ba:74:81:be:3f:17:21:eb:e0:cc:7d:e0: 3c:53:1b:b5:58:a7:23:a2:bd:07:d8:ec:c7:27:47:9c:23:67: f5:ad:a9:38:c0:67:49:d6:64:83:73:3e:37:17:f5:4e:a5:ab: bd:eb:5c:41:10:7d:19:cf:ed:24:2f:22:3e:53:1d:84:7c:05: c2:f3:a8:0f:41:e8:1e:50:66:37:51:b7:81:c0:44:df:ab:01: 96:cd:38:f5:76:44:e2:a1:b6:56:f0:6a:94:d8:0d:79:7f:cd: f7:73:bd:34:de:05:57:d4:8c:ea:8a:40:65:d5:35:e9:2c:d4: 99:9a:ca:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDnroLWJemHL2TKpuE4LfmbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYwOTI4MTEwMjQ4WhcNMjYwOTI5MTEwMjQ4WjAzMTEwLwYDVQQD Eyg5MTRmNGQ3MDhlNWI3ZTc5MDY4OTYyNTNkYzQ5ZmUyNTA3ZDMxZTRjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZTuDn6OwkZkFWDC51TeBUU9nuHT Pyl5VSEXqCug9hUpZLl3igdW/CO/BE3C1kGW0nIfJiUh03onyZyOg/+YONgcEOSc OD/1Fk5Opuv8bnFFjRHHUyeaWG0K0H9IQ6qYiKp5/slQ4w0thwvCIJXlfzIUgWq1 UfCOPuLRZ5vT0a1apLEw+IbgQfyS7meSorrLE+tT81WeMRRG/4PkBUNALkrJqpGA 2Y68bxYu7qPel+VZI6nWgGpDoB7/CWs8n5dEt0t5iYBwsTAKSd4ePQeV9ZHjKhKS bgziWbongmXnvB0//MbOz9cdKDOnGT2QvqZQ3mVkmsXp1oQTqOvoN24b3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFPTXCOW355BoliU9xJ/iUH0x5MMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbIq3zgUh V9t63frXasF2m3eaGypMGwjCQqoSu3Azsqat85uEAGB7IiUflJuIvzVjE0M4IS2R r4AwlvkZqEzdFrf9TiaXHlMIYHlXCdA4KebF+IuSKXxw6GDUrmYbwbzl+LrYZg2N vEPHbRCuq6IBkKSJHifgN2mQZf24ttgVXttYvNs8unSBvj8XIevgzH3gPFMbtVin I6K9B9jsxydHnCNn9a2pOMBnSdZkg3M+Nxf1TqWrvetcQRB9Gc/tJC8iPlMdhHwF wvOoD0HoHlBmN1G3gcBE36sBls049XZE4qG2VvBqlNgNeX/N93O9NN4FV9SM6opA ZdU16SzUmZrKTg== -----END CERTIFICATE-----Generated at Mon Sep 28 14:09:57 2026 by rpki-client