$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: f0G6UFLc0vrRyFlTMasAfbeaLcfpTk5LobgwyDzWonQ= Subject key identifier: 15:DC:31:8D:23:69:9D:64:03:1B:FA:B4:4E:B4:A9:47:88:AC:CC:2A Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 01A0ED7866B3A33E287D8ABE1549153317CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 1CA2 Signing time: Tue 29 Sep 2026 14:01:25 +0000 Manifest this update: Tue 29 Sep 2026 14:01:25 +0000 Manifest next update: Wed 30 Sep 2026 14:01:25 +0000 Files and hashes: 1: BheGXFkBifoYTh6TueqxOEyOs-s.roa (hash: LDgWozy8wmcMMsdbbi10Neqvku20kgLBvbOhauQzJ/E=) 2: J_Rao8XwSdeJowVZJOukzjb5984.roa (hash: yc7C55kPwJyA/Z9JdP2AgmYSU/kuUpvqz2WUy55f12A=) 3: XQN2PVO2BIAMkSThT7E-pns5qnM.roa (hash: Y7XQgYH+9nwgMwtIh2gFs5Ndo5hynElaRlQj0CaAZEk=) 4: a6Erf_tnT8pMndq3WnrW7H4B990.roa (hash: 9x4c63CxJ5UoigQePJxkpntm40rkErQOAY2jQ4vUfMc=) 5: bsp6BDSIWkrxR6u3xicw9RBKbtM.roa (hash: KBNbBNVVMKDz24iMEiDHeH6Ud37u/sKie2hM0HuZtdo=) 6: h9g_PYMZuLeSljFMXLDLfTUsqxc.roa (hash: dttrOUO+v4KY515NCQvb1Vqt92zL71t/i+3OWHk84Zc=) 7: knLrELnamRbYKI_hmZ4VPtqQHec.roa (hash: KpZhnOp+uvDR1vqjA12HnP6hCAQUJOuMRCA2L33u3s8=) 8: nSsMIk4gWxbIeigyP816DLKTC4A.roa (hash: ZUWSLLXlJsJEXgJ0xzJruxVtWPFtV5scS2gIX9A4Cdg=) 9: rJ0KQpCJ2q9Iu2VaR9rbdD7pQrE.roa (hash: ZsARQdUofsJUezwT8h2OoSjlo0PYxXFJvHqyfmrbm74=) 10: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: tsG/jM0H/DQ+p37ZkKI6SV+yWwg5B8hxB+slKMErtdM=) 11: u7w1cEYTaI2DzzWQmZyLzaqM5sY.roa (hash: wFc0fj1o5uFkbtmZ4aVopMpmQGltmvAuiMNJULyr7/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 08:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ed:78:66:b3:a3:3e:28:7d:8a:be:15:49:15:33:17:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Sep 29 14:01:25 2026 GMT Not After : Sep 30 14:01:25 2026 GMT Subject: CN=15dc318d23699d64031bfab44eb4a94788accc2a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:03:00:16:0c:a1:6a:db:ff:57:14:82:c3:f5: f6:72:da:3f:23:d9:e2:b3:39:ea:7f:31:45:74:ae: e6:e1:bc:ab:0b:64:01:06:eb:34:17:71:37:1b:09: 7d:a2:43:7a:0b:c0:97:81:4f:98:25:29:1d:c7:83: 7c:35:35:59:2d:a1:15:65:65:89:4d:fd:a1:96:9a: fb:34:02:e4:64:09:d5:54:f5:36:ab:5e:dd:79:9d: 5c:b0:60:e4:42:f8:34:94:8d:8c:02:9d:f5:49:d3: 8b:9d:e9:fb:ce:a8:02:0a:f3:45:ea:6b:99:ea:21: 18:a2:a2:80:a0:10:98:7c:3d:76:f0:c7:79:de:1a: be:e1:dc:ed:01:3f:3e:8f:6c:9c:ba:fc:14:0a:7f: bf:1c:bf:2e:2c:7f:35:fe:bd:76:3a:5c:d8:9a:8b: 19:a6:3e:4e:1f:31:e6:13:34:44:0d:fe:64:d4:0d: 97:25:f4:3f:18:56:6b:da:c8:87:39:02:61:5a:38: 00:ce:13:be:1b:4d:c4:bf:be:88:86:b3:d2:9a:c4: 8a:26:a7:19:16:aa:d7:15:5b:a3:b7:78:e9:92:01: 32:cd:64:89:93:39:22:7f:32:ae:ec:c1:d6:b8:36: ed:39:74:c7:ec:4d:60:ca:14:24:e4:5b:4c:5a:8b: 4e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:DC:31:8D:23:69:9D:64:03:1B:FA:B4:4E:B4:A9:47:88:AC:CC:2A X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:00:67:6e:3b:f8:c8:24:74:d3:ac:c5:e4:ef:14:ce:a4:1c: 63:43:88:04:8a:0e:f5:0f:78:cb:c1:85:8e:89:8e:7d:91:12: 57:0a:77:5b:5c:5f:51:ea:82:bc:39:03:08:cd:0d:54:f0:31: e6:44:06:d7:d6:8e:9d:df:81:aa:9e:9d:f5:8f:c4:ab:5a:e5: 40:86:9a:05:c0:dd:19:ef:21:d5:2a:5d:13:d8:4b:e4:ef:d6: 8c:2d:cb:2a:b6:5d:b2:e6:66:82:7e:7a:7a:b0:cd:d3:1e:98: 5c:71:ba:8a:cd:b0:22:1a:25:3d:db:39:7f:17:24:b6:65:2f: 26:b1:97:93:87:ad:53:44:4e:56:49:50:b4:b1:66:33:7b:b5: 55:69:ed:5d:56:33:05:f4:bd:ee:c1:a8:2a:22:34:d2:96:82: fe:81:73:29:41:d7:11:70:a8:61:ca:6d:57:1e:cd:c5:e3:ff: 71:14:f2:41:f0:bf:a9:a3:32:84:71:ad:39:ad:c4:5a:34:f0: 3b:d6:40:57:df:6d:78:1c:50:95:04:04:10:59:82:61:1d:6e: c2:a8:4c:d3:6f:9c:91:26:92:4f:f1:55:d0:a0:52:ef:e9:0f: 13:03:a0:ff:e4:2d:c5:34:9f:7a:85:52:b2:84:5c:38:a6:12: 29:2d:76:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDteGazoz4ofYq+FUkVMxfKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYwOTI5MTQwMTI1WhcNMjYwOTMwMTQwMTI1WjAzMTEwLwYDVQQD EygxNWRjMzE4ZDIzNjk5ZDY0MDMxYmZhYjQ0ZWI0YTk0Nzg4YWNjYzJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAMAFgyhatv/VxSCw/X2cto/I9ni sznqfzFFdK7m4byrC2QBBus0F3E3Gwl9okN6C8CXgU+YJSkdx4N8NTVZLaEVZWWJ Tf2hlpr7NALkZAnVVPU2q17deZ1csGDkQvg0lI2MAp31SdOLnen7zqgCCvNF6muZ 6iEYoqKAoBCYfD128Md53hq+4dztAT8+j2ycuvwUCn+/HL8uLH81/r12OlzYmosZ pj5OHzHmEzREDf5k1A2XJfQ/GFZr2siHOQJhWjgAzhO+G03Ev76IhrPSmsSKJqcZ FqrXFVujt3jpkgEyzWSJkzkifzKu7MHWuDbtOXTH7E1gyhQk5FtMWotOQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBXcMY0jaZ1kAxv6tE60qUeIrMwqMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACABnbjv4 yCR006zF5O8UzqQcY0OIBIoO9Q94y8GFjomOfZESVwp3W1xfUeqCvDkDCM0NVPAx 5kQG19aOnd+Bqp6d9Y/Eq1rlQIaaBcDdGe8h1SpdE9hL5O/WjC3LKrZdsuZmgn56 erDN0x6YXHG6is2wIholPds5fxcktmUvJrGXk4etU0ROVklQtLFmM3u1VWntXVYz BfS97sGoKiI00paC/oFzKUHXEXCoYcptVx7NxeP/cRTyQfC/qaMyhHGtOa3EWjTw O9ZAV99teBxQlQQEEFmCYR1uwqhM02+ckSaST/FV0KBS7+kPEwOg/+QtxTSfeoVS soRcOKYSKS12fA== -----END CERTIFICATE-----Generated at Tue Sep 29 19:18:21 2026 by rpki-client