$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft File: T9ZCEC691_ImjBTCfj678mtMr-s.mft (raw, json) Hash identifier: k06jkKVLtxHAsDbruHX8GvWk+6Hsq8AbDq4Plr+nzE4= Subject key identifier: FA:5E:11:5A:B1:FC:A6:81:56:8C:61:13:2B:6F:AE:D5:FA:F9:24:DF Authority key identifier: 4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB Certificate issuer: /CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb Certificate serial: 01A0E69A3D7B32A41D3D041411AEA91E6440 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft Manifest number: 02AA Signing time: Mon 28 Sep 2026 06:01:02 +0000 Manifest this update: Mon 28 Sep 2026 06:01:02 +0000 Manifest next update: Tue 29 Sep 2026 06:01:02 +0000 Files and hashes: 1: 10SEluxF1blgYZh7SmOtZXXB_SQ.roa (hash: K+/AqdIbFpDkq/bdo3MVUBhbUT0zQYlWGIv+bYQcsPQ=) 2: AAtWsYPKSMLBq85kSJWV6gQpJvo.roa (hash: yYAx9veeLlEHk2rcZuXtkYNbTuh/k5Nd+cm24BjUlZQ=) 3: BOT5KFIXJpkIbzlxtuVva-pqcW8.roa (hash: V0+HzlrzgNuQq4OTP8iqfYcbyGXd1T0uSkmpDamsFm0=) 4: FXU6diYKcbRIsw4MmevlGTpvGb0.roa (hash: aFnvjS1XXi7qixi4xTsDLaU24Ku8jOZbxW9SYMuhSJc=) 5: Fl0sNH3OORw-VR9ttX4m0BaKcrw.roa (hash: mc5182/UPitQpfsKkGF8tcMhifQg/OqAIM7NRsA0uY8=) 6: IXENGoGhQOldCVOnX3dlDikgur8.roa (hash: 59UAbs9flBeo7Pk6USdK5b/AP/C1xI7BIRRXYcjgzb0=) 7: IXv7GLa92HnV3l1DApAceTiWeyw.roa (hash: wbQSrQRDyv+cAs4TzHktwX1YmUunTHit+MVHYBjMrCw=) 8: JIP6keB7F7Gm2ZlkQopa4DPs_us.roa (hash: jFlq3BusUmP4qYxCaXEGJylNWdexiUDC80OW6u36VHU=) 9: LvRMgMnIz-WSpwPtNC_0qN2ezk4.roa (hash: 9KTj/IvgwPLL/HUnU0bmQjDhIav2+yG3ftcrBIJ5iZE=) 10: M4o5M8yNKRAugsRS799y9UUFN8s.roa (hash: ih1DvS4oaEPr5tXlb17aqqmEewqpb/5NtoAV7lZpF6c=) 11: T9ZCEC691_ImjBTCfj678mtMr-s.crl (hash: /ZwtLsohkhn1FYvQwmBxOnhIUHrtQwFRQgLrs1RVk2o=) 12: TbZ4UxM472uZwvxUqFwV48R32GU.roa (hash: +tVWlpFmpYRQxsehBjuSGd5DAH2rij5I3LuhqNxfiC0=) 13: VNfg-QglXGIujd90KUvMXS6gBSY.roa (hash: i1z1xtfhhF9sKthwdcoGahPZ+gLqvmKabhZTgAjg+1Q=) 14: VVwrQKZhl8GWDVud5MS8pGppgyQ.roa (hash: HHtl2ZMLvvKM+U6JATQgi7CD2DahNQ9EqlIGvJv0TEw=) 15: YuXGy4DeeKK817s02xmtLVstl_M.roa (hash: 3pU1tPDQwQuNiKFX6sho9jHiT+VzWttOjYDmMxptk5w=) 16: Z9pkGBfIq0CqIUBOJKEGhRH4JA4.roa (hash: XDu++kDADUCGxfVwjhBuKaC+2gosxJl1lq6IYp2iki4=) 17: _TQA3DaHi33-kcVw47n7VlGKNYM.roa (hash: 55WFfRlQOcBvN56rtMErkYgOyBcWRjE4WY7WLvG7TY4=) 18: bscSMUePvjYGJBA3eTSMaTqEF0Y.roa (hash: cNPF3CMj+Q3zU+XumEjHwBv76MtTW2OcHQISDQXkPMI=) 19: gh269-L8TbTY3-TVP_7aO8lyx58.roa (hash: VbOH7TTnQt8mmF2t2Xgvv1Gs0QXIq8ndLB+CWsdxeFA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 06:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e6:9a:3d:7b:32:a4:1d:3d:04:14:11:ae:a9:1e:64:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fd642102ebdd7f2268c14c27e3ebbf26b4cafeb Validity Not Before: Sep 28 06:01:02 2026 GMT Not After : Sep 29 06:01:02 2026 GMT Subject: CN=fa5e115ab1fca681568c61132b6faed5faf924df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3e:34:3b:ba:cd:95:56:c6:b1:75:58:1a:da: c0:2a:67:76:b0:35:63:3d:e7:b4:64:82:fe:52:b9: 0e:b8:a3:fd:aa:11:ae:4c:ed:95:66:28:c7:af:fc: ba:86:f4:87:a3:bb:8d:3f:42:33:21:25:da:2c:b4: 7c:90:ab:ba:72:71:f6:ad:65:75:e7:95:10:a7:41: b3:45:e0:33:99:36:ec:d0:77:41:70:c7:73:2a:5f: 2a:ef:99:28:02:6f:7b:ae:4c:60:41:4e:50:d0:2d: eb:ff:68:bc:13:77:08:b9:f3:f7:91:18:b0:42:65: 00:38:a1:db:44:ff:dc:00:ae:d8:92:7f:15:62:5f: 08:29:18:1f:8e:e9:3d:cc:75:d2:a4:e2:7b:e5:5f: 13:5a:2c:41:40:77:92:32:73:c9:d6:e4:21:4b:ad: 15:06:fc:1d:f4:c4:ee:aa:2d:89:4d:39:e9:f7:44: 43:da:83:58:12:0c:a9:96:4d:db:f7:f5:0f:a5:60: 3b:d4:e3:47:1e:30:9a:30:a9:e5:a9:39:12:e8:58: ae:51:d7:49:99:b0:4d:ad:e4:85:06:0a:ba:34:ef: b3:23:cc:f4:79:10:a9:e5:af:e9:45:1b:3f:13:ae: 2a:f0:00:af:92:a6:38:4a:c5:6b:33:09:6b:6e:b2: 4e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5E:11:5A:B1:FC:A6:81:56:8C:61:13:2B:6F:AE:D5:FA:F9:24:DF X509v3 Authority Key Identifier: keyid:4F:D6:42:10:2E:BD:D7:F2:26:8C:14:C2:7E:3E:BB:F2:6B:4C:AF:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T9ZCEC691_ImjBTCfj678mtMr-s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/0c3b1f-dab8-4762-9d04-f941cc39a71e/1/T9ZCEC691_ImjBTCfj678mtMr-s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:60:72:23:30:5c:50:d0:24:c6:56:9a:37:1d:30:e4:cf:c5: c6:c6:98:a1:3e:bc:fd:af:b7:64:6e:ac:da:07:2c:06:89:2c: 6d:60:d3:9a:ba:8d:ab:2c:5e:4f:ec:0b:0f:5c:96:cb:75:a3: b2:38:0c:40:eb:2f:6d:f6:20:a3:cf:8a:a6:72:e3:ff:01:e6: 10:da:67:69:88:f0:c3:d6:17:83:82:8b:cc:de:fa:13:ef:ad: 91:6c:b4:8d:e5:14:4b:c4:84:63:f7:d0:5e:76:9c:1e:32:1e: f8:a1:5f:e0:e5:2b:d3:50:c8:40:80:45:12:e0:e8:ab:df:99: 99:5f:02:e1:69:1d:1b:3d:8c:68:ec:13:e3:59:29:36:76:36: 4e:94:9b:c7:dc:1e:85:72:7d:b2:59:12:2b:1b:12:2b:7b:f4: 50:88:7f:aa:e7:27:44:f5:9b:25:46:52:e0:7d:34:70:e5:74: 69:06:86:32:cf:75:e2:c9:be:e0:f8:3e:e6:b7:81:9c:83:f7: 90:b8:5a:a1:d2:53:62:f1:df:a9:8b:2e:68:05:02:cb:a1:1a: d0:a0:d8:35:57:23:f5:50:ad:00:bf:20:d2:f1:53:ed:ed:45: 75:2b:c9:c2:83:9f:c1:f8:fb:78:52:27:1a:4d:e1:23:f2:4e: 07:2f:67:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDmmj17MqQdPQQUEa6pHmRAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmZDY0MjEwMmViZGQ3ZjIyNjhjMTRjMjdlM2ViYmYyNmI0 Y2FmZWIwHhcNMjYwOTI4MDYwMTAyWhcNMjYwOTI5MDYwMTAyWjAzMTEwLwYDVQQD EyhmYTVlMTE1YWIxZmNhNjgxNTY4YzYxMTMyYjZmYWVkNWZhZjkyNGRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD40O7rNlVbGsXVYGtrAKmd2sDVj Pee0ZIL+UrkOuKP9qhGuTO2VZijHr/y6hvSHo7uNP0IzISXaLLR8kKu6cnH2rWV1 55UQp0GzReAzmTbs0HdBcMdzKl8q75koAm97rkxgQU5Q0C3r/2i8E3cIufP3kRiw QmUAOKHbRP/cAK7Ykn8VYl8IKRgfjuk9zHXSpOJ75V8TWixBQHeSMnPJ1uQhS60V Bvwd9MTuqi2JTTnp90RD2oNYEgyplk3b9/UPpWA71ONHHjCaMKnlqTkS6FiuUddJ mbBNreSFBgq6NO+zI8z0eRCp5a/pRRs/E64q8ACvkqY4SsVrMwlrbrJOIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpeEVqx/KaBVoxhEytvrtX6+STfMB8GA1UdIwQY MBaAFE/WQhAuvdfyJowUwn4+u/JrTK/rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQt Zjk0MWNjMzlhNzFlLzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS8wYzNiMWYtZGFiOC00NzYyLTlkMDQtZjk0MWNjMzlhNzFl LzEvVDlaQ0VDNjkxX0ltakJUQ2ZqNjc4bXRNci1zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANmByIzBc UNAkxlaaNx0w5M/FxsaYoT68/a+3ZG6s2gcsBoksbWDTmrqNqyxeT+wLD1yWy3Wj sjgMQOsvbfYgo8+KpnLj/wHmENpnaYjww9YXg4KLzN76E++tkWy0jeUUS8SEY/fQ XnacHjIe+KFf4OUr01DIQIBFEuDoq9+ZmV8C4WkdGz2MaOwT41kpNnY2TpSbx9we hXJ9slkSKxsSK3v0UIh/qucnRPWbJUZS4H00cOV0aQaGMs914sm+4Pg+5reBnIP3 kLhaodJTYvHfqYsuaAUCy6Ea0KDYNVcj9VCtAL8g0vFT7e1FdSvJwoOfwfj7eFIn Gk3hI/JOBy9nXw== -----END CERTIFICATE-----Generated at Mon Sep 28 10:53:52 2026 by rpki-client