$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft File: dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft (raw, json) Hash identifier: ga6Ut4QAXkELB4E+5vRf8VpAqXpU7FKGWG4DAJIHWjU= Subject key identifier: 08:B4:08:DE:DF:04:51:9B:09:D2:96:7C:E4:71:0A:36:C8:3E:2F:1A Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Certificate serial: 01A0D38383FAE4FD1059EEEA51110D113C62 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft Manifest number: 1856 Signing time: Thu 24 Sep 2026 13:03:26 +0000 Manifest this update: Thu 24 Sep 2026 13:03:26 +0000 Manifest next update: Fri 25 Sep 2026 13:03:26 +0000 Files and hashes: 1: 8ReEJPFMNr7qTteX6qv8unFvcBU.roa (hash: cnOyPdf7KV5827HwqHxHTqoHFSaE73rzQ8nd7uy59YE=) 2: B_GEk0m49jzeik2gUGk6eYl3XKo.roa (hash: UUs9N4HiRAcBgT2uZAZPV/YeTuvmU5eoAEs4wGLkz8k=) 3: JUsZAIzpUGjx6jJRW74wD5KYdxw.roa (hash: ubfqsLxf7jUqaeE1zzMD7BbyJ0T6FgVrCwi7fEcPsdA=) 4: NSXspG9pQJvmWYLKS70532E0Tr8.roa (hash: MrTONSRvxrXJDrrYRMbIis/UbxqsqX2KcYYn/ZlA2eI=) 5: QovdBxZFYO8Le-cS-a1JwRjgfQk.roa (hash: XGPaVXCFvuqE5pmLKAAz2EcSfvcufVPb2RTZtwJD+x4=) 6: RzhXZNN80rbDceIr7GWMP1BL2T4.roa (hash: XrAtOSS0kHYUbkxivUkP6A6DFY2BAUY1cH3y1xyfGzs=) 7: SL3Y_PpDcj5A_EO8-yB5j4l_450.roa (hash: V+XY6bDcmReJThpGKTQ7N8hjqMotaqMvVGr/3qy9MWo=) 8: XhWNq_03YO6idZVx8wSudiAf8Ak.roa (hash: jjd9Ntow5yuYQ1z+cFhSsqPXNrtdpbaOjcPj/8pmaOM=) 9: XttFtfEtk9i86AsYFs1LztDewa0.roa (hash: 5Vn8oMuSRYonnOniGTg2ibUKaR7iqVZANMu7pVE2FyU=) 10: _Okbnr80Rq7ww8R4v3_ggcisub4.roa (hash: /xX2WGNlLNgbJPvCfzjtPTr4JvfPghmXqeSRioLiEAY=) 11: aOh7SyjCOcaf4Y5Vz363mRSH7VU.roa (hash: vK+wqxYHosFXMs2+WXdpRJwXTZ6jDNBSZhzLhhy/tx0=) 12: acrLlh2bffixlJwIk38uqcoaM3U.roa (hash: 8VJekl0fJNzL7/mrVZ7IvSwSX3xru+t1pg5R0/MlHXs=) 13: dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl (hash: mrZWk7zTMoz8RlWsWTi/qAgfXTq+C1sF6xxZCOTq5VY=) 14: i_QNXSEubOFTZEbHyeOmfAnx51Y.roa (hash: Ct+gnGpg7fCLzkedsqbQFmR3763ftmSsKtbnNI8iSuw=) 15: lzu4y4Q9shg3DRtmoqkB30BoyZg.roa (hash: 9Emdq207YisuGB08EG5mDj1cnqOhy/o2dL8p/ARvqCg=) 16: ngpONoHSTwoohoW5OGQa7adKegU.roa (hash: uejL2MnuBHCE3yZt1cUlPz5kgBigbbVinyw+wTmzynA=) 17: pvKn5P6W0geqPhRpqQoqoG2NcG4.roa (hash: jZ0UDbD+lL9KJLctKmX3BzyaqOoOU/LXfYVgwDGMH/8=) 18: qEEOxwTAmF9qKeTUtlXmnvOhJ-M.roa (hash: 6CjL1ebv0jplJ192ZJ/4E2ORBgjF6vYbg/+unm9kJhY=) 19: qOuuE7ncVWyhAoaRCylJZLvt_Qs.roa (hash: 9Ei/7J8FyQdTzS+N+w6NNcYG9fQPW4NA4XNB1+d11Aw=) 20: ra7_KZEiDFEgBecljzzMSndphEo.roa (hash: mMCalNTgwgkZZuIBEJzs38izbqU0jTo1vgd1t6aK83U=) 21: tK4p7XOY-9eMCfT41rNfDvMz8ZQ.roa (hash: +PzSpSLby2pKNdEalpx88bV8TrjpZ7AoJpGeiQ6ta/I=) 22: uXZ8dSsTsYmlbRWOfALydunHyNo.roa (hash: wurQLStm4I5TAyiJJe3yNdJRBsmFKQa1zBmRVmGZqvc=) 23: wo7HMWTKzL4KQH_XmOyP9W3quYk.roa (hash: 6SRDl+MUI69wFuXIlfVF5E1JYaN4fy+QYftcn1Ok0k0=) 24: z4hVox_1YMjCdj0pv1ovoZhsMIM.roa (hash: 3WvqYw5JMN4YjvZ1NiX0P+kYI8s3F0qbFTABgvWybUo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 13:03:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d3:83:83:fa:e4:fd:10:59:ee:ea:51:11:0d:11:3c:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5 Validity Not Before: Sep 24 13:03:26 2026 GMT Not After : Sep 25 13:03:26 2026 GMT Subject: CN=08b408dedf04519b09d2967ce4710a36c83e2f1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:fa:45:c0:57:b4:f3:b9:ce:e2:14:15:12:a4: 6a:d8:7b:34:5d:da:00:67:5e:43:9a:ed:0e:d0:ab: 7c:2d:f8:f6:57:9c:11:7a:6b:5e:c0:de:fe:1e:4d: 12:05:73:f6:a1:42:57:3c:8c:a2:54:8f:78:b2:63: 6f:88:33:ce:97:a7:e5:be:97:eb:dc:9d:3c:f6:db: 00:0f:ab:65:10:4f:72:fb:82:56:be:ed:9d:ca:80: 4b:ae:8d:1d:b4:00:1b:cd:32:a0:36:c4:95:e9:d6: c7:5a:f0:63:8c:e4:06:e8:1f:e2:26:52:5b:09:02: 20:e8:75:a2:8c:c0:ad:5e:e5:06:a9:1d:54:83:00: 08:cb:ad:7b:94:17:0a:61:31:01:27:51:af:08:9a: ee:64:37:ca:f4:c8:e9:8e:5d:11:09:46:87:ab:11: 05:40:cd:77:d0:85:38:33:d9:30:49:c9:5e:20:1e: 51:40:58:15:2d:30:64:50:c8:4e:7f:1a:34:4f:59: 33:8b:fd:59:ce:58:1c:81:d0:69:a6:82:f6:ef:29: 93:03:a4:6c:6d:e7:ed:58:46:81:31:0a:47:39:0d: df:df:17:35:ff:e4:22:a2:0b:45:2d:8d:45:b8:11: 17:07:94:67:80:76:6d:b7:1c:d4:ab:77:86:e8:35: f7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:B4:08:DE:DF:04:51:9B:09:D2:96:7C:E4:71:0A:36:C8:3E:2F:1A X509v3 Authority Key Identifier: keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:0e:62:e9:d3:be:23:85:41:47:8d:48:29:bc:42:57:f0:d5: 78:1e:6e:b1:fe:be:77:46:c8:35:85:5b:26:bd:eb:01:59:1f: a0:7d:0c:c1:79:b5:81:dc:7f:55:54:d8:b0:68:da:95:f6:bd: 5d:43:bf:37:b1:77:33:58:28:11:12:5d:7b:a5:7a:b3:07:26: 8d:06:b2:1d:c7:68:4e:32:cf:95:61:34:20:ae:24:8f:a9:92: d8:4d:a3:9b:e3:c9:2c:38:1d:1a:68:3c:6b:36:60:94:73:07: fe:6d:c4:0c:8a:eb:87:51:8d:2a:3b:10:1e:3c:88:6b:bc:41: cc:f9:8f:7b:6f:95:00:38:e1:08:38:bd:14:b8:cd:89:10:04: 0f:c6:31:41:18:3f:d6:b4:0a:b6:bc:b3:69:68:72:e1:57:e7: d3:c0:c1:43:a1:a2:7d:14:ff:19:ad:b8:df:e1:d6:22:77:62: 53:d7:ed:ae:5c:15:6d:9e:1c:4b:e3:4e:cc:7f:ff:cc:6c:69: 0f:be:d8:37:4a:cb:9e:6b:37:62:e6:0f:e8:1f:32:59:cc:28: 67:dd:8c:0d:82:92:00:f5:09:57:49:08:15:b8:f8:04:97:a2: 37:97:e4:a5:41:da:eb:e0:a5:88:dd:91:5b:3c:4d:f9:08:f3: c4:2f:6b:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDTg4P65P0QWe7qURENETxiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0M2U0NDdlZGI4YTVlMGUxYjFkN2Y1Y2RjMjg3YzM2NGE1 ZmIwYjUwHhcNMjYwOTI0MTMwMzI2WhcNMjYwOTI1MTMwMzI2WjAzMTEwLwYDVQQD EygwOGI0MDhkZWRmMDQ1MTliMDlkMjk2N2NlNDcxMGEzNmM4M2UyZjFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/pFwFe087nO4hQVEqRq2Hs0XdoA Z15Dmu0O0Kt8Lfj2V5wRemtewN7+Hk0SBXP2oUJXPIyiVI94smNviDPOl6flvpfr 3J089tsAD6tlEE9y+4JWvu2dyoBLro0dtAAbzTKgNsSV6dbHWvBjjOQG6B/iJlJb CQIg6HWijMCtXuUGqR1UgwAIy617lBcKYTEBJ1GvCJruZDfK9Mjpjl0RCUaHqxEF QM130IU4M9kwScleIB5RQFgVLTBkUMhOfxo0T1kzi/1ZzlgcgdBppoL27ymTA6Rs beftWEaBMQpHOQ3f3xc1/+QiogtFLY1FuBEXB5RngHZttxzUq3eG6DX3PwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAi0CN7fBFGbCdKWfORxCjbIPi8aMB8GA1UdIwQY MBaAFHQ+RH7bil4OGx1/XNwofDZKX7C1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDct NWUwZjRhYjgwOWJiLzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS9hMWFlNzAtNzk5Ni00Njg3LWEwZDctNWUwZjRhYjgwOWJi LzEvZEQ1RWZ0dUtYZzRiSFg5YzNDaDhOa3Bmc0xVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqA5i6dO+ I4VBR41IKbxCV/DVeB5usf6+d0bINYVbJr3rAVkfoH0MwXm1gdx/VVTYsGjalfa9 XUO/N7F3M1goERJde6V6swcmjQayHcdoTjLPlWE0IK4kj6mS2E2jm+PJLDgdGmg8 azZglHMH/m3EDIrrh1GNKjsQHjyIa7xBzPmPe2+VADjhCDi9FLjNiRAED8YxQRg/ 1rQKtryzaWhy4Vfn08DBQ6GifRT/Ga243+HWIndiU9ftrlwVbZ4cS+NOzH//zGxp D77YN0rLnms3YuYP6B8yWcwoZ92MDYKSAPUJV0kIFbj4BJeiN5fkpUHa6+CliN2R WzxN+QjzxC9rFQ== -----END CERTIFICATE-----Generated at Thu Sep 24 17:37:41 2026 by rpki-client