$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft File: q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft (raw, json) Hash identifier: w8IloM2DLIwI7K7BG2g9dEOyW0gl1IwcYEUODrZv7Hk= Subject key identifier: 02:D8:01:1C:22:D7:23:73:17:E8:74:6D:93:A7:FC:87:63:A4:39:AB Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Certificate serial: 01A0D56F9D7830BC4347E67769163C07DDF8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft Manifest number: 1AC3 Signing time: Thu 24 Sep 2026 22:00:56 +0000 Manifest this update: Thu 24 Sep 2026 22:00:56 +0000 Manifest next update: Fri 25 Sep 2026 22:00:56 +0000 Files and hashes: 1: 0fgHNVCctmMI1V-BS5_kF5EsiOU.roa (hash: eNuhCbiq7TJi88XjDE039hLZRz8ipxup9WRLp8sp1DI=) 2: 7_6SFXfZMrzFSdtu3xDOw0gJ8JY.roa (hash: hG4yO49oHj9b8DfZFiphyKQ8y3qDFd1bbzb1jH4CrQU=) 3: DF7ZMArr7YQkP6JCvTXnJ48GG1g.roa (hash: h0YoBkA2Ma+7OTVVfQXFtJdLdFlpvKYuPy7+Y+Jklhw=) 4: Ep-mQB2FAsp8xVwfqHWWTFWTlYM.roa (hash: CcqzWZ6bMIWysh3kKgYdOQMLPUZ4shI2ek8KjLM+54s=) 5: GujJ-FoV2NxCphoiy9ei8Zxbj94.roa (hash: 5qyX0xcJQK2tt6fcmxtTs5x5YBwoFGMWlBym7IBYHmk=) 6: MuQyieCgxPJT0SRv6Xj_GxkiB-I.roa (hash: 0pzaFGjjnJFM3Mi6/Z0qJhoLAoydrAANnuMwOCc5Kso=) 7: P7wv0TBgiECiEBUf1EgkMnv47Po.roa (hash: rqQESPX4LWrWYgKl1zOfXltaaGJ18DHxc3dAwU1KR9k=) 8: Q1yzAo5L9w5IHv0JqXbg9yCMMcU.roa (hash: qLGf0LLtEidrk4nWv5exOU1LPTUa9MuB+3L8YC0+hbc=) 9: QLx_bFpLJ0q7OGCLe6wvYzJoLrw.roa (hash: XQYgd3zzuTttV8zp0GzxyEY68F4NaIMjIG/jCEfOzec=) 10: RjNeSA3OdSgfuKyXCw4On9Hfwig.roa (hash: TGS0IFEq2/Ak8/1sB2LyNa9KTXiGL21lniik5j5gU80=) 11: T5XQh9j95-eHLk4tIkpyKU927L4.roa (hash: YLS+fL7b3BgU8PYEgqxRvmWh3Kk8TcAGqvr6h5p+gtg=) 12: X_eS7uT76Tv6lToj2nDNeg9sgYo.roa (hash: rlOOw1Hh+1Gv0+quXstdSdljOaXwuIQS08R8cOH2H9E=) 13: YRVJ0Gjf3ToFSXg4tQ2csynme1g.roa (hash: +3oRd6tn6dDyNGcRR/+Wdu79deA/W9QRUODpof/4dqI=) 14: YVly3HyFx4cO-VDnGW8-TlLZp8c.roa (hash: zmddt2tM/OfIW2jjFDZBhz9+RtNwb/OeGPoKv5WQBq0=) 15: f_U1wlpu2o8G1EDSBfG2v3CJsrU.roa (hash: mBEZgenCoBMKSBIbKUgW3oXM9LSYHALYDi8zO9xe4lk=) 16: gkBIXWPDqd5iHgTo6Oq_RIYuttI.roa (hash: TAAZ/5Q3PgiVYAsyiVs0eY43VCN4PWzuxjaw3+oWC3U=) 17: l8R7A1sksjUkbsqqgmFV4yhnwoY.roa (hash: tOD+/L6A4hjUPcMiH0jbILCqY006lQVa6EOA+rm4RSY=) 18: q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl (hash: 0aMMCvqSOEVLKg2BpKzGikVCuI6pUOc5l0+uVCC4UP4=) 19: qHqVroTNd8mAZUTP-4LLTihEjRA.roa (hash: LFqfsvqUg1kryv3SdZmfz1fPpVN8XkzwNYvHfBdV5dM=) 20: r97T0zrjjPPADnFxgjfEjKH0-vI.roa (hash: uvIm3GKMAsVoII3IPG7UtxMh0NuDqi6V1N2PDdGwnIM=) 21: sIdlwG_KvJyr9jN9d5KfNvyl-ws.roa (hash: HSdj5IIYXsemUlbbPFPUMMU0DovDtEclq0qz0Z73zr0=) 22: z2b5HqrBbNton83_qG8fiGl3ipE.roa (hash: /MzZQY5wAz0d5qSw7Z9ljmH3Z0SZhJHz2o3BPZIFhmM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 21:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d5:6f:9d:78:30:bc:43:47:e6:77:69:16:3c:07:dd:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140 Validity Not Before: Sep 24 22:00:56 2026 GMT Not After : Sep 25 22:00:56 2026 GMT Subject: CN=02d8011c22d7237317e8746d93a7fc8763a439ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:46:e9:f4:87:e3:ae:01:fb:66:38:79:82:3d: 27:3f:6f:4f:d8:60:2d:c6:06:3a:62:5f:54:fe:29: c4:7d:4c:df:87:7c:aa:fc:16:4b:88:0f:da:2f:1a: 52:90:0c:13:74:29:dc:07:07:95:97:7a:76:74:5b: f2:c4:7e:65:3d:f0:5f:7f:71:9b:fd:c3:53:ec:b8: 50:6b:06:5b:7d:ab:84:b5:df:2f:8c:55:16:b7:1f: c1:73:1d:98:66:77:a4:1f:5d:25:84:59:4c:d4:f8: 57:98:66:eb:8a:4b:8c:e6:4d:06:b2:79:eb:f1:c7: 39:90:98:4a:71:a5:b9:69:f7:ce:84:cf:1c:bb:5e: 1d:2b:7e:1d:11:ba:4d:59:0b:b8:61:a1:b3:d9:04: 6e:2c:36:72:86:bf:1c:1f:8e:8b:c4:ac:17:8a:28: 40:a6:5c:52:ab:7f:fe:e9:a0:ce:d9:02:e4:66:ae: 55:0a:5f:53:40:3a:3b:68:4d:af:74:ce:0f:32:fc: ce:ce:1f:15:60:ef:2e:11:b1:e2:07:bc:ab:b9:14: 4d:72:07:88:08:7b:b3:9a:b7:6b:a8:17:a3:d2:ce: 25:9b:94:17:fd:63:15:17:17:20:c5:3d:c2:70:f2: 04:83:67:be:9b:8c:92:a5:4f:7f:f9:2a:aa:ce:6d: 81:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:D8:01:1C:22:D7:23:73:17:E8:74:6D:93:A7:FC:87:63:A4:39:AB X509v3 Authority Key Identifier: keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:01:ce:90:7d:2c:24:80:ca:51:b1:51:51:42:5d:3e:19:de: de:2e:c3:88:f0:39:6c:af:e3:91:82:bb:d3:e2:b3:e4:50:52: ed:8f:92:62:f4:77:e3:fe:63:17:5e:8d:2d:1f:88:87:7d:cd: de:a3:ff:54:8b:a3:0f:0e:ef:71:1f:e1:68:34:a9:e7:2e:f3: e6:93:46:3e:1b:2b:36:d5:4a:95:79:f0:bf:91:86:b3:b1:c9: ae:eb:d1:f7:d2:a0:53:cc:9c:2d:d2:dc:ad:93:79:1e:0a:a5: 1d:d2:a2:7a:b0:e1:d6:4e:41:0a:09:fc:4c:2e:5a:fe:3f:66: b6:e5:79:1e:02:d1:eb:7d:48:79:8c:89:69:3d:0d:85:5d:40: c9:a1:c4:46:78:af:7e:39:1b:55:c0:34:b7:d5:0d:d4:0c:4e: b1:cf:c8:62:27:21:9f:d4:74:c0:88:6e:5a:cc:c3:63:09:3e: 3e:be:36:5c:51:a2:07:81:8b:97:10:67:63:4a:30:fc:5d:4a: 65:50:d7:79:2d:cd:25:a7:93:0c:a5:2d:aa:ae:c1:03:d3:d4: 7d:9e:34:2e:9c:c6:c4:f2:50:f5:38:83:99:14:77:48:dc:dc: 67:38:a9:d7:d6:6e:93:c2:ff:9b:c7:ef:0f:45:78:06:f5:0e: c8:21:4f:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDVb514MLxDR+Z3aRY8B934MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiYzhkYmU1MjA4M2FkMzM1YzlmMWZkZTYwMTZlYzhiNDky OTMxNDAwHhcNMjYwOTI0MjIwMDU2WhcNMjYwOTI1MjIwMDU2WjAzMTEwLwYDVQQD EygwMmQ4MDExYzIyZDcyMzczMTdlODc0NmQ5M2E3ZmM4NzYzYTQzOWFiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8kbp9IfjrgH7Zjh5gj0nP29P2GAt xgY6Yl9U/inEfUzfh3yq/BZLiA/aLxpSkAwTdCncBweVl3p2dFvyxH5lPfBff3Gb /cNT7LhQawZbfauEtd8vjFUWtx/Bcx2YZnekH10lhFlM1PhXmGbrikuM5k0Gsnnr 8cc5kJhKcaW5affOhM8cu14dK34dEbpNWQu4YaGz2QRuLDZyhr8cH46LxKwXiihA plxSq3/+6aDO2QLkZq5VCl9TQDo7aE2vdM4PMvzOzh8VYO8uEbHiB7yruRRNcgeI CHuzmrdrqBej0s4lm5QX/WMVFxcgxT3CcPIEg2e+m4ySpU9/+Sqqzm2B5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFALYARwi1yNzF+h0bZOn/IdjpDmrMB8GA1UdIwQY MBaAFKvI2+Ugg60zXJ8f3mAW7ItJKTFAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2Qt MzA1NmFmOWEzMzVlLzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZS9jZTZjY2ItMjVjZi00OTE3LWIzY2QtMzA1NmFmOWEzMzVl LzEvcThqYjVTQ0RyVE5jbnhfZVlCYnNpMGtwTVVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPgHOkH0s JIDKUbFRUUJdPhne3i7DiPA5bK/jkYK70+Kz5FBS7Y+SYvR34/5jF16NLR+Ih33N 3qP/VIujDw7vcR/haDSp5y7z5pNGPhsrNtVKlXnwv5GGs7HJruvR99KgU8ycLdLc rZN5HgqlHdKierDh1k5BCgn8TC5a/j9mtuV5HgLR631IeYyJaT0NhV1AyaHERniv fjkbVcA0t9UN1AxOsc/IYichn9R0wIhuWszDYwk+Pr42XFGiB4GLlxBnY0ow/F1K ZVDXeS3NJaeTDKUtqq7BA9PUfZ40LpzGxPJQ9TiDmRR3SNzcZzip19Zuk8L/m8fv D0V4BvUOyCFP0Q== -----END CERTIFICATE-----Generated at Fri Sep 25 06:32:01 2026 by rpki-client