$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: OnVVy/7wy3XZvRLrHUAo+2It0F4e1WGNzIp0FxrPvmc= Subject key identifier: E1:15:93:CD:C9:15:C6:70:E0:CB:D2:4D:F5:D0:39:A7:77:67:DB:15 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 01A0CFA4D49574D5FB1471F4CCB5E26B734B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 0DD0 Signing time: Wed 23 Sep 2026 19:01:20 +0000 Manifest this update: Wed 23 Sep 2026 19:01:20 +0000 Manifest next update: Thu 24 Sep 2026 19:01:20 +0000 Files and hashes: 1: 0-DUuatym4EjrLpEXcW6I4MvGuM.roa (hash: uxv6/KY05jYuEsZLZV3EP7utj37no6k0dC74Q/DN0po=) 2: 0G0rRTu6YWCR1V_Lc199bCBf3eY.roa (hash: ONejcgv+C+EtCtZmR2C80Az2frNnLr2aDGvIHLHpMsw=) 3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: VL/B12ZWI0ti2iL+wpmCtoSP5ZI/fMip7k5EWVgJTRY=) 4: DRWGbkvEcD_bNQTgjUEfobLZ-PA.roa (hash: eZVLmuCp5+bXUFcL2aI3C/aZXJNWqBIZX9DvM7Y7ZFY=) 5: RxPOdCnW7tymnjueSRcA6hs4elk.roa (hash: FCPYguPsplTXs5/9P4PJ+u4lYOZKePLa/u9GPsujen4=) 6: Y-ntuvRTafT1eOZlmfGsaPPEtjE.roa (hash: v4qO0jj2DVZ9xq0w+y70kJel8FoTbySNEx7XDJ9VH/Q=) 7: dJpXPlF_vRyOgX7jQKghLw8pQUQ.roa (hash: E1+cy9PTWiny/1y88hiJPYv+llkKbECfLmkj5G9alPY=) 8: kN69teI4lOPRDRSTeJKcvbg3DVI.roa (hash: 0zY8u4pSs4JdcMd1LnlNAD4f7WGos0AD35DsttS72fg=) 9: lu5yurSkT9e_Taok7SCt_R26FuY.roa (hash: CeXf6vw9DkbZGqczzaPxh8skoxIspZwWkZW0SRU+ELM=) 10: mgliWT245mKPpOJ9J-koUWKPC38.roa (hash: 2leVbMv5cZcWloTjT8tRG7S73gX0MLHEKiLR37iqlKc=) 11: nyqLqit5oB_bMTURFw941vObpAs.roa (hash: YyM6j1YO1pKfOQnOF8zW9g/xPYJJDmuheUmA+y3jAx0=) 12: qHpfpL-iX9xY8GdRHaONTT8pr8Y.roa (hash: +ysYA2z1c9FzjaGNYUk90Ddk4xsZHBpqAK7t8gXQInM=) 13: uf3e_BE2zQVDAEvwnBCYDlW_CRA.roa (hash: pdun+BKUOQ7DoLG0PPskjv1gebPPRcfr5c7Kait8/nk=) 14: xbafFgHngcJFMb2cngm3oN0_3sA.roa (hash: 3QhvTvFkxgvJXVXMTx914Du8ko0OHV0OfDyouPKHYiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:a4:d4:95:74:d5:fb:14:71:f4:cc:b5:e2:6b:73:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Sep 23 19:01:20 2026 GMT Not After : Sep 24 19:01:20 2026 GMT Subject: CN=e11593cdc915c670e0cbd24df5d039a77767db15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5a:46:17:f4:79:10:72:ab:7d:d2:65:66:d0: c9:02:41:af:b9:ab:66:77:9e:42:c0:a8:22:71:2b: cb:ea:af:87:c4:e8:e0:9b:c6:41:09:fd:71:f6:41: 27:c5:dc:33:8b:50:41:8c:c1:89:48:96:f6:1f:ea: 1d:06:78:7d:e7:d0:1c:80:d7:dd:b0:d0:fa:16:45: 27:5b:87:f5:e8:ef:12:e3:e5:91:a0:72:45:bc:7f: 02:a9:7e:fa:a9:d8:73:8d:b1:53:e5:d7:5d:6a:dc: 3a:d0:68:df:ee:18:c3:30:26:92:2b:01:f8:5e:75: b9:6d:ce:c1:ce:72:52:c4:8f:67:a6:2c:c3:be:a3: 5d:21:fe:b3:79:2b:8b:55:b9:7f:2b:db:16:a0:4b: 2f:d5:0a:08:2e:b0:80:fa:7b:c9:23:81:48:95:de: 03:4e:67:ad:bf:f9:22:ad:e7:c6:a8:b7:d8:77:bb: 39:a2:81:41:b6:18:02:0f:75:18:b0:c1:b2:10:0e: 8a:9d:37:b6:22:1f:90:72:66:23:3b:8f:62:56:81: 04:e6:43:e9:a5:96:40:03:09:cc:5f:36:f7:9e:01: 51:fa:ac:d8:2a:f5:16:d9:8c:6c:3c:7c:1c:1d:90: 4b:4f:df:5c:55:fb:6f:00:45:ba:21:c1:15:47:c8: c5:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:15:93:CD:C9:15:C6:70:E0:CB:D2:4D:F5:D0:39:A7:77:67:DB:15 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:00:e9:f3:e6:f0:46:f6:ec:95:bf:49:53:cd:96:e6:e2:46: bc:09:07:a7:fd:4c:d0:21:a4:b6:1b:cb:e2:35:74:88:59:c0: 03:bd:32:4a:3b:78:88:f0:fe:52:bc:13:25:d2:1e:77:ae:fd: 57:7d:5d:a8:5d:e1:10:84:84:91:b9:8d:24:8e:2d:b6:43:66: ae:0e:2e:bb:8a:4e:a2:f3:ce:b1:cc:13:f4:eb:48:71:b8:16: 9c:e7:ac:1d:4c:bf:b2:3e:f6:5f:7f:fd:1f:ce:47:72:f0:49: f3:56:ac:6f:0c:c5:17:6e:80:3a:11:77:51:0f:7b:dd:a6:ac: 37:8e:75:e9:30:11:30:d1:d1:97:f2:72:4e:46:14:b9:ed:e4: a1:77:37:d7:ed:3f:06:10:ae:df:6c:85:f5:a1:91:bc:d4:fb: d5:ee:f3:10:a6:ef:b6:31:e3:0d:0a:d7:1e:4c:b9:c6:4f:fc: 18:4c:f7:9a:4a:d8:40:08:cd:2e:90:ef:01:7e:6a:1a:69:2b: 9f:97:5d:46:f2:83:55:8f:f0:ad:ca:1a:37:d2:14:71:38:a7: 08:a4:a5:0d:f2:0f:8a:f6:09:b3:1e:31:1b:d0:b9:f2:a2:e2: 6a:8d:28:eb:59:96:30:af:43:13:1e:32:b9:90:d1:77:bf:08: a5:2e:32:aa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDPpNSVdNX7FHH0zLXia3NLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjYwOTIzMTkwMTIwWhcNMjYwOTI0MTkwMTIwWjAzMTEwLwYDVQQD EyhlMTE1OTNjZGM5MTVjNjcwZTBjYmQyNGRmNWQwMzlhNzc3NjdkYjE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1pGF/R5EHKrfdJlZtDJAkGvuatm d55CwKgicSvL6q+HxOjgm8ZBCf1x9kEnxdwzi1BBjMGJSJb2H+odBnh959AcgNfd sND6FkUnW4f16O8S4+WRoHJFvH8CqX76qdhzjbFT5dddatw60Gjf7hjDMCaSKwH4 XnW5bc7BznJSxI9npizDvqNdIf6zeSuLVbl/K9sWoEsv1QoILrCA+nvJI4FIld4D Tmetv/kirefGqLfYd7s5ooFBthgCD3UYsMGyEA6KnTe2Ih+QcmYjO49iVoEE5kPp pZZAAwnMXzb3ngFR+qzYKvUW2YxsPHwcHZBLT99cVftvAEW6IcEVR8jFzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOEVk83JFcZw4MvSTfXQOad3Z9sVMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFQDp8+bw Rvbslb9JU82W5uJGvAkHp/1M0CGkthvL4jV0iFnAA70ySjt4iPD+UrwTJdIed679 V31dqF3hEISEkbmNJI4ttkNmrg4uu4pOovPOscwT9OtIcbgWnOesHUy/sj72X3/9 H85HcvBJ81asbwzFF26AOhF3UQ973aasN4516TARMNHRl/JyTkYUue3koXc31+0/ BhCu32yF9aGRvNT71e7zEKbvtjHjDQrXHky5xk/8GEz3mkrYQAjNLpDvAX5qGmkr n5ddRvKDVY/wrcoaN9IUcTinCKSlDfIPivYJsx4xG9C58qLiao0o61mWMK9DEx4y uZDRd78IpS4yqg== -----END CERTIFICATE-----Generated at Wed Sep 23 21:13:58 2026 by rpki-client