$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft File: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft (raw, json) Hash identifier: sK5MeQv3tO3pYnj1sV6ICKRrrk7kKOZRqLkc01Yhd1o= Subject key identifier: BF:F2:25:2D:6F:01:2B:BC:B6:8D:5A:5E:69:19:06:9C:0A:04:65:B9 Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Certificate serial: 01A0CCD9CF6B5CE15CA02E729E777BD80163 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft Manifest number: 1434 Signing time: Wed 23 Sep 2026 06:00:21 +0000 Manifest this update: Wed 23 Sep 2026 06:00:21 +0000 Manifest next update: Thu 24 Sep 2026 06:00:21 +0000 Files and hashes: 1: 30posY3TsM2Fh--sfGLYSxzt9Oc.roa (hash: i0NTnZ+KyqqJwh0JnlpuYIHLq99sFP6hfH0tju3c/hs=) 2: 9I6L8TRP3qtz3CYYh3ww5T352z8.roa (hash: 1gf4QeHFa9dKbCRpBcjsV/snv/t5NnmR9Bj8FONPgak=) 3: 9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl (hash: DlBiChH+4uWg2x9LuvboYqlBlNqv1yX3U4rrNzy2z3c=) 4: ADT8NHavskB_f-QX_biQB6s3hjM.roa (hash: g7mT0bM8U1tBgaCrO9JeZJLHUsM1LBUnAA963U3MJWE=) 5: Cp5yS6CVdtI_QBkILVp1ijYMyLE.roa (hash: YPwRTq6Ianr0pyiyDMEVnQhaRfOWjLxD4nQBsuUMiJ8=) 6: FGLnKBzVI-597TwFzftKEh7eFtw.roa (hash: gvkPDH7rR/0SyEyQmCV6OKwz58riOem+Rs/N5gQmmaE=) 7: J6A_hF4O7cxI8QJluboyBCe16v0.roa (hash: edsf8OO27RWYtOi702k6Qhe7cJI0t15sATzZb5sCsJ8=) 8: JpxTxfw2ssZJ-D-usc6fT8_tYpo.roa (hash: ME9ldE0g3oGjS+XPcEcObEtF7Drize8iSKju//IwLr8=) 9: MdXllBZP0mMZ0dXI6p75TCwhxPo.roa (hash: 4XNUO6DsPpBG+M6Ws/hUL/dm11Zqlvo8pLHd9xOnlHo=) 10: PayA9942Pu3PEwdgbc9zI085M7A.roa (hash: pkpsKDUMLuKxSQ8sea1A1XeztsAXtWdezuYMLOySqF4=) 11: T2qI-tmExKYn1eWfx_VoMdETSAI.roa (hash: Q8kLghkiObeLI8QCsOnyZ3zgLAeqeujYnFMSzamIy+c=) 12: XFxCvMCsHyRP2z8mBpyxB0uIB8U.roa (hash: /tuQu6/xB06ReHmzfQveAmef0J6ssqWSdP7twFz2nRo=) 13: XfRQ7x16c093P2sZcGF7VButLJo.roa (hash: 6WQLaVQEZMaci3iXhCcf6sxELhb4Zh3H6wea88iRvTY=) 14: aMmAT04Fng3KRcATi2yyAEaYSwQ.roa (hash: lAvJ/GiNFtquJnb2YbKyar0uxyjC9nvwVgo4miLsClo=) 15: i7jxo6_GB1o_OmBl3PrmVS4XnPA.roa (hash: 8NhSbKhEfu8jyqD1wovs3TRW3fNcgXTNne21hQm9qN4=) 16: lBbPrenKlA3Sq-uIUKDdAiDokxs.roa (hash: 8cnNfRffd7F/oZoq0DdI1sFhx5I9K/eiWM52AqJzzeI=) 17: sVAk55K1bjvD6NWoqyy6bpvKPNM.roa (hash: PMewucLZTeF6kJJLzoads50StAWlilqhYdIQchwQaB0=) 18: sysq58LMYKdBhx-ibBYNHAxQl8g.roa (hash: HwICsnv3lm+NXgLT5+1pkn50yR1pj2hwdaS9hW8jkA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cc:d9:cf:6b:5c:e1:5c:a0:2e:72:9e:77:7b:d8:01:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2 Validity Not Before: Sep 23 06:00:21 2026 GMT Not After : Sep 24 06:00:21 2026 GMT Subject: CN=bff2252d6f012bbcb68d5a5e6919069c0a0465b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:d4:d5:3d:f6:4e:3e:25:40:e4:41:a3:cf:c1: d6:69:f5:4a:07:d5:97:71:95:8b:71:91:45:52:83: c7:01:93:bb:6b:e3:0b:90:51:50:40:01:28:6a:a4: a6:93:0d:2f:11:75:82:39:35:7f:1b:98:be:5b:5d: 67:bf:ed:19:e6:07:60:43:8f:38:72:23:9f:57:f8: a0:0e:41:ad:38:93:7d:70:5a:e8:e0:e7:f7:9e:fe: de:a7:21:0a:49:ba:81:a6:76:e0:47:b6:80:2d:69: 95:5a:eb:38:8c:00:10:ce:be:67:ab:af:32:1d:2a: d6:f3:50:d5:e4:83:54:7a:52:44:4e:2d:80:16:bf: c9:7d:c2:fe:70:53:66:72:0f:89:5c:ff:d4:6d:23: b1:2d:f6:4b:84:66:48:c3:47:a4:de:62:c3:9d:b4: c3:f8:2b:ab:08:04:74:3f:ae:b6:fd:b7:44:0a:dd: 91:5d:29:11:53:ec:13:20:e3:f5:de:18:3f:c1:65: 17:c8:3a:5c:0a:49:05:79:72:bc:25:00:ec:f3:69: ad:2a:b4:c6:ec:6a:d8:6d:25:8e:de:61:c4:a2:b8: 55:e0:89:39:86:41:b8:43:66:f2:1f:b9:ff:27:90: 76:d7:0f:37:8f:fc:d2:b1:62:48:5c:87:bd:af:6d: c3:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:F2:25:2D:6F:01:2B:BC:B6:8D:5A:5E:69:19:06:9C:0A:04:65:B9 X509v3 Authority Key Identifier: keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ac:27:f8:64:d9:6b:f9:a2:53:82:43:45:57:31:64:e4:68: 46:67:22:26:20:e1:2a:f9:05:2e:e9:fa:69:87:df:14:b8:6e: 69:65:87:10:51:84:c9:f3:08:e3:66:f5:92:03:2c:8d:a9:af: ae:a2:9a:b9:d3:6e:5f:69:1b:e1:b4:96:d2:5b:1c:55:de:04: 39:68:52:5a:24:c0:9c:f7:ef:89:5d:15:58:d2:fc:f6:8d:f1: 39:04:46:b9:b1:70:b8:e4:7d:c8:1c:2a:97:a9:71:b8:e7:28: 8c:b9:f4:78:fb:4e:51:7a:d2:2e:01:e2:7f:17:8d:c8:7d:a7: 1f:48:b6:8e:04:0c:87:be:5c:a4:a3:96:0d:25:0a:37:8b:66: 43:52:4c:c6:88:53:85:bd:0c:68:26:fa:76:fd:63:ed:58:62: fb:06:7d:3e:1b:71:2b:90:6d:f6:0b:bf:5c:0f:4b:cd:64:08: c1:54:d2:18:28:9a:4c:10:98:ea:d8:d1:c9:cb:f9:03:61:c8: 8e:e9:00:ca:92:53:de:f3:ad:fa:e2:2c:92:69:bb:b3:91:bd: ed:56:81:5d:8a:fa:fc:bf:2e:15:2f:8c:0d:0c:cd:e5:8c:62: 57:8c:07:43:51:dd:73:06:11:4a:bc:35:68:33:cc:7e:98:f8: f0:db:72:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDM2c9rXOFcoC5ynnd72AFjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZmIzMmQyMjY2YjFmOWJjZTU3Y2FjOThiYzAyNDdmMmM5 MTk3ZjIwHhcNMjYwOTIzMDYwMDIxWhcNMjYwOTI0MDYwMDIxWjAzMTEwLwYDVQQD EyhiZmYyMjUyZDZmMDEyYmJjYjY4ZDVhNWU2OTE5MDY5YzBhMDQ2NWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtTVPfZOPiVA5EGjz8HWafVKB9WX cZWLcZFFUoPHAZO7a+MLkFFQQAEoaqSmkw0vEXWCOTV/G5i+W11nv+0Z5gdgQ484 ciOfV/igDkGtOJN9cFro4Of3nv7epyEKSbqBpnbgR7aALWmVWus4jAAQzr5nq68y HSrW81DV5INUelJETi2AFr/JfcL+cFNmcg+JXP/UbSOxLfZLhGZIw0ek3mLDnbTD +CurCAR0P662/bdECt2RXSkRU+wTIOP13hg/wWUXyDpcCkkFeXK8JQDs82mtKrTG 7GrYbSWO3mHEorhV4Ik5hkG4Q2byH7n/J5B21w83j/zSsWJIXIe9r23DKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL/yJS1vASu8to1aXmkZBpwKBGW5MB8GA1UdIwQY MBaAFPX7MtImax+bzlfKyYvAJH8skZfyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAt MmQxNDNkN2I4NTNjLzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC9mYjQyZWMtMTBiNC00ZGNmLWJlZjAtMmQxNDNkN2I4NTNj LzEvOWZzeTBpWnJINXZPVjhySmk4QWtmeXlSbF9JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIKwn+GTZ a/miU4JDRVcxZORoRmciJiDhKvkFLun6aYffFLhuaWWHEFGEyfMI42b1kgMsjamv rqKaudNuX2kb4bSW0lscVd4EOWhSWiTAnPfviV0VWNL89o3xOQRGubFwuOR9yBwq l6lxuOcojLn0ePtOUXrSLgHifxeNyH2nH0i2jgQMh75cpKOWDSUKN4tmQ1JMxohT hb0MaCb6dv1j7Vhi+wZ9PhtxK5Bt9gu/XA9LzWQIwVTSGCiaTBCY6tjRycv5A2HI jukAypJT3vOt+uIskmm7s5G97VaBXYr6/L8uFS+MDQzN5YxiV4wHQ1HdcwYRSrw1 aDPMfpj48Nty1g== -----END CERTIFICATE-----Generated at Wed Sep 23 11:03:51 2026 by rpki-client