$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft File: _EQpfpJxxu3wZJFfYYCuEmkN2os.mft (raw, json) Hash identifier: xdp/S1FKje/czdGLblC0PHem8OO3Seh94P6Pu03jyrc= Subject key identifier: 83:3D:10:47:E1:E4:5E:A8:66:EA:3F:BA:E7:F4:64:5A:04:4B:C7:E5 Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b Certificate serial: 01A0DBDFE69A9CBEE6112719EC4C1593E65A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft Manifest number: 1A87 Signing time: Sat 26 Sep 2026 04:01:18 +0000 Manifest this update: Sat 26 Sep 2026 04:01:18 +0000 Manifest next update: Sun 27 Sep 2026 04:01:18 +0000 Files and hashes: 1: 06pvda0HGfo4YEYPGpGmXC6pc6Y.roa (hash: EHWs8d7V2Xw60HILi+lG9QLvqYdWqwG17JXDByqVTf4=) 2: 0qb9sAGkBvYUU1loJseXlz25OJ8.roa (hash: m0/HWEMnf/XDbGuQAyqai3DBn5WtxpMTkpZaFwmohUU=) 3: 1CTEFp3Jvu1F6k0C2ZBodYWIJDs.roa (hash: QqXzCs08vUdvWpceemZhSOwsQeTszW8Ksi9FXrp8nQE=) 4: 8PB8h-ISSr84nGZyoSJpxK03xZI.roa (hash: Cew3GhEYpI4Z/2ax+94ohovUkb4oKZoSCX7ODBgVNmM=) 5: IvkQusFVMgz0ZI6M1X5qqmaNPyw.roa (hash: ZoLWMz91Ei85Q0Gy+4SDhp1FLqI4f9bOpK4hh8GaK/8=) 6: NNRjD7YhPe6-EjPeFBa4lVzPKw8.roa (hash: xUYG1EGs/Kb2jGbZ4wzN7JCg3UzLO4J02OnlyyP+rbI=) 7: QiTXesEnDUMy1VzzXBZ1a1EV7ao.roa (hash: AmaLGYuWMfv3G3fabRyFwE+8Jn7gj+JYPPZU6wIdzfM=) 8: _EQpfpJxxu3wZJFfYYCuEmkN2os.crl (hash: sxfjHfvGVtxfFETzorkXGTFYLtb2bx/L1e14JH7j3bo=) 9: cIdkjRc0JvHWTaaO3mTRRgEBkoU.roa (hash: ptn5S1Yuf3bTojyRJRd81I1o+BdvHo6hZHXrG2ciiWg=) 10: eRFPbbhCM3fQeuHtAy-_UUJuBNg.roa (hash: 3nMJ/JSGaAPLFOCeRvG2BF5qk6+epYjQPD3rGjOwh4Q=) 11: iRG6zhI_HArOTibBs1JV2QE0L_s.roa (hash: 8mVwvZAIQVh0/wtwoWgJ8lPinuzQ8kyjmM21PvKhN0s=) 12: jJ7bTrKqTB9Ie-vB0SBJ5-Gx8Sg.roa (hash: o7j7tuDcWPE6XNy+iCXCizaUbQy3SeVO+VUusUMlj2g=) 13: o4kcznAm2T0ASiz1k23GlpFApQo.roa (hash: 0h+QZjz610NJvNnLCynCQNNnIrDvurMXfFwfYmM8IOM=) 14: wgPfSToKC9FTCAvt-lOgja8J3iY.roa (hash: PycEQ97+AB+dOAuBHC6DWVd/AycBCpoV++Dya2/jh+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 02:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:db:df:e6:9a:9c:be:e6:11:27:19:ec:4c:15:93:e6:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b Validity Not Before: Sep 26 04:01:18 2026 GMT Not After : Sep 27 04:01:18 2026 GMT Subject: CN=833d1047e1e45ea866ea3fbae7f4645a044bc7e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:88:65:f2:f3:59:3e:80:4e:d4:46:c4:7f:25: 59:9f:16:97:6d:f3:d5:ee:08:cb:c8:67:85:72:7e: ed:39:a9:47:79:3d:21:a5:d3:29:28:ba:ff:a9:3f: 10:ce:ab:a1:df:ea:2a:7f:5a:91:e4:c5:92:0c:7a: 28:30:a5:a6:cb:e9:95:b2:5a:b9:a1:ec:a0:bf:aa: ae:e8:7a:11:bf:13:4e:4e:13:83:fb:0e:d2:eb:e2: d4:c6:78:dc:c8:e5:37:9f:dc:80:3b:67:8e:66:6a: 88:b0:70:c0:90:26:54:e9:76:09:47:c6:06:ad:15: 5c:05:07:fb:8e:6d:2b:a1:ff:49:04:57:b2:36:04: 06:6b:64:e6:ae:55:1f:a4:c9:9c:3a:10:50:1d:d6: 97:e0:72:4d:a5:78:ae:24:8f:77:59:79:ad:f1:11: cc:d6:1a:08:f6:69:f0:a6:bd:fd:97:06:3e:4f:d0: e9:34:a4:74:74:9a:42:6d:9f:2a:42:b2:c6:64:81: 79:bc:66:a2:0d:a2:25:f2:dd:67:42:41:72:66:98: 3a:c1:ed:29:8d:7d:ea:29:fe:16:24:b8:e5:20:02: d1:84:97:a5:fd:ac:d4:dc:57:c5:9b:d8:4e:a2:14: 41:a1:cd:bc:e5:a3:d5:9e:9f:31:8d:c8:ef:e5:16: 2d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:3D:10:47:E1:E4:5E:A8:66:EA:3F:BA:E7:F4:64:5A:04:4B:C7:E5 X509v3 Authority Key Identifier: keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:cb:b5:87:df:6e:ed:70:ae:a5:95:16:7d:fd:79:ae:4d:1d: 07:f9:5e:05:39:1c:58:d8:c7:36:92:27:78:96:78:a5:52:16: 1a:4e:7a:a0:8b:f4:20:72:ce:c0:5c:89:30:5f:04:ec:12:c9: aa:6d:37:fe:42:dd:f4:3a:77:bc:ac:16:a6:49:9a:34:d4:67: 2f:f5:7e:22:19:42:91:60:ed:65:42:0e:ee:34:59:f4:69:2e: e5:5c:4e:21:03:b5:35:db:e9:9d:5a:da:25:d4:bd:1f:5b:42: 24:69:e3:23:7b:bd:98:38:33:c5:42:37:8d:26:a4:a2:11:90: 82:96:33:0b:fd:40:ed:04:f1:26:3f:b0:f4:5a:fc:a8:7d:5e: b2:a9:b6:b6:cd:51:13:67:0d:98:67:99:e7:83:3e:75:86:b3: ef:08:48:65:67:06:fe:7b:5d:8b:93:d4:41:e5:b1:f6:2c:43: 69:eb:ee:83:04:0a:89:41:79:ce:7d:c1:c5:eb:bb:51:3b:57: c2:c7:5e:a9:16:a7:3a:ba:85:13:d9:a0:b0:cf:49:c2:9e:0a: 21:cf:53:b5:48:2c:49:12:ca:0d:c0:33:24:7b:bc:cf:48:a0: d2:73:46:ad:54:b5:e2:59:2b:96:ae:a7:53:9d:1f:8d:23:40: e8:1d:a1:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDb3+aanL7mEScZ7EwVk+ZaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNDQyOTdlOTI3MWM2ZWRmMDY0OTE1ZjYxODBhZTEyNjkw ZGRhOGIwHhcNMjYwOTI2MDQwMTE4WhcNMjYwOTI3MDQwMTE4WjAzMTEwLwYDVQQD Eyg4MzNkMTA0N2UxZTQ1ZWE4NjZlYTNmYmFlN2Y0NjQ1YTA0NGJjN2U1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4hl8vNZPoBO1EbEfyVZnxaXbfPV 7gjLyGeFcn7tOalHeT0hpdMpKLr/qT8Qzquh3+oqf1qR5MWSDHooMKWmy+mVslq5 oeygv6qu6HoRvxNOThOD+w7S6+LUxnjcyOU3n9yAO2eOZmqIsHDAkCZU6XYJR8YG rRVcBQf7jm0rof9JBFeyNgQGa2TmrlUfpMmcOhBQHdaX4HJNpXiuJI93WXmt8RHM 1hoI9mnwpr39lwY+T9DpNKR0dJpCbZ8qQrLGZIF5vGaiDaIl8t1nQkFyZpg6we0p jX3qKf4WJLjlIALRhJel/azU3FfFm9hOohRBoc285aPVnp8xjcjv5RYtAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIM9EEfh5F6oZuo/uuf0ZFoES8flMB8GA1UdIwQY MBaAFPxEKX6Sccbt8GSRX2GArhJpDdqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUt YWUwN2YzMmU0MTAyLzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Mi83Y2IxNzktYWQyYy00ODI0LWExZTUtYWUwN2YzMmU0MTAy LzEvX0VRcGZwSnh4dTN3WkpGZllZQ3VFbWtOMm9zLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPsu1h99u 7XCupZUWff15rk0dB/leBTkcWNjHNpIneJZ4pVIWGk56oIv0IHLOwFyJMF8E7BLJ qm03/kLd9Dp3vKwWpkmaNNRnL/V+IhlCkWDtZUIO7jRZ9Gku5VxOIQO1NdvpnVra JdS9H1tCJGnjI3u9mDgzxUI3jSakohGQgpYzC/1A7QTxJj+w9Fr8qH1esqm2ts1R E2cNmGeZ54M+dYaz7whIZWcG/ntdi5PUQeWx9ixDaevugwQKiUF5zn3Bxeu7UTtX wsdeqRanOrqFE9mgsM9Jwp4KIc9TtUgsSRLKDcAzJHu8z0ig0nNGrVS14lkrlq6n U50fjSNA6B2hIg== -----END CERTIFICATE-----Generated at Sat Sep 26 08:48:41 2026 by rpki-client