$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft File: h3itgWjgnPktTgSYJX-OnOq_BpI.mft (raw, json) Hash identifier: btvTgp/48HJr6AON/66hDPMIt8TqdWSE6F5xpkRfdC8= Subject key identifier: 2A:24:78:57:17:26:5C:44:43:F8:97:1F:00:3C:9F:1C:B5:73:42:95 Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Certificate serial: 01A0D502305BFFC93BFC5E55F6E6F3E55405 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft Manifest number: 1A90 Signing time: Thu 24 Sep 2026 20:01:25 +0000 Manifest this update: Thu 24 Sep 2026 20:01:25 +0000 Manifest next update: Fri 25 Sep 2026 20:01:25 +0000 Files and hashes: 1: 1-cQy_siX062tFLZkeCmyCEUYxQs.roa (hash: M1tvA2BwBUz9tHkqC8JXVgPLd87OHSLvHcZQsEKJENI=) 2: 1DvNK1UEfocldcVoSCDz4-rQCu0.roa (hash: W9AE3etelZntnhp0Syb26y14LnYuyubNeRnjY+KTeic=) 3: 2IRQ2tg7AckZC-qaAHhGpj_YvX0.roa (hash: E5vcK/Kzq3X0ZU3ua0SSHujRQ2xDF2dauEaV4Vglvqc=) 4: 2ufcO6Solkeoxok1gEGcUzsMb5Q.asa (hash: YPRSCljS8W4a21wjawN3tjkT21ahLvmlXryi5Zk5yms=) 5: 8Q_WyzdZiQckSphgAZIR0v5tHg0.roa (hash: 4fsTe8wbJQmrMv3rGh5NswgG+t+NcVBW7ToId469YgA=) 6: Dt3MJu0uPuH3qq0XGW7lqKsKInY.roa (hash: R0j8gqdXiZr3Lr8QUwpYhsHJ5zeSfVefNgsAEnI0AMw=) 7: MEF3inUBFdwUSzzBPPrNynpqKew.asa (hash: qyxeY4oHRpmv1kLBWmfROmIvHNMqEegs2w5oRBvEBq4=) 8: MmIYb8wrP1LfxhIufZ51w4snAKI.roa (hash: e/pt+I42So6GjGCNLA7r6mnp1Eja3WS/XZO4IhLmB8E=) 9: PzoJn7JmNA7HLgDJj3qABg4rdIg.roa (hash: Pu8elV3ASkAhzzlLq5cnqoeSEZGr98s46wDdEgSzMVE=) 10: Rs1lwHsOhORTbpOYC0DdvHoRuG4.roa (hash: 2ldj5+OjHEBz42EYRxs+dDbaX+fxjP+Yz7ZHeTr6lGA=) 11: SeUVAtbk1hrN2JyKOxE8q4V1UTY.roa (hash: lPG+lMbFgVTXYsR4V2gK2L1a28JoQEgQzgLbi/Qank4=) 12: VBhBA4HiRVMlJSOniY0KYh9CTd0.roa (hash: HSJ8X00wLW6S9kJDTwwCoC+4KhX2XIDhiS0S4EkH16Y=) 13: eLLgkJY0LUjDQzm5GuuyzsHUdO8.roa (hash: 5HseyNnROV3cBPGdpH59V7rf9Io+o9Vye7FV9A2XVfo=) 14: h3itgWjgnPktTgSYJX-OnOq_BpI.crl (hash: xf/qO4Q4wuJqOCv4C2kJa7/W2qY06BQav6YIcfshOqU=) 15: ohXc6oE7ElG-Ajtu7o45-cHtKak.roa (hash: g5o8dbjGn0yFQ7IxAtC49wzuYTWKouvuonHavYlfl2k=) 16: qJ3niIVK-kPpD_FGpR52CMp181s.roa (hash: Y2wZT3A9wJBPyVW0IAHlhorwA/qR0rpoglN3HNURHyM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d5:02:30:5b:ff:c9:3b:fc:5e:55:f6:e6:f3:e5:54:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692 Validity Not Before: Sep 24 20:01:25 2026 GMT Not After : Sep 25 20:01:25 2026 GMT Subject: CN=2a24785717265c4443f8971f003c9f1cb5734295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:90:dc:d0:e2:c4:16:e3:7d:5f:04:31:ba:f9: e6:96:01:44:7b:fe:85:c5:6c:f6:e0:ec:c6:f3:9c: 28:f2:20:74:92:6d:25:33:b7:56:e6:1d:e7:16:50: b6:6d:be:3e:77:ff:87:2b:03:ef:0a:0f:71:95:27: 60:cd:87:0d:45:c3:ff:01:a3:47:e8:55:9d:90:71: b0:1f:1e:61:5c:8a:22:94:22:dd:7b:be:50:2e:fc: a0:03:0c:8f:16:0b:de:4c:5b:9c:42:0c:29:a4:b4: 14:90:f6:90:40:57:1a:25:3e:2f:48:35:14:2f:30: e4:dc:cc:db:4b:21:be:71:0f:d5:d9:3a:7d:ff:46: 06:75:a7:98:e8:43:c1:36:34:f9:53:59:95:51:0b: ee:cc:e1:0c:94:27:26:10:77:63:1a:59:6d:8b:59: 35:59:98:b6:ac:66:f2:4f:a6:4c:38:20:28:d9:3b: 5f:73:c8:b7:8d:84:75:50:d5:c5:2f:98:a8:ce:fb: 6b:76:dc:5a:9e:2f:99:c3:59:11:2d:cd:2f:89:e1: 18:2a:74:b5:1c:9b:79:10:01:c2:48:0e:32:48:03: 0a:55:95:6c:c7:bc:2a:67:c1:0f:3a:38:a6:43:c8: 07:7e:6a:fc:fe:be:d1:15:27:bc:fc:77:ff:ff:f0: af:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:24:78:57:17:26:5C:44:43:F8:97:1F:00:3C:9F:1C:B5:73:42:95 X509v3 Authority Key Identifier: keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:3c:e8:32:7e:b3:37:da:b9:0b:15:ed:56:6d:f9:8b:30:92: 3e:7d:e4:c7:35:54:ca:51:e2:39:e9:97:fb:4b:ca:1a:ca:4c: 7f:80:98:5f:45:41:3d:1f:be:70:95:43:e6:31:ce:a7:cb:2c: 87:3a:f5:ce:10:f5:17:8c:50:f3:ae:61:fb:b6:fa:f8:e2:28: f4:53:c3:2e:22:4c:8f:1b:da:4a:a1:47:55:9c:57:1c:f8:32: fa:a8:e3:18:31:bd:f0:20:b5:51:5f:4e:2f:e7:4e:51:89:40: b5:af:5a:31:c5:24:82:ef:fb:58:16:d8:1b:55:5d:1b:b4:41: 1a:b0:92:42:ea:41:75:04:aa:80:71:39:d4:f1:1a:9b:76:74: ff:aa:a1:76:ab:e7:3c:38:cd:e5:5f:e8:2f:50:5d:8e:fe:38: 05:ba:36:e1:04:0f:8b:81:3d:69:3e:71:03:29:32:d4:7c:a0: bf:4d:32:f6:53:b9:1f:86:9f:f6:e2:2f:79:d3:6f:c6:64:22: db:82:3b:62:40:86:5e:06:5d:49:b8:c5:30:cb:fc:ef:3d:cf: 85:3c:33:87:85:50:1c:86:d2:95:b0:fb:e6:41:81:1a:d7:4f: f0:88:67:4c:70:53:d8:f3:c3:08:ed:24:1a:dd:5c:96:dc:18: 11:ea:40:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDVAjBb/8k7/F5V9ubz5VQFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi ZjA2OTIwHhcNMjYwOTI0MjAwMTI1WhcNMjYwOTI1MjAwMTI1WjAzMTEwLwYDVQQD EygyYTI0Nzg1NzE3MjY1YzQ0NDNmODk3MWYwMDNjOWYxY2I1NzM0Mjk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpDc0OLEFuN9XwQxuvnmlgFEe/6F xWz24OzG85wo8iB0km0lM7dW5h3nFlC2bb4+d/+HKwPvCg9xlSdgzYcNRcP/AaNH 6FWdkHGwHx5hXIoilCLde75QLvygAwyPFgveTFucQgwppLQUkPaQQFcaJT4vSDUU LzDk3MzbSyG+cQ/V2Tp9/0YGdaeY6EPBNjT5U1mVUQvuzOEMlCcmEHdjGllti1k1 WZi2rGbyT6ZMOCAo2Ttfc8i3jYR1UNXFL5iozvtrdtxani+Zw1kRLc0vieEYKnS1 HJt5EAHCSA4ySAMKVZVsx7wqZ8EPOjimQ8gHfmr8/r7RFSe8/Hf///CvMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCokeFcXJlxEQ/iXHwA8nxy1c0KVMB8GA1UdIwQY MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt YWE5ZDY5MTgxMWU3LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3 LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjzoMn6z N9q5CxXtVm35izCSPn3kxzVUylHiOemX+0vKGspMf4CYX0VBPR++cJVD5jHOp8ss hzr1zhD1F4xQ865h+7b6+OIo9FPDLiJMjxvaSqFHVZxXHPgy+qjjGDG98CC1UV9O L+dOUYlAta9aMcUkgu/7WBbYG1VdG7RBGrCSQupBdQSqgHE51PEam3Z0/6qhdqvn PDjN5V/oL1Bdjv44Bbo24QQPi4E9aT5xAyky1Hygv00y9lO5H4af9uIvedNvxmQi 24I7YkCGXgZdSbjFMMv87z3PhTwzh4VQHIbSlbD75kGBGtdP8IhnTHBT2PPDCO0k Gt1cltwYEepAtA== -----END CERTIFICATE-----Generated at Thu Sep 24 22:15:05 2026 by rpki-client