$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: P6g9lLcdlPzh8oe13VN5oagYfs2OFrSe6jlRZY1/Q0A= Subject key identifier: 9F:AA:B9:C5:01:31:F8:7A:4F:66:FE:C9:2D:29:16:D8:81:3B:27:82 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 01A1100382504ED424EC183899CB7E60DC26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 1A9F Signing time: Tue 06 Oct 2026 07:00:27 +0000 Manifest this update: Tue 06 Oct 2026 07:00:27 +0000 Manifest next update: Wed 07 Oct 2026 07:00:27 +0000 Files and hashes: 1: EUJR4oK_-qO6YAPuLUzPIGrtiic.roa (hash: YME5zAJYIJBkBPG7Ysa6vw+XFQl03WoNdtgDEh2gs4U=) 2: M36ECwRcj0TFTMeuL6oi_DsEnkQ.roa (hash: E7Nxan43SS/Yo752esXJfNN3COQpoHbafmeAiyBk1XI=) 3: Q0Jdhd0Xijh5Qg2MMx6tv_NFg0Y.roa (hash: e8/UdF909D8bl8btP6fz+eUx2PtucIwHXcMCcE3Yfss=) 4: S3R-qErkzc-IjOFmeTi4xHy4LpE.roa (hash: SNvSagqffcHVObamPtGGn26yO20xNO70CwB/KL8UDeA=) 5: VBZM83CovnXWWNAoSTmLuwtkvPA.roa (hash: zlKxjFuoWufhSPZybSMNIrhlFC4xMtEzi2DT6Mq8R4E=) 6: exXkKYTtUDjde_sRikIrk050twk.roa (hash: wS6gest7TLN8j3W6GI2oKTVveIMP3Ho87+QuUUyIfgc=) 7: i8iYm_0FW8CEhhGEtap9i1HCpbU.roa (hash: S62F8bLmRb8I4/DcdbRM8zS7BP7h1o24+JuRtSpKmdc=) 8: lISEedj5Gkre55GwsZjKu8moowA.roa (hash: S+Yq3Z38Og7alrPrHO1nngmVCOUzwCqJwWrOwsktrtM=) 9: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: UGINo5JqRwLx6fZH2fTtTrPb3/1vWm3dqgAveGurlJw=) 10: rWY90c2-byEiqpH-pAXqLcTVBl8.roa (hash: /cBf700BNhkKxHBETlqRX/grSyvQegr8+YbQwI/BM70=) 11: xVa6hi9wu8XjSdEwYmXJAx85FhU.roa (hash: 8J48r7Dcw/u08bxZJven18+8CJuosinNuC5v6bFRP4U=) 12: yyRW46EoiEZakH8xmbaVNYZzT7Y.roa (hash: kZjQSsJWQX8APsUvcm4SD5nZIwt5ENQAkgP42qqBCtI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 07:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:10:03:82:50:4e:d4:24:ec:18:38:99:cb:7e:60:dc:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Oct 6 07:00:27 2026 GMT Not After : Oct 7 07:00:27 2026 GMT Subject: CN=9faab9c50131f87a4f66fec92d2916d8813b2782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:b3:0a:17:62:d5:38:e1:c1:1b:30:74:f6:9a: 78:b4:7e:83:17:5a:b7:4c:ef:c8:e1:d4:72:fe:0b: b0:3b:68:9c:92:56:ab:d6:ec:d1:ee:69:b1:5a:e2: 71:ad:e0:6e:1b:21:a4:0d:0f:6d:ec:ca:b5:9b:39: a7:57:80:3e:91:c4:13:d4:60:05:c7:8e:93:f4:d2: cb:0c:80:72:be:96:f3:26:be:cf:6c:fa:ac:44:5a: 47:8d:b7:a6:37:90:78:61:cc:39:dd:49:45:3f:8a: 29:bd:57:f9:4e:2d:b8:07:d1:a6:a4:94:a7:54:54: 3e:e1:ba:ed:a0:f9:f7:0f:bd:da:1c:ae:16:86:7f: 64:2c:9a:ba:1e:41:e0:e1:f2:de:aa:ac:a1:6d:b7: 3a:ad:a0:2b:4f:df:81:db:42:68:d5:3e:ee:d7:54: 58:85:80:48:17:97:8f:e8:88:f1:3d:d7:db:7c:f2: 1c:6c:67:0d:7e:39:ca:b8:ac:7d:09:bc:b5:79:26: 71:93:07:13:ff:af:a5:b9:d9:7c:98:2f:28:b3:d3: 07:8e:92:99:34:5c:f7:19:f6:61:1c:19:b5:6c:6f: 26:66:35:77:e3:00:fc:bd:41:a1:dd:6b:4c:2a:e5: b7:3f:b8:b6:df:13:ae:10:e2:82:0d:24:37:ce:9e: 03:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AA:B9:C5:01:31:F8:7A:4F:66:FE:C9:2D:29:16:D8:81:3B:27:82 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:04:24:8b:ed:11:d7:38:e3:16:e4:33:fd:a0:c5:d8:73:97: 31:1c:36:38:7a:09:bf:56:fa:fa:da:8f:54:74:e2:e7:9b:a5: 3f:40:7b:24:fa:5f:12:b4:a2:a7:d9:1c:25:7d:8f:10:92:78: 59:7b:9a:47:04:ba:e1:2b:a9:ee:4a:16:0c:72:70:6c:61:69: 00:8b:88:3c:0d:a6:7e:be:52:83:79:10:c0:13:70:8b:2b:e0: 1c:f0:fe:1a:cc:cc:67:88:f8:80:ba:83:db:af:91:be:1b:24: 3f:3d:b0:ab:47:b1:66:0c:96:a6:d6:a9:64:8a:38:ee:f0:13: c9:f3:ea:76:7d:58:cd:37:f0:bf:60:76:13:0a:c8:2e:e4:d5: 50:fd:ae:5c:1a:ae:8c:48:f8:87:6a:f1:81:fe:86:9b:0d:c1: 56:fe:4c:01:fc:d7:77:89:f9:78:00:23:2c:8a:52:76:dd:5b: 75:2b:30:46:64:cb:2e:bd:ee:78:f8:4e:c4:1a:4b:d9:11:bf: ee:d3:3f:6a:2a:b3:7c:db:10:15:ad:91:4d:53:98:2d:d8:d8: a9:b2:7e:92:02:1a:7f:5d:29:37:9e:fa:59:3e:67:10:21:6a: 09:2c:be:09:6b:6d:b0:4c:0e:f5:e1:4d:ac:b5:8c:49:c5:ed: b1:1c:aa:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEQA4JQTtQk7Bg4mct+YNwmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjYxMDA2MDcwMDI3WhcNMjYxMDA3MDcwMDI3WjAzMTEwLwYDVQQD Eyg5ZmFhYjljNTAxMzFmODdhNGY2NmZlYzkyZDI5MTZkODgxM2IyNzgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7MKF2LVOOHBGzB09pp4tH6DF1q3 TO/I4dRy/guwO2icklar1uzR7mmxWuJxreBuGyGkDQ9t7Mq1mzmnV4A+kcQT1GAF x46T9NLLDIByvpbzJr7PbPqsRFpHjbemN5B4Ycw53UlFP4opvVf5Ti24B9GmpJSn VFQ+4brtoPn3D73aHK4Whn9kLJq6HkHg4fLeqqyhbbc6raArT9+B20Jo1T7u11RY hYBIF5eP6IjxPdfbfPIcbGcNfjnKuKx9Cby1eSZxkwcT/6+ludl8mC8os9MHjpKZ NFz3GfZhHBm1bG8mZjV34wD8vUGh3WtMKuW3P7i23xOuEOKCDSQ3zp4DewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+qucUBMfh6T2b+yS0pFtiBOyeCMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXwQki+0R 1zjjFuQz/aDF2HOXMRw2OHoJv1b6+tqPVHTi55ulP0B7JPpfErSip9kcJX2PEJJ4 WXuaRwS64Sup7koWDHJwbGFpAIuIPA2mfr5Sg3kQwBNwiyvgHPD+GszMZ4j4gLqD 26+RvhskPz2wq0exZgyWptapZIo47vATyfPqdn1YzTfwv2B2EwrILuTVUP2uXBqu jEj4h2rxgf6Gmw3BVv5MAfzXd4n5eAAjLIpSdt1bdSswRmTLLr3uePhOxBpL2RG/ 7tM/aiqzfNsQFa2RTVOYLdjYqbJ+kgIaf10pN576WT5nECFqCSy+CWttsEwO9eFN rLWMScXtsRyqig== -----END CERTIFICATE-----Generated at Tue Oct 6 13:57:53 2026 by rpki-client