$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft File: 1KdSLSfmKuI6RgFD66ZzO3myRHc.mft (raw, json) Hash identifier: VE0/1FfG3nC0+sQGETpO2N0TWzW7bBjWkMBjdaxWkQk= Subject key identifier: EB:98:85:8C:5B:3B:13:93:9F:D0:5E:65:75:D4:E8:45:E9:F5:6B:CB Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477 Certificate serial: 01A0D3839E8DB2BDD3EF0C4011C44817D5C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft Manifest number: EA Signing time: Thu 24 Sep 2026 13:03:33 +0000 Manifest this update: Thu 24 Sep 2026 13:03:33 +0000 Manifest next update: Fri 25 Sep 2026 13:03:33 +0000 Files and hashes: 1: 1-N-2fC6tfa1s0LvlFU9jMbLrhuE.roa (hash: RE3o5Zu1XdF9S+04ylutP3QqzKtcsQWMmIT7k6SNN/Y=) 2: 1KdSLSfmKuI6RgFD66ZzO3myRHc.crl (hash: zEmP+D1nRAV4U84gXrNnd5b4WY5+ZAO2HvEWN7ifcvA=) 3: 3DxUz2y-w-oU9XkwLblu0mnExSE.roa (hash: j+9/Pz/kjffz7vgclDxuszWQFHGKnkAq/0VsDedDSxA=) 4: 6kERmgZGL5UqVKqbENAa-FNSgHc.roa (hash: AClJH/YtHZ63QiXgfCJgcjixUw8nfxsUu8O75U0YUJI=) 5: AhMkHazE-91WYq1pzL4rD-YgpOY.roa (hash: N7RR15LWLaA1GWhDaUwnFbFOrZQPw3IJjIesRqmsD5I=) 6: CBhFxYlbZteyN6PZ-Vmyl3AaymU.roa (hash: cEqju8RXsbFDyu/dW9+z6y7ODNyFcVjrj9eawVPTsVE=) 7: FkByO5VyomUSANjFcmnEdvz3Cko.roa (hash: z10lQ6g3SDPSArAHievRO6Z2mqsSExBrr1d205CDUP4=) 8: K7O0xdV18ha5dPNdq-y0BPQgffc.roa (hash: GEqEkzuoCanIwB018rtlec4WErFm2E3DumXI3txV98E=) 9: SKjJw3_dqVQh5tqn8vnBC1JzJSI.roa (hash: FFebWzZWCHdxw5ZCEnSdY08q5KwfVzoC6UmmM8w/pz4=) 10: TqDntdHJZddaYt_ZyotBF9-hm14.roa (hash: VjSEFTxxCdGkCwFWGpwHDnoo4e0X5kbRBsmPmmTPxWI=) 11: WvAmQJBuWNK-A1dgFB9mFwv86Gk.roa (hash: i6VXTVtK2u+Sa4dxw7J/aRal1n9vO5pWlCr6D3BmpWo=) 12: XhZYqo-93sizkFwJq1Oc8KABtwQ.roa (hash: FFax2+o10DIFWYK/5aiR6THgjmcFiIwVqFNYjJSFM+w=) 13: bPSazfrJEoM_auhnCGJjDI29Zwk.roa (hash: pMTZbr0m442O8974ozmFdKCgEYF3GhKq7mIvRyWA1Yc=) 14: jlnRp7Jr9ytnSH4nVGSVmBf_k6o.roa (hash: 7kRo5njKROlYBvZ0FU20K/hBTNAanIB/DZh3W6WgLMY=) 15: q-BhPuQnM-Q-h6hN62IefM9bmG4.roa (hash: OIcCu5qI8ffXeo2TrrcMk7ECFhZnyqwj4znnE1b0z/Y=) 16: rUKH9k4MHdd4Y1ypLX0RMcrlJ4k.roa (hash: z/3YdmL7lhmSOdD9Jb00nUrqP817x/GBxNytvu/Ui24=) 17: wZMooB7OVcFLzuI4NUrersbqikQ.roa (hash: pEN10g0qlhvjBHq9CVkl9+QR6Ky5ASwHfrEgR03oriI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 13:03:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d3:83:9e:8d:b2:bd:d3:ef:0c:40:11:c4:48:17:d5:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477 Validity Not Before: Sep 24 13:03:33 2026 GMT Not After : Sep 25 13:03:33 2026 GMT Subject: CN=eb98858c5b3b13939fd05e6575d4e845e9f56bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bc:9b:84:44:06:0d:c4:27:65:8b:db:a7:c3: 11:04:ab:64:61:5e:94:20:83:d0:ec:be:35:40:5a: 6d:49:dc:c6:6b:54:f8:73:07:cd:a2:4d:80:cf:09: e1:7c:b4:13:e0:79:43:1f:53:e5:88:8f:0b:1f:e4: 8e:40:a3:9c:b4:62:4b:35:41:34:f7:5f:26:d3:5e: f2:1d:cd:29:bd:f6:34:d1:48:5e:f3:1e:af:5a:ea: ec:28:fb:3c:44:61:9f:f8:ef:03:28:25:64:43:c7: 70:7a:5f:e6:04:37:d8:96:e7:79:ce:cf:d3:4a:f2: 5c:cf:12:86:46:ad:8e:ee:a2:8d:d3:4a:4a:40:0f: 01:df:32:8a:8e:e7:c1:29:a5:cc:74:ac:43:d7:0b: 72:f4:23:c3:f9:b3:13:89:3e:fb:b4:33:e2:48:80: bd:c9:9c:de:54:83:b3:e8:d5:8c:29:91:af:64:b2: 2f:8a:b6:35:b2:ea:d0:f8:60:42:b5:d7:32:cc:63: 77:ad:f5:e0:53:84:5d:5b:16:ff:55:ce:0f:80:a6: 19:35:9f:46:79:e2:7b:5a:65:6b:52:62:3b:74:10: 54:2b:6f:f5:52:f7:98:42:a1:d7:b1:4d:c7:ab:4f: 90:5d:5f:34:03:da:01:f2:24:63:4d:7a:91:ab:1c: 87:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:98:85:8C:5B:3B:13:93:9F:D0:5E:65:75:D4:E8:45:E9:F5:6B:CB X509v3 Authority Key Identifier: keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:d8:4b:35:76:20:81:b8:f2:bb:03:32:98:bc:43:37:d1:49: ea:53:ac:b4:c6:23:c2:cb:d1:ab:67:45:44:74:e6:61:74:ed: ff:5e:77:58:f7:13:89:07:45:5a:51:49:56:d5:99:c5:23:5d: b0:06:66:27:f7:90:04:75:1e:81:0a:0f:22:a5:88:5d:63:bb: b4:7c:54:33:d1:f6:53:e3:43:44:91:5c:1f:e4:f3:5b:a3:75: f3:f4:55:90:2f:6b:ad:47:a7:b9:91:85:c6:4e:9d:1a:f8:9d: 7d:7e:97:a4:56:56:b5:97:c8:97:59:c8:c2:78:70:0c:26:4f: 2d:b1:48:da:ce:74:82:f4:cf:38:db:c6:dd:54:40:4e:d5:62: 0d:a5:72:ac:0e:06:70:85:63:76:c5:5b:09:2b:2a:fe:30:d4: 30:56:51:65:91:db:40:69:a8:a4:64:48:68:0f:37:16:6f:81: c7:0d:d8:61:05:1d:31:f2:a0:b5:44:ec:2e:d1:2d:18:e0:16: 1a:63:5d:da:27:58:6f:1e:fb:69:39:e2:37:4f:dd:cf:3a:a0: 1f:7b:f4:c9:bc:3e:9d:72:f1:98:30:3f:83:70:60:92:5a:df: 2b:04:db:f9:c8:89:b9:db:30:dd:58:54:aa:ec:ba:70:53:bc: d5:58:97:49 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDTg56Nsr3T7wxAEcRIF9XIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YTc1MjJkMjdlNjJhZTIzYTQ2MDE0M2ViYTY3MzNiNzli MjQ0NzcwHhcNMjYwOTI0MTMwMzMzWhcNMjYwOTI1MTMwMzMzWjAzMTEwLwYDVQQD EyhlYjk4ODU4YzViM2IxMzkzOWZkMDVlNjU3NWQ0ZTg0NWU5ZjU2YmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAurybhEQGDcQnZYvbp8MRBKtkYV6U IIPQ7L41QFptSdzGa1T4cwfNok2AzwnhfLQT4HlDH1PliI8LH+SOQKOctGJLNUE0 918m017yHc0pvfY00Uhe8x6vWursKPs8RGGf+O8DKCVkQ8dwel/mBDfYlud5zs/T SvJczxKGRq2O7qKN00pKQA8B3zKKjufBKaXMdKxD1wty9CPD+bMTiT77tDPiSIC9 yZzeVIOz6NWMKZGvZLIvirY1surQ+GBCtdcyzGN3rfXgU4RdWxb/Vc4PgKYZNZ9G eeJ7WmVrUmI7dBBUK2/1UveYQqHXsU3Hq0+QXV80A9oB8iRjTXqRqxyHZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOuYhYxbOxOTn9BeZXXU6EXp9WvLMB8GA1UdIwQY MBaAFNSnUi0n5iriOkYBQ+umczt5skR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAodhLNXYg gbjyuwMymLxDN9FJ6lOstMYjwsvRq2dFRHTmYXTt/153WPcTiQdFWlFJVtWZxSNd sAZmJ/eQBHUegQoPIqWIXWO7tHxUM9H2U+NDRJFcH+TzW6N18/RVkC9rrUenuZGF xk6dGvidfX6XpFZWtZfIl1nIwnhwDCZPLbFI2s50gvTPONvG3VRATtViDaVyrA4G cIVjdsVbCSsq/jDUMFZRZZHbQGmopGRIaA83Fm+Bxw3YYQUdMfKgtUTsLtEtGOAW GmNd2idYbx77aTniN0/dzzqgH3v0ybw+nXLxmDA/g3BgklrfKwTb+ciJudsw3VhU quy6cFO81ViXSQ== -----END CERTIFICATE-----Generated at Thu Sep 24 18:39:54 2026 by rpki-client