$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft File: RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft (raw, json) Hash identifier: KR51jNkHTlMfQakGtcvPCA3GrmYx4F/SsWXGRBNlSPM= Subject key identifier: 76:40:5C:2A:AF:B1:64:08:E5:A1:A6:C3:7E:11:BA:E5:A8:96:B2:10 Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33 Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533 Certificate serial: 01A0DACD320982C13A5206F2C4FEEE293893 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft Manifest number: EC Signing time: Fri 25 Sep 2026 23:01:15 +0000 Manifest this update: Fri 25 Sep 2026 23:01:15 +0000 Manifest next update: Sat 26 Sep 2026 23:01:15 +0000 Files and hashes: 1: 27SFGjL64PRRMSLcGYBH49SrHwY.roa (hash: PITM8gWftdzoJkt0rkZ9FWqRBqnEUQ3T5vRe+zc5/CY=) 2: 5tISpF8rQEYFqX2FwQmh5rWJ0Zk.roa (hash: AczR6yQs7ci1IaX5b+iS3KJri6446eAoxlf9O/ku2LE=) 3: CFo5ABZ8MUKR3Fd6UO8--zq7M8k.roa (hash: 2+XQO3qwflJmVUasaub9xdlpRBF+UPsxhcWzlGiEL9U=) 4: CJ-zj836A3TR54KML6nA2kNlyiY.roa (hash: AuGdHKTStnhkWfUpHj8s2x6Pp9jt1yZgqVw4hJJIo3Y=) 5: HLt3ChQvLj8LY2RlhdFsx32ZjtQ.roa (hash: wKiOyGKSsl/R2H5PXAn1g9VUgp4V7yTcuvPe7XIgMUI=) 6: N1LDUBXoMuyaQ5RB_L5TdL6A_bo.roa (hash: ydFk7XHt/wPpdtN+nRxyF+IGde9jjOJbhdYJVNBXgSE=) 7: RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl (hash: /eEi9CRC3rktoTPwRVudb1axnFn9wScvWOMLGfeHYAE=) 8: YGc8XwIVxvPvNOy1PgoUyW2QPp0.roa (hash: jYxSVOKSDjKakNAM1hB0qhbPKHM/2nh6XhBXQd6OChs=) 9: fJB8oRf1C6vKaO7myZ7LMHrSK0E.roa (hash: Z3DT4Iuv/+d3kQTawlogZW0GVTOl0W6XRptIt8v4Yuc=) 10: fTMIdoB4kQzu02mFfH9z8btZ5uM.roa (hash: 5eDUcm8uO6+nohQB/UiadkgP4q7oAy/sELIvvCPSQxA=) 11: nk9xUVbrQk03Ta5kBEtwBRsxj3o.roa (hash: y8rjtAjlPGYqktsMfNPd+YZPmUHg0mqok5iv3DPzIpQ=) 12: qfTY39j6wENhgC39URgloBvaDwc.roa (hash: MJgSYqEnjtZo7TnO5PmqwrhzDK5fq5ePybyEEHZ72Z8=) 13: xNYBtHtKlWI4iA2yM39CNxxB3YE.roa (hash: c5VvgWr2oNDztERgklFXuCsqKhPSllyvYEbuD8nPSxI=) 14: zaDnFGvlfelI_tMjoTP339vPBGw.roa (hash: 6zQB6LLudq9lrD59fSKuhQnrVhHCZxEGxEn2HPI44zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 17:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:da:cd:32:09:82:c1:3a:52:06:f2:c4:fe:ee:29:38:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533 Validity Not Before: Sep 25 23:01:15 2026 GMT Not After : Sep 26 23:01:15 2026 GMT Subject: CN=76405c2aafb16408e5a1a6c37e11bae5a896b210 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:bf:0c:15:fe:b9:4e:c3:25:da:bf:75:8c:7c: c3:f0:b8:95:96:e8:58:25:49:45:c3:f3:4e:ec:65: 46:63:05:dd:64:28:db:73:84:e6:6d:b2:03:8b:2e: 68:b2:f4:e6:64:44:0f:09:31:9e:b3:64:b8:e9:2d: 4a:5d:39:99:30:75:28:8d:34:c6:cf:ab:6f:2c:4d: 64:fc:03:d5:ad:40:7f:38:77:e2:77:67:6f:7e:a7: 2e:10:34:84:e4:e0:63:e3:62:d2:6b:83:39:53:b9: f3:ac:d1:ca:d9:c8:2f:f9:16:94:16:10:a8:17:7a: 09:73:eb:5a:f2:b4:94:5f:05:fd:3a:03:5a:0d:d7: b7:6e:30:ae:23:5d:04:eb:b2:aa:4a:e5:25:cb:80: 60:d5:cd:58:9f:4a:ac:9b:ac:b0:0e:23:ff:40:5a: fb:a6:0e:3f:96:5b:a4:6a:50:2f:a7:d5:c1:ca:69: 21:3d:5d:c6:60:61:37:84:cf:4f:5c:c1:1a:68:34: 33:66:9e:41:5d:c4:44:10:1c:0c:b7:6d:76:f5:86: 07:90:68:ec:4e:75:3d:ea:14:dd:b0:1b:25:b4:ff: b7:3b:ac:8c:0f:34:3c:9f:82:90:fa:88:72:05:99: a1:c5:82:e7:c6:1f:0a:5d:25:4d:b1:3f:7d:7f:4c: bb:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:40:5C:2A:AF:B1:64:08:E5:A1:A6:C3:7E:11:BA:E5:A8:96:B2:10 X509v3 Authority Key Identifier: keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:c8:bc:97:6a:7b:d0:0a:2c:0e:43:63:a1:c9:0b:f1:25:a6: 88:ee:3b:4e:0b:87:8a:3c:53:c0:cc:1f:06:cb:ca:87:91:f3: c1:db:02:b9:e5:d3:d5:d2:53:10:96:65:a4:3d:d7:12:d6:6a: db:a5:b8:4f:8d:56:94:b9:19:89:2f:96:2b:41:50:2e:d3:ee: 27:96:e7:5d:6a:37:cf:7a:b7:fe:16:8c:77:fc:f9:44:c6:71: db:8c:c3:ce:78:fc:b4:1f:c0:57:5c:b8:11:a6:81:72:1c:9f: 70:cd:c4:1c:1f:c9:ab:de:f1:50:54:0c:dc:49:6d:8f:8d:d3: 26:96:3f:6e:d0:1a:f1:29:3d:ee:e7:a2:31:09:ae:a1:62:5b: 2d:00:d6:24:e6:71:10:78:ab:3e:fb:2e:48:32:e6:41:a5:29: 4c:5a:07:0a:0b:68:bb:0f:e3:d8:93:9a:8c:03:9f:e9:9f:f1: 77:69:37:93:a4:28:75:15:19:fa:47:ac:ea:66:8b:89:9a:47: 78:60:da:4e:cb:05:c7:fa:53:77:2f:5f:92:64:af:c0:43:41: 80:6e:af:6e:fe:6a:f6:9f:19:05:09:b3:90:dd:0e:96:8f:bd: df:69:12:fd:c2:e4:bc:47:38:05:8c:92:10:df:9c:eb:c3:90: 03:d6:36:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDazTIJgsE6UgbyxP7uKTiTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTkxMjA4MDljMjNiZjMwMzNlM2Y1NzM5OTUyNzZmMGM3 YTI1MzMwHhcNMjYwOTI1MjMwMTE1WhcNMjYwOTI2MjMwMTE1WjAzMTEwLwYDVQQD Eyg3NjQwNWMyYWFmYjE2NDA4ZTVhMWE2YzM3ZTExYmFlNWE4OTZiMjEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur8MFf65TsMl2r91jHzD8LiVluhY JUlFw/NO7GVGYwXdZCjbc4TmbbIDiy5osvTmZEQPCTGes2S46S1KXTmZMHUojTTG z6tvLE1k/APVrUB/OHfid2dvfqcuEDSE5OBj42LSa4M5U7nzrNHK2cgv+RaUFhCo F3oJc+ta8rSUXwX9OgNaDde3bjCuI10E67KqSuUly4Bg1c1Yn0qsm6ywDiP/QFr7 pg4/llukalAvp9XBymkhPV3GYGE3hM9PXMEaaDQzZp5BXcREEBwMt2129YYHkGjs TnU96hTdsBsltP+3O6yMDzQ8n4KQ+ohyBZmhxYLnxh8KXSVNsT99f0y7KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHZAXCqvsWQI5aGmw34RuuWolrIQMB8GA1UdIwQY MBaAFERZEggJwjvzAz4/VzmVJ28MeiUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuci8l2p7 0AosDkNjockL8SWmiO47TguHijxTwMwfBsvKh5HzwdsCueXT1dJTEJZlpD3XEtZq 26W4T41WlLkZiS+WK0FQLtPuJ5bnXWo3z3q3/haMd/z5RMZx24zDznj8tB/AV1y4 EaaBchyfcM3EHB/Jq97xUFQM3Eltj43TJpY/btAa8Sk97ueiMQmuoWJbLQDWJOZx EHirPvsuSDLmQaUpTFoHCgtouw/j2JOajAOf6Z/xd2k3k6QodRUZ+kes6maLiZpH eGDaTssFx/pTdy9fkmSvwENBgG6vbv5q9p8ZBQmzkN0Olo+932kS/cLkvEc4BYyS EN+c68OQA9Y2Zw== -----END CERTIFICATE-----Generated at Sat Sep 26 01:45:52 2026 by rpki-client