$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft File: afomI7Ii0I2TVpdQRLlAe1_qSLo.mft (raw, json) Hash identifier: pY4uWh/KwvtJdPw7ywCh2shaSHEkPKWvdHvTuR+88YQ= Subject key identifier: 2A:FC:BD:40:D2:EE:41:69:73:F9:66:4B:07:18:03:CC:D5:E4:6A:37 Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba Certificate serial: 01A0CDB6185AE7759388B1692C9E4AF62FD4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft Manifest number: FC Signing time: Wed 23 Sep 2026 10:00:57 +0000 Manifest this update: Wed 23 Sep 2026 10:00:57 +0000 Manifest next update: Thu 24 Sep 2026 10:00:57 +0000 Files and hashes: 1: 00iWueauIjk1oPGK5Ir4BQ6CE5o.roa (hash: M+Ao5Tp6PVqVZmgxhe+qsVFTq6vVJjWSHLks91ZOASU=) 2: 1--siGC9v_UvUxOAFafv_Fn5B77s.roa (hash: LDHSvCANEcsAHTe65oB9R5YLbeer2QU8Ak6a9D9BBjk=) 3: 2yu0ObbMzefwvoYMAE7hgfoDBu8.roa (hash: 7IliMuEfTd77oAXdQXi1jLMCuSMXg0z01MPP8W+nMCE=) 4: 4MCAetrKgVOgziX3eUQM1qCMcoA.roa (hash: pKEGkBvTYQ30ve6Dr1u+ev6XKEMVVvkV1Qtxo8jX2fg=) 5: 4vFWTacP1XjQ3vN6OomKDOpVg3c.roa (hash: S3vu0CZRawvYi/e+89yMAd3/fad52cOyXirUhf8xBh4=) 6: 5HIB4XdFvUnYx8q0lLws_OpypiI.roa (hash: SmHZRFszjS8iXB/TCR3lbdZL3Jg43B7hycjvKJTAA7g=) 7: BGwJXl4WMBOKQ5hi3Kbb5kNQP7I.roa (hash: owx7ZG+kU6z5np1MdWRPPkvLT3950fTOMGJXFM5YMmI=) 8: EEMFTvlrN07wvKNuNLCLD2MHLrY.roa (hash: dhxAWdKgbkSPHF1Jcc15m1VWyoVYzFhfM6bx8pX+HCI=) 9: Fi4AB2k5RVSdMb4GHgw0ckyjigo.roa (hash: 3ZHSAL4bzQYAmn/XzcARd3JSpHYZITnPX09te0ZOJe8=) 10: GfeTVKT6QqRWrLzTEXKMmvGyTjE.roa (hash: Fz9RtLxb0cCASF3ekBqVuQmlc+qfn2/OvuQuLALlIfo=) 11: GmtGk4SLn-DDmgyrRY3obXFqmv0.roa (hash: mR8U2nhz9ny7+9ARenqxmpCgIeORt3ULne143pofros=) 12: HoZNHcVftjja-8LWzF2TgzwYskM.roa (hash: WYbQQFrey7c2u2+oSYYECV6iIWkitnDN5rYtWg7W/FU=) 13: HrMj_GnwQIFuTnfdxxyIjE-1fTA.roa (hash: C0n20k3l0t5enAnvei+Ir6HCzxKKQiDD91+lXP6nt/Y=) 14: Hryzx-pwvlVLua7C7CwUG7EWP1k.roa (hash: l0zDMzl/IgowYFOIxojCPkP97nrGKBPmrPKsURPaWog=) 15: JdHeOcGDJJdM6UCWBXfWcx1Tm7I.roa (hash: 8taEk02k3Zh0P+f+vS6Vif1SJ8fYMwfiQV84thV5nlI=) 16: LgIlB017gkGvi3tfQvji-1KlnBI.roa (hash: FuA/PfPjj6SPGH44kDoH28D+Il0HM5oBcMZDYQ5B0Y4=) 17: N_I9-811oh5FvMv-Jze_3iZkh5w.roa (hash: a32SbcQteIT/Df4/H4a0JbpwFS4P9eHYICrMZQEJkgg=) 18: Nn1ugqrOo-DLPuFfuRTKzIYlFTA.roa (hash: gH+Q1Nbzt0sQEZkopgmfflF8dd0ysDnGlv86WcIkIsY=) 19: OKg9lDRnR4jN86ZPv2a9kDmE6ko.roa (hash: wivGX1Ju7hjNkdPElNOh+99tkUZ/3DE5nZF6Omx8P8Q=) 20: PIK_cDodINI0iYBstXmbPX8NmbU.roa (hash: wsh8RB6vngnvVEJooLnSoxpJFfQxV9+OAGAxc8EZhQ8=) 21: QKVIm5IN9DXhY0lZHIuK-tLCdjc.roa (hash: B0l0KtZlg6feZIbRhT20JcRhbB1GlNPkc7c4bzQ8ZMk=) 22: RF_oJzedGN9LU1qV2KxS5kPzKzs.roa (hash: XTT+vMGxme3MjsXfUunv0kvDQOhrCp5uohUm6aDJtgA=) 23: RMhcDisaRzIq0_4cDfkL8QT-WU4.roa (hash: ERC98YFMBM5135f8A2iZkODlDE8s7iT35+gDcMuLfP4=) 24: Txs6_HSShzslxSEnb_V2cEpgnGU.roa (hash: gbJLn9T5ZMo97yRRx+iLp2ECvFVQ33SP7nTRm5E5ZEw=) 25: UMbec_9pC1aPO-IsfLldWi3rqtg.roa (hash: oPk5MO0ZQ4tB7i3LW6qhLqnmZ2K1QC7r2lpBu4LR58Y=) 26: VgOMDG7UZtHB1CKshYGZFj4Cqic.roa (hash: xzzAiNera9mLgzvG+jPZ47RQagAdP1jBC2IGHubscMU=) 27: X6GDvsh_wT4Bzq3QdVomARBsHOw.roa (hash: urWTsIN+xxnNEPbJOMCoifFltW+NmhF15UAZYa0NG/4=) 28: ZHMjsQqVxx7rOWHRF92jjp-zvjk.roa (hash: sKXngRLk8fuvYQ/cGHRKag7kflq9UnRB9uGaASuWaDg=) 29: ZPCa8LQzKDqUpRq3xwqs6wcVgP8.roa (hash: pzJkGMjERLepMBuQCiqoAo0aqIY6I+eV0YqeRO3/Yuc=) 30: afomI7Ii0I2TVpdQRLlAe1_qSLo.crl (hash: /zXqjTDeE7505TPh6Lv02UAg/+t5qx7qy8bze6/RRic=) 31: bR49W-fLfnPV9jOae-FinorZ08U.roa (hash: 5e6OwWdwStFE014wvp1Q5rpEfFgYf91vyn3XQnqLGlU=) 32: gLDg5wMg6SC_pUFobFAIg1PePE8.roa (hash: +vkIi4zezkFj5sHevBIL/3+BvZs6Qyrwqf9sfJ/UqQA=) 33: lt--SRcLVtMBAyUSEaED30Ld_II.roa (hash: fD6QaGq2/0miHmRj75lRsimQs6FUvOJWMmVCig6mCWU=) 34: mFKdtVkkECRXbr5SxYYEthhWJyg.roa (hash: h3A2tFpBQ3HB5luNdGxkXQa7G5lY/mxXHrD+ln0oC5I=) 35: oKt2Cid9yLvhIC5MK3q_6cG1q5g.roa (hash: i3gzQ6XHE8PbwTvwhvxi9lLYpqn8rRftO7aMWIOG900=) 36: rc3oRKtt_90HxvD3LaPWU6Xr7EA.roa (hash: 29YVA6UeJ1gESTqULKlwFc5LGe3kSzimUyOz6HnaNbI=) 37: v1eEtmAqh7DLq6r5odUm3kae1oc.roa (hash: Mr2A+DP00TZTbOJcOBNPWcOqmgh2Ko+qAajSURN8csY=) 38: zsmBCvMBFiLh5zI01XSmpVHLzac.roa (hash: py2QFHBhaxOUQ3FH29RNTtBqgRB2pECPvs4I/DnYCyQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 10:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:b6:18:5a:e7:75:93:88:b1:69:2c:9e:4a:f6:2f:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba Validity Not Before: Sep 23 10:00:57 2026 GMT Not After : Sep 24 10:00:57 2026 GMT Subject: CN=2afcbd40d2ee416973f9664b071803ccd5e46a37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:37:ff:bb:b8:65:32:31:c8:8d:14:23:14:8a: a7:7c:c0:e9:ec:0e:33:72:52:e8:bf:16:e0:07:ea: d4:59:b9:39:6c:1a:e8:59:17:8a:5e:54:27:44:cb: 09:6f:1a:5b:b8:c5:99:ea:e0:3c:78:90:f8:9f:01: 04:b2:56:d5:6c:8b:bc:1d:a7:8c:bd:99:9b:fd:e3: 69:7b:39:19:18:03:e7:87:03:e3:dc:ee:8e:a4:87: 28:7d:8d:d8:54:41:4e:6a:4c:38:73:85:27:26:e7: 35:a4:8b:88:75:09:8f:2f:f5:a2:97:6e:37:a7:6e: 76:85:fd:21:49:d0:99:2e:31:f2:94:d0:5f:25:90: ea:20:65:fc:7e:98:c3:f0:aa:47:3c:a9:5b:2c:f1: e3:b1:eb:13:e1:0b:d1:63:f6:de:b5:e3:e1:d4:22: cb:6e:a7:11:6a:f7:55:ed:c4:59:27:74:19:f2:6b: 4e:54:ba:4e:0a:ec:a6:17:b6:92:b6:54:0d:b2:e6: da:53:02:4a:09:75:80:84:b0:22:c5:17:47:d0:b6: 9c:1d:5d:8f:7a:b5:0c:ec:0b:9b:4e:7b:e6:80:bb: 64:31:6c:a6:be:cd:3a:9c:84:ec:14:f1:be:37:53: 74:ec:6f:ba:95:22:1d:81:14:73:60:28:a5:c1:96: 2b:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FC:BD:40:D2:EE:41:69:73:F9:66:4B:07:18:03:CC:D5:E4:6A:37 X509v3 Authority Key Identifier: keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:d6:dd:fe:36:19:a1:10:35:0c:01:b1:eb:33:45:7a:b8:a0: eb:e1:d3:45:f0:d7:31:d5:77:00:66:7b:c6:3d:3e:c4:d7:70: 8a:69:44:96:8e:ea:a1:97:92:13:da:e4:26:45:c7:7f:ae:4c: 4a:a2:18:89:ed:ab:a1:cf:ef:3a:9b:37:7c:b7:da:34:68:cd: 39:2d:1e:e0:b3:92:f1:21:78:4c:df:18:00:a2:b4:32:c8:f1: b7:6c:84:bc:dd:80:90:7a:a3:62:0f:b7:a4:a2:27:e4:b3:a0: 87:22:93:e1:ff:74:e1:c6:84:8e:30:71:65:06:13:e5:d0:e2: e4:36:79:3f:d2:15:ae:e9:0f:e8:d9:9a:6e:ba:c4:e9:1a:18: f4:1f:e4:e8:05:56:cd:20:c7:5c:fd:bd:32:96:12:c5:a2:6a: cc:c6:ee:86:b5:7c:52:c2:8d:ea:a3:2e:23:63:8f:99:bf:80: c7:b7:d7:3a:50:53:ba:fd:54:7a:ed:07:17:a9:d8:0b:85:6c: 92:d7:d6:a6:12:e2:00:a7:7d:3e:6d:a9:8d:90:03:1d:c2:51: 57:b9:97:45:eb:21:90:9f:ee:7f:87:61:16:47:d5:c0:c1:66: 95:57:f3:fd:6f:48:0a:a9:e5:54:99:90:5a:83:88:2b:c3:6b: 68:83:59:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNthha53WTiLFpLJ5K9i/UMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY5ZmEyNjIzYjIyMmQwOGQ5MzU2OTc1MDQ0Yjk0MDdiNWZl YTQ4YmEwHhcNMjYwOTIzMTAwMDU3WhcNMjYwOTI0MTAwMDU3WjAzMTEwLwYDVQQD EygyYWZjYmQ0MGQyZWU0MTY5NzNmOTY2NGIwNzE4MDNjY2Q1ZTQ2YTM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizf/u7hlMjHIjRQjFIqnfMDp7A4z clLovxbgB+rUWbk5bBroWReKXlQnRMsJbxpbuMWZ6uA8eJD4nwEEslbVbIu8HaeM vZmb/eNpezkZGAPnhwPj3O6OpIcofY3YVEFOakw4c4UnJuc1pIuIdQmPL/Wil243 p252hf0hSdCZLjHylNBfJZDqIGX8fpjD8KpHPKlbLPHjsesT4QvRY/betePh1CLL bqcRavdV7cRZJ3QZ8mtOVLpOCuymF7aStlQNsubaUwJKCXWAhLAixRdH0LacHV2P erUM7AubTnvmgLtkMWymvs06nITsFPG+N1N07G+6lSIdgRRzYCilwZYrjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCr8vUDS7kFpc/lmSwcYA8zV5Go3MB8GA1UdIwQY MBaAFGn6JiOyItCNk1aXUES5QHtf6ki6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt NzJmYjk3ZDU5Y2U0LzEvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0 LzEvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQtbd/jYZ oRA1DAGx6zNFerig6+HTRfDXMdV3AGZ7xj0+xNdwimlElo7qoZeSE9rkJkXHf65M SqIYie2roc/vOps3fLfaNGjNOS0e4LOS8SF4TN8YAKK0Msjxt2yEvN2AkHqjYg+3 pKIn5LOghyKT4f904caEjjBxZQYT5dDi5DZ5P9IVrukP6NmabrrE6RoY9B/k6AVW zSDHXP29MpYSxaJqzMbuhrV8UsKN6qMuI2OPmb+Ax7fXOlBTuv1Ueu0HF6nYC4Vs ktfWphLiAKd9Pm2pjZADHcJRV7mXReshkJ/uf4dhFkfVwMFmlVfz/W9ICqnlVJmQ WoOIK8NraINZcw== -----END CERTIFICATE-----Generated at Wed Sep 23 17:26:33 2026 by rpki-client