$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft File: Ka7sqK_wmbK64FeB3KjdkCfw2is.mft (raw, json) Hash identifier: WUe+swM61XepJDBIkpfYBLKVdP55t0eYWre+SxILk5o= Subject key identifier: 14:78:6F:B9:DF:F2:AE:4C:4E:26:69:5E:4A:1B:F9:C3:5D:A1:59:B5 Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b Certificate serial: 01A0D83B5AF4F5C97639A4157A39489631F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft Manifest number: EA Signing time: Fri 25 Sep 2026 11:02:43 +0000 Manifest this update: Fri 25 Sep 2026 11:02:43 +0000 Manifest next update: Sat 26 Sep 2026 11:02:43 +0000 Files and hashes: 1: 1q_wYD9UWOnoJzVrOoUZdi0ptKs.roa (hash: VrKJCQshMNsRpRS3xMtIqZM3UIX0Rv/9TMlKh43+0eE=) 2: 41i4ev5edbKVJwvdRc7UmMCrvCg.roa (hash: m9BCRj3y94R37HOuPnWLtwP7M0mYu2TFW0DGKzHM/Z8=) 3: 50FgNVwdKIXZBSoi9_tx_m369VY.roa (hash: ECrdWmJHCoSD4ehG05AezfCmwTDPcEay5D7cVyccxQw=) 4: 7yrgfzbw8vVRPOjj7HWXtxyf49Q.roa (hash: md2tHitigyecVuWcaFRQgwV0T+xTsDPtPKLbeAD5RVI=) 5: BdOjrY77wFG1RfqnZLrdZFMXaRg.roa (hash: bODeK0rFTfjBKeuHpe99mPxykv44Z0oBibXlE79cC5U=) 6: FLDisamNsDJXm_1lT92yfeRj3fw.roa (hash: WM25J4c59hU5SI4kz6OM2HoWYEmKXTDdKjYCSlG2JzI=) 7: GS38DtcRNFiCDgomRRGuYwhjhtk.roa (hash: vhy5Ct6d/4AD2NqH7XvOO/NEboMBe6M9200o1l76a98=) 8: IDFQmB2_BNbe8TZvBZB6pYkqhGU.roa (hash: dE0Z7qv5NDY7r0/9XxQ9jfsrqbdxqd+FO+WrhOi5Glg=) 9: Jj70oOtEM3MPYlWgVX1aJYN3MXw.roa (hash: xzFEEvPbBuccgBOT1CsatLmHtV69WRilCT0khWKpwtQ=) 10: Jk_N7QSRVi_cTxcu3qy15ogPA68.roa (hash: Rmy9FhhubCl3WFg5IP5VOAwqyczxSE6B2MhGe3ccsM0=) 11: Ka7sqK_wmbK64FeB3KjdkCfw2is.crl (hash: YFWoFbfg4+jT7PGHeuTgybKsgMsS9pdyAU9QBMWnUbM=) 12: NklB14-VXLI3MM6lJe389quYPZU.roa (hash: D2ILNVHNm82CCp8tZk+B53IKie8TqikfqpmmGRxzs5M=) 13: URT0EEJBnslT-0WyvEI0zhxE7ao.roa (hash: l8gQYKhmIYyk/qnAnSCwTsLP9MGIBmIKOkyQVshPQkY=) 14: VOA0hCAmccn3JFjBj1YG73p2_z4.roa (hash: fdiyK2e1RDodBjjbIJyeBT4dY1npNcatRvvQ4NjK3Go=) 15: WFW6qhbNTOwNvMn1wBdtZc0maBc.roa (hash: 4FeYT4PmqlfqsjKx24dhNEkHWmZbQRRBE78LWYeUekw=) 16: ZOUpcJbmawhfKT6X9vbpqXgFbzE.roa (hash: t1IEQIm5R7nnAL2Bg46AN21+xubthTU7oKqD6v54mRI=) 17: _WY29sxvL7eTgbKFEoCzs5DGbWk.roa (hash: 0n3QlO/r3sjWRk/sTTbpZIaERpyILu3lDPLbKxDkXXE=) 18: h-EWcWkmbvgj39jkxm-JcD4jNys.roa (hash: 5gX5iFM/ehmHTHBUKpjDT1zVGwl4cU31igc51yeX2UU=) 19: j4Fd2DjxWr_xPGcMiuUhdZLMc30.roa (hash: KhwmTUHddEmqeMPHDyYX5yKpCm2bT7FKBk70Iu6qVsU=) 20: kA7PdZv1BHY99jFpYu5rnXF5Gpw.roa (hash: cX0Aca9kGYKiN/9m9sBSvjG37vCXXVdWtb4rGx97cf8=) 21: lUlD9gbYsyOLr3r0s3Uaa4KVupU.roa (hash: Bx05tts8mxf//4522K5SFSuxKCitbQyyOHV0CHxYOm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d8:3b:5a:f4:f5:c9:76:39:a4:15:7a:39:48:96:31:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b Validity Not Before: Sep 25 11:02:43 2026 GMT Not After : Sep 26 11:02:43 2026 GMT Subject: CN=14786fb9dff2ae4c4e26695e4a1bf9c35da159b5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:aa:21:c1:db:ff:73:5a:44:9e:4e:0a:21:0a: 7b:df:86:87:60:51:de:48:cc:fb:e2:9b:84:38:19: 2f:cc:b9:de:e6:8f:e8:9f:32:ca:02:83:c2:ae:cd: 55:7f:8e:57:9e:9a:6d:b6:1d:a3:3d:0d:1e:0e:ad: ac:c0:c3:6b:fb:c1:16:ac:db:e9:d9:fe:55:9d:a7: 3f:19:c5:2b:ad:2e:da:f0:5c:7e:3b:72:63:27:a0: 7d:a4:5e:31:1f:47:6a:f1:c7:ec:60:0e:7d:96:8f: 9a:ff:26:7b:bd:40:a8:4b:01:aa:a7:69:e3:79:7b: e9:b5:41:f0:9a:7e:5e:bf:68:25:77:ff:e1:c3:72: 46:91:61:8e:c2:2b:d2:b8:e6:d5:c2:c5:e6:cc:c1: 23:2c:f0:26:4a:3c:b0:c7:ed:72:6f:9c:ea:70:37: be:87:05:e9:82:cf:83:e6:f3:46:8e:7c:b8:ba:ab: 38:26:63:d4:8b:4e:c9:29:16:68:ba:35:64:54:db: 6a:22:e5:8d:eb:66:b3:15:86:08:cc:fb:47:83:d7: 44:7e:51:e1:01:52:27:8d:d0:7b:d4:0d:93:ea:57: 68:05:4a:7c:98:f6:24:1c:37:53:54:73:8b:33:43: e1:d5:76:2b:fb:26:40:6d:bf:6f:f2:9f:aa:b8:50: 10:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:78:6F:B9:DF:F2:AE:4C:4E:26:69:5E:4A:1B:F9:C3:5D:A1:59:B5 X509v3 Authority Key Identifier: keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:eb:8b:7c:75:6f:4b:8f:36:e4:ff:88:cb:f2:59:bf:45:d8: 6d:5a:7f:40:bf:48:b7:f8:be:47:43:8c:a6:1e:7f:13:d8:7c: bf:9e:ea:bf:d1:29:8c:79:06:29:1a:6c:15:37:ed:ba:c1:09: 6f:dc:53:ff:b6:e7:2a:a0:37:91:0a:4c:25:df:09:9e:be:4f: 34:8d:ef:e3:d0:e4:31:99:29:86:4c:af:3a:19:dd:34:09:2d: 7b:f0:a8:04:f8:33:23:75:1c:d7:23:d9:9e:51:85:d8:d1:47: 9d:81:87:bd:d7:da:25:71:19:d7:ad:73:2c:81:05:38:9c:5f: 3a:30:55:e7:42:87:38:7c:98:8c:51:9d:82:b7:b6:ec:8d:51: 91:0b:35:66:42:52:73:ba:f0:a0:bc:4a:30:45:cc:66:74:45: a4:26:1d:e4:51:49:c7:1a:0e:a4:14:70:cc:09:cf:37:7c:a3: 2f:2c:1f:76:3f:97:9e:c4:44:3b:60:61:d0:c2:61:87:2c:a0: 40:65:dd:4a:24:01:44:42:26:cf:0a:cd:1b:1a:63:b3:8c:f2: 1e:ad:15:07:34:94:22:4e:0c:76:62:85:9a:79:b4:b4:9f:43: 34:43:bd:a5:a7:24:13:a9:f6:c8:c4:e3:d1:35:60:eb:52:8a: fe:9b:cf:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDYO1r09cl2OaQVejlIljHwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YWVlY2E4YWZmMDk5YjJiYWUwNTc4MWRjYThkZDkwMjdm MGRhMmIwHhcNMjYwOTI1MTEwMjQzWhcNMjYwOTI2MTEwMjQzWjAzMTEwLwYDVQQD EygxNDc4NmZiOWRmZjJhZTRjNGUyNjY5NWU0YTFiZjljMzVkYTE1OWI1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqohwdv/c1pEnk4KIQp734aHYFHe SMz74puEOBkvzLne5o/onzLKAoPCrs1Vf45Xnpptth2jPQ0eDq2swMNr+8EWrNvp 2f5Vnac/GcUrrS7a8Fx+O3JjJ6B9pF4xH0dq8cfsYA59lo+a/yZ7vUCoSwGqp2nj eXvptUHwmn5ev2gld//hw3JGkWGOwivSuObVwsXmzMEjLPAmSjywx+1yb5zqcDe+ hwXpgs+D5vNGjny4uqs4JmPUi07JKRZoujVkVNtqIuWN62azFYYIzPtHg9dEflHh AVInjdB71A2T6ldoBUp8mPYkHDdTVHOLM0Ph1XYr+yZAbb9v8p+quFAQyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBR4b7nf8q5MTiZpXkob+cNdoVm1MB8GA1UdIwQY MBaAFCmu7Kiv8JmyuuBXgdyo3ZAn8NorMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluuLfHVv S4825P+Iy/JZv0XYbVp/QL9It/i+R0OMph5/E9h8v57qv9EpjHkGKRpsFTftusEJ b9xT/7bnKqA3kQpMJd8Jnr5PNI3v49DkMZkphkyvOhndNAkte/CoBPgzI3Uc1yPZ nlGF2NFHnYGHvdfaJXEZ161zLIEFOJxfOjBV50KHOHyYjFGdgre27I1RkQs1ZkJS c7rwoLxKMEXMZnRFpCYd5FFJxxoOpBRwzAnPN3yjLywfdj+XnsREO2Bh0MJhhyyg QGXdSiQBREImzwrNGxpjs4zyHq0VBzSUIk4MdmKFmnm0tJ9DNEO9packE6n2yMTj 0TVg61KK/pvPyg== -----END CERTIFICATE-----Generated at Fri Sep 25 13:05:08 2026 by rpki-client