$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft File: u2qi6QuXDRvK7tElJWMlCBFT-dA.mft (raw, json) Hash identifier: CfdaVTXtaW0SErgZdnzRACwPx+QeKFCL6m+9fyF0h1I= Subject key identifier: 26:70:D4:B4:0C:07:A0:82:A2:9B:49:15:2B:D3:37:43:1F:CC:76:E6 Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0 Certificate issuer: /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0 Certificate serial: 01A0CFA3C9BB45C4F796D6F6AB6A6EEE8B7B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft Manifest number: E8 Signing time: Wed 23 Sep 2026 19:00:12 +0000 Manifest this update: Wed 23 Sep 2026 19:00:12 +0000 Manifest next update: Thu 24 Sep 2026 19:00:12 +0000 Files and hashes: 1: 1-x0LA5b_Qa7duH02aAFMCbeAziE.roa (hash: D5E/NlS1WcmJBkiWUYiira8KCkqBtxvWMFgI/iWwLtQ=) 2: 57AVFEKk7vZln1xu08ncf1wfVP8.roa (hash: DpOPXY5JzxueLGeQrTDBAs7bP1zTXtO/7VEht/dL00M=) 3: 5AtrV7yOPOGzp3dD9scm4jFp88g.roa (hash: Iyw+z4hUQvrtjBYppz1+vkyM47qxvTh/rZ/AFbdmSyE=) 4: 75cRJGWWWeEGDBP5zSNTjgoUGow.roa (hash: q+98+01kCf3O5JbXFHN6n+KofQN/z5Q/5IhPWdMNYis=) 5: 929vYbDJj4se9paqibWN3-3R8HA.roa (hash: W9ddFPxvbc6tqGzHqj597SIXQeJ26nx3+gxFSTYVhW8=) 6: G8t30FnyqJ9nd31D40VQeRTEtBA.roa (hash: TUmnHq75alVMMqFrQcwFLzsSHCqRjTU+zq33n/KhuME=) 7: GyWzmF_PpZ9N7VpvNUnUwxN8sIg.roa (hash: aO6JHojQKb2l7UaVOSnTv4mzQmmXqQjYDswxCMnwBH4=) 8: R6r6-4m3eXKt8b9AzresZI1lWHc.roa (hash: 8di1Oi8xGenPm6U4E5v0M/GzUjBIZHCPAo+Pu/wQRBU=) 9: kCEhbc-CjGlkrVP2PS1PYrIGODw.roa (hash: 9TV84/4RfuYCLfpfpR6Gh6BK5KQrek5oB2df/+w8lAo=) 10: u2qi6QuXDRvK7tElJWMlCBFT-dA.crl (hash: FptgNaNYokj/BklJxVas603MXLTf25+1mEtxgQC5eXw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:a3:c9:bb:45:c4:f7:96:d6:f6:ab:6a:6e:ee:8b:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0 Validity Not Before: Sep 23 19:00:12 2026 GMT Not After : Sep 24 19:00:12 2026 GMT Subject: CN=2670d4b40c07a082a29b49152bd337431fcc76e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:46:2f:f9:d1:86:f1:85:ab:79:04:8c:ae:5f: 59:95:dc:a8:78:ed:76:11:0b:53:24:3a:11:f6:f3: 34:15:b7:b9:e5:ca:36:e9:d0:58:21:77:3b:f7:c8: 22:e7:67:fd:c8:66:80:18:50:ea:3e:49:2c:b7:47: ef:88:5e:6c:80:cb:4f:86:a2:90:64:56:71:4c:54: 65:ee:21:7d:e4:6c:33:b0:d5:dd:d3:17:b5:ea:17: 73:01:de:05:7c:fa:b4:be:df:97:1a:54:73:54:69: b8:fc:4f:97:2b:f3:67:0d:6c:35:31:a3:29:f6:1b: 91:cd:a2:c3:a3:f0:05:0a:d8:14:9d:06:46:d5:a7: 83:3b:4e:63:79:bc:db:78:94:a6:ba:00:fe:48:f7: 49:25:f9:9e:ac:45:4d:75:0d:0a:9c:9c:ba:74:d2: f6:44:76:44:65:ea:79:6e:ab:d9:89:e9:b3:8d:ed: 1f:98:47:8c:e7:8c:c4:bc:b6:4c:5d:e0:cc:12:c2: 41:ef:30:83:d0:37:7e:a6:66:24:ec:46:24:42:3b: 0e:bb:ca:f2:79:54:93:57:ef:dd:da:c6:f9:85:36: 53:44:8f:3c:e6:a1:85:25:66:01:25:f3:bc:99:32: 99:ab:d8:86:6a:4c:82:cf:d9:a2:75:dc:05:f5:7f: c7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:70:D4:B4:0C:07:A0:82:A2:9B:49:15:2B:D3:37:43:1F:CC:76:E6 X509v3 Authority Key Identifier: keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:a9:29:a0:0e:39:d8:99:23:3a:47:3d:01:24:57:be:21:f0: ed:32:5c:4d:01:6a:16:d2:a7:22:5e:73:d0:b2:8e:08:7d:a4: 3c:07:5c:f3:c3:e9:05:60:3d:7e:5e:cb:26:6e:d5:22:69:b2: f5:1b:d2:d3:90:ad:5d:42:3c:19:b9:ef:68:ac:50:36:36:19: 32:78:4a:11:f8:85:e7:c3:69:b0:75:0f:25:63:a4:58:be:f6: b3:65:f9:f2:d4:3f:c7:11:b2:f0:bc:54:66:89:e0:14:60:1d: 8e:3e:51:a9:71:25:2e:b1:07:11:11:74:51:ac:c1:4b:61:20: 54:ad:38:fb:a6:f3:71:fe:41:a4:60:51:5c:b4:c4:76:81:dd: ea:e0:0d:5d:ef:58:fc:95:0b:d3:11:92:3f:ca:59:1c:b9:61: a7:a2:f5:60:e2:8e:9a:73:0a:62:f5:ad:da:ac:8b:29:a0:72: b7:14:c9:9a:17:10:05:e5:c7:e3:37:14:6b:8a:f6:2e:49:3e: 99:ab:5e:6c:c9:29:f4:50:d8:f0:67:dd:e9:46:b1:0b:49:15: a9:3f:51:a4:55:3c:6b:3c:b2:26:b7:6d:3c:c6:65:cc:3a:af: 2b:9d:23:5e:0d:16:f5:b6:b0:cc:a9:4a:7c:c5:45:29:75:9c: d5:92:c2:6c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDPo8m7RcT3ltb2q2pu7ot7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNmFhMmU5MGI5NzBkMWJjYWVlZDEyNTI1NjMyNTA4MTE1 M2Y5ZDAwHhcNMjYwOTIzMTkwMDEyWhcNMjYwOTI0MTkwMDEyWjAzMTEwLwYDVQQD EygyNjcwZDRiNDBjMDdhMDgyYTI5YjQ5MTUyYmQzMzc0MzFmY2M3NmU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl0Yv+dGG8YWreQSMrl9ZldyoeO12 EQtTJDoR9vM0Fbe55co26dBYIXc798gi52f9yGaAGFDqPkkst0fviF5sgMtPhqKQ ZFZxTFRl7iF95GwzsNXd0xe16hdzAd4FfPq0vt+XGlRzVGm4/E+XK/NnDWw1MaMp 9huRzaLDo/AFCtgUnQZG1aeDO05jebzbeJSmugD+SPdJJfmerEVNdQ0KnJy6dNL2 RHZEZep5bqvZiemzje0fmEeM54zEvLZMXeDMEsJB7zCD0Dd+pmYk7EYkQjsOu8ry eVSTV+/d2sb5hTZTRI885qGFJWYBJfO8mTKZq9iGakyCz9middwF9X/HIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCZw1LQMB6CCoptJFSvTN0MfzHbmMB8GA1UdIwQY MBaAFLtqoukLlw0byu7RJSVjJQgRU/nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt NzI2MDU3YTFmMmE0LzEvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0 LzEvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKakpoA45 2JkjOkc9ASRXviHw7TJcTQFqFtKnIl5z0LKOCH2kPAdc88PpBWA9fl7LJm7VImmy 9RvS05CtXUI8GbnvaKxQNjYZMnhKEfiF58NpsHUPJWOkWL72s2X58tQ/xxGy8LxU ZongFGAdjj5RqXElLrEHERF0UazBS2EgVK04+6bzcf5BpGBRXLTEdoHd6uANXe9Y /JUL0xGSP8pZHLlhp6L1YOKOmnMKYvWt2qyLKaBytxTJmhcQBeXH4zcUa4r2Lkk+ matebMkp9FDY8Gfd6UaxC0kVqT9RpFU8azyyJrdtPMZlzDqvK50jXg0W9bawzKlK fMVFKXWc1ZLCbA== -----END CERTIFICATE-----Generated at Wed Sep 23 23:43:16 2026 by rpki-client