$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft File: u4MGMPI7Bwore99Sn3OUjJfqzUA.mft (raw, json) Hash identifier: CsJf7Qdlz7S2Mj1Vzai1LR8f/h6TTZL/MFbjxfuF9Fs= Subject key identifier: 3D:43:3D:65:38:2B:71:94:FE:0E:E9:24:B5:BC:21:41:37:B5:FA:CD Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Certificate serial: 01A0D64C743CA75C655494FA8AFE61B2AE7F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft Manifest number: 1B2C Signing time: Fri 25 Sep 2026 02:02:09 +0000 Manifest this update: Fri 25 Sep 2026 02:02:09 +0000 Manifest next update: Sat 26 Sep 2026 02:02:09 +0000 Files and hashes: 1: 096oU7e0E8HrowP4gJPAu4Yvq7w.roa (hash: h6GJyY7se9YHyBgaTMbTYiFCIPloa8qIM1tvJFasblQ=) 2: 1PCu_y82us3PwZ3PttaW2oJ-vRQ.roa (hash: PNPZZJdy9cE/t7HWs1vfO4PMv30dxs9HnvIH2s6qgFM=) 3: 7urEzTsKBLxb5onYBj-aFpyop_U.roa (hash: gb459gbapFxHlbK0J2K7Bvt5uguuHwVrigvvlQxP67E=) 4: MKYrJvGzvZyRvU-YTMKw33sMjbA.roa (hash: zitB1QIdSvuwxE4jXL1s8PUZB8yK6i+xpiMCf2djBrI=) 5: MxcZV9q1XM_oLFPhwS7xTgduXcs.roa (hash: lUq9YnS1Sc7e3dppUauYyDheGtMUtzY+2WuoDWvRh1k=) 6: PF5StOvcjBtJpPkWMQC42y_-7lw.roa (hash: +5ZUq1SbcccJBEuKBRND5IHUBd0bwJSPmUEVlNBAa5I=) 7: Pk0nYBXMibYGfeTa8KuAnDZqEJA.roa (hash: hjjTFQRkGi+Q5QO7W0JHJgrLPllKcASVVsrIkHritU0=) 8: TqC5cslAjOBidLHAZI8XGLZ-bAQ.roa (hash: bLuUwhyQVd1VS9DwSq655y43wtPrqbuVYv80UPVmwic=) 9: nAG5lZSxj6V-wheZnmYE_Q6WWfU.roa (hash: tMCGq6CAVBv6m8gzjuzDgfNy/wvlZB8HIzsnhiNlqsg=) 10: u4MGMPI7Bwore99Sn3OUjJfqzUA.crl (hash: Y7jXCdzA6SzUjI3cEaall/JD5GxucuzdecSdj4neyyQ=) 11: y4_D6Qio_R6p7o2KXWCnWybEys0.roa (hash: mUX1ZbSigKnFsHWLnR+/SQCMcTKlzqfR36hp2kv3WSg=) 12: zoz2o6V8v-pZ3rm_TVWUy2Mtt38.roa (hash: /e9GDLeuGl688HzU36fMz9iRnDyyAkt0kfM3UnT5a8E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 23:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d6:4c:74:3c:a7:5c:65:54:94:fa:8a:fe:61:b2:ae:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40 Validity Not Before: Sep 25 02:02:09 2026 GMT Not After : Sep 26 02:02:09 2026 GMT Subject: CN=3d433d65382b7194fe0ee924b5bc214137b5facd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5d:ba:fe:00:1d:dd:e2:94:5f:90:84:ae:50: 11:8e:b3:36:96:85:fb:25:3f:b0:be:9e:0c:0c:64: 24:3c:4e:f1:e0:29:fe:c8:58:1b:78:97:4b:8a:3b: 0a:5a:fe:00:a0:1d:4b:9c:2b:ce:c3:57:98:21:af: fd:14:57:a8:3b:0a:99:28:ec:4c:fe:1e:cb:f7:3f: cd:9f:9b:01:7c:3f:14:7f:33:d5:95:4b:b7:5e:d5: d6:61:42:af:63:b9:96:5b:fb:5e:54:82:5a:db:55: 83:36:70:1a:61:d4:04:5f:26:b1:7e:92:78:b4:15: 96:17:c5:f9:2b:b3:89:bb:76:bc:92:c5:a0:d0:ee: c2:62:12:96:1d:6f:af:78:5f:54:99:52:41:cb:0f: 3a:7f:12:22:66:30:cc:89:d4:0f:62:bd:40:38:68: 29:13:9d:13:8c:01:a3:77:67:da:41:9c:82:40:8f: 16:03:39:77:9c:eb:95:98:eb:80:89:d2:f7:97:4d: 40:fc:98:bd:5c:ad:18:a3:d6:ec:2a:a7:6f:66:fc: b6:f1:4f:bd:6c:f7:ce:0a:7a:6e:10:22:df:05:d3: 54:8c:24:77:ab:d2:dd:80:d8:19:44:54:74:43:6d: b8:b9:ab:1f:d4:ca:91:ef:c1:e4:72:2d:31:aa:de: 79:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:43:3D:65:38:2B:71:94:FE:0E:E9:24:B5:BC:21:41:37:B5:FA:CD X509v3 Authority Key Identifier: keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:c9:96:12:82:a0:7d:61:5a:4f:f2:20:c0:c2:43:33:67:a1: b1:a7:32:67:06:b7:34:40:a9:b4:e2:b9:81:4a:c1:fa:12:5b: 92:80:7e:d6:5a:db:19:11:ae:c6:ec:54:46:50:12:2c:6f:7c: bb:57:4d:49:15:5a:2e:f2:06:3f:7a:1a:ba:97:c2:1f:cc:16: 8c:20:40:b5:9c:81:14:55:ef:b9:a4:c1:ad:21:30:3d:b6:09: 2b:da:df:ac:90:72:a2:b8:f2:65:5a:fe:9c:f8:35:e3:a7:a6: ff:2e:fa:cd:df:17:9b:14:7f:9e:da:00:f9:a9:d0:91:6c:94: ce:84:8c:5d:3e:39:02:9a:6b:20:45:a7:04:39:96:87:d4:77: b5:b7:e8:4f:4c:7a:4c:92:0f:c2:4c:ad:48:25:0b:44:43:f5: 95:0f:4b:78:a1:c4:ef:32:d7:38:54:3c:96:6f:33:da:82:52: c6:94:7b:c6:db:17:c2:f6:c5:b7:13:5f:bf:03:03:4a:b5:11: a6:87:52:3e:a3:0a:e8:de:2f:c9:0e:7a:a3:9f:3e:fc:8c:4f: c9:e4:aa:61:d0:a6:3d:fa:9f:d2:90:fa:15:ac:69:b1:5e:73: 71:ea:36:8d:9d:19:b8:37:ac:40:03:8c:57:16:90:0b:01:c5: af:f8:3b:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDWTHQ8p1xlVJT6iv5hsq5/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiODMwNjMwZjIzYjA3MGEyYjdiZGY1MjlmNzM5NDhjOTdl YWNkNDAwHhcNMjYwOTI1MDIwMjA5WhcNMjYwOTI2MDIwMjA5WjAzMTEwLwYDVQQD EygzZDQzM2Q2NTM4MmI3MTk0ZmUwZWU5MjRiNWJjMjE0MTM3YjVmYWNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoV26/gAd3eKUX5CErlARjrM2loX7 JT+wvp4MDGQkPE7x4Cn+yFgbeJdLijsKWv4AoB1LnCvOw1eYIa/9FFeoOwqZKOxM /h7L9z/Nn5sBfD8UfzPVlUu3XtXWYUKvY7mWW/teVIJa21WDNnAaYdQEXyaxfpJ4 tBWWF8X5K7OJu3a8ksWg0O7CYhKWHW+veF9UmVJByw86fxIiZjDMidQPYr1AOGgp E50TjAGjd2faQZyCQI8WAzl3nOuVmOuAidL3l01A/Ji9XK0Yo9bsKqdvZvy28U+9 bPfOCnpuECLfBdNUjCR3q9LdgNgZRFR0Q224uasf1MqR78Hkci0xqt55NQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1DPWU4K3GU/g7pJLW8IUE3tfrNMB8GA1UdIwQY MBaAFLuDBjDyOwcKK3vfUp9zlIyX6s1AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMt MTE5ZWZjYmIyMDIzLzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZS9mNzZlMjAtNTg1OS00MTVkLTg2YjMtMTE5ZWZjYmIyMDIz LzEvdTRNR01QSTdCd29yZTk5U24zT1VqSmZxelVBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJcmWEoKg fWFaT/IgwMJDM2ehsacyZwa3NECptOK5gUrB+hJbkoB+1lrbGRGuxuxURlASLG98 u1dNSRVaLvIGP3oaupfCH8wWjCBAtZyBFFXvuaTBrSEwPbYJK9rfrJByorjyZVr+ nPg146em/y76zd8XmxR/ntoA+anQkWyUzoSMXT45ApprIEWnBDmWh9R3tbfoT0x6 TJIPwkytSCULREP1lQ9LeKHE7zLXOFQ8lm8z2oJSxpR7xtsXwvbFtxNfvwMDSrUR podSPqMK6N4vyQ56o58+/IxPyeSqYdCmPfqf0pD6FaxpsV5zceo2jZ0ZuDesQAOM VxaQCwHFr/g72w== -----END CERTIFICATE-----Generated at Fri Sep 25 11:00:12 2026 by rpki-client