$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json) Hash identifier: 0dwnD/9tbCjkFiQCLYv+wYKSJLEOPpmMaVN0l2XrN2c= Subject key identifier: 7A:83:D4:F0:67:4D:14:55:0E:3C:7A:05:23:04:20:80:3A:66:D8:8A Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 01A0CD485CAF6AE54561BF17A86E016629FA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft Manifest number: 1B10 Signing time: Wed 23 Sep 2026 08:01:06 +0000 Manifest this update: Wed 23 Sep 2026 08:01:06 +0000 Manifest next update: Thu 24 Sep 2026 08:01:06 +0000 Files and hashes: 1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=) 2: 1-vkSUj3IhBaF6QCupk9p-QFNkpg.roa (hash: NyoZpDBj6nyKZfID52EDPnf8kCWXyPjqV37Bafp3IEk=) 3: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=) 4: 3OlFo1BIMO58jOKinsgaHCIGcPI.asa (hash: It3e1tK83I/+WtTNXWRr1Q1FRwlRAB4eApvNExQnd0Y=) 5: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=) 6: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: r83H+4ADWA2rjNoLfcdZ5i7iPh6Uals91CiH9B1TPhg=) 7: bSIf0T0EwRvYabxLmjmKKkxKJuc.roa (hash: QjhZut+rcecUKTU/gefSSs0Q8mSl4Rg0xTqiyiwiuWQ=) 8: k-YRkliMRVoXShQ8PbWy-9N7SjQ.roa (hash: lMxKbbsuVDDpKDp0TZpDMbjhyk3buYEiXF/UkdpZabc=) 9: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=) 10: qcBLaf6H5Hv30eXMa7IbsI7K2Eo.roa (hash: /8G6T8+RIvDyAMYfFzoKNpDCtHywa0CfF5MXcl8AVF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:48:5c:af:6a:e5:45:61:bf:17:a8:6e:01:66:29:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Sep 23 08:01:06 2026 GMT Not After : Sep 24 08:01:06 2026 GMT Subject: CN=7a83d4f0674d14550e3c7a05230420803a66d88a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c6:54:6c:64:97:70:db:20:80:76:de:7d:13: 18:86:17:99:e2:7a:5c:44:9d:95:c3:b4:00:d4:b4: 36:00:72:e7:74:f7:ce:6b:5b:9f:79:e5:a6:26:c5: 17:1a:e4:08:06:69:f6:34:5c:e7:b8:2b:9f:6f:5d: 40:ea:a1:34:9f:d9:79:5c:c2:b0:a7:aa:f2:90:61: 94:49:16:b8:33:17:d2:87:8c:12:8e:4a:76:06:63: 5a:db:df:b7:ee:48:78:f6:9e:8f:9e:ed:e7:ea:34: 8e:07:4f:c0:af:75:f3:73:b1:f5:ed:d7:1e:87:9f: 3e:77:13:c6:73:f4:5b:b8:2c:f0:38:af:77:b6:50: 2c:9b:77:ea:fd:e9:09:4f:76:ce:04:8d:fd:28:cc: 3e:ef:f7:28:0e:c9:13:49:d6:cc:19:4c:06:b9:7f: fd:3d:b9:f0:d3:01:6b:c2:1a:64:00:d9:88:68:f7: b8:da:07:dd:5d:e2:3a:28:9a:93:94:47:9a:95:86: 8b:71:b0:b0:1a:51:6d:2b:c2:cf:04:65:64:b9:c7: 4c:0c:6e:4c:88:6e:f6:55:12:86:58:b5:e2:af:08: b1:27:70:aa:41:bb:f0:68:d4:3e:55:e3:d3:89:a4: 47:21:38:fe:cc:08:03:a1:6b:0f:f7:92:df:f4:7e: 04:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:83:D4:F0:67:4D:14:55:0E:3C:7A:05:23:04:20:80:3A:66:D8:8A X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:4c:de:50:63:5b:95:ee:3b:0c:1b:8e:48:54:aa:5b:8d:a3: d2:7e:db:4f:f4:e4:59:44:bf:df:8e:df:a7:e6:e8:b6:42:b8: 91:8c:64:ec:3e:d5:86:db:28:0e:60:8b:1a:34:c3:93:19:0d: 2f:a9:fc:7a:76:56:36:aa:eb:9b:f4:46:cd:be:e5:0f:22:61: 47:e2:43:d3:d1:38:a1:9c:87:79:c5:8a:ab:14:ea:b9:72:27: bc:5e:5f:a1:7d:68:fc:91:04:c9:71:6f:e1:2c:f6:ce:3e:e2: c3:f5:6c:fe:12:0e:86:e1:e7:68:4a:bd:ba:12:84:f9:cc:6b: 12:11:7d:81:fd:ed:fa:43:c8:51:c0:c0:36:05:bd:a7:0f:5c: 5e:17:a5:de:d8:f5:2c:f9:72:59:a6:68:85:61:cc:91:e0:c3: 72:12:1b:2f:03:ae:9e:80:8b:91:fa:8a:b0:92:37:43:74:31: 58:6d:b6:1c:7b:b8:17:d7:e0:1c:99:e5:b1:18:24:7d:11:9e: 28:26:70:cd:90:1d:2d:85:29:41:6a:84:5e:af:29:bd:d8:be: b1:36:48:2f:6e:ac:36:e2:14:14:42:51:6a:0a:ef:34:76:8f: 29:14:30:d7:79:c0:0c:cf:37:50:f5:3b:7d:38:69:f2:3f:34: 1b:b1:18:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNSFyvauVFYb8XqG4BZin6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjYwOTIzMDgwMTA2WhcNMjYwOTI0MDgwMTA2WjAzMTEwLwYDVQQD Eyg3YTgzZDRmMDY3NGQxNDU1MGUzYzdhMDUyMzA0MjA4MDNhNjZkODhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcZUbGSXcNsggHbefRMYhheZ4npc RJ2Vw7QA1LQ2AHLndPfOa1ufeeWmJsUXGuQIBmn2NFznuCufb11A6qE0n9l5XMKw p6rykGGUSRa4MxfSh4wSjkp2BmNa29+37kh49p6Pnu3n6jSOB0/Ar3Xzc7H17dce h58+dxPGc/RbuCzwOK93tlAsm3fq/ekJT3bOBI39KMw+7/coDskTSdbMGUwGuX/9 Pbnw0wFrwhpkANmIaPe42gfdXeI6KJqTlEealYaLcbCwGlFtK8LPBGVkucdMDG5M iG72VRKGWLXirwixJ3CqQbvwaNQ+VePTiaRHITj+zAgDoWsP95Lf9H4E+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHqD1PBnTRRVDjx6BSMEIIA6ZtiKMB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkzeUGNb le47DBuOSFSqW42j0n7bT/TkWUS/347fp+botkK4kYxk7D7VhtsoDmCLGjTDkxkN L6n8enZWNqrrm/RGzb7lDyJhR+JD09E4oZyHecWKqxTquXInvF5foX1o/JEEyXFv 4Sz2zj7iw/Vs/hIOhuHnaEq9uhKE+cxrEhF9gf3t+kPIUcDANgW9pw9cXhel3tj1 LPlyWaZohWHMkeDDchIbLwOunoCLkfqKsJI3Q3QxWG22HHu4F9fgHJnlsRgkfRGe KCZwzZAdLYUpQWqEXq8pvdi+sTZIL26sNuIUFEJRagrvNHaPKRQw13nADM83UPU7 fThp8j80G7EYYA== -----END CERTIFICATE-----Generated at Wed Sep 23 16:44:43 2026 by rpki-client