$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: qEAD08TKnLAii/VAY/2Ci0OASU9vD8m4P4NCLkR8BrU= Subject key identifier: DA:72:6B:BF:F5:A3:B7:56:2D:E5:CE:BC:86:35:7D:AE:9F:E4:90:AF Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 01A0D2DDDF21513B4B760B12022F3BE996B4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 1444 Signing time: Thu 24 Sep 2026 10:02:30 +0000 Manifest this update: Thu 24 Sep 2026 10:02:30 +0000 Manifest next update: Fri 25 Sep 2026 10:02:30 +0000 Files and hashes: 1: 2JOxayZ4kxrtihpkJSNfTVv34wU.roa (hash: zOn78CRIowaCVixyqjErS7L368UV3aEuLomuXw4ifTk=) 2: 8JmGNshMSYZovGEGptxvSVmLazw.roa (hash: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk=) 3: 9VFCcM5TkSFj-DtH7qLQwgSN5IM.roa (hash: wrh+UMairP6Hp+q2S/1S737Q0ISs8AkPKt06IH0nojo=) 4: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (hash: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc=) 5: Qds8QcMRNkZLZIxEq4DIiHLqmf8.roa (hash: 8W6wOK2I4qsuYzKI/ho+wcaX0Cqt4fg6SETKF3W+ImI=) 6: TjDmMYZX4kBSUtV2aoQj0qKysRg.roa (hash: l2/gMvnSsklv14g/tuA37El8fuSOsjkNRMRQv6RZ2fY=) 7: X1LVS0a4yLVV-n31U0OmgdyXH_Q.roa (hash: HB5LPZBvI9YtdaaDN25t7bfdVncLanwsoppFOKXdT7I=) 8: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (hash: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w=) 9: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (hash: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc=) 10: d0K0IoBy5xJlcUIFuELdP0a1cwQ.roa (hash: 4io78nOLezFoyBWo3ZpnK3RNwopEXZfQZmn24eH/WJQ=) 11: dxZrm_kRJNnz8YeorAaaxgmTmrU.roa (hash: Le5MlQmjVvWn8m1gclKNCqW1PZyJn3stX+9I88dbC/c=) 12: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: W93RGkZGj05MzRTyEXIkak5ocwMwdo8EM1vVoXM/P6E=) 13: gVoDkYx52kg2ObqLQQiu3dVABJ4.roa (hash: Q8A5Ai5FoLvBhe3BwpyHiBUhPSy+KXj0LhOWSA21Wgw=) 14: mfX6n982kHfEGonK72FOllXPKLM.roa (hash: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo=) 15: oSJ76RTJAM4Rkm0VytsagsICSMI.roa (hash: 5KF6cvuY3cWzSG6wpKOaFIJmUmHSua9Uf0BUoXvpF6w=) 16: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (hash: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 10:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d2:dd:df:21:51:3b:4b:76:0b:12:02:2f:3b:e9:96:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Sep 24 10:02:30 2026 GMT Not After : Sep 25 10:02:30 2026 GMT Subject: CN=da726bbff5a3b7562de5cebc86357dae9fe490af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:83:f9:96:01:6b:bb:46:42:79:22:2a:f1:a2: be:31:e1:51:c6:78:e7:6d:45:1c:74:e2:6a:e6:52: 80:ca:11:af:a2:4b:1e:5f:1b:4e:ab:fa:18:9a:0a: 1c:23:68:dc:53:bf:59:95:aa:d0:c5:70:57:55:da: 97:b5:e7:e0:c6:fa:ac:86:9f:eb:7e:55:8e:b7:f3: 92:65:d5:c3:6d:95:38:56:d4:30:f6:bb:91:ce:4a: f9:e1:88:fc:90:d3:98:8a:7b:85:33:c0:d4:a8:f0: 1e:cd:01:98:3f:8c:17:84:00:f8:80:24:f6:fc:4a: db:4f:05:c0:63:7c:dd:67:91:d0:8a:36:47:d9:4d: 53:d1:34:1e:61:54:78:d5:62:a6:04:27:0d:44:f7: 7e:d7:4a:bc:64:55:d5:c8:07:78:5f:ae:5c:47:31: 64:ba:c2:62:91:e3:b9:3c:b1:e0:dd:52:80:85:9f: 49:99:76:77:17:7b:40:f4:0a:53:73:af:ab:a1:ba: 4b:da:d9:1d:c9:0a:14:7e:85:dc:03:0a:b3:f5:dd: 21:c4:d1:4f:da:a9:1f:11:aa:8a:b2:74:94:d9:1d: 0d:3d:bd:4d:91:78:7e:93:d8:12:c2:d5:07:7e:0b: f2:73:1f:da:bf:ac:24:67:56:a0:8d:e4:71:63:eb: ea:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:72:6B:BF:F5:A3:B7:56:2D:E5:CE:BC:86:35:7D:AE:9F:E4:90:AF X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:80:9a:fe:cf:e2:fe:3a:5d:27:c4:db:7a:c4:f8:fb:d0:5f: 98:9e:ef:77:84:9b:0c:05:8a:88:89:a9:15:48:e8:ec:f7:ed: 1b:05:4b:08:c3:7a:40:7d:79:4d:53:10:61:b6:7f:72:a4:eb: f6:de:d9:73:bf:ae:46:c5:64:3e:b5:3f:71:0a:25:5c:61:4f: 14:28:ef:d6:d4:5c:92:a1:b0:7b:0d:0f:20:79:49:6d:95:20: b1:01:fd:d8:30:34:86:c4:00:e3:f8:4b:55:1f:6d:f3:48:ba: 67:87:73:a6:c7:35:4f:a6:d0:16:89:11:5f:fb:f8:12:17:a4: e5:ad:fc:6f:2f:dd:85:8e:50:46:6b:c6:02:52:64:da:16:19: 30:7b:2a:5f:95:3d:f1:f8:d1:4d:40:1d:c5:aa:da:f4:10:73: e5:2c:8f:74:0a:f5:a9:a4:c0:da:6c:e9:8d:96:98:94:0b:32: d3:42:a2:79:7a:d1:ac:25:d5:04:9d:7c:a4:6b:c8:34:b9:a2: 4e:d9:24:34:93:4a:b7:92:e1:21:5d:9a:73:98:30:ee:24:7e: 79:b3:00:f6:ab:ca:22:80:d7:51:37:e5:33:18:f8:16:d6:10: c4:11:7d:4c:46:43:48:75:96:f3:75:4b:db:28:5b:c5:7e:dd: c4:0b:2d:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDS3d8hUTtLdgsSAi876Za0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYwOTI0MTAwMjMwWhcNMjYwOTI1MTAwMjMwWjAzMTEwLwYDVQQD EyhkYTcyNmJiZmY1YTNiNzU2MmRlNWNlYmM4NjM1N2RhZTlmZTQ5MGFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4P5lgFru0ZCeSIq8aK+MeFRxnjn bUUcdOJq5lKAyhGvokseXxtOq/oYmgocI2jcU79ZlarQxXBXVdqXtefgxvqshp/r flWOt/OSZdXDbZU4VtQw9ruRzkr54Yj8kNOYinuFM8DUqPAezQGYP4wXhAD4gCT2 /ErbTwXAY3zdZ5HQijZH2U1T0TQeYVR41WKmBCcNRPd+10q8ZFXVyAd4X65cRzFk usJikeO5PLHg3VKAhZ9JmXZ3F3tA9ApTc6+robpL2tkdyQoUfoXcAwqz9d0hxNFP 2qkfEaqKsnSU2R0NPb1NkXh+k9gSwtUHfgvycx/av6wkZ1agjeRxY+vq8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNpya7/1o7dWLeXOvIY1fa6f5JCvMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO4Ca/s/i /jpdJ8TbesT4+9BfmJ7vd4SbDAWKiImpFUjo7PftGwVLCMN6QH15TVMQYbZ/cqTr 9t7Zc7+uRsVkPrU/cQolXGFPFCjv1tRckqGwew0PIHlJbZUgsQH92DA0hsQA4/hL VR9t80i6Z4dzpsc1T6bQFokRX/v4Ehek5a38by/dhY5QRmvGAlJk2hYZMHsqX5U9 8fjRTUAdxara9BBz5SyPdAr1qaTA2mzpjZaYlAsy00KieXrRrCXVBJ18pGvINLmi TtkkNJNKt5LhIV2ac5gw7iR+ebMA9qvKIoDXUTflMxj4FtYQxBF9TEZDSHWW83VL 2yhbxX7dxAstng== -----END CERTIFICATE-----Generated at Thu Sep 24 22:05:05 2026 by rpki-client