$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: xArd6HeBXv8jYEIpzBVZN4OKSCAUu3ojybwhYLtsJbQ= Subject key identifier: F2:44:05:A5:D1:A2:C4:9E:93:67:C2:38:85:C4:CA:D6:4E:9B:23:05 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 01A0D8A8889CE39EB1C649C04A35B4BD1F01 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 1A9A Signing time: Fri 25 Sep 2026 13:01:58 +0000 Manifest this update: Fri 25 Sep 2026 13:01:58 +0000 Manifest next update: Sat 26 Sep 2026 13:01:58 +0000 Files and hashes: 1: 0j-E2p7yPQMemgGvSRSZ4MvRCNU.roa (hash: R10Ysi1BEXWiUlY0MZI6cprW++MzfggA46h3XQchDBE=) 2: 6lQ-d2RqD34pr1B6YNpd-OcDomw.roa (hash: EUu4nLunhxSbrVXC44jFtM4/qfl2QcaLlDGbKHKerK8=) 3: EpKlZvm1sQunk4TyUL8-X4yYT-s.roa (hash: tOu5I+gySB5LV5V4nchtnSTJlY0KTUc/ZBP+vEiIXg8=) 4: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: w3NHWiKezm6uRezSpLOS2QV/cBrvlzykHefUefkfh6Y=) 5: Rxt2CLseUCvSS0aBQtPjXzszCqg.roa (hash: t/WG3LqTBzVpZUkPVYwf0yWDRBg9EaL/KqhhkGh1DOc=) 6: TDsQsD-FogHQsn4Ec6vvY4gDP8s.roa (hash: U4WjlnP/gqngtBE2O7bB+uTcniNf17yLooWBWXfykbw=) 7: YJY6sXgdjZPpBkj1VwmX4zvap9o.roa (hash: dT/ycJa0vDp42f9RraEZREL3j3du8iMNlQiXyOOHqI0=) 8: ajchcB005SwdhHOonkg_FPYCObk.roa (hash: iRaNo1hXeWmGHavpqJaMPyQrwMjNl6Bwb7CatuzhcAo=) 9: ix2q65tvo79b2VM9SJoR3waKmbY.roa (hash: 45SsaY7Saj0PCodz7wSRlglQW+UHXzTiCmppLl/YbTs=) 10: oI8W0AkfN6Nm4xiZ9xN1plVsvaI.roa (hash: OjUGaPP7K1loTdge45OhIT+GBszfyERu/sHA/9LU0io=) 11: qyibzEtDjpKnDnO2ZiEDt3kaXzA.roa (hash: 8qTTIASb+Ax4Z41uNrWSSXbwwLoNDBXuy0I+ga8d34I=) 12: yIWy_rvvNZnwLxKMF7Qd8tp5mIU.roa (hash: yZlGIfyc2ty242yY4bQaWq7Zh/xS5/o+bqbYH7SHCr0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d8:a8:88:9c:e3:9e:b1:c6:49:c0:4a:35:b4:bd:1f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Sep 25 13:01:58 2026 GMT Not After : Sep 26 13:01:58 2026 GMT Subject: CN=f24405a5d1a2c49e9367c23885c4cad64e9b2305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:c4:00:a6:2b:3a:fe:51:59:3f:16:46:d5:c1: 3c:e6:e7:4b:fa:42:75:04:99:71:e2:48:d5:f8:f6: bc:8f:06:92:5f:d5:9c:54:ed:e1:47:ca:1f:e9:38: f1:d0:af:fa:5d:bc:6e:ec:b0:ad:dd:dc:28:a1:84: d7:8f:cd:d6:be:31:70:34:59:05:f3:3c:5d:58:67: 27:db:3f:a8:05:f7:54:6b:e7:e7:d8:ee:0f:6e:75: 82:5f:90:03:97:ad:8c:93:e7:96:f3:a4:0a:25:84: d2:a2:ab:71:e0:b6:5e:df:b1:63:66:06:65:9a:eb: 14:63:fa:3d:57:38:72:1b:21:37:b7:b0:c1:29:5d: 6f:b8:77:3a:65:5e:7e:7b:bd:9b:3b:79:b4:89:ab: f3:a7:86:ad:2b:32:03:88:ff:55:ec:42:9c:fa:f4: dd:8e:12:2e:cb:e7:13:9c:fb:cf:bb:e3:15:3e:94: 12:87:50:e5:4c:3d:63:6e:31:71:b4:ac:4e:bb:16: 7e:f0:2b:da:cf:4d:0d:d4:13:f9:bc:b9:74:c5:5e: 5f:04:b4:39:f4:5f:e8:5b:c0:69:e7:8f:02:50:ea: 3e:d3:74:06:7d:8c:ff:e1:6c:ed:f0:14:b7:14:d7: 33:d8:eb:af:b7:39:4e:c0:ba:5e:19:a8:04:40:a2: a0:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:44:05:A5:D1:A2:C4:9E:93:67:C2:38:85:C4:CA:D6:4E:9B:23:05 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:1f:16:ed:b2:47:07:59:9f:37:a9:0f:51:a7:14:ff:af:ab: 16:c0:52:a7:40:99:c5:fc:d9:8c:d8:9a:73:d3:4b:5e:4b:ea: 63:ea:a1:f9:bb:18:4f:dc:7c:0e:07:0a:23:b4:8d:18:fc:bb: 7b:44:6c:b4:69:f0:ea:c2:bc:1b:0a:f3:51:9f:52:37:c3:bb: 19:57:4f:e5:f1:7e:09:77:12:b7:ec:6e:c7:d3:b7:47:95:ce: fe:7c:a4:d9:aa:86:77:b8:40:25:3d:79:69:14:52:55:e5:e0: 75:3d:fc:b1:84:d9:28:ea:ff:43:82:e9:2a:93:05:b9:b5:82: e4:48:22:2b:00:8e:4b:52:34:91:ca:b2:45:08:44:50:ba:e3: f6:8d:24:13:5f:ea:c9:ef:22:c7:a4:0f:fa:23:34:49:d1:b6: 81:34:c9:45:43:7d:49:3f:57:79:74:2d:a5:f0:35:e1:cd:a8: ef:22:e6:d4:55:93:8d:92:df:97:c4:a5:a9:ed:58:16:ec:91: 02:8e:2a:36:80:b2:7f:34:d6:b1:7e:48:57:c5:36:62:84:bd: fc:c5:e0:49:af:97:12:69:22:c2:31:5d:e3:21:02:28:fb:be: 86:93:ff:06:f1:4b:1d:b9:81:58:fb:a8:0c:51:b0:fc:84:be: 06:1d:ce:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDYqIic456xxknASjW0vR8BMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjYwOTI1MTMwMTU4WhcNMjYwOTI2MTMwMTU4WjAzMTEwLwYDVQQD EyhmMjQ0MDVhNWQxYTJjNDllOTM2N2MyMzg4NWM0Y2FkNjRlOWIyMzA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MQApis6/lFZPxZG1cE85udL+kJ1 BJlx4kjV+Pa8jwaSX9WcVO3hR8of6Tjx0K/6Xbxu7LCt3dwooYTXj83WvjFwNFkF 8zxdWGcn2z+oBfdUa+fn2O4PbnWCX5ADl62Mk+eW86QKJYTSoqtx4LZe37FjZgZl musUY/o9VzhyGyE3t7DBKV1vuHc6ZV5+e72bO3m0iavzp4atKzIDiP9V7EKc+vTd jhIuy+cTnPvPu+MVPpQSh1DlTD1jbjFxtKxOuxZ+8Cvaz00N1BP5vLl0xV5fBLQ5 9F/oW8Bp548CUOo+03QGfYz/4Wzt8BS3FNcz2OuvtzlOwLpeGagEQKKgoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPJEBaXRosSek2fCOIXEytZOmyMFMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdR8W7bJH B1mfN6kPUacU/6+rFsBSp0CZxfzZjNiac9NLXkvqY+qh+bsYT9x8DgcKI7SNGPy7 e0RstGnw6sK8GwrzUZ9SN8O7GVdP5fF+CXcSt+xux9O3R5XO/nyk2aqGd7hAJT15 aRRSVeXgdT38sYTZKOr/Q4LpKpMFubWC5EgiKwCOS1I0kcqyRQhEULrj9o0kE1/q ye8ix6QP+iM0SdG2gTTJRUN9ST9XeXQtpfA14c2o7yLm1FWTjZLfl8Slqe1YFuyR Ao4qNoCyfzTWsX5IV8U2YoS9/MXgSa+XEmkiwjFd4yECKPu+hpP/BvFLHbmBWPuo DFGw/IS+Bh3OVA== -----END CERTIFICATE-----Generated at Fri Sep 25 20:11:54 2026 by rpki-client