$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: 4w7EMVgdT1EFLHeOsYGMZCSOpq5h0Ibve8RAnlzt1dE= Subject key identifier: 63:69:C3:B9:A6:99:B3:1D:49:EF:1C:DF:F3:F5:7E:B9:63:01:E5:A3 Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 01A0CD7EE1968531531BE6C8B5B248AA72A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 1438 Signing time: Wed 23 Sep 2026 09:00:39 +0000 Manifest this update: Wed 23 Sep 2026 09:00:39 +0000 Manifest next update: Thu 24 Sep 2026 09:00:39 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: 0O30tRo9vKB9X07AlG0plTGnp3vnNKZhzwEiQRvC2NU=) 4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=) 7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 09:00:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:7e:e1:96:85:31:53:1b:e6:c8:b5:b2:48:aa:72:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Sep 23 09:00:39 2026 GMT Not After : Sep 24 09:00:39 2026 GMT Subject: CN=6369c3b9a699b31d49ef1cdff3f57eb96301e5a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:16:ae:16:1d:6f:c5:e3:3f:3e:33:73:ed: 2f:0b:32:b1:6b:98:6e:61:30:f3:a5:c5:af:b1:31: a8:d2:e4:9e:71:a4:48:39:a6:48:fd:5d:a0:10:e2: 15:93:d8:ec:a1:9c:0a:88:bb:7b:69:ec:63:9f:dd: 17:e9:f9:48:fe:d6:eb:e9:13:a9:39:fd:77:2f:18: 75:96:d8:51:2d:6b:67:f1:e0:af:37:af:3a:56:7c: b7:1a:7c:11:f0:a9:b7:5d:83:a8:49:75:1c:e8:ed: 21:31:4a:68:2c:b6:5e:cf:67:36:15:2d:cd:f0:01: b4:2d:d6:03:cc:9d:8e:ea:86:c5:e2:b7:3d:38:dc: 72:37:a5:0e:ad:58:76:0f:a4:83:70:45:b6:9d:41: b7:46:2f:7f:34:c4:a8:99:3d:23:b5:b2:70:da:be: da:e2:ba:96:d2:59:18:a2:b9:c4:7b:8a:9f:69:5c: 65:c3:d8:d4:81:7b:84:50:74:f0:65:2e:ed:31:52: 01:76:08:22:2a:64:93:21:c6:b5:ac:64:5d:3e:60: 48:6e:6b:ea:bd:2b:c8:ac:a7:b1:1a:c2:57:2e:04: 80:7c:52:1c:20:6b:ec:f2:e1:3c:d3:9b:5e:07:f0: d1:72:e1:df:c2:8a:9d:74:71:b8:4a:50:d2:7a:75: 7f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:69:C3:B9:A6:99:B3:1D:49:EF:1C:DF:F3:F5:7E:B9:63:01:E5:A3 X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:1b:b3:84:20:06:1f:6c:1a:f0:fc:af:e5:0e:e9:c8:c4:52: 58:ee:66:fc:29:0f:97:e2:81:cc:98:48:d5:e6:bc:76:07:d2: 18:0d:1e:27:5e:24:b4:18:47:e6:84:57:26:d1:58:ff:d0:67: 05:ae:b8:0b:13:81:d1:2e:7d:e6:ae:76:54:11:a4:65:00:dc: 6a:78:6d:a9:e1:fb:b6:d0:a5:f2:58:54:55:bf:d1:82:51:a1: 59:95:60:a4:ad:e5:bf:50:5a:03:0f:14:a1:44:89:3f:57:04: 03:76:9e:39:74:d1:dc:68:38:9a:89:e2:c4:a9:8c:a1:c5:ba: 46:bf:d2:78:60:a5:ff:be:9f:19:9a:65:d4:1c:2c:6a:ee:e2: 99:13:da:37:0d:e6:12:7e:d2:1d:08:36:2d:b7:d5:28:5d:68: 22:c2:2a:72:4b:6b:9c:be:30:10:dd:e4:3a:c5:0f:27:21:33: ea:3b:a0:77:78:7f:59:51:cd:ac:a7:06:08:52:3a:cd:57:0d: e3:63:d2:c8:3f:e8:18:25:50:1d:b3:ea:c6:d0:30:65:ba:05: 87:f2:ba:b0:cf:85:69:71:c6:0d:e8:7e:ce:d1:34:d2:76:13: 95:6a:24:b0:f3:6c:a9:19:32:00:6a:f5:6c:98:e9:4e:20:cb: 49:b8:5b:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNfuGWhTFTG+bItbJIqnKmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwOTIzMDkwMDM5WhcNMjYwOTI0MDkwMDM5WjAzMTEwLwYDVQQD Eyg2MzY5YzNiOWE2OTliMzFkNDllZjFjZGZmM2Y1N2ViOTYzMDFlNWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8wWrhYdb8XjPz4zc+0vCzKxa5hu YTDzpcWvsTGo0uSecaRIOaZI/V2gEOIVk9jsoZwKiLt7aexjn90X6flI/tbr6ROp Of13Lxh1lthRLWtn8eCvN686Vny3GnwR8Km3XYOoSXUc6O0hMUpoLLZez2c2FS3N 8AG0LdYDzJ2O6obF4rc9ONxyN6UOrVh2D6SDcEW2nUG3Ri9/NMSomT0jtbJw2r7a 4rqW0lkYornEe4qfaVxlw9jUgXuEUHTwZS7tMVIBdggiKmSTIca1rGRdPmBIbmvq vSvIrKexGsJXLgSAfFIcIGvs8uE805teB/DRcuHfwoqddHG4SlDSenV/nwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGNpw7mmmbMdSe8c3/P1frljAeWjMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArhuzhCAG H2wa8Pyv5Q7pyMRSWO5m/CkPl+KBzJhI1ea8dgfSGA0eJ14ktBhH5oRXJtFY/9Bn Ba64CxOB0S595q52VBGkZQDcanhtqeH7ttCl8lhUVb/RglGhWZVgpK3lv1BaAw8U oUSJP1cEA3aeOXTR3Gg4monixKmMocW6Rr/SeGCl/76fGZpl1Bwsau7imRPaNw3m En7SHQg2LbfVKF1oIsIqcktrnL4wEN3kOsUPJyEz6jugd3h/WVHNrKcGCFI6zVcN 42PSyD/oGCVQHbPqxtAwZboFh/K6sM+FaXHGDeh+ztE00nYTlWoksPNsqRkyAGr1 bJjpTiDLSbhbZw== -----END CERTIFICATE-----Generated at Wed Sep 23 17:36:26 2026 by rpki-client