$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft File: pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft (raw, json) Hash identifier: L5Ev3se9TwkTN3WT5fUg7usk8aPNwChP8UuWu3nfcIU= Subject key identifier: 95:15:CC:66:E4:2A:3F:C9:04:E2:94:52:80:57:AE:1B:20:CF:E7:99 Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2 Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2 Certificate serial: 01A0CEC7F094523EE9FA2C73F52F7514E10D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft Manifest number: E5 Signing time: Wed 23 Sep 2026 15:00:04 +0000 Manifest this update: Wed 23 Sep 2026 15:00:04 +0000 Manifest next update: Thu 24 Sep 2026 15:00:04 +0000 Files and hashes: 1: 8eWn-LZ8SHda6Hq0PZ8MjLvheII.roa (hash: t0Q9JGg0FFkCyUnnAjxlIairjnAp1fGIhWq7kxGfNJg=) 2: Dl8kjWnig9EJLu_V18bsJwWgThI.roa (hash: l/ftiedkdOtevwG6rB8zoiK5YC04kv/8SOqTEc+HzIM=) 3: E2z6-aE0lSQ3PEiEzxW-JiraDEE.roa (hash: KsnALsa02zQjMMj5q5msrnek1tk5/ZfIcaQoMmke+mE=) 4: EFeoepCweNchcY3yfWtwGD_ZuaI.roa (hash: pYKBI/KFA8wkQgixMUY8skRW5VKXK8M6e31dK0HwAis=) 5: G_cJpHD_tLUwCg2RMVO24zq3Grw.roa (hash: xNL/dYNyvvIlOS2j+6Eyo8zzNd4uG3W4GbIaOCiKFl4=) 6: HAt__vrw52VuZkpPDGhyJ1Sqq6U.roa (hash: j9XKjBk7nFDWQWKVzLFTasY9jD5D/3qYwK+3ZpEzpj0=) 7: I4AgYPx6q-AXqCOLfyv2qdwV6wU.roa (hash: 8y1qmodCTXEdWfudBIOg5DrmRpEF6FezAaUs7Ropbsg=) 8: JEVNWQm_Cx4mWqq5f1Vg9xZ9JzQ.roa (hash: suXL0V83sdkLjwTY6BS/4DMQepDMTnnLPjHsyUslYPM=) 9: JpbDWGlEPEX32kqGhGQOeWSYx5Q.roa (hash: JNJaUsPN0pZohEeyDrNgCF5tl5YPCYCRSpC1PRT7kZo=) 10: MlxaAHik4Irhhg2pDV_s_Rvf7bI.roa (hash: 3NA/JBsu3EKmNF330/KjUrrDVxnecTt8Q2GPQT4XUMo=) 11: O1gPaiiuHk3Ynoh8wcqM-XkdraY.roa (hash: suwi7xOa2pEQsq5Ilao9i/obnAr3R24ZSt95W5s3w8g=) 12: QOM15JeN0LuoBWCIcbxrvBihxTo.roa (hash: RgmDFHjBWCEG8nuyIsqAeoRJCFfCkfWjGGmoJpZMo70=) 13: R26ho8RD5wA-FJFM2n4H8lCIMDU.roa (hash: K8bV/6TdZ6xy+XDttrJ2eOGl3w4V8h8EbfrCk8vy/rQ=) 14: SirBpcdRe0m-u_7kALpPCFiPrPs.roa (hash: Z3DSwVfj4GWtECnzKi66mFueac7BJgJGEnZh6Zx4AQg=) 15: UNcrdBCA_IAi--0l3IsFosaU7lY.roa (hash: 8FZC4gbje388SsnaqTJsrZ50Gofq4vRkK1UBtNYlK+4=) 16: X4pU60oDGJrdQI6mIHlAf5rK9qE.roa (hash: pOrJ7LztgT1wu4oDyjOGr9iWSnnOAH4w2AcPvFhqBnA=) 17: Xy2lL2DYT88B5SmizPLux-GXV3Q.roa (hash: Mh0mK933Nfyx6zsgugTVc4TLaFDjax/ayFtH6UHp1oo=) 18: ak2Qp1unBPBGGKshocpx5pL8uig.roa (hash: mOmd1/1RN87KSSOrhLIJgH1FH+upMs+93rOqXUD4go4=) 19: g4bMCR1I2A-6CXSx0W_2l3WKHNg.roa (hash: W5QhjY/Vw7lnM6k8E56FkxoOhrKCflFe48p21g7wGsM=) 20: i5MOqIaSyXP0Wf307JZ-H9fPCU8.roa (hash: WqvJAJL4M1ePBiSqQQISn5kDX+foal+qOH30XzgeJBs=) 21: n5NcxiT9PS0KRcc3R-BBqbuxAco.roa (hash: bz9bpUxzgrZqP4jqMtfZiRv9Qka9ZHViEEqOfmNETJA=) 22: os3bcu3roUzbLBzHQwm9bp3nxZ8.roa (hash: lfz697NMPxlXy6wIBOMRer/mHkvfB1xMD+9SuaGfDyQ=) 23: pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl (hash: tvx52ilckSFXvR/4bvk5/guhKkFZ284vQOeXS+CQjos=) 24: wyD5rZUYnotDvDLBTn1HvdDE-sg.roa (hash: LP8H59Ja7nr0y53p7ISvyJuUcJ0QD06m9kkaSrByJHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ce:c7:f0:94:52:3e:e9:fa:2c:73:f5:2f:75:14:e1:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2 Validity Not Before: Sep 23 15:00:04 2026 GMT Not After : Sep 24 15:00:04 2026 GMT Subject: CN=9515cc66e42a3fc904e294528057ae1b20cfe799 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:4d:94:97:9b:98:7d:c2:57:46:92:76:91: 09:ef:28:e0:7f:27:2a:09:bd:52:29:8b:df:cd:c5: f0:e5:ad:73:23:aa:67:70:74:12:93:0d:0f:f1:81: e6:69:f2:ca:f6:fb:ff:9f:f2:ec:6b:8d:da:9f:d8: 24:86:6d:95:cb:f1:51:f3:d9:cd:56:e2:31:6b:4b: 34:8f:f5:4b:28:31:9f:8e:24:a9:06:4e:4b:f2:8a: 84:56:c2:1f:c9:99:e3:9b:4c:2a:1f:fc:fa:1f:35: 21:9c:0c:88:2a:b2:3c:6b:45:a5:f4:c6:6c:fa:a3: ea:48:86:20:ec:2f:51:24:e2:06:92:d7:6b:65:6d: 24:4f:c4:6a:3b:8d:46:45:a9:af:83:b8:7f:09:11: c2:07:a7:c6:73:89:fd:7b:3a:83:db:68:b7:94:7a: ec:0c:18:fe:e4:b4:fc:38:42:19:b7:28:a6:b3:68: d2:4a:03:56:21:59:0e:81:73:e4:aa:86:7c:a2:42: f0:bc:fa:24:c6:43:bb:c8:f1:cf:8c:b1:b2:c6:04: 2f:e3:7d:1a:6e:57:32:8b:b9:eb:75:d6:2c:0b:33: 59:a2:bc:c3:14:77:7e:7e:11:7b:77:45:05:04:b5: 52:4a:94:d2:79:e3:10:ff:58:8e:d5:4b:1e:63:ee: 9d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:15:CC:66:E4:2A:3F:C9:04:E2:94:52:80:57:AE:1B:20:CF:E7:99 X509v3 Authority Key Identifier: keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:03:7c:d4:09:f3:b0:bb:c6:4c:b5:6f:13:b3:20:21:9c:85: ad:5e:f8:12:32:23:d1:06:2a:53:12:41:71:b9:44:fa:48:dd: 46:58:63:f7:ec:17:17:f1:ba:ad:ae:3e:b1:72:8f:73:e6:60: b5:89:80:4f:17:dd:ee:e6:63:23:95:b4:c8:1d:3a:5f:1d:7a: d6:09:c5:30:08:c8:8f:66:35:a7:1d:3a:a9:ae:fd:2e:51:34: cf:6a:c4:ae:0d:52:0a:86:c4:5f:9d:f9:af:df:d8:1d:30:96: bd:2a:4d:5a:31:03:2a:b9:bd:7f:e4:01:50:b4:aa:d2:a9:9b: 83:2c:a5:53:87:c4:39:8a:31:33:97:30:25:90:f6:13:3a:80: 9b:8d:56:9e:25:23:17:6f:dd:09:80:c8:a6:9a:c0:8d:ab:a5: 37:6d:08:9b:a0:18:c6:61:11:3d:c5:a2:af:11:0e:2c:0d:42: 12:77:d8:b9:df:69:d5:20:f7:19:ea:bc:a0:5b:d9:a6:8d:95: b8:14:2c:06:f6:96:49:51:92:23:c4:41:b0:3f:c5:ed:f8:2b: e5:33:00:7b:c8:77:76:de:17:fb:ba:68:36:4e:16:50:1b:d6: df:64:fd:65:d5:db:8c:3e:61:be:dd:9e:2d:6b:88:4b:be:a4: 2f:48:b1:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDOx/CUUj7p+ixz9S91FOENMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3 ZDE3ZTIwHhcNMjYwOTIzMTUwMDA0WhcNMjYwOTI0MTUwMDA0WjAzMTEwLwYDVQQD Eyg5NTE1Y2M2NmU0MmEzZmM5MDRlMjk0NTI4MDU3YWUxYjIwY2ZlNzk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudtNlJebmH3CV0aSdpEJ7yjgfycq Cb1SKYvfzcXw5a1zI6pncHQSkw0P8YHmafLK9vv/n/Lsa43an9gkhm2Vy/FR89nN VuIxa0s0j/VLKDGfjiSpBk5L8oqEVsIfyZnjm0wqH/z6HzUhnAyIKrI8a0Wl9MZs +qPqSIYg7C9RJOIGktdrZW0kT8RqO41GRamvg7h/CRHCB6fGc4n9ezqD22i3lHrs DBj+5LT8OEIZtyims2jSSgNWIVkOgXPkqoZ8okLwvPokxkO7yPHPjLGyxgQv430a blcyi7nrddYsCzNZorzDFHd+fhF7d0UFBLVSSpTSeeMQ/1iO1UseY+6drQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJUVzGbkKj/JBOKUUoBXrhsgz+eZMB8GA1UdIwQY MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACgN81Anz sLvGTLVvE7MgIZyFrV74EjIj0QYqUxJBcblE+kjdRlhj9+wXF/G6ra4+sXKPc+Zg tYmATxfd7uZjI5W0yB06Xx161gnFMAjIj2Y1px06qa79LlE0z2rErg1SCobEX535 r9/YHTCWvSpNWjEDKrm9f+QBULSq0qmbgyylU4fEOYoxM5cwJZD2EzqAm41WniUj F2/dCYDIpprAjaulN20Im6AYxmERPcWirxEOLA1CEnfYud9p1SD3Geq8oFvZpo2V uBQsBvaWSVGSI8RBsD/F7fgr5TMAe8h3dt4X+7poNk4WUBvW32T9ZdXbjD5hvt2e LWuIS76kL0ix+A== -----END CERTIFICATE-----Generated at Thu Sep 24 02:13:18 2026 by rpki-client