$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft File: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft (raw, json) Hash identifier: kG7a5ZWHfT3uasWXNDlxoncu2bRygy0KtIBAFOE17jE= Subject key identifier: D1:82:D0:B2:F0:15:D0:0B:0F:2D:AD:91:97:6A:8B:CE:B5:0D:31:13 Authority key identifier: D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 Certificate issuer: /CN=d5637692ff5c45486d1053b149dc1420026cd733 Certificate serial: 01A0CCDA49E292D5550857B8A88DC0BB0279 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft Manifest number: 108E Signing time: Wed 23 Sep 2026 06:00:52 +0000 Manifest this update: Wed 23 Sep 2026 06:00:52 +0000 Manifest next update: Thu 24 Sep 2026 06:00:52 +0000 Files and hashes: 1: 02DR5VqiImR1ELzoMhmN2MgdJEw.roa (hash: A46KCkLXFpYgdMenUrWnd1pDGxM359G65Rk9wVjYrCI=) 2: 1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl (hash: zj2VfibyAYoWnWsH+8289WahSmHn2gk2kxwQuTkB7bw=) 3: 66ry_Oqrn2z2VQi36erLm_YTas8.roa (hash: 8++6k+ANwssYLtGuRElIJ17chl0LvEvv8esMVg7kfIE=) 4: 8P-jAkBcMOaRIUETkZOwY2giLXE.roa (hash: JFv+n+pyR4z+68wZuOFM0scuNRmrUJ1Wb5COfkBUH5E=) 5: BY4mDld_X8hCH3azNrIdkJUk3VU.roa (hash: 5iaX0LN1ARLgnFxwOqzDQkkekYgRLU/QkxFUY+A4X4w=) 6: KpUnWVUlULWTTS0J2TLqceBjzCk.roa (hash: 76AJtOxzTxnr9dKExR5Nj079cdfCs06aPInHb2LSvtc=) 7: Tz7ItZl-lHs7DNCXseXkPaZdXac.roa (hash: FcXx3w36kf6TRe3O05Cyb+nGwJit3nSqaoLBOCk0HGM=) 8: XD0N8YFQ7WEbeGPE05rrKKkxLe4.roa (hash: +5lcpcvEvIjJRLbDNnmCgfImKGp7O0W9Yg7RYSAvMGk=) 9: Xpfmc5Pj6g7rym3j_1LXYJ9AL1s.roa (hash: MovlI65q4mVYc3DNO4AqCJ9iCuS7hY789BB33mIixAc=) 10: b2A87lKXZV-LA0ZGDO4bCLP_qZk.roa (hash: fj4a7LJXRs7D1MouPdKAx8xun8DGteQiIPGE+YxQovY=) 11: eqwxW_73SsfybtamGFjU8BT6lss.roa (hash: eZIEEacqr0QeRaw//AWmV7fNo+uhUfn87QEEoeHj8N4=) 12: f8TG-bZI-Z4nSjLzL-HsS0C_Tf0.roa (hash: 0olqv2jmyhIPEjFWu6/XmLwOWBRD4BMaKAamfg5ymBE=) 13: fHiLAjeGI5fzHUJT-wjG-vUQaUc.roa (hash: b2nJsInyFTD4R4jnJKV9oymyFGug4tERm9L1VVzvdQU=) 14: gcxp-EWnfFLHMrONlRoutn-Z7U8.roa (hash: pfCAICQ/vVikMpFdMBXvwM28HdJs0Hi4u8HPJ1KDTPI=) 15: l1LATFY_vdostbB9Lz5ULV3obQg.roa (hash: g5dMlB8SMZ/AEHbTJXc8VAsuZMEmjzmc7YnjTo/UDz8=) 16: lmwUE6-sNDETCNSEMoLU5Q6laJU.roa (hash: 8qCzxJz2lk/vBKmrmfwaSNgolO5upfvcwLUosHTaWSo=) 17: pMRzd49PJuC_a8isaKVdx-y6R6E.roa (hash: vS6bWVrCBd2U3yUpSsw/bcztmwQtyHAUDWfNv8cokkA=) 18: yeEWbOYgX_Oncu1Rzgm_LkCjWSg.roa (hash: SuLBsAyJ9wMKUX8JJrXZ9GO0IIZWlW+vtwNA4dWtXb4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 23:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cc:da:49:e2:92:d5:55:08:57:b8:a8:8d:c0:bb:02:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d5637692ff5c45486d1053b149dc1420026cd733 Validity Not Before: Sep 23 06:00:52 2026 GMT Not After : Sep 24 06:00:52 2026 GMT Subject: CN=d182d0b2f015d00b0f2dad91976a8bceb50d3113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ed:3a:9f:c3:03:3c:a9:3f:d6:5a:57:55:6d: 02:53:91:f8:20:53:77:4f:29:66:02:1f:dd:10:b3: 68:d7:34:b5:9e:bc:1e:78:0a:41:ff:74:9c:f7:04: 2c:4f:3c:01:2c:5b:f1:6f:6b:10:35:07:0c:bd:e5: 43:7d:c9:08:39:94:cb:ac:a2:22:40:e6:37:09:8e: 97:8a:36:5b:da:98:45:56:83:e0:f6:63:f3:83:bd: 35:ff:55:db:59:53:d9:f7:b4:f0:aa:95:3d:4d:1f: 79:f2:0a:94:eb:74:5e:57:62:13:e2:d3:b6:f0:9e: e9:df:e0:9d:3e:5a:5e:cc:84:7e:49:d7:ad:71:8b: 4d:83:8e:7d:4b:04:87:13:6a:55:36:ee:ca:ba:8e: 7a:68:a2:32:9d:0c:1e:e1:b2:ec:9c:0b:32:98:67: 88:6e:5c:4e:3b:38:19:6b:40:c1:d8:11:42:e2:a9: fe:5d:de:7c:21:d8:9c:78:b1:3e:0e:ba:6b:fe:6a: 21:55:70:29:fe:e2:9f:dd:39:be:f6:77:19:2c:4b: 19:91:dc:7c:b6:87:f1:ed:e4:56:18:6c:e1:6a:d0: a5:a6:2c:56:c8:8a:be:80:41:77:ec:93:1f:40:f5: 8f:a7:03:e0:93:11:f8:c8:0f:dd:d7:44:fb:6b:a5: be:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:82:D0:B2:F0:15:D0:0B:0F:2D:AD:91:97:6A:8B:CE:B5:0D:31:13 X509v3 Authority Key Identifier: keyid:D5:63:76:92:FF:5C:45:48:6D:10:53:B1:49:DC:14:20:02:6C:D7:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1WN2kv9cRUhtEFOxSdwUIAJs1zM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/98e113-e002-4d93-9a49-adeade2865c1/1/1WN2kv9cRUhtEFOxSdwUIAJs1zM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:bd:39:45:eb:61:60:b5:99:70:05:db:1a:48:2a:92:35:fd: fb:f7:84:e4:8a:ac:5f:a5:c2:25:03:11:d4:50:c7:94:9a:8c: 9a:e0:1e:20:dd:62:ff:71:61:43:c9:ae:b0:cc:18:bb:66:3d: 0b:22:67:6f:e0:63:94:95:cd:f9:29:a4:3b:3d:3c:3a:a6:2d: ab:be:50:b9:eb:07:57:32:e7:d6:68:57:99:7f:e3:59:35:0f: 32:c5:ce:be:28:d2:02:d8:50:b6:b7:1f:2d:b1:f6:56:28:f7: a1:b0:0d:07:f5:6e:d3:9d:44:c6:b3:ac:8b:08:c0:0b:99:16: f9:59:1c:bc:b8:33:de:d6:b1:ea:f7:03:84:9e:c0:9b:18:32: 69:69:7b:26:37:22:58:af:a4:8c:e1:43:8d:f9:b8:e5:87:4d: 8d:47:7d:2c:e2:65:0c:ed:27:44:56:38:6c:b4:eb:1e:ec:0a: ef:1e:09:96:5c:cc:ce:0a:e7:34:11:a4:45:17:72:cc:17:11: eb:01:44:19:00:d2:58:99:a8:cb:af:58:63:9c:42:2f:b8:61: 66:4b:cd:08:b3:b5:a5:80:1e:aa:dd:81:82:6b:9f:81:44:a3: ea:2b:3a:e7:89:13:38:a7:5c:d5:db:62:a5:00:ab:24:3a:12: 7a:e9:fe:66 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDM2kniktVVCFe4qI3AuwJ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ1NjM3NjkyZmY1YzQ1NDg2ZDEwNTNiMTQ5ZGMxNDIwMDI2 Y2Q3MzMwHhcNMjYwOTIzMDYwMDUyWhcNMjYwOTI0MDYwMDUyWjAzMTEwLwYDVQQD EyhkMTgyZDBiMmYwMTVkMDBiMGYyZGFkOTE5NzZhOGJjZWI1MGQzMTEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte06n8MDPKk/1lpXVW0CU5H4IFN3 TylmAh/dELNo1zS1nrweeApB/3Sc9wQsTzwBLFvxb2sQNQcMveVDfckIOZTLrKIi QOY3CY6XijZb2phFVoPg9mPzg701/1XbWVPZ97TwqpU9TR958gqU63ReV2IT4tO2 8J7p3+CdPlpezIR+SdetcYtNg459SwSHE2pVNu7Kuo56aKIynQwe4bLsnAsymGeI blxOOzgZa0DB2BFC4qn+Xd58IdiceLE+Drpr/mohVXAp/uKf3Tm+9ncZLEsZkdx8 tofx7eRWGGzhatClpixWyIq+gEF37JMfQPWPpwPgkxH4yA/d10T7a6W+LwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGC0LLwFdALDy2tkZdqi861DTETMB8GA1UdIwQY MBaAFNVjdpL/XEVIbRBTsUncFCACbNczMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDkt YWRlYWRlMjg2NWMxLzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi85OGUxMTMtZTAwMi00ZDkzLTlhNDktYWRlYWRlMjg2NWMx LzEvMVdOMmt2OWNSVWh0RUZPeFNkd1VJQUpzMXpNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk705Reth YLWZcAXbGkgqkjX9+/eE5IqsX6XCJQMR1FDHlJqMmuAeIN1i/3FhQ8musMwYu2Y9 CyJnb+BjlJXN+SmkOz08OqYtq75QuesHVzLn1mhXmX/jWTUPMsXOvijSAthQtrcf LbH2Vij3obANB/Vu051ExrOsiwjAC5kW+VkcvLgz3tax6vcDhJ7AmxgyaWl7Jjci WK+kjOFDjfm45YdNjUd9LOJlDO0nRFY4bLTrHuwK7x4JllzMzgrnNBGkRRdyzBcR 6wFEGQDSWJmoy69YY5xCL7hhZkvNCLO1pYAeqt2BgmufgUSj6is654kTOKdc1dti pQCrJDoSeun+Zg== -----END CERTIFICATE-----Generated at Wed Sep 23 10:00:26 2026 by rpki-client