$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json) Hash identifier: hjF3fsh24ROarXUFP5F40tboI1NyFkU2Ios+BAWlEQU= Subject key identifier: D5:C5:2D:8D:D2:C1:8A:7A:DC:2D:26:24:59:DE:92:26:A7:38:60:13 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 01A0DF860C5B1FA51959D0F181B10328EC4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft Manifest number: 1A87 Signing time: Sat 26 Sep 2026 21:01:39 +0000 Manifest this update: Sat 26 Sep 2026 21:01:39 +0000 Manifest next update: Sun 27 Sep 2026 21:01:39 +0000 Files and hashes: 1: 0grhf2XqQS0PbS4vuPKgFUJ4CtY.roa (hash: CABCkAtRB5z7qM37KIh3THIotph2AI+4ndFJUzJYceA=) 2: 1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa (hash: EnRdzd4XuA4kPVdeCj63BslUTaDS51Ig0OU7ONlJnmA=) 3: 7TDWyr5P0SFkG_1wE_zPclx-LJY.roa (hash: mwM+t2AjMGEMAQqYQt7qupjhUbDte5jBQzS3pFunV5E=) 4: 8qGSgqlkHDr914hHEHKKhmYVXnE.roa (hash: frQT+RP9L9JKaXT7O/jbBEr9AzGG4KNbuIOuQ79wIgI=) 5: DY4whTo7KFMsapAbjbck9KXaN2Q.roa (hash: Z3/CUxyVCWOqALKEDmYApn9KMCw1qs9OcKyU5Z8f4RU=) 6: I7MkmQek9TX_IQqyz6tzXHWahHc.roa (hash: guTyQfwBcIAtfrQpROz3rqT3lhXR49lhfULYZRlg2k4=) 7: KSert21IyVLdzTzI3FZycKPooac.roa (hash: enNDLKMhC0/+6E/ssv2WFmJ1HNQhuj49stCcOOz9a3U=) 8: MmwxwXtvbBi5TfpYulx_NsdGK8I.roa (hash: CpEEnuPEEQ/Lt5U7MuRSDkJQEaOqlXnkUBi298BTux0=) 9: bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa (hash: irzJrYBfyhTaJEK1r/bwWtkoGmHHDM2zuMWB3WPr1vw=) 10: fCGYEGlgfKRgTz2ikieXaOSbdRE.roa (hash: FYEv1aBWOrr2YMP+bkGoFPlLBNqhRh64fwSr9xKf+yc=) 11: i_8Ltd9wbcfD0mAu6VNm7MTQ_Ac.roa (hash: LXGue0t/sMA2Z7REoNuZF9MeZQKOuFmufuOtJTo72DU=) 12: l46NNfdll0CkF-GyTagj6nVywQA.roa (hash: Bz8PpZZscQ882ZYbIbT/ZfP7vpdnPTaRcDmY5jTgHws=) 13: nhzxopyxtZ3ZNpXqMYr4_bVPXYw.roa (hash: XWNHr6I19HMZl/NwLAbZ/QL51wNU0N0GDXtB6ekbpGI=) 14: qXx90FSqDeV2TFA5z5gkzjt5MT4.roa (hash: GIcu6RV+4oLEen2ihNm9iiU1rL+T3G8HifCPdddrGao=) 15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: Ac0myevlQvumJorFmGUKPgGvQKG+8f+4F88wIs3DzKo=) 16: vy_B141YrrWxhcrnlEIljoTLECk.roa (hash: xj/TtKRTGyOPxeeyCWIfxLPuFe3BEl/1ac8Kc9RexP0=) 17: w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa (hash: jnFfoOHT3qsowloY5NEfrKxUN2Spb88yoOnFZYPFjK4=) 18: wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa (hash: dmGJEO5REXkLJeMFm08GEDBzv38Ylu5Doyq2n0KUXjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 20:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:df:86:0c:5b:1f:a5:19:59:d0:f1:81:b1:03:28:ec:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Sep 26 21:01:39 2026 GMT Not After : Sep 27 21:01:39 2026 GMT Subject: CN=d5c52d8dd2c18a7adc2d262459de9226a7386013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:e3:0d:15:7a:a6:6a:89:5d:bf:8a:9c:4c: c1:b3:22:45:c1:f2:d0:da:5e:5f:62:07:9a:c7:2c: e0:ed:6e:a3:97:99:8f:c7:a0:bd:ff:ef:87:28:e8: 6f:6b:c0:13:0d:c2:d0:b5:04:4a:06:32:6d:ae:57: 3c:78:c7:74:b4:ab:8d:67:01:44:db:70:e3:ae:36: 81:a7:0a:61:d5:1b:68:70:fc:77:d9:97:93:55:c5: 7e:d3:c6:b8:14:9a:1a:52:68:97:19:cc:b5:49:74: 14:a6:31:61:fb:b3:3d:bf:ce:63:20:10:7e:39:3a: 5c:dd:65:37:f1:81:12:c9:bc:05:a3:5c:7e:c1:e1: 66:91:35:a4:4b:ce:29:d3:00:e6:fe:a8:0f:08:9a: 65:e0:0b:24:72:f7:61:c0:6a:3c:33:78:84:ad:45: 2e:38:75:3f:bb:e3:fe:4d:a3:e1:23:b3:bb:f8:d3: c8:53:15:9d:20:46:78:3c:23:de:02:a6:a8:1a:7d: b9:3f:a0:67:1e:a8:b6:0c:49:7d:49:c7:bc:3b:90: 8d:69:2b:a7:23:53:e6:b8:8a:aa:93:f5:ed:59:bf: a1:51:c5:03:47:42:ba:84:9b:a3:5c:30:1b:51:22: 08:b0:b1:be:07:83:dc:9b:4c:a0:40:af:66:4d:29: 39:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:C5:2D:8D:D2:C1:8A:7A:DC:2D:26:24:59:DE:92:26:A7:38:60:13 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:e2:ba:53:03:98:bf:09:7b:52:a9:e5:4b:f4:e4:43:f7:43: f9:7f:12:7c:4c:0e:ac:67:4b:2f:4e:88:13:30:76:66:87:18: ba:25:97:ea:01:70:62:67:69:63:0a:22:3d:61:3b:d1:bd:3f: 0b:2a:f6:c9:8a:15:f1:6b:5f:be:9f:1b:d8:30:ca:50:3c:77: 0c:be:da:f0:ef:83:52:03:31:bb:7f:f5:dd:8e:6e:9c:4f:16: 32:8c:d9:48:17:65:f8:99:22:e3:67:15:ab:23:2b:67:c9:7e: 01:e5:db:e4:65:c9:c9:45:06:4b:1e:22:32:7b:3e:5e:a1:84: ab:75:0d:c5:73:6d:f3:18:b6:bd:e3:4f:f8:80:66:d0:d0:f6: c7:97:b2:96:19:b1:37:22:1c:6f:76:6d:10:86:62:01:a9:31: bd:da:b4:2a:99:81:06:34:ea:e8:4c:2a:bf:f0:f8:81:35:2f: 0e:bf:4a:85:cf:2f:56:a8:3f:1c:25:dc:89:1c:6a:e0:8b:cc: 33:61:46:45:91:83:4e:5c:27:f3:7e:6b:e1:dd:34:1e:e4:cc: 1a:b4:57:68:86:4a:84:5e:bf:8a:04:05:da:72:cd:81:4d:e8: 48:f6:c6:06:e8:63:b0:62:1b:41:a1:ed:2e:d4:ee:67:11:b3: 21:4e:e2:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDfhgxbH6UZWdDxgbEDKOxLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwOTI2MjEwMTM5WhcNMjYwOTI3MjEwMTM5WjAzMTEwLwYDVQQD EyhkNWM1MmQ4ZGQyYzE4YTdhZGMyZDI2MjQ1OWRlOTIyNmE3Mzg2MDEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvPjDRV6pmqJXb+KnEzBsyJFwfLQ 2l5fYgeaxyzg7W6jl5mPx6C9/++HKOhva8ATDcLQtQRKBjJtrlc8eMd0tKuNZwFE 23DjrjaBpwph1RtocPx32ZeTVcV+08a4FJoaUmiXGcy1SXQUpjFh+7M9v85jIBB+ OTpc3WU38YESybwFo1x+weFmkTWkS84p0wDm/qgPCJpl4AskcvdhwGo8M3iErUUu OHU/u+P+TaPhI7O7+NPIUxWdIEZ4PCPeAqaoGn25P6BnHqi2DEl9Sce8O5CNaSun I1PmuIqqk/XtWb+hUcUDR0K6hJujXDAbUSIIsLG+B4Pcm0ygQK9mTSk5mQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNXFLY3SwYp63C0mJFnekianOGATMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiOK6UwOY vwl7UqnlS/TkQ/dD+X8SfEwOrGdLL06IEzB2ZocYuiWX6gFwYmdpYwoiPWE70b0/ Cyr2yYoV8Wtfvp8b2DDKUDx3DL7a8O+DUgMxu3/13Y5unE8WMozZSBdl+Jki42cV qyMrZ8l+AeXb5GXJyUUGSx4iMns+XqGEq3UNxXNt8xi2veNP+IBm0ND2x5eylhmx NyIcb3ZtEIZiAakxvdq0KpmBBjTq6Ewqv/D4gTUvDr9Khc8vVqg/HCXciRxq4IvM M2FGRZGDTlwn835r4d00HuTMGrRXaIZKhF6/igQF2nLNgU3oSPbGBuhjsGIbQaHt LtTuZxGzIU7iiQ== -----END CERTIFICATE-----Generated at Sun Sep 27 08:08:22 2026 by rpki-client