$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: p/VkHR63A5yjpi5JR4/8Za93x8aLH/CvFtnJtS8eIOA= Subject key identifier: 9C:CD:08:82:C0:71:F0:B7:84:72:14:11:A3:19:9D:CD:C1:EF:71:AE Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 01A0CFDAA2695B395AD20430683B98205933 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 1A96 Signing time: Wed 23 Sep 2026 20:00:07 +0000 Manifest this update: Wed 23 Sep 2026 20:00:07 +0000 Manifest next update: Thu 24 Sep 2026 20:00:07 +0000 Files and hashes: 1: 0ld9oICrjkM9PiOBYi7PkCMaP7g.roa (hash: 7pPoPeKMxfAld72vWaWuaU3WiGoLWbNKS8HJfbCj2GY=) 2: 1BFQM936y9WGcLJKwy60Wg2ag-8.roa (hash: NTbQFXMY5QSvW0BgWqBt3HeqiX8tXZPRJi0IS+SKq2s=) 3: DT8TXPB7Zoh4Y9JFFdsSZ2RIgLg.roa (hash: cdCtaCnFbbokb4IxB6SbsLXr+yswcQckTbmvZnS/sJA=) 4: H3d0QP653F6Jo-epVSXBiVH1h6k.roa (hash: B2NZF4jz4UwnLzA3KbDxjNp0EF7Qv4Th+B09WImKi2I=) 5: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: 31G8ZQ8kSiPE7Au22qaWdohF0wlJQcw24PP3kvtZh7A=) 6: O2mRnCNeDokP5q-PUWLd28D1SG8.roa (hash: XL7s2EUC28zeBKoJlmCFsu+5IjkYrbxfH3a9YMWon60=) 7: XPPuMgWRNY1QAnjWn2LftTc8cH4.roa (hash: LqWi3Xbli/jxxlx74n8O7L6EJtxaJ1UA0GYHmPMDyEU=) 8: ZRr2QwcqGgt_EOiTtMFoE-lkmow.roa (hash: SIg3ToChfd1+8YW/rxSI4oA419Stw5Sb9StcFL22beM=) 9: dY6eqUD4ykA92I5VKqHmYTX3q88.roa (hash: uvlx5CXBvfA8EWdxrFvclZnKJJH1HmhxtH5z6Fa+fBo=) 10: hCjWTJUhp9C-lxxCdRV4Jwzm4mk.roa (hash: ECwHPN5lxdIugX2ttk1L3l/uci2ps9CeCy1VAcBMeQs=) 11: lERL5Mrj2Bt3hRDr7br_N3d-JkE.roa (hash: /A5fyVRtCeR1gSok1lWq8T+wbRAaNz8PoEuYxSfdZSU=) 12: lWQXyxEJYv9OPJsRSSX1CCPbFb8.roa (hash: qyL/Gv6WkVcsE18337JVKs2VK9z6GTYDQ6GMJ2m3/WQ=) 13: whyP5FxoblHoIHhMTAeqWb1jp8w.roa (hash: a7SodNhSARcbHydA3wymHLN4IRqMOWIhBwT2PU/EoPc=) 14: zd2dqaKa6O4wz9TxJzSxhbKbteU.roa (hash: Sv1+bPBughIj/le0hfMKADppbA91Co/u0NeJGW/Uifs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:da:a2:69:5b:39:5a:d2:04:30:68:3b:98:20:59:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Sep 23 20:00:07 2026 GMT Not After : Sep 24 20:00:07 2026 GMT Subject: CN=9ccd0882c071f0b784721411a3199dcdc1ef71ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:33:e8:62:8b:45:4c:d3:0e:dd:f8:30:4e:b3: 74:0e:93:44:40:54:32:32:bb:40:e9:35:bf:9a:b2: 96:a4:d2:ff:5b:9c:2e:20:2c:da:f1:dc:31:24:f4: 5f:5e:ce:a6:bb:d4:7e:0f:94:63:2f:06:cc:df:5f: 1c:f7:0d:5b:7e:d9:8a:e5:8b:33:1a:db:67:d0:ee: 5c:5f:77:ca:83:93:f4:cb:0f:d8:b3:0e:5e:86:c2: be:d0:15:b6:85:c6:b6:f3:35:f1:b8:9f:cc:1c:5d: e3:ad:5b:15:5f:ac:aa:de:17:7c:cb:1e:29:d4:e0: dd:37:d0:c8:29:4d:2e:05:4c:22:14:74:f8:e9:02: cd:a6:04:52:97:48:e7:45:bd:ce:d7:5e:d2:32:67: c7:0f:b2:e5:ec:1d:d1:0b:4a:9c:f2:3c:15:c6:0e: 31:5f:d1:9c:0f:ae:b2:9d:79:d3:d2:12:d2:c0:27: 23:aa:f9:de:21:c2:4a:d7:25:6e:1e:8c:f5:26:01: 47:7e:a9:0c:aa:50:e3:3c:22:12:a3:a2:67:ca:84: ff:f2:7e:60:3c:09:03:8e:5f:a4:c8:70:c8:c8:74: d5:a4:e1:78:28:d2:5d:50:27:2c:d7:4a:3a:fc:c2: 08:4d:f1:9d:4c:ce:a2:bd:47:16:e9:62:38:c4:7c: 86:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:CD:08:82:C0:71:F0:B7:84:72:14:11:A3:19:9D:CD:C1:EF:71:AE X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:52:1e:68:c7:bd:cd:c8:35:dc:06:4d:9f:da:22:d7:06:68: 9d:9e:f9:91:04:d5:34:53:03:ff:88:10:50:ef:ce:51:0c:e9: 40:c0:be:d2:ed:db:b2:4a:e3:76:90:35:ad:af:1d:a2:4a:b5: 2f:a4:4f:f9:77:70:a6:42:d5:9a:87:fd:f0:39:3d:22:d1:80: a8:b9:40:11:cf:28:30:eb:9a:b9:8c:ee:1e:2a:ef:6c:c8:88: d4:34:d8:0b:be:1d:0f:e2:e7:16:c9:c7:ef:32:3d:fc:eb:26: ba:17:1b:70:cc:cd:31:81:f8:bc:81:c5:62:00:d5:e7:fa:05: 4f:c4:96:3e:9a:a5:6c:10:54:44:30:2f:d2:ae:bf:26:ea:19: 62:35:d5:fa:af:76:31:e4:c3:0f:09:30:be:03:a8:55:9a:50: 49:82:dd:19:9d:4f:18:11:ab:f3:b2:d1:be:a4:68:17:be:00: 5b:33:04:1f:da:05:a3:1d:87:4c:df:4c:1b:5d:02:af:d5:58: f4:9b:b1:76:75:6c:35:20:40:66:0e:a7:2f:36:26:1a:29:02: 98:fd:aa:1f:42:46:06:66:e8:0c:14:35:db:db:9c:4d:92:7d: bc:22:95:75:33:e3:b0:e0:aa:71:e1:86:ba:21:af:dd:54:13: 05:ac:99:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDP2qJpWzla0gQwaDuYIFkzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYwOTIzMjAwMDA3WhcNMjYwOTI0MjAwMDA3WjAzMTEwLwYDVQQD Eyg5Y2NkMDg4MmMwNzFmMGI3ODQ3MjE0MTFhMzE5OWRjZGMxZWY3MWFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7TPoYotFTNMO3fgwTrN0DpNEQFQy MrtA6TW/mrKWpNL/W5wuICza8dwxJPRfXs6mu9R+D5RjLwbM318c9w1bftmK5Ysz Gttn0O5cX3fKg5P0yw/Ysw5ehsK+0BW2hca28zXxuJ/MHF3jrVsVX6yq3hd8yx4p 1ODdN9DIKU0uBUwiFHT46QLNpgRSl0jnRb3O117SMmfHD7Ll7B3RC0qc8jwVxg4x X9GcD66ynXnT0hLSwCcjqvneIcJK1yVuHoz1JgFHfqkMqlDjPCISo6JnyoT/8n5g PAkDjl+kyHDIyHTVpOF4KNJdUCcs10o6/MIITfGdTM6ivUcW6WI4xHyGfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJzNCILAcfC3hHIUEaMZnc3B73GuMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1IeaMe9 zcg13AZNn9oi1wZonZ75kQTVNFMD/4gQUO/OUQzpQMC+0u3bskrjdpA1ra8dokq1 L6RP+XdwpkLVmof98Dk9ItGAqLlAEc8oMOuauYzuHirvbMiI1DTYC74dD+LnFsnH 7zI9/OsmuhcbcMzNMYH4vIHFYgDV5/oFT8SWPpqlbBBURDAv0q6/JuoZYjXV+q92 MeTDDwkwvgOoVZpQSYLdGZ1PGBGr87LRvqRoF74AWzMEH9oFox2HTN9MG10Cr9VY 9JuxdnVsNSBAZg6nLzYmGikCmP2qH0JGBmboDBQ129ucTZJ9vCKVdTPjsOCqceGG uiGv3VQTBayZNA== -----END CERTIFICATE-----Generated at Thu Sep 24 02:02:46 2026 by rpki-client