$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json) Hash identifier: qB3xeKDwiB9MqKbKGuTPMsrc5PmhU+1FpzpG3pjlgDc= Subject key identifier: E4:E6:94:97:BD:7D:15:A8:0A:7D:BC:0E:58:37:AF:4C:61:B7:3F:12 Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16 Certificate serial: 01A0CFDAD773CE50588C8E2E50523623A2DA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft Manifest number: 1A89 Signing time: Wed 23 Sep 2026 20:00:20 +0000 Manifest this update: Wed 23 Sep 2026 20:00:20 +0000 Manifest next update: Thu 24 Sep 2026 20:00:20 +0000 Files and hashes: 1: 67pKVcBP4g1ka7BHnXY8o1GjatI.roa (hash: NHI8d7vH5tjpxPomV3eBVCOa5aQTAvgW0GwAOx6HDCM=) 2: 6oyqxH6fbfCjScGv2qC0XiD5gCU.roa (hash: X2pwG2wmLfB4M+6njFbtbY0lJjAJiNG8E4ePk2t5PZ8=) 3: BG7hZwdKTnkeh7F43mqTspITrC4.roa (hash: 9w3fRT22xu3zZICYpxgXI0CEKv6s/N6rtv0UUVT3l1A=) 4: E3UcI6HbofZm_snwFtZqoqwg5-4.roa (hash: d4QiFFj+amh2JyYpNEFn0n/k8uKNUlkfpX81m7S5ZMs=) 5: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (hash: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=) 6: KsuuqZuzWciosvKgFRPXzNp2Gcs.roa (hash: fH9tuqcfvS+JzHyWBgJi96fMfx/uXZQsaH9PlzbW4JY=) 7: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: O+W/ZzTWDuCetfZHlmywE1nr9PY0e+A4FkJFP3eOAHQ=) 8: _s7vUDean7Bk3XkZfaPzLom7oDA.roa (hash: GgtG8eWJVnz8jQ43nDutA9e3I7bTjxYLRfGFuNm9kaE=) 9: gAqwEcTCZcYoTWX4c9WWfhoNMgI.roa (hash: vAiaSmq1X3G0blOObiQg/SKw+90F8oGpc/icVWBJSss=) 10: k0wZqmhMQI1_yKbqeg-OeoA8ghg.roa (hash: okOMVmkk1MoA9VfXhi+YW9SB7pABGOjg3hztcxMcS9k=) 11: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (hash: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM=) 12: qMM2yBBqAUZtpJ-UlQnkHWnMjy0.roa (hash: TpFOiG67I1bJklLN/pt/Lsphs7nPRwEpTIL7MabwCy0=) 13: qOQMcO_XSSMHONHJzrh7779P3jo.roa (hash: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 14:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cf:da:d7:73:ce:50:58:8c:8e:2e:50:52:36:23:a2:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16 Validity Not Before: Sep 23 20:00:20 2026 GMT Not After : Sep 24 20:00:20 2026 GMT Subject: CN=e4e69497bd7d15a80a7dbc0e5837af4c61b73f12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:fa:b2:c8:2f:cf:c5:9d:50:b3:4d:fe:56:0b: a8:b0:f2:02:32:19:67:6d:84:61:5f:63:50:8f:07: 36:c0:c3:c3:bf:26:ac:92:3b:78:bc:93:44:06:dd: 28:77:07:69:1b:e4:2c:5a:3a:39:21:ab:55:be:78: 3f:9c:cd:19:24:d3:3f:f8:b4:ee:52:0f:1e:ec:c5: 76:df:ff:35:25:db:29:e1:d2:8a:1e:2a:27:fd:d0: 00:a1:3b:5d:16:07:0c:ee:77:18:b5:d5:62:9d:05: a0:0f:d8:12:47:91:34:5a:d5:22:9f:d5:65:fc:a2: 4f:2a:de:dc:9d:f1:24:2b:61:e4:c3:41:16:02:d1: 10:03:1e:cc:4c:b5:2c:b4:f2:bb:92:d6:cf:95:29: 6d:e6:e2:bb:75:87:ce:bb:62:90:c7:9b:79:c5:e7: 22:0c:98:ed:77:59:c4:d5:bf:5e:67:80:8a:03:15: 9a:1d:1e:54:37:90:40:fc:8c:39:dd:43:a0:cf:c1: 51:90:70:7d:b5:6f:f4:8e:a7:93:66:30:de:77:51: f9:24:52:2e:22:d8:2a:a0:0c:18:f2:44:27:91:34: 56:3d:ee:15:79:4d:1f:d8:9a:52:52:50:3b:75:76: 00:b7:83:53:8e:ff:27:51:df:78:fb:d5:cc:4c:6e: 7f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E6:94:97:BD:7D:15:A8:0A:7D:BC:0E:58:37:AF:4C:61:B7:3F:12 X509v3 Authority Key Identifier: keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d3:e4:d8:9f:a4:fe:e2:7e:09:90:d6:32:55:89:8c:4b:be: 92:44:57:54:6c:5f:1d:f6:87:5d:f2:89:77:72:ba:5c:8e:fc: 57:e5:70:d6:a0:18:81:41:e8:b5:aa:8e:25:ef:30:a7:db:84: aa:7c:9e:ce:fd:ac:c7:7a:b1:26:26:44:bd:2a:a0:e2:f6:86: a1:7b:84:b8:2d:d1:82:50:3d:6e:6f:c9:77:c4:94:08:7e:4d: 1a:68:8b:6b:b5:50:46:cf:9b:90:aa:b3:e0:4b:6e:90:59:76: ec:e1:21:5e:bd:40:f0:3d:8d:be:87:b9:20:ce:97:7b:14:52: 29:6b:dd:b6:e4:d9:52:00:eb:02:0d:ef:65:d7:c6:9e:3f:12: 2f:24:67:d7:09:48:95:fd:6e:0a:f8:20:53:f2:1d:ea:f7:31: 6a:88:80:76:bc:70:82:b7:1e:de:80:9d:d0:cd:7e:94:64:8a: ce:30:e4:8b:80:22:74:3e:c7:85:5f:83:32:5d:31:fc:53:75: 47:26:24:3d:98:de:f0:74:7b:07:9c:39:ed:4c:4d:39:7f:bf: 19:17:36:60:9d:33:fa:7a:e5:04:ca:f3:37:cb:1d:e5:78:28: b7:11:0a:8e:da:20:e4:8c:51:7f:59:82:a1:b7:8d:cd:53:38: 6b:3d:78:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDP2tdzzlBYjI4uUFI2I6LaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZTg4OGE3NmU5OTg1MWIwMWZiODZjZWM1MzdkNGQ4ZTYx MGRlMTYwHhcNMjYwOTIzMjAwMDIwWhcNMjYwOTI0MjAwMDIwWjAzMTEwLwYDVQQD EyhlNGU2OTQ5N2JkN2QxNWE4MGE3ZGJjMGU1ODM3YWY0YzYxYjczZjEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtPqyyC/PxZ1Qs03+VguosPICMhln bYRhX2NQjwc2wMPDvyaskjt4vJNEBt0odwdpG+QsWjo5IatVvng/nM0ZJNM/+LTu Ug8e7MV23/81Jdsp4dKKHion/dAAoTtdFgcM7ncYtdVinQWgD9gSR5E0WtUin9Vl /KJPKt7cnfEkK2Hkw0EWAtEQAx7MTLUstPK7ktbPlSlt5uK7dYfOu2KQx5t5xeci DJjtd1nE1b9eZ4CKAxWaHR5UN5BA/Iw53UOgz8FRkHB9tW/0jqeTZjDed1H5JFIu ItgqoAwY8kQnkTRWPe4VeU0f2JpSUlA7dXYAt4NTjv8nUd94+9XMTG5/XwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOTmlJe9fRWoCn28Dlg3r0xhtz8SMB8GA1UdIwQY MBaAFEToiKdumYUbAfuGzsU31NjmEN4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUt YmMwZGJhOTMyYjM1LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUtYmMwZGJhOTMyYjM1 LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc9Pk2J+k /uJ+CZDWMlWJjEu+kkRXVGxfHfaHXfKJd3K6XI78V+Vw1qAYgUHotaqOJe8wp9uE qnyezv2sx3qxJiZEvSqg4vaGoXuEuC3RglA9bm/Jd8SUCH5NGmiLa7VQRs+bkKqz 4EtukFl27OEhXr1A8D2Nvoe5IM6XexRSKWvdtuTZUgDrAg3vZdfGnj8SLyRn1wlI lf1uCvggU/Id6vcxaoiAdrxwgrce3oCd0M1+lGSKzjDki4AidD7HhV+DMl0x/FN1 RyYkPZje8HR7B5w57UxNOX+/GRc2YJ0z+nrlBMrzN8sd5XgotxEKjtog5IxRf1mC obeNzVM4az146A== -----END CERTIFICATE-----Generated at Wed Sep 23 23:19:51 2026 by rpki-client