$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: 0gd9sIlwMunE3heGFqrUQ1VY3ERvSsV/Xtg4c1GSoCg= Subject key identifier: 2F:5F:FC:5A:B7:A5:F1:86:BE:AE:26:14:BF:12:FD:95:8E:32:44:95 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 01A0CCA339B7A2025227F8630C24A11CD3F0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 1A8E Signing time: Wed 23 Sep 2026 05:00:44 +0000 Manifest this update: Wed 23 Sep 2026 05:00:44 +0000 Manifest next update: Thu 24 Sep 2026 05:00:44 +0000 Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=) 2: 3BOp-YxEDCV8bR7KeQJ8iZNQrP0.roa (hash: GQeGMsayLy25d3Mzz8Sr1dTr20A68juU11xi9SJ1kwQ=) 3: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=) 4: FpZLKm-2HuyBs9RMbUcbmbopMuU.roa (hash: 3TSsOddEtljGL8cZUDm9jJjfR573z1TKNPv7WQMwWsE=) 5: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=) 6: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=) 7: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: Z684ro1lwme4TCoH1QzDDkhpIUHgYTHXTy0HrUZxEQs=) 9: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=) 10: dKLrGCnnWV06iolZrHx2nh4vWJg.roa (hash: IGn7SudG+KQQ8pkrK3hPDPOgmXUuAfTQAKdCH2IyL6I=) 11: mEhn-x7tkmLGeYlMpZdP2RjzVPY.roa (hash: YARnW3hK0MAvwIlgDRpM5wiqLHphA51kgJTHfm2NanQ=) 12: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=) 13: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=) 14: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 05:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cc:a3:39:b7:a2:02:52:27:f8:63:0c:24:a1:1c:d3:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Sep 23 05:00:44 2026 GMT Not After : Sep 24 05:00:44 2026 GMT Subject: CN=2f5ffc5ab7a5f186beae2614bf12fd958e324495 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:1c:25:37:df:35:9b:8c:c0:2c:55:ca:28:19: b8:d1:71:b6:8a:67:35:3e:ce:d5:26:ca:ba:60:92: 94:d2:a3:fb:a0:60:b6:44:a8:52:9c:f1:d2:b3:3c: de:e1:d7:82:c8:ee:8b:06:d3:68:99:00:e0:08:88: 9e:c2:d1:2a:43:8e:b1:9a:ab:0e:d2:7e:32:a9:57: b8:ae:e9:81:43:04:6b:7b:54:ac:82:9f:04:1e:c6: 0e:33:7a:83:46:5a:d3:2a:d9:4d:b5:b7:e2:2d:eb: 28:3e:f0:34:75:a4:cf:d9:da:af:2e:90:06:bc:c7: 3d:ab:97:ae:10:47:a3:d8:61:f3:c6:e2:15:f6:69: bd:d2:15:e9:c4:5f:39:02:4b:63:5a:79:55:8f:3b: 6c:e3:8b:0a:92:8a:34:cc:a4:e2:83:78:bf:e2:35: 06:06:e1:30:14:f1:ea:01:57:c2:ca:93:5d:24:4d: d4:1d:38:a5:51:fd:a3:94:46:86:4c:8b:7f:07:e0: d6:e3:61:0b:4b:1c:c6:57:e9:2f:68:46:d6:bd:de: 96:c5:ab:55:b0:f9:9a:26:6f:56:ab:eb:1d:91:49: 92:f5:f4:2d:e2:78:66:88:63:4b:f9:21:81:26:eb: 44:fb:4b:63:53:15:fb:04:b1:42:99:09:82:9f:04: c2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:5F:FC:5A:B7:A5:F1:86:BE:AE:26:14:BF:12:FD:95:8E:32:44:95 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:e1:a6:3a:50:92:96:3a:a5:88:31:e4:63:a6:9e:4e:18:89: fb:24:77:fd:42:8c:1f:35:43:41:62:7e:29:d7:ed:22:c7:87: e6:40:cd:5f:10:fa:cb:2e:2c:7b:b0:3d:76:ec:d5:c3:94:09: 88:3a:55:5b:38:b7:54:6d:36:42:d1:13:8b:d2:b5:6d:1f:18: f4:73:68:c5:9b:36:fe:3b:68:df:4e:46:7c:aa:b5:bb:84:76: 38:4d:ac:05:79:4a:a2:74:30:30:8a:91:d0:be:c9:e7:2a:aa: 3d:5b:eb:ad:6f:11:ba:d4:99:6c:39:b9:ad:8a:e5:cd:ef:49: 38:62:be:7c:72:1f:31:6f:43:5c:b0:fe:27:8c:db:26:f7:cc: b3:fa:90:d6:49:9c:26:80:f2:63:bc:9b:a3:1e:00:4b:5a:0e: 60:8b:8a:b7:be:e3:c5:3f:b9:f2:f7:51:c1:a9:fc:8a:5d:cc: b6:cd:9b:2b:c5:98:d4:c8:85:24:e4:f7:05:a6:30:de:49:ae: 6f:1f:e9:ef:8f:48:74:2d:8c:ba:3a:76:69:8d:68:f7:9d:20: 20:3b:de:0f:1a:ae:fa:c6:be:07:fa:57:76:7b:8d:87:59:e7: 6f:26:85:17:aa:8f:2b:a6:4d:96:97:34:a4:7a:c1:fd:a7:9d: 09:57:b4:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDMozm3ogJSJ/hjDCShHNPwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwOTIzMDUwMDQ0WhcNMjYwOTI0MDUwMDQ0WjAzMTEwLwYDVQQD EygyZjVmZmM1YWI3YTVmMTg2YmVhZTI2MTRiZjEyZmQ5NThlMzI0NDk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1hwlN981m4zALFXKKBm40XG2imc1 Ps7VJsq6YJKU0qP7oGC2RKhSnPHSszze4deCyO6LBtNomQDgCIiewtEqQ46xmqsO 0n4yqVe4rumBQwRre1Ssgp8EHsYOM3qDRlrTKtlNtbfiLesoPvA0daTP2dqvLpAG vMc9q5euEEej2GHzxuIV9mm90hXpxF85AktjWnlVjzts44sKkoo0zKTig3i/4jUG BuEwFPHqAVfCypNdJE3UHTilUf2jlEaGTIt/B+DW42ELSxzGV+kvaEbWvd6WxatV sPmaJm9Wq+sdkUmS9fQt4nhmiGNL+SGBJutE+0tjUxX7BLFCmQmCnwTC2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9f/Fq3pfGGvq4mFL8S/ZWOMkSVMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALuGmOlCS ljqliDHkY6aeThiJ+yR3/UKMHzVDQWJ+KdftIseH5kDNXxD6yy4se7A9duzVw5QJ iDpVWzi3VG02QtETi9K1bR8Y9HNoxZs2/jto305GfKq1u4R2OE2sBXlKonQwMIqR 0L7J5yqqPVvrrW8RutSZbDm5rYrlze9JOGK+fHIfMW9DXLD+J4zbJvfMs/qQ1kmc JoDyY7ybox4AS1oOYIuKt77jxT+58vdRwan8il3Mts2bK8WY1MiFJOT3BaYw3kmu bx/p749IdC2Mujp2aY1o950gIDveDxqu+sa+B/pXdnuNh1nnbyaFF6qPK6ZNlpc0 pHrB/aedCVe0rA== -----END CERTIFICATE-----Generated at Wed Sep 23 12:30:34 2026 by rpki-client