$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft File: 8E6yBPNYAEeIIk4vsY5NXnS-v40.mft (raw, json) Hash identifier: m0gZchf2WWOCRs1fGHeaAN+prful7XThH4DCVYjphhw= Subject key identifier: 70:99:1B:7B:45:F8:5E:12:E3:E1:C2:43:25:74:73:87:8A:7C:24:7D Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Certificate serial: 01A0CA7E0BABF609DEF6552381F227729801 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft Manifest number: 1491 Signing time: Tue 22 Sep 2026 19:00:52 +0000 Manifest this update: Tue 22 Sep 2026 19:00:52 +0000 Manifest next update: Wed 23 Sep 2026 19:00:52 +0000 Files and hashes: 1: 8E6yBPNYAEeIIk4vsY5NXnS-v40.crl (hash: SgSsMuTPnr1kYb7b3r4a37R3t12KESlhw5wR3fgmQYw=) 2: 8Go9HdfslzEYYhsG162QyXxlPrg.roa (hash: Z3SgqSpV46u7mlUHzliku+RypQp4wBZXxjHASyqRXL8=) 3: 8Nrd_fmZeNL0BSH4rv9CXgqM66c.asa (hash: K5I1pf6HiAifVMzN9jkKOGVybg6UiRdsC7/R2MM8fPE=) 4: H39SCmBhfIAL4P80AMbv9vc00_8.roa (hash: cOtYtuq75jARRK/4tVOM91mG7sEB0LZ3Ph2khyzi9O8=) 5: HVUz-pGSDFLTZZg2T2E4peiELEU.roa (hash: wezVJrmcFZ7JTwvDKwpa7PsKgNm5GHs3DhA4vBq4DQY=) 6: HYEI0JEwrvGeEpfpFZTeCg5EH8g.asa (hash: ARMsZy0uoDJPAUtmO4+hjp62F/uBIE4HsM0N2UwPbqY=) 7: K_c7eVlzPkp6rhiHCxnA36F4-xc.roa (hash: 6S2BWd2mNzmFbAB+J2b2FN4NJksfT7p6QVbD3sv/VL8=) 8: WtD6mKlfmpS7KMd25I2nHKzWkGQ.roa (hash: 8kdIDFqVwJHFysKGYVAc28Ycb8D240Eugchj4O4w7C4=) 9: Xf3bZPWk0_bi28_oQ2232QrSJQQ.roa (hash: ffz/L4K0R9hVyQDyQ+n17EfkZ224IbQsJdVzmjU75wU=) 10: a0OAcZfUpJ_at-NAiRWnugtXHZs.roa (hash: CX3pL+do0k62/x9rzFqYTy+gZPu9+b2sUZEH679CN44=) 11: ek9-6det_a8IxIqHsWia7-WY-A4.roa (hash: w03N+IHDbJSsXXRy6rZBj/rl7phalEGurLQVXj4bedQ=) 12: hmPo_o1Wwb_fc_jDeTYw0RTyias.roa (hash: buOdy6wcshKPWdUb86nMrSnh3bWvA83WVFp55tOqeX4=) 13: kE6tecKZ0fG9qC_JtCBXfpG4g1A.roa (hash: CDpFmGMaqgiUJFuGVEP8AvEce972KDkWrlC2GvXzIOA=) 14: sD9_KvYGNd0gSG9dqlTzmRlJx9g.roa (hash: cpPGHuiYhlqjVa2ZLptrQ2LGEEYQM6YwJPoAsBdLFRc=) 15: xjJ15D14LS-olVuJZ7jEwkrPC0k.roa (hash: x/bc5dXq+6Lyq8Lw/fVl1pcZIUuQ/Nrr00RhE1xkTLM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 19:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ca:7e:0b:ab:f6:09:de:f6:55:23:81:f2:27:72:98:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d Validity Not Before: Sep 22 19:00:52 2026 GMT Not After : Sep 23 19:00:52 2026 GMT Subject: CN=70991b7b45f85e12e3e1c243257473878a7c247d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fb:86:eb:63:af:08:9d:f1:aa:2f:0e:33:c1: bd:09:63:0c:6f:06:7b:0b:21:16:5a:35:de:03:9d: 4a:88:8d:38:97:89:98:34:e2:14:65:d2:90:03:12: 2e:42:66:54:5d:0d:f4:00:ed:31:71:f0:04:3c:89: 22:b6:a5:d0:2e:bf:2e:08:99:08:9f:30:70:ba:d7: f1:85:82:0c:7e:3b:4c:9b:d3:4c:ca:5d:87:76:5a: a5:9d:26:a6:9c:96:f1:f4:57:57:0a:72:d8:38:09: cc:b9:17:58:e1:83:e9:dc:a8:06:72:02:34:76:cf: 9d:75:72:75:29:57:f7:e2:2d:e4:be:31:0d:f5:26: f0:a8:18:fd:0d:fe:dd:77:0c:7a:e3:5b:09:d6:22: 07:9a:23:5f:0c:9b:6f:3e:d2:ef:a7:4c:20:5b:2a: 49:45:6a:97:38:99:df:52:11:05:8c:3d:1b:12:a5: 7b:54:ca:ad:f8:c0:a0:fa:f0:ba:1b:15:f9:fd:50: 01:45:68:2a:de:5b:a4:8a:a7:68:c5:52:d8:08:20: 2b:a1:5e:0d:ca:4e:38:ce:52:64:05:f4:28:d8:d1: ad:7a:c4:89:7d:bb:52:a6:0f:1f:35:9c:8e:88:23: b5:ea:b7:9d:fe:20:6d:1b:d1:57:0e:36:13:3c:e0: 91:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:99:1B:7B:45:F8:5E:12:E3:E1:C2:43:25:74:73:87:8A:7C:24:7D X509v3 Authority Key Identifier: keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:90:cc:e3:a3:01:69:09:cb:22:ad:47:d5:58:40:f1:75:39: 12:09:03:10:5f:ee:48:e9:7a:7d:69:1c:03:73:88:bd:44:b7: 2f:13:89:b2:b8:b3:85:94:39:0d:fb:63:92:2e:bf:c5:62:67: 7d:65:94:17:98:1e:9a:35:6e:21:cb:b4:c3:e4:af:bd:83:d6: f8:1f:1c:d1:cb:e0:71:a0:f2:cf:84:ef:9e:02:73:43:dc:e8: fc:5f:77:f9:ed:9a:85:3f:49:a5:5c:cd:a5:cb:ef:6a:9b:e1: 34:68:c3:10:b8:45:57:3f:b2:26:11:c9:29:e1:b7:9d:23:f7: f1:f1:cf:72:a3:ed:0e:5f:5c:a5:6e:82:e9:84:bc:7b:64:2c: 6a:e8:d2:65:49:77:43:6f:79:27:b9:7c:9e:5a:bb:d2:4c:90: 3f:3c:1b:de:7c:66:e2:3e:fc:f5:3b:f6:16:5a:36:99:01:d1: 0b:27:e6:09:1d:c2:15:a9:98:ac:35:32:4a:53:6c:da:6c:99: ca:10:11:98:5b:e2:50:d8:46:1e:f8:5e:71:7f:31:a9:c8:9d: d9:ff:5e:46:11:a2:33:4f:34:09:ca:1d:b8:50:ad:1c:c0:0e: ff:86:9a:ad:4e:1b:2d:33:46:2a:2d:32:5e:0c:f4:22:62:49: 1f:09:6c:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDKfgur9gne9lUjgfIncpgBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNGViMjA0ZjM1ODAwNDc4ODIyNGUyZmIxOGU0ZDVlNzRi ZWJmOGQwHhcNMjYwOTIyMTkwMDUyWhcNMjYwOTIzMTkwMDUyWjAzMTEwLwYDVQQD Eyg3MDk5MWI3YjQ1Zjg1ZTEyZTNlMWMyNDMyNTc0NzM4NzhhN2MyNDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoPuG62OvCJ3xqi8OM8G9CWMMbwZ7 CyEWWjXeA51KiI04l4mYNOIUZdKQAxIuQmZUXQ30AO0xcfAEPIkitqXQLr8uCJkI nzBwutfxhYIMfjtMm9NMyl2HdlqlnSamnJbx9FdXCnLYOAnMuRdY4YPp3KgGcgI0 ds+ddXJ1KVf34i3kvjEN9SbwqBj9Df7ddwx641sJ1iIHmiNfDJtvPtLvp0wgWypJ RWqXOJnfUhEFjD0bEqV7VMqt+MCg+vC6GxX5/VABRWgq3lukiqdoxVLYCCAroV4N yk44zlJkBfQo2NGtesSJfbtSpg8fNZyOiCO16red/iBtG9FXDjYTPOCRHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHCZG3tF+F4S4+HCQyV0c4eKfCR9MB8GA1UdIwQY MBaAFPBOsgTzWABHiCJOL7GOTV50vr+NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMt NWM1ODkyYWZhNDg3LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS85YWI0MmEtZGY5Mi00ZTQyLTllMzMtNWM1ODkyYWZhNDg3 LzEvOEU2eUJQTllBRWVJSWs0dnNZNU5YblMtdjQwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOpDM46MB aQnLIq1H1VhA8XU5EgkDEF/uSOl6fWkcA3OIvUS3LxOJsrizhZQ5Dftjki6/xWJn fWWUF5gemjVuIcu0w+SvvYPW+B8c0cvgcaDyz4TvngJzQ9zo/F93+e2ahT9JpVzN pcvvapvhNGjDELhFVz+yJhHJKeG3nSP38fHPcqPtDl9cpW6C6YS8e2QsaujSZUl3 Q295J7l8nlq70kyQPzwb3nxm4j789Tv2Flo2mQHRCyfmCR3CFamYrDUySlNs2myZ yhARmFviUNhGHvhecX8xqcid2f9eRhGiM080CcoduFCtHMAO/4aarU4bLTNGKi0y Xgz0ImJJHwlsrw== -----END CERTIFICATE-----Generated at Wed Sep 23 05:42:25 2026 by rpki-client