$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: ZK8KLr4qc6qQrEOIXr5D/PaBHYOK9VPY6kJkbm1zm+I= Subject key identifier: 6A:C7:AE:47:FF:B0:49:C4:AC:62:90:5D:95:11:D0:06:F8:22:56:29 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 01A0DD97669B7C0E5EA2615C467406F6E6E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0DD4 Signing time: Sat 26 Sep 2026 12:01:21 +0000 Manifest this update: Sat 26 Sep 2026 12:01:21 +0000 Manifest next update: Sun 27 Sep 2026 12:01:21 +0000 Files and hashes: 1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=) 2: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: pTNxP3m9/EegO1qDm0nebUA91tD/zEWMgvJt1p1YqgU=) 3: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=) 4: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=) 5: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=) 6: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=) 7: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=) 8: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=) 9: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=) 10: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=) 11: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=) 12: kGneqi-DhIJThQbxo8k8aRtzhC0.roa (hash: LH1+UqmotTldhBb3/js9nM0r1q8ixXwicRK2tem2Z4A=) 13: qn7-xSOm3GNFbVMeEpI89BCHyGs.roa (hash: OAD6prCAz8lBbB+PhlF1Idqkbd0upRCxQF4VAJd3pnc=) 14: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=) 15: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 09:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dd:97:66:9b:7c:0e:5e:a2:61:5c:46:74:06:f6:e6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Sep 26 12:01:21 2026 GMT Not After : Sep 27 12:01:21 2026 GMT Subject: CN=6ac7ae47ffb049c4ac62905d9511d006f8225629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:df:53:3b:0d:67:81:6e:0d:fa:0e:93:06:e8: 73:26:d6:63:dd:c1:a3:9a:62:a1:f6:70:1b:9b:f7: 19:da:0d:3a:d5:97:8e:5d:f8:9f:f1:07:81:44:b1: 15:e5:13:92:3d:33:11:bb:03:c6:1f:7d:af:49:43: 8b:25:8f:f7:94:38:ea:3b:ea:5c:91:78:7f:c4:ac: ce:71:e9:4a:c6:0f:d7:82:52:60:70:11:29:a5:a7: 23:ff:e3:49:95:44:9c:c5:0b:69:16:bf:7c:df:8d: 2b:e9:6e:77:af:ce:0a:15:a9:72:c2:e3:f0:dd:1b: c5:ca:07:aa:46:9e:bd:b8:2d:df:3f:97:7d:15:0e: 56:38:2c:9a:e3:2d:4a:bd:ec:df:74:8c:a9:6e:8e: 67:c7:30:f7:64:90:49:15:c3:15:54:33:75:b5:d8: 60:d2:ba:e6:90:2c:d3:7d:a1:83:25:c4:da:e3:d0: 3d:33:fa:04:2e:10:d3:5e:1f:62:02:84:3c:64:b2: a9:c7:0e:4f:70:06:3b:c1:18:e3:f2:91:50:7c:d4: f2:e1:31:22:f5:6a:82:b1:4c:0e:28:1d:cb:4b:2b: 45:83:8a:d0:f2:49:d4:32:6f:42:33:dd:4b:ad:17: 8f:88:4a:7d:ff:3a:8d:97:0c:6f:a3:6b:53:03:7e: 1c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C7:AE:47:FF:B0:49:C4:AC:62:90:5D:95:11:D0:06:F8:22:56:29 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:5e:3d:a3:c3:60:a1:8c:54:52:e0:01:13:95:04:59:67:31: 81:8f:21:f7:58:98:3f:8d:ba:61:88:66:a5:5f:b3:49:f8:23: 92:68:e8:05:5d:1a:8d:ee:1a:77:db:f8:0d:a7:72:3d:b0:cb: 1e:ba:1c:c9:2c:b6:fb:24:7a:7a:27:97:9f:dd:69:a7:0c:27: 59:89:a6:62:39:3f:07:9a:15:96:1c:b7:13:72:ec:50:48:27: 1d:d8:6c:b3:91:a5:11:b8:1e:3b:66:2d:c1:db:ae:0c:fd:34: 97:0a:7f:c9:60:3d:bf:49:cc:23:91:2d:00:66:4b:00:3d:81: aa:cd:20:dd:c4:fe:b2:33:76:a8:dd:d8:29:1c:c5:44:43:f7: aa:90:77:13:ae:a6:2a:7c:a7:ea:dd:85:7b:6d:85:58:b0:1c: 21:58:51:f2:7a:50:cb:2a:9f:56:15:9f:c3:4f:c4:94:fd:a7: 97:08:09:6e:d4:5d:a7:9f:51:c1:3a:e0:42:9c:1b:bd:ad:90: 0d:18:be:b2:8c:8a:9b:bf:53:08:fd:27:3a:f6:7c:5b:cc:a9: 80:04:30:b7:05:51:07:bf:d0:66:78:70:73:a9:39:e0:ff:61: be:0c:23:7a:a4:fb:06:e3:a8:40:f5:bd:65:ef:4f:51:ed:62: 7b:8b:ac:68 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDdl2abfA5eomFcRnQG9ubgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYwOTI2MTIwMTIxWhcNMjYwOTI3MTIwMTIxWjAzMTEwLwYDVQQD Eyg2YWM3YWU0N2ZmYjA0OWM0YWM2MjkwNWQ5NTExZDAwNmY4MjI1NjI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh99TOw1ngW4N+g6TBuhzJtZj3cGj mmKh9nAbm/cZ2g061ZeOXfif8QeBRLEV5ROSPTMRuwPGH32vSUOLJY/3lDjqO+pc kXh/xKzOcelKxg/XglJgcBEppacj/+NJlUScxQtpFr98340r6W53r84KFalywuPw 3RvFygeqRp69uC3fP5d9FQ5WOCya4y1KvezfdIypbo5nxzD3ZJBJFcMVVDN1tdhg 0rrmkCzTfaGDJcTa49A9M/oELhDTXh9iAoQ8ZLKpxw5PcAY7wRjj8pFQfNTy4TEi 9WqCsUwOKB3LSytFg4rQ8knUMm9CM91LrRePiEp9/zqNlwxvo2tTA34c7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGrHrkf/sEnErGKQXZUR0Ab4IlYpMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALV49o8Ng oYxUUuABE5UEWWcxgY8h91iYP426YYhmpV+zSfgjkmjoBV0aje4ad9v4DadyPbDL HrocySy2+yR6eieXn91ppwwnWYmmYjk/B5oVlhy3E3LsUEgnHdhss5GlEbgeO2Yt wduuDP00lwp/yWA9v0nMI5EtAGZLAD2Bqs0g3cT+sjN2qN3YKRzFREP3qpB3E66m Knyn6t2Fe22FWLAcIVhR8npQyyqfVhWfw0/ElP2nlwgJbtRdp59RwTrgQpwbva2Q DRi+soyKm79TCP0nOvZ8W8ypgAQwtwVRB7/QZnhwc6k54P9hvgwjeqT7BuOoQPW9 Ze9PUe1ie4usaA== -----END CERTIFICATE-----Generated at Sat Sep 26 16:41:43 2026 by rpki-client