$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json) Hash identifier: S5tV0iccNMOBFcEPqbFfIKBgpNmSdak2/SK/uE1rJkI= Subject key identifier: D9:E4:5B:7E:45:4C:63:A8:5F:63:86:2A:E0:08:71:FB:B0:DE:73:09 Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 01A0DA28F9B90C6C114CF8A10B478650F480 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft Manifest number: 1915 Signing time: Fri 25 Sep 2026 20:01:53 +0000 Manifest this update: Fri 25 Sep 2026 20:01:53 +0000 Manifest next update: Sat 26 Sep 2026 20:01:53 +0000 Files and hashes: 1: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (hash: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4=) 2: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (hash: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs=) 3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: t1+ZlWaOtj6UjXSix59R+fNxDnbDfLmO/VOGAyoLPMY=) 4: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (hash: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs=) 5: LKPNjW0FwzxJuXJJO8QeVx8xVKA.roa (hash: 7aAIkZ00eO3qTrf1/VDBo5PmzNCovWfeD3QFFzPD2+k=) 6: OhdvuW1MhWIplOiaXjr0jKrnav0.roa (hash: J4+sEU+gHBe6CqLgaPIzNFJg58JXNWIbDProtv3aR8c=) 7: XWplAHLb4h-dRGf7GRqU5aYBne4.roa (hash: vcUnwVhvidom6bWizccTCS7wF3vMreiwdFHr11qyWHQ=) 8: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (hash: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04=) 9: bu5zIhc9syS0fhKBovFQXcGQRxQ.roa (hash: /Bq2k4bmIQ5EUPK41v03YcsLqkRVvDHXfxrIn2yzw5A=) 10: epRr3ot_tO1I-RC0EsosxizeUW8.roa (hash: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo=) 11: hIAZzuP6Gsu6ylCAGgkd82Ycc_M.roa (hash: SQISDbvDjBaLkSadlmENoao3YxR8/bK49Sgx969cf+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 26 Sep 2026 15:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:da:28:f9:b9:0c:6c:11:4c:f8:a1:0b:47:86:50:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Sep 25 20:01:53 2026 GMT Not After : Sep 26 20:01:53 2026 GMT Subject: CN=d9e45b7e454c63a85f63862ae00871fbb0de7309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b8:e7:7d:86:b1:5f:23:d5:49:d5:2c:a6:cc: 72:bd:b2:dd:72:a2:f5:11:d3:d4:1e:b8:46:ba:e4: 8c:b1:e9:a5:47:48:1e:bc:9e:d4:2f:c3:5f:60:19: 44:15:e1:2c:82:ec:9f:98:73:a5:65:69:e0:16:71: 81:59:6b:b7:f5:a9:87:8a:b3:56:70:63:09:25:49: 0b:63:a8:c3:17:a2:8e:ff:f4:15:79:53:da:0f:5e: ef:41:80:c6:75:cf:3f:28:70:e2:5c:4a:00:ba:59: 21:a0:e7:1d:1a:3c:88:fb:45:42:72:39:ec:02:9c: a4:9b:03:2e:33:fd:44:b2:ae:b3:47:36:30:a1:7b: 22:b0:21:15:cb:f7:58:15:87:22:a3:3c:33:e0:b1: e6:b6:eb:66:8b:10:96:7d:53:78:d0:42:d6:76:57: 88:50:81:7e:97:29:26:db:37:48:08:20:f0:30:38: 29:c9:7a:e0:a5:ca:4b:20:3d:cb:d3:c0:1b:0c:65: df:e6:39:ee:12:61:e8:b7:2f:1b:1c:77:2b:c2:0c: 5e:e5:1d:a0:6d:0b:78:13:81:32:45:9a:d1:8e:4f: 5a:a0:0d:d6:0a:7f:b5:e2:1c:3e:da:d9:b7:ad:e5: f5:8a:84:e1:5a:18:a5:15:fc:fa:c2:cb:27:ca:8a: 4b:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:E4:5B:7E:45:4C:63:A8:5F:63:86:2A:E0:08:71:FB:B0:DE:73:09 X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:5d:55:79:fe:39:b0:43:82:f7:09:fe:d7:4b:1f:df:96:99: 3e:1e:ed:ff:50:bf:82:58:9f:d0:a9:27:8e:4e:72:6c:2a:97: fb:1d:64:23:10:a0:7f:c4:04:85:10:fa:ee:1e:25:7a:6c:be: 2b:a9:dd:be:9a:af:4f:2a:7b:a8:d6:a1:60:95:9a:37:93:31: 92:3e:40:8f:7f:79:35:3d:78:59:fd:fc:1e:04:43:18:a7:40: e4:32:28:f2:19:4d:95:80:dc:5d:70:a2:a2:ee:8e:94:a3:0a: 76:35:89:e0:cc:64:5a:76:f3:d0:a1:27:51:5a:8e:c1:85:ad: cc:a4:58:bc:59:dd:cb:e9:05:a2:d4:58:3d:5f:ab:04:81:86: ad:a5:59:7f:82:0a:7f:df:41:9e:02:a9:e4:cb:67:88:e0:f8: a7:35:28:d8:56:b5:91:0a:49:51:f1:94:1a:a5:7c:8c:eb:a1: dc:44:cc:ec:dc:3a:2a:7e:20:16:17:bf:be:3a:54:c9:0a:5a: 2f:0d:23:c1:d3:aa:da:b2:49:3d:c0:d6:f7:6e:87:5b:02:64: 44:19:ed:98:c1:86:36:b6:73:57:e1:6c:ad:cf:92:4a:5d:5d: 76:2d:ed:c0:7a:f8:7d:44:61:bb:84:b8:55:46:1f:dd:8d:42: ae:1a:c7:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDaKPm5DGwRTPihC0eGUPSAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjYwOTI1MjAwMTUzWhcNMjYwOTI2MjAwMTUzWjAzMTEwLwYDVQQD EyhkOWU0NWI3ZTQ1NGM2M2E4NWY2Mzg2MmFlMDA4NzFmYmIwZGU3MzA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLjnfYaxXyPVSdUspsxyvbLdcqL1 EdPUHrhGuuSMsemlR0gevJ7UL8NfYBlEFeEsguyfmHOlZWngFnGBWWu39amHirNW cGMJJUkLY6jDF6KO//QVeVPaD17vQYDGdc8/KHDiXEoAulkhoOcdGjyI+0VCcjns ApykmwMuM/1Esq6zRzYwoXsisCEVy/dYFYciozwz4LHmtutmixCWfVN40ELWdleI UIF+lykm2zdICCDwMDgpyXrgpcpLID3L08AbDGXf5jnuEmHoty8bHHcrwgxe5R2g bQt4E4EyRZrRjk9aoA3WCn+14hw+2tm3reX1ioThWhilFfz6wssnyopLfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNnkW35FTGOoX2OGKuAIcfuw3nMJMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh11Vef45 sEOC9wn+10sf35aZPh7t/1C/glif0Kknjk5ybCqX+x1kIxCgf8QEhRD67h4lemy+ K6ndvpqvTyp7qNahYJWaN5Mxkj5Aj395NT14Wf38HgRDGKdA5DIo8hlNlYDcXXCi ou6OlKMKdjWJ4MxkWnbz0KEnUVqOwYWtzKRYvFndy+kFotRYPV+rBIGGraVZf4IK f99BngKp5MtniOD4pzUo2Fa1kQpJUfGUGqV8jOuh3ETM7Nw6Kn4gFhe/vjpUyQpa Lw0jwdOq2rJJPcDW926HWwJkRBntmMGGNrZzV+Fsrc+SSl1ddi3twHr4fURhu4S4 VUYf3Y1CrhrHAA== -----END CERTIFICATE-----Generated at Fri Sep 25 22:45:19 2026 by rpki-client