$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: 8XWaBeI1deYBf0d9bGcn6uCVbK1YRZ3yj0dYG/b9w2o= Subject key identifier: E7:D7:54:54:34:90:53:0C:0E:1B:23:0A:D8:83:44:F3:32:61:9D:E3 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 01A0D048ED911CFEA044D693677FA9ADE395 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1A80 Signing time: Wed 23 Sep 2026 22:00:35 +0000 Manifest this update: Wed 23 Sep 2026 22:00:35 +0000 Manifest next update: Thu 24 Sep 2026 22:00:35 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 4: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: RVNmqIulFs94wrAfv64c244SsGz4lo05tjqnlPDVHMQ=) 5: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 6: WimZdTjw5Lm8MtebopYruWKL5rI.roa (hash: ZsNGt4iJIvs0TYMA8I/lIAfczIzjQsE/8A1JQl2JcVU=) 7: a7uJpq_z_q_yhJkmebNUtHZmFJc.roa (hash: KAwQnqnyhO/yRaqgGOzpu3c6bjgpIJkUCJpunP3swCs=) 8: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 9: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 10: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 11: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 12: iKMbSLMsYD3IPy4aFTgWFbR5-7Q.roa (hash: FLy0rWO0Tm6EmloSEokoF4mkm9Xo/LOqQZJUxQFOv+k=) 13: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 14: wK7E2CITjHSS2oNwJxLPpiywZOo.asa (hash: oIOlXpucAgwg2lcnJgT+OLAJmqqKdwc6n/6fCi8en3s=) 15: waZz0IyLkJZ2XZs5mcy2zeGt7KA.roa (hash: PLFFtAchWYCJ5jmh6ddgth619HvoXK3NBze7KzilKF8=) 16: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 22:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d0:48:ed:91:1c:fe:a0:44:d6:93:67:7f:a9:ad:e3:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Sep 23 22:00:35 2026 GMT Not After : Sep 24 22:00:35 2026 GMT Subject: CN=e7d754543490530c0e1b230ad88344f332619de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:1c:2d:d0:ef:1e:e2:25:7a:1f:83:d6:29:59: db:0d:67:5f:e3:d4:ee:9e:a7:71:5d:5a:35:5a:86: fc:22:75:d4:f3:18:8f:25:c5:1e:31:6d:70:1b:4c: 37:72:07:b5:e5:ef:09:5b:f3:a1:a1:ed:c7:ae:8a: 6f:19:da:f5:f9:b5:b8:55:8d:c2:33:30:84:d0:8a: 86:bd:b9:20:2a:b9:20:70:5f:8e:33:e7:a5:22:b6: 01:9c:f3:9c:91:68:c1:20:69:eb:53:e2:77:ac:61: 97:d2:e7:a7:14:7c:f6:75:73:3f:59:5e:45:6d:f5: 18:b9:6a:68:98:2e:af:b5:4b:53:2f:ad:2c:d5:10: aa:6f:08:91:41:81:f0:d7:9a:01:bd:af:8a:f8:35: e2:fa:f6:ea:89:59:d4:4a:5f:ce:ae:12:46:17:af: 18:8b:49:9a:c5:11:71:d7:86:6a:8c:de:ce:c1:97: b2:3b:26:8a:07:1c:11:64:48:a0:3e:84:a9:7e:bf: 2e:23:4e:8b:92:c1:c3:c7:fb:d6:28:82:07:64:15: dd:75:ec:fc:a8:29:a6:d7:23:3f:5b:59:67:51:d1: df:85:84:3e:3a:02:ef:a4:34:44:17:ac:9d:03:df: a3:fa:8e:e5:30:50:7e:67:21:e3:b0:f0:86:59:f2: 15:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:D7:54:54:34:90:53:0C:0E:1B:23:0A:D8:83:44:F3:32:61:9D:E3 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:fd:7f:ae:e7:97:3a:ea:96:4c:1f:0d:fe:91:bd:bd:7f:14: 42:da:36:39:0d:f6:43:d0:f6:ef:bd:85:ca:a4:cf:99:11:5c: 55:a4:10:00:9a:04:60:65:64:ee:7b:15:ab:fc:69:2e:c3:76: 50:f2:86:ac:26:81:be:ab:a0:81:84:0b:fe:00:bc:bb:25:b9: c1:0b:a8:6e:c1:04:48:de:f7:3c:a7:c0:55:a3:55:dc:f9:1d: ac:e6:30:17:b5:bb:90:1f:35:30:3b:97:ce:b6:ee:93:f9:55: 35:3f:bf:73:fe:7d:b5:fb:04:64:c1:19:12:72:e7:a5:cc:fd: 87:f5:e9:91:50:47:a7:6b:2b:7c:5b:88:bc:7a:ed:47:2b:c9: 07:d9:bd:76:12:9f:ed:4d:67:fe:9e:3a:5e:a1:0f:42:25:1c: 42:4d:7d:75:15:be:90:3d:69:5c:d4:25:96:b5:ae:26:19:95: bb:f4:9a:5c:34:9d:fc:09:fd:c2:a8:8f:42:b2:4b:3a:a0:2d: 3b:18:ca:b7:14:d7:6a:93:01:a5:7c:71:6e:31:95:27:6f:b6: 9e:2d:fa:74:e4:e8:4f:20:9b:64:95:ab:63:19:01:19:69:bb: a0:88:d2:a3:62:12:ea:7e:af:a0:7d:a7:a0:e2:38:a7:3c:0e: e2:2a:e0:84 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDQSO2RHP6gRNaTZ3+preOVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYwOTIzMjIwMDM1WhcNMjYwOTI0MjIwMDM1WjAzMTEwLwYDVQQD EyhlN2Q3NTQ1NDM0OTA1MzBjMGUxYjIzMGFkODgzNDRmMzMyNjE5ZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhwt0O8e4iV6H4PWKVnbDWdf49Tu nqdxXVo1Wob8InXU8xiPJcUeMW1wG0w3cge15e8JW/Ohoe3HropvGdr1+bW4VY3C MzCE0IqGvbkgKrkgcF+OM+elIrYBnPOckWjBIGnrU+J3rGGX0uenFHz2dXM/WV5F bfUYuWpomC6vtUtTL60s1RCqbwiRQYHw15oBva+K+DXi+vbqiVnUSl/OrhJGF68Y i0maxRFx14ZqjN7OwZeyOyaKBxwRZEigPoSpfr8uI06LksHDx/vWKIIHZBXddez8 qCmm1yM/W1lnUdHfhYQ+OgLvpDREF6ydA9+j+o7lMFB+ZyHjsPCGWfIVxQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfXVFQ0kFMMDhsjCtiDRPMyYZ3jMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUP1/rueX OuqWTB8N/pG9vX8UQto2OQ32Q9D2772FyqTPmRFcVaQQAJoEYGVk7nsVq/xpLsN2 UPKGrCaBvquggYQL/gC8uyW5wQuobsEESN73PKfAVaNV3PkdrOYwF7W7kB81MDuX zrbuk/lVNT+/c/59tfsEZMEZEnLnpcz9h/XpkVBHp2srfFuIvHrtRyvJB9m9dhKf 7U1n/p46XqEPQiUcQk19dRW+kD1pXNQllrWuJhmVu/SaXDSd/An9wqiPQrJLOqAt OxjKtxTXapMBpXxxbjGVJ2+2ni36dOToTyCbZJWrYxkBGWm7oIjSo2IS6n6voH2n oOI4pzwO4irghA== -----END CERTIFICATE-----Generated at Thu Sep 24 08:55:25 2026 by rpki-client