$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: VnZ42zuv5uPouNseg+b469XMiFMo/wZPiDGuAq6v7Lo= Subject key identifier: 19:40:C3:9F:83:C2:E9:D9:B1:0F:03:33:CB:E9:95:77:46:E5:92:A2 Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 01A0EA09F5260DD613BDA0811773AA307310 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 1940 Signing time: Mon 28 Sep 2026 22:01:55 +0000 Manifest this update: Mon 28 Sep 2026 22:01:55 +0000 Manifest next update: Tue 29 Sep 2026 22:01:55 +0000 Files and hashes: 1: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (hash: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU=) 2: FQ-zr24LwDkwYEmw_FlDbzx5P4s.roa (hash: 72rsnmpdkRSkNBR0uk4zMj5njaCBagS3GBHGnSWVLYw=) 3: h_0cAkv9bRuqII55SmmjCPAtEkY.roa (hash: f3qXMN3stUSn8npXGtiCTxgNOHC/rASxYRfTCA56R9E=) 4: kxHXeC-RgFki1x0jEKzH48eBz8c.roa (hash: E6qamccMc25rG9FxeXNYkNGoky+PcxFg+Xq4GlM3NUs=) 5: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (hash: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk=) 6: plMF4273xJNdefV7r7jo8RJ8QbU.roa (hash: D9odZxGtxbDzG6OiIstvUcJ7z0OpJ5jME5X2lJ31p5A=) 7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: yzGP42WlJWNI8+3NhmUD41+MgbFaveW8T89mfpk5vtQ=) 8: un_1tb4ETb7dJsP5Mq8V0llGT80.roa (hash: cP4I0MaCsjRNc87FbMAxnApmXsIjWX9M4UbopOynI2E=) 9: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (hash: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk=) 10: zLCHjeiw_ejDI_VbLsjC7k1DbE4.roa (hash: 5Mti0up92969Oa1c08K/2LG50PP0mj7MqErSz+8DQcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 19:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ea:09:f5:26:0d:d6:13:bd:a0:81:17:73:aa:30:73:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Sep 28 22:01:55 2026 GMT Not After : Sep 29 22:01:55 2026 GMT Subject: CN=1940c39f83c2e9d9b10f0333cbe9957746e592a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:1b:0f:25:ba:51:84:6c:71:25:bd:16:37: 21:8a:d8:14:ac:a4:54:fc:fd:57:66:64:ab:09:5f: 5d:c8:e6:ac:8f:5f:d5:24:40:1b:ff:8b:c8:b1:05: 7a:4c:10:d9:d1:ed:aa:5e:f5:35:3c:0d:f8:49:3a: a2:fd:4e:48:8f:6a:79:41:b4:22:7d:39:2d:02:32: 97:d7:1b:49:bb:88:db:6c:14:91:51:a2:05:9f:02: 7d:3e:29:88:6c:ca:68:d0:eb:92:3c:95:3c:91:07: 50:d9:0e:f5:90:cd:b2:14:97:8f:b2:a9:cc:27:7d: 5e:40:ff:c3:ba:ec:0b:36:82:43:06:c8:9a:2c:18: 3a:d5:7f:d3:78:a7:13:20:ac:87:1e:af:8f:2f:78: 90:3f:46:09:47:89:a9:6e:a2:f7:7f:06:3e:e6:f4: 68:ad:21:06:40:90:9a:d4:f4:8a:72:ba:be:84:d4: 80:81:00:d4:f5:83:b7:a3:a0:68:33:d8:3c:21:e4: 0f:56:f2:89:af:0c:d4:b3:bc:0f:b0:32:2c:35:3f: c6:68:6d:ca:b0:54:fd:f2:e5:3f:39:91:91:78:5d: 32:ea:35:97:df:17:cb:7d:83:0e:d3:e7:db:97:52: 2e:7a:16:31:1f:2e:70:18:f0:e6:2e:72:8a:c7:46: 9b:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:40:C3:9F:83:C2:E9:D9:B1:0F:03:33:CB:E9:95:77:46:E5:92:A2 X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:00:0d:65:0c:e7:9e:5f:b6:18:28:6b:bc:59:5f:33:6f:7c: fa:a8:63:be:72:a5:22:f8:8d:ae:dd:8c:5f:ef:d3:6c:d8:db: dd:be:aa:a9:5a:a6:16:7c:da:3a:68:e7:f2:b8:97:b8:3b:ef: b7:46:cf:b4:09:15:07:99:a3:06:f2:57:e9:4f:ae:50:87:25: f7:4e:27:56:f4:50:f0:26:11:fc:74:51:00:6b:35:5b:35:23: 30:1a:e3:f2:fb:fb:32:82:0c:96:16:b1:98:aa:e3:1b:fa:e5: d1:63:de:5d:38:75:8a:62:cf:b0:3f:17:70:1e:5b:f8:b5:b5: fd:b8:1b:bf:5b:ca:5e:42:09:0d:64:05:ff:c3:1d:7e:b8:c7: aa:3d:f2:8c:33:b7:95:9d:6f:16:10:31:c1:ea:47:2f:2a:bc: 0b:57:a0:c9:e1:3a:a0:a1:3e:b0:ff:a6:85:ae:82:6b:eb:62: 0a:2f:33:39:f9:7c:97:d2:ad:0b:e2:77:72:11:7b:1d:c3:c4: 8c:63:f6:b0:a1:a7:45:dc:1f:5d:2c:d0:09:08:4c:00:d8:9c: 50:a6:b8:2a:64:89:b7:04:03:48:8c:34:62:54:05:7a:61:b0: f3:e9:3a:66:ac:c6:72:6e:4e:a4:7f:cc:41:c3:c6:6f:9c:bf: bd:60:db:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDqCfUmDdYTvaCBF3OqMHMQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjYwOTI4MjIwMTU1WhcNMjYwOTI5MjIwMTU1WjAzMTEwLwYDVQQD EygxOTQwYzM5ZjgzYzJlOWQ5YjEwZjAzMzNjYmU5OTU3NzQ2ZTU5MmEyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg0bDyW6UYRscSW9FjchitgUrKRU /P1XZmSrCV9dyOasj1/VJEAb/4vIsQV6TBDZ0e2qXvU1PA34STqi/U5Ij2p5QbQi fTktAjKX1xtJu4jbbBSRUaIFnwJ9PimIbMpo0OuSPJU8kQdQ2Q71kM2yFJePsqnM J31eQP/DuuwLNoJDBsiaLBg61X/TeKcTIKyHHq+PL3iQP0YJR4mpbqL3fwY+5vRo rSEGQJCa1PSKcrq+hNSAgQDU9YO3o6BoM9g8IeQPVvKJrwzUs7wPsDIsNT/GaG3K sFT98uU/OZGReF0y6jWX3xfLfYMO0+fbl1IuehYxHy5wGPDmLnKKx0ab/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBlAw5+DwunZsQ8DM8vplXdG5ZKiMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABgANZQzn nl+2GChrvFlfM298+qhjvnKlIviNrt2MX+/TbNjb3b6qqVqmFnzaOmjn8riXuDvv t0bPtAkVB5mjBvJX6U+uUIcl904nVvRQ8CYR/HRRAGs1WzUjMBrj8vv7MoIMlhax mKrjG/rl0WPeXTh1imLPsD8XcB5b+LW1/bgbv1vKXkIJDWQF/8MdfrjHqj3yjDO3 lZ1vFhAxwepHLyq8C1egyeE6oKE+sP+mha6Ca+tiCi8zOfl8l9KtC+J3chF7HcPE jGP2sKGnRdwfXSzQCQhMANicUKa4KmSJtwQDSIw0YlQFemGw8+k6ZqzGcm5OpH/M QcPGb5y/vWDbEA== -----END CERTIFICATE-----Generated at Tue Sep 29 02:28:27 2026 by rpki-client