$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft File: 6985kESx8cxhzHceibSdI4WCwH0.mft (raw, json) Hash identifier: WWQ0z7DMcWOxv3ojl3pijrQ7n2W+8XEXFx+XEwu6Ma8= Subject key identifier: 0D:49:09:9C:59:42:60:2B:FA:34:AD:30:63:B6:43:7D:CE:26:CD:49 Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d Certificate serial: 01A0DD97A6D80292694B77F906EFE6656304 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft Manifest number: ED Signing time: Sat 26 Sep 2026 12:01:38 +0000 Manifest this update: Sat 26 Sep 2026 12:01:38 +0000 Manifest next update: Sun 27 Sep 2026 12:01:38 +0000 Files and hashes: 1: 0R8JegqJS72TSxgps8LkSaZO93M.roa (hash: bzPHmYAxh9zxsAi7FMhRtpwbiOeWUj0UvZqNZEFvXuM=) 2: 1fcVWlv-qx152QmoD9YOcrUS7Lg.roa (hash: wlUBrp/1FRbe3QO4vxFglbQf+Jkile5NKFRk8v42yDk=) 3: 6985kESx8cxhzHceibSdI4WCwH0.crl (hash: cwtS+tzqHh6i92WQLbREfGcMIhhEZ1xprfBCXBEuVLs=) 4: A4U-7phwTYkef8mR1dIeFnz9Wvk.roa (hash: gfDOpM+dmbKKBzSCVie0Kkmz1ZyFgU7RfrvMNCIF264=) 5: ACiq7PUnfxPw7VUiJHMeBlWe2W8.roa (hash: dErc7vBkv+mz2i4cCcDjrz1Nr+sQb9Sm3cGcguldqVk=) 6: AZGSfvVF2aBSDRn_ihzcIWfpdcQ.roa (hash: EVb7Mj3OG5H0UMytTB6DQ5yOP2z+yP5zkMEJ8YGMA1I=) 7: R7Pf0EzaX-yFRMbU80A9k7eGd_0.roa (hash: jeXZAN8VxFOPEzKegeMYU59ubOxlTc5uTncI21wjCK8=) 8: XJq96t3AYbRCnfS7nh1tT1GIo2o.roa (hash: DCbCNIcEwYvcic8+avZqalzxQi8AUgdFK18jg339Z7s=) 9: YJtrcFArWD_uz2yNOX-m6WSFQ3M.roa (hash: xruXaUcy87Eg8MhTGHBVaGMg8Mu4blgygDn6oYs8oqo=) 10: _sgEk7zklCfZtC1O4_dCCLRdlMg.roa (hash: wKMlHNJ1K28OmmB3WsfZYFrOfB6X9R2aDNRCcwZc7Es=) 11: c2w3QKoPlPH3vBuEtnfoEyv9rN4.roa (hash: Zj3hvlJbIFgWC7wJJ6+gJpyVaGnVyiWWtkjmA0jc+ss=) 12: foy3rmrTvDgjTDIvhlnm9qcAC-0.roa (hash: d3xSjhKSrxDttilu81KtUtjLRHSZdD9mi/Rkqyd0zhw=) 13: uA-waARm5JZjm1RSOdEWi8gtdhw.roa (hash: q2jhBOEKA13+Gi8bblMPwqRhwin9tcNd6S6FnjZqGkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 09:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:dd:97:a6:d8:02:92:69:4b:77:f9:06:ef:e6:65:63:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d Validity Not Before: Sep 26 12:01:38 2026 GMT Not After : Sep 27 12:01:38 2026 GMT Subject: CN=0d49099c5942602bfa34ad3063b6437dce26cd49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:61:5f:6a:e2:25:e5:8e:b0:57:8b:44:a8:00: 83:f9:14:1c:35:04:7e:b0:48:58:23:ab:ea:ec:ab: eb:66:95:93:ee:cc:28:04:b9:60:67:ad:ef:3c:78: b7:d6:fb:e9:67:86:40:f1:85:4b:42:21:75:c3:5b: 23:65:b6:43:07:b3:fb:5a:65:f0:7b:64:93:8f:90: 72:4d:ae:62:77:04:ee:5c:d5:de:d3:54:53:a8:73: 8d:df:a6:32:41:88:cf:48:ff:f2:0d:f5:01:c1:fe: fc:83:cc:4d:67:79:3e:d9:16:42:8f:9e:a8:3e:4d: 37:f8:12:56:d0:7e:2d:99:83:9a:90:0e:24:ac:1c: 3d:73:ea:e4:16:a3:88:5a:4c:db:78:05:c7:c7:06: 3b:ee:c8:e4:22:fe:36:7a:ec:fc:9f:66:8f:9a:ca: 42:8d:f4:29:a2:26:ab:16:06:a4:23:8c:eb:40:aa: d3:83:51:05:1c:93:49:0c:ef:02:46:ce:79:1c:4a: e1:6b:26:3b:e3:47:fb:f5:1d:ab:21:ee:8b:a3:d6: 9e:65:68:bc:2a:ed:43:1d:97:2e:8a:ba:73:33:45: 3d:b6:47:af:8c:e6:5b:be:4c:4d:44:58:47:f4:b8: df:03:57:d3:f0:8d:af:92:3c:43:44:45:9b:34:5e: 36:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:49:09:9C:59:42:60:2B:FA:34:AD:30:63:B6:43:7D:CE:26:CD:49 X509v3 Authority Key Identifier: keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:56:83:91:d1:e8:91:b6:74:14:dc:9a:17:84:5d:fd:92:80: 7c:9e:85:e0:91:0c:a6:04:bd:bd:2c:bc:6c:b4:4a:e7:68:1e: e4:27:cd:36:5e:b2:03:af:db:de:04:d1:9b:ec:9c:2f:4b:b2: b9:f2:74:45:21:b9:10:bb:d1:51:81:a4:24:01:36:bf:42:59: 40:2a:9d:aa:6a:99:41:e0:cd:58:28:13:7e:c3:69:85:53:3c: 6d:b3:f9:6b:14:a6:16:58:2b:1c:84:a0:9d:ee:53:0b:c5:d4: 61:27:9e:a1:67:53:28:7f:13:6b:32:2a:54:9c:9d:04:0b:2d: 1a:9c:a0:88:f8:68:8c:7c:e9:a3:b5:f5:72:4c:7c:fc:13:8a: a0:62:34:52:a4:38:ff:ca:7a:53:ab:d6:84:30:f5:3c:1e:e7: aa:f3:6c:7b:6d:8d:6f:0a:5b:66:a7:76:a4:87:5f:7a:17:fb: a6:90:53:4a:06:b3:ab:26:55:03:81:a5:b6:2f:d3:ad:39:ea: df:3f:bc:d2:e0:70:c9:21:67:67:43:9d:b2:bf:86:3a:35:c5: a5:68:97:b7:8e:6a:db:4e:48:37:b3:6c:bc:99:e9:0f:48:44: 0b:7f:63:8e:11:72:28:32:89:e9:0f:4b:15:15:8b:e6:3a:99: c5:1b:f3:62 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDdl6bYApJpS3f5Bu/mZWMEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZGYzOTkwNDRiMWYxY2M2MWNjNzcxZTg5YjQ5ZDIzODU4 MmMwN2QwHhcNMjYwOTI2MTIwMTM4WhcNMjYwOTI3MTIwMTM4WjAzMTEwLwYDVQQD EygwZDQ5MDk5YzU5NDI2MDJiZmEzNGFkMzA2M2I2NDM3ZGNlMjZjZDQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22FfauIl5Y6wV4tEqACD+RQcNQR+ sEhYI6vq7KvrZpWT7swoBLlgZ63vPHi31vvpZ4ZA8YVLQiF1w1sjZbZDB7P7WmXw e2STj5ByTa5idwTuXNXe01RTqHON36YyQYjPSP/yDfUBwf78g8xNZ3k+2RZCj56o Pk03+BJW0H4tmYOakA4krBw9c+rkFqOIWkzbeAXHxwY77sjkIv42euz8n2aPmspC jfQpoiarFgakI4zrQKrTg1EFHJNJDO8CRs55HErhayY740f79R2rIe6Lo9aeZWi8 Ku1DHZcuirpzM0U9tkevjOZbvkxNRFhH9LjfA1fT8I2vkjxDREWbNF425QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA1JCZxZQmAr+jStMGO2Q33OJs1JMB8GA1UdIwQY MBaAFOvfOZBEsfHMYcx3Hom0nSOFgsB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmFaDkdHo kbZ0FNyaF4Rd/ZKAfJ6F4JEMpgS9vSy8bLRK52ge5CfNNl6yA6/b3gTRm+ycL0uy ufJ0RSG5ELvRUYGkJAE2v0JZQCqdqmqZQeDNWCgTfsNphVM8bbP5axSmFlgrHISg ne5TC8XUYSeeoWdTKH8TazIqVJydBAstGpygiPhojHzpo7X1ckx8/BOKoGI0UqQ4 /8p6U6vWhDD1PB7nqvNse22NbwpbZqd2pIdfehf7ppBTSgazqyZVA4Glti/TrTnq 3z+80uBwySFnZ0Odsr+GOjXFpWiXt45q205IN7NsvJnpD0hEC39jjhFyKDKJ6Q9L FRWL5jqZxRvzYg== -----END CERTIFICATE-----Generated at Sat Sep 26 15:06:25 2026 by rpki-client