$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft File: CK8JGFi7mWUXZDmcZWXfegg0260.mft (raw, json) Hash identifier: c8Xd4WKzEEiAd1v5K38QsE+ySjnzmzZFKCLs1HwpEg4= Subject key identifier: AE:0A:7F:78:FE:20:42:76:7C:39:C5:79:2F:8E:5B:84:12:AC:A7:CF Authority key identifier: 08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD Certificate issuer: /CN=08af091858bb99651764399c6565df7a0834dbad Certificate serial: 01A0D314F9D22E29E88CC2F784BE34B87994 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft Manifest number: 0D3D Signing time: Thu 24 Sep 2026 11:02:42 +0000 Manifest this update: Thu 24 Sep 2026 11:02:42 +0000 Manifest next update: Fri 25 Sep 2026 11:02:42 +0000 Files and hashes: 1: 6Qo_0tvV-nF1V3290tyCPcyJh_o.roa (hash: miQhI+W7erQXF0Elh5+jiDUej+PQhWgEiCLyU5iCciM=) 2: 9ookbD4ZU4VY6TDRIjyZKBvmQXI.roa (hash: M/Bs/iLa6unZww6rfQbsSA6jP0n4wnfBywF5HPWrEvA=) 3: CK8JGFi7mWUXZDmcZWXfegg0260.crl (hash: eqHO3jjvBym8qsQIy9fnCFAPSIfLZ+DzbnLkQ5EOVnA=) 4: IFrY2kkAzLqt5nU6H0jjg7fOnfs.roa (hash: 3jLeNihZ7jH0KElGLvHndCBcoZfJ8baWrI/MSc9FDOM=) 5: PgdFhXr4B5CibOVMVSzG8VZJbJI.roa (hash: ZVEiyh33egqUEszPE12gddvboVKjJ6wjLhbhT2yy81g=) 6: VwfnUo7iWGrwpmjYLkStkdsJWgc.roa (hash: 0vyTKG4s8Sxb6Vvga9d9VBfQgDaf6QryBCp9P8NqVAk=) 7: Wb0JFSc4Yv8IZMCTo-g4uUkinx4.roa (hash: QbARyoCiF4BxJCcobyg9rCwtMBorp1r1V7vAEHyauzY=) 8: ZdscDi7k3s-l8tQbTqMWAWHs5II.roa (hash: eeoRhg3sdIGOUoadbwJoyONU4sTmK4Oedx1/lFBfwT8=) 9: czKDro5NX_B7iWJU3teZpH_MFjc.roa (hash: IaANvC54ocsGYfpcLfku3gzas0/nThyZNXREyxhjK4Q=) 10: sCTR8cDIH84F0OMO06djeXs_-PQ.roa (hash: ugj+brY/Z7Vee3VbgiQKLfHy9VAROXKxM5IhUTLTOGk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 11:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d3:14:f9:d2:2e:29:e8:8c:c2:f7:84:be:34:b8:79:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08af091858bb99651764399c6565df7a0834dbad Validity Not Before: Sep 24 11:02:42 2026 GMT Not After : Sep 25 11:02:42 2026 GMT Subject: CN=ae0a7f78fe2042767c39c5792f8e5b8412aca7cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:43:ab:4e:01:89:e2:9c:3c:a1:a8:7b:bb:91: 2a:55:f6:d6:d9:66:b7:1b:63:1f:ed:f3:ed:cc:75: 37:5a:f7:50:8b:76:1d:3b:80:8b:57:36:00:c1:eb: e3:b8:b8:5d:1f:ff:f5:6f:74:62:16:c8:dc:9c:f4: 6c:80:56:90:84:64:88:6e:b7:c0:96:38:62:32:f9: bb:21:27:80:35:b6:96:84:e0:8f:4f:f0:84:0b:12: 47:7c:ac:8a:43:76:b2:83:0e:df:36:9d:4e:0d:b5: 6a:83:15:86:06:28:04:67:03:a7:0d:ac:f8:fc:9a: 5b:a6:a9:64:97:8d:ea:57:32:5f:32:ef:90:7c:31: ca:5f:45:b7:d3:4f:c2:bd:e2:2c:ae:e7:c6:12:5a: 6e:1d:b9:8f:89:b0:21:09:35:a1:b1:f2:bf:45:e2: 7c:cf:cb:7c:12:5f:ac:ed:78:81:40:cf:ea:2b:53: 25:10:84:a0:dd:89:6d:11:bc:aa:77:1e:5e:c2:e9: 98:82:03:85:3e:75:ce:78:37:cf:6e:37:0d:29:55: 21:1b:be:2a:7f:bf:2a:fe:f3:e7:3e:bf:5c:08:77: ca:68:a9:3f:b8:dd:6b:50:29:c5:7a:e8:40:43:5f: 3b:87:7e:6b:e9:0c:c8:5a:1d:7f:1d:77:ae:5c:19: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:0A:7F:78:FE:20:42:76:7C:39:C5:79:2F:8E:5B:84:12:AC:A7:CF X509v3 Authority Key Identifier: keyid:08:AF:09:18:58:BB:99:65:17:64:39:9C:65:65:DF:7A:08:34:DB:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CK8JGFi7mWUXZDmcZWXfegg0260.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/700fd3-c360-48ab-8a06-56129b7dc018/1/CK8JGFi7mWUXZDmcZWXfegg0260.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:bf:b1:9f:1c:33:36:2e:04:65:9e:33:56:8b:3d:28:3d:02: 27:a4:a2:7e:89:6a:d0:8c:12:93:41:b1:05:16:87:ce:81:2c: 72:c1:70:92:48:7a:22:f3:93:9f:d9:c3:ab:81:48:09:74:7a: d9:b5:5b:0b:57:21:20:2b:22:ec:16:69:02:e1:da:0a:c7:d9: 83:2e:7d:aa:18:2c:50:e1:d2:20:a8:dc:e9:08:8d:1e:f4:b9: 0c:1b:a9:b2:30:ba:5b:82:51:b0:f7:c9:d0:f1:e7:fc:31:6e: 05:fb:5d:de:17:a1:f0:cc:9e:25:84:bd:e6:05:65:4c:13:ce: 2d:90:32:a4:fb:bf:01:48:81:de:00:37:e1:82:62:ac:3c:e2: 48:f3:c4:90:fe:90:46:ca:9a:ba:77:5d:7e:a9:87:93:ab:a4: 13:74:cf:b3:9f:cf:5a:f7:95:46:33:83:7e:a5:37:24:e3:3c: 18:0e:7a:34:76:7c:73:bf:00:6c:70:b8:28:e0:8b:3c:9c:02: 30:a8:79:d9:68:84:7c:9a:fb:96:66:68:48:39:47:3f:30:64: 8c:66:0e:7c:74:36:bd:47:3f:4b:fc:01:4e:6e:46:a5:99:16: 2d:d3:a4:10:8a:ec:66:74:21:32:41:43:93:8d:eb:89:ac:69: 54:9e:84:18 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDTFPnSLinojML3hL40uHmUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4YWYwOTE4NThiYjk5NjUxNzY0Mzk5YzY1NjVkZjdhMDgz NGRiYWQwHhcNMjYwOTI0MTEwMjQyWhcNMjYwOTI1MTEwMjQyWjAzMTEwLwYDVQQD EyhhZTBhN2Y3OGZlMjA0Mjc2N2MzOWM1NzkyZjhlNWI4NDEyYWNhN2NmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0kOrTgGJ4pw8oah7u5EqVfbW2Wa3 G2Mf7fPtzHU3WvdQi3YdO4CLVzYAwevjuLhdH//1b3RiFsjcnPRsgFaQhGSIbrfA ljhiMvm7ISeANbaWhOCPT/CECxJHfKyKQ3aygw7fNp1ODbVqgxWGBigEZwOnDaz4 /Jpbpqlkl43qVzJfMu+QfDHKX0W300/CveIsrufGElpuHbmPibAhCTWhsfK/ReJ8 z8t8El+s7XiBQM/qK1MlEISg3YltEbyqdx5ewumYggOFPnXOeDfPbjcNKVUhG74q f78q/vPnPr9cCHfKaKk/uN1rUCnFeuhAQ187h35r6QzIWh1/HXeuXBndKQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK4Kf3j+IEJ2fDnFeS+OW4QSrKfPMB8GA1UdIwQY MBaAFAivCRhYu5llF2Q5nGVl33oINNutMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYt NTYxMjliN2RjMDE4LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS83MDBmZDMtYzM2MC00OGFiLThhMDYtNTYxMjliN2RjMDE4 LzEvQ0s4SkdGaTdtV1VYWkRtY1pXWGZlZ2cwMjYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7+xnxwz Ni4EZZ4zVos9KD0CJ6Sifolq0IwSk0GxBRaHzoEscsFwkkh6IvOTn9nDq4FICXR6 2bVbC1chICsi7BZpAuHaCsfZgy59qhgsUOHSIKjc6QiNHvS5DBupsjC6W4JRsPfJ 0PHn/DFuBftd3heh8MyeJYS95gVlTBPOLZAypPu/AUiB3gA34YJirDziSPPEkP6Q RsqaunddfqmHk6ukE3TPs5/PWveVRjODfqU3JOM8GA56NHZ8c78AbHC4KOCLPJwC MKh52WiEfJr7lmZoSDlHPzBkjGYOfHQ2vUc/S/wBTm5GpZkWLdOkEIrsZnQhMkFD k43riaxpVJ6EGA== -----END CERTIFICATE-----Generated at Thu Sep 24 22:05:06 2026 by rpki-client