$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft File: mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft (raw, json) Hash identifier: ebuRJoysamzKas0hILoFxG+MqAI6pBR5Gir6id7B3wU= Subject key identifier: B9:DA:CC:12:51:D5:42:08:33:6F:76:E9:4C:4C:81:22:29:67:5D:0D Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e Certificate serial: 01A0D5DE093DC93A3DB54122AA8D505C4059 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft Manifest number: 1A96 Signing time: Fri 25 Sep 2026 00:01:33 +0000 Manifest this update: Fri 25 Sep 2026 00:01:33 +0000 Manifest next update: Sat 26 Sep 2026 00:01:33 +0000 Files and hashes: 1: 0D14gN2WiBa54cFbuKlrQUOrf8M.roa (hash: 2wB51bMRZ+T+HK/B9Edc9OpYAvR825v+i0duj5mr6/E=) 2: 8alVrjrWY968nNzLuKlTYJqWO5s.roa (hash: n3cPQVf1JqZIIBHl4vdLfSmHsel7C5NhWsG2ov9U0fE=) 3: AfDFx5CztN26DfCfFCFVeLtbfYk.roa (hash: 6hydPd19IUZH5tUXaWmgrdl0J31zdN4Hkjua9Sst5JQ=) 4: Fe9Xj78mLtBv56f9jO8i3r-s8qM.roa (hash: wNTnsyJdnh8/6vp2voiL35CQyX5QiogzfMfKCFUPFDM=) 5: Go3pOTuap2_fsOG2Cy2Y4VT2pN0.roa (hash: 0oyx4eIX+vmWlDNgh2kGWbDg44/BIpYISvXYVe/lRmI=) 6: OsaS-W05X64hVseLWVJ98CCH4bg.roa (hash: ZOdWLGxsnjVKDfjbUq3CekoJyLOWeoL5aqMKIGP91V8=) 7: ZGek-6HBksI7UR516vE0gk5R-L4.roa (hash: t0Obkj8sK06HaBNs4kmLvSB4hxDxnIEARfCn1Ni3RSc=) 8: axdSVqIzRJIZuL4bUaXgsCZR0GA.roa (hash: o1y1RiYLt8sTd8RRJ89cjZcmfxt/0UhXCW4mXlZ2wPw=) 9: cY5-1Q-gCudDvvsjntcM9LHNJ5E.roa (hash: 3JUexyB8UKFK23yZaQJY7snnPpz1rOPKcvmbdq5kUeg=) 10: mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl (hash: zbdW+dSHrLHCcvZY+NAaWL4K5KS+iZX3M9szrrwQRdk=) 11: nWdXzo03Nv5euYjJfrUQ8HTtaRI.roa (hash: 4zzXn53ZU7R+himiAEAxl3zTsYnZiM207WqrGti69uY=) 12: pJv_j_K2EgBCPVKk6BgeU9sHfR0.roa (hash: FZmisnstiTUOgcPXpHL2ZJ5p2aJPRBsk+SIz8t4Ftlc=) 13: rQ8ohk71V4ClseY7wRU6uUdfWw0.roa (hash: +Un59zWJ5v19ef4G1vmVABla4G6FDYt+TwXokRhf32c=) 14: t6LGbWPehA5-4bGA_0I8d0ATs2A.roa (hash: VJvhwVfSb8eKnL2DGvlH1c5C6AHV73YvtD/x841o6yw=) 15: xpxQq-XYLTeZi1RJOWi2RhOZm6M.roa (hash: stugu/O0ZbeQlykuDSWoq5P19xqk7ytCQZZAgWlL1aI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 21:08:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d5:de:09:3d:c9:3a:3d:b5:41:22:aa:8d:50:5c:40:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e Validity Not Before: Sep 25 00:01:33 2026 GMT Not After : Sep 26 00:01:33 2026 GMT Subject: CN=b9dacc1251d54208336f76e94c4c812229675d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:76:b9:4b:30:e5:d0:f7:6d:1e:d7:77:0e:4a: 29:b4:b9:d8:21:43:fa:a1:3c:3f:cb:65:2f:2e:92: c3:71:fb:ec:d0:6b:85:12:92:0d:30:88:a9:e0:60: f7:29:23:4e:cf:50:61:9e:89:32:af:18:c5:e2:d5: 94:4f:2b:fa:20:81:2a:fb:7c:f0:a7:dd:e7:aa:5d: b9:1e:cf:8b:85:c9:96:91:ef:19:0e:d1:0e:c0:c4: a5:9b:bc:80:8b:9a:e0:f6:87:32:a4:13:30:a1:10: c2:77:26:1b:92:b9:80:f6:6d:21:4e:32:1f:b5:ae: 5d:7f:54:cc:4d:06:1f:5b:7e:2b:79:7b:0e:85:e0: 4d:56:92:b2:af:44:e1:77:2e:ee:df:42:ad:3a:35: 1f:67:0e:82:fe:c6:e1:42:49:50:d1:32:63:4b:2b: 44:67:2e:8e:6a:f0:ef:0b:69:33:dc:41:7b:35:13: 33:b6:fd:d9:8d:ea:9d:38:5e:c5:70:77:00:4f:d9: 2d:48:ea:76:5c:56:b5:c7:6f:55:13:8d:1c:b7:9a: 0e:d5:94:a7:7d:b1:86:64:37:ee:ca:bb:a9:5a:2d: cf:25:d8:01:25:ff:07:a1:40:81:d7:1f:e1:3d:39: bf:ef:53:dc:3f:a9:14:a9:bd:f6:0f:bb:72:61:94: d4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:DA:CC:12:51:D5:42:08:33:6F:76:E9:4C:4C:81:22:29:67:5D:0D X509v3 Authority Key Identifier: keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:62:34:13:12:eb:16:c9:c3:c7:67:51:34:48:63:2b:40:ba: 26:5b:d4:92:11:43:47:c7:3f:dc:29:df:05:09:46:f2:92:15: 66:04:92:06:58:7a:78:d2:cd:f3:2a:1a:cb:97:eb:60:6d:0d: a6:be:02:60:a3:7f:f2:b1:b1:60:f0:9e:35:55:12:a4:28:fc: 1a:ef:cb:26:41:64:7c:1d:8c:d4:4c:9e:8e:00:c8:25:12:fd: 7b:66:82:a2:24:a6:73:5c:cd:01:74:58:06:5c:f4:3d:3f:1d: d8:07:64:7c:f0:ee:25:32:db:09:0b:04:23:d5:db:dc:96:30: c6:39:41:44:9b:44:f4:17:5b:de:9b:c6:17:1c:dc:de:48:29: d6:7d:9b:14:03:1e:08:8e:f6:60:91:03:b2:13:0e:5b:c6:4a: 9f:66:58:d1:af:20:a5:f4:76:ea:b2:ec:04:fa:e8:6f:42:62: 89:88:ab:90:29:5a:fe:2b:09:15:3c:e4:59:73:45:35:41:01: 19:a5:bf:de:33:cb:c2:90:70:ee:32:d7:b1:76:77:9f:44:a3: b8:95:48:00:66:e4:ef:f5:bf:2d:ed:7e:4c:9f:4b:75:6e:27: 40:a4:5d:d4:05:01:de:29:63:d7:82:83:8d:04:a3:5c:02:d3: 8a:57:ca:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDV3gk9yTo9tUEiqo1QXEBZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5Y2U1NjlhMTRjMmRiMzc3MmYyMzE4N2NlNjhlNjU0MWVj MDA0OGUwHhcNMjYwOTI1MDAwMTMzWhcNMjYwOTI2MDAwMTMzWjAzMTEwLwYDVQQD EyhiOWRhY2MxMjUxZDU0MjA4MzM2Zjc2ZTk0YzRjODEyMjI5Njc1ZDBkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvna5SzDl0PdtHtd3DkoptLnYIUP6 oTw/y2UvLpLDcfvs0GuFEpINMIip4GD3KSNOz1BhnokyrxjF4tWUTyv6IIEq+3zw p93nql25Hs+LhcmWke8ZDtEOwMSlm7yAi5rg9ocypBMwoRDCdyYbkrmA9m0hTjIf ta5df1TMTQYfW34reXsOheBNVpKyr0Thdy7u30KtOjUfZw6C/sbhQklQ0TJjSytE Zy6OavDvC2kz3EF7NRMztv3ZjeqdOF7FcHcAT9ktSOp2XFa1x29VE40ct5oO1ZSn fbGGZDfuyrupWi3PJdgBJf8HoUCB1x/hPTm/71PcP6kUqb32D7tyYZTUjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLnazBJR1UIIM2926UxMgSIpZ10NMB8GA1UdIwQY MBaAFJnOVpoUwts3cvIxh85o5lQewASOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQt MTA5NTU0NGM2YzUwLzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi9jYzZlOTktNmU1Zi00MDFiLTkxMmQtMTA5NTU0NGM2YzUw LzEvbWM1V21oVEMyemR5OGpHSHptam1WQjdBQkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT2I0ExLr FsnDx2dRNEhjK0C6JlvUkhFDR8c/3CnfBQlG8pIVZgSSBlh6eNLN8yoay5frYG0N pr4CYKN/8rGxYPCeNVUSpCj8Gu/LJkFkfB2M1EyejgDIJRL9e2aCoiSmc1zNAXRY Blz0PT8d2AdkfPDuJTLbCQsEI9Xb3JYwxjlBRJtE9Bdb3pvGFxzc3kgp1n2bFAMe CI72YJEDshMOW8ZKn2ZY0a8gpfR26rLsBProb0JiiYirkCla/isJFTzkWXNFNUEB GaW/3jPLwpBw7jLXsXZ3n0SjuJVIAGbk7/W/Le1+TJ9LdW4nQKRd1AUB3ilj14KD jQSjXALTilfKZw== -----END CERTIFICATE-----Generated at Fri Sep 25 03:14:04 2026 by rpki-client