$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft File: 9E3jbOZUNyHyemiTo7Orf_-eEiE.mft (raw, json) Hash identifier: pQV/cLOQPGvQxPYDMhpoyXe8QCaT1FcYLqGAiwsg9LI= Subject key identifier: 90:0C:AD:EF:1E:68:6C:4C:2C:57:FD:50:65:02:62:5A:5D:4D:A9:F2 Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21 Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221 Certificate serial: 01A0D31563EFAA0ABD0C917B51489615D372 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft Manifest number: E8 Signing time: Thu 24 Sep 2026 11:03:09 +0000 Manifest this update: Thu 24 Sep 2026 11:03:09 +0000 Manifest next update: Fri 25 Sep 2026 11:03:09 +0000 Files and hashes: 1: 1u-gUa9URlrodTmkGb9LRYX3OVU.roa (hash: oC9ByTbYQvO/MlLyyCdsGNzkRESBDij4okyToSMwSRU=) 2: 8d6xXk1vEJlOmHGXhwKrF5m6GFc.roa (hash: hIwaksOJP0zxQbZYSD2p0uscCDCl37ZQQd1k8/2OOCo=) 3: 9E3jbOZUNyHyemiTo7Orf_-eEiE.crl (hash: 7M6ig9TB+R8VNYVKWm7z92BPdbLfihIGcUWA3lWR3FI=) 4: H_PLuXMHXk9aQMMSv9PL8d9I4p4.roa (hash: lLlcVWkBzyqFZaScNM4rXUJUhmBYgLuz/mF4DSCZsow=) 5: SF34wbOtYdRuApVr6Gux8pIJkSQ.roa (hash: iRP53qSEiGHrITXx04bly+wQA2RkGJTTrL0VEYAoBNk=) 6: bBOHRRkkkTWmeJdZ-1MsrhkPDoY.roa (hash: ORVCT7FJ02Pf6zwRRTxkzn72Y3WbAChmuKaE2k5xVLE=) 7: bya_A4puBY8ZcMoQu4n_j-KniIA.roa (hash: Qnp+qZ0rKbMVjnECifAEcvAP55imofsc5AlVKksg0kc=) 8: cNx7jbTPJ0BRJbQGyp87GkEn9Mo.roa (hash: xhs6LS1Q1Mh7UyOa5htlvASV20ak+TW1Eqf9IPtVEL0=) 9: kQcRJHwrPUjV6MFCrcBkC_Mkn60.roa (hash: wZlAb2i6Q85EuSipXQW0wySIWm8YuhMljUtSh1EvtjE=) 10: xeKZmPgvPMOy0KwEWStwZbewpmQ.roa (hash: FQj3XVymc2AHbwvXpX69Y9LJlgObeqHhy7xHy0+4/mo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 11:03:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d3:15:63:ef:aa:0a:bd:0c:91:7b:51:48:96:15:d3:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221 Validity Not Before: Sep 24 11:03:09 2026 GMT Not After : Sep 25 11:03:09 2026 GMT Subject: CN=900cadef1e686c4c2c57fd506502625a5d4da9f2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:f8:41:68:46:02:08:a1:50:f4:f1:e2:42:00: 88:09:da:87:fd:f5:3f:7d:7d:93:d9:2c:2f:cc:63: f0:3b:09:92:58:88:8c:42:bf:14:64:3e:3f:37:e4: 49:2e:c9:55:7d:c9:d1:aa:66:4b:90:f5:dd:2f:c3: fc:5b:38:59:18:d9:30:b5:0d:d9:37:41:fc:eb:46: 42:10:0a:19:83:32:82:84:57:67:b6:a5:f8:2f:04: d7:cb:7c:41:3c:29:c7:14:92:54:c3:3a:6c:d2:5c: 56:12:24:a6:4f:9c:3f:04:87:e7:0f:da:96:fc:00: 34:6b:b1:4e:32:10:b3:d4:53:36:09:92:2a:04:57: 55:35:4a:e6:a8:b9:a4:bd:17:f3:5e:a1:f9:ff:07: 54:52:39:02:9d:bd:8b:13:8a:fd:f4:5f:48:f1:66: 15:19:b4:b5:40:f2:e3:9e:06:90:34:2b:54:de:0f: 37:92:20:c1:e6:16:70:66:08:bc:8b:92:f9:c9:3b: 07:ce:f5:8b:83:15:a0:f4:d1:55:2a:00:f4:d2:36: 34:91:8a:b7:85:2a:9b:af:d8:5f:5d:0d:f0:91:74: 7f:ad:50:53:26:39:9b:2e:65:17:48:ad:a2:e5:6a: be:5d:03:95:11:e2:67:69:ae:b9:24:38:05:b8:72: 64:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:0C:AD:EF:1E:68:6C:4C:2C:57:FD:50:65:02:62:5A:5D:4D:A9:F2 X509v3 Authority Key Identifier: keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ea:ea:e8:9b:69:87:0b:f3:92:ee:d8:df:95:ac:78:cf:68: 9e:54:6c:6a:fb:6b:0f:99:86:53:1e:d6:0c:a9:da:d4:2b:95: b1:37:7b:1e:ba:7a:5d:72:a0:16:17:ff:3e:a1:65:8e:ec:98: 46:fd:51:f3:32:de:1b:43:de:bc:38:bf:54:19:30:56:bf:2e: 9b:9c:be:75:c4:e7:95:0f:a4:0c:be:b8:18:94:53:e6:d1:ba: 21:9c:fb:4a:97:01:61:dc:cc:38:d2:72:05:d8:17:00:bb:35: f2:39:6d:f2:cd:e1:fb:e6:f6:04:b3:f6:9a:fd:d2:40:32:41: eb:50:66:77:89:35:f1:6e:7f:a0:66:5f:db:60:e7:b4:c8:68: cc:6d:bd:4e:d0:ed:e2:bf:33:20:d0:59:6e:90:94:8f:32:69: 11:64:c8:ed:aa:10:6f:51:e0:a8:c7:38:02:91:5f:85:72:2e: f6:91:22:51:0e:47:55:7d:45:66:23:2f:11:c8:1d:55:bd:90: d4:f8:90:8a:42:03:65:6e:5b:44:f6:6a:42:08:90:8e:43:99: 92:8e:2c:ca:96:09:b9:2e:63:2c:55:30:07:6e:78:e9:e3:7a: 35:82:d9:98:46:5a:08:1f:dc:2c:d0:ab:0a:ca:1f:b4:c6:3f: 80:1e:0e:01 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDTFWPvqgq9DJF7UUiWFdNyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0NGRlMzZjZTY1NDM3MjFmMjdhNjg5M2EzYjNhYjdmZmY5 ZTEyMjEwHhcNMjYwOTI0MTEwMzA5WhcNMjYwOTI1MTEwMzA5WjAzMTEwLwYDVQQD Eyg5MDBjYWRlZjFlNjg2YzRjMmM1N2ZkNTA2NTAyNjI1YTVkNGRhOWYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovhBaEYCCKFQ9PHiQgCICdqH/fU/ fX2T2SwvzGPwOwmSWIiMQr8UZD4/N+RJLslVfcnRqmZLkPXdL8P8WzhZGNkwtQ3Z N0H860ZCEAoZgzKChFdntqX4LwTXy3xBPCnHFJJUwzps0lxWEiSmT5w/BIfnD9qW /AA0a7FOMhCz1FM2CZIqBFdVNUrmqLmkvRfzXqH5/wdUUjkCnb2LE4r99F9I8WYV GbS1QPLjngaQNCtU3g83kiDB5hZwZgi8i5L5yTsHzvWLgxWg9NFVKgD00jY0kYq3 hSqbr9hfXQ3wkXR/rVBTJjmbLmUXSK2i5Wq+XQOVEeJnaa65JDgFuHJkfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJAMre8eaGxMLFf9UGUCYlpdTanyMB8GA1UdIwQY MBaAFPRN42zmVDch8npok6Ozq3//nhIhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMt MjRkOGU3NDdjMzhmLzEvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS9hZjk2ZGYtYTRkNS00OGY5LWFjMGMtMjRkOGU3NDdjMzhm LzEvOUUzamJPWlVOeUh5ZW1pVG83T3JmXy1lRWlFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGerq6Jtp hwvzku7Y35WseM9onlRsavtrD5mGUx7WDKna1CuVsTd7Hrp6XXKgFhf/PqFljuyY Rv1R8zLeG0PevDi/VBkwVr8um5y+dcTnlQ+kDL64GJRT5tG6IZz7SpcBYdzMONJy BdgXALs18jlt8s3h++b2BLP2mv3SQDJB61Bmd4k18W5/oGZf22DntMhozG29TtDt 4r8zINBZbpCUjzJpEWTI7aoQb1HgqMc4ApFfhXIu9pEiUQ5HVX1FZiMvEcgdVb2Q 1PiQikIDZW5bRPZqQgiQjkOZko4sypYJuS5jLFUwB2546eN6NYLZmEZaCB/cLNCr CsoftMY/gB4OAQ== -----END CERTIFICATE-----Generated at Thu Sep 24 17:39:47 2026 by rpki-client