$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: H7YKNIqPTWniqi5A6FLHkyg+9RmlIBHwWyoWL4OCCrc= Subject key identifier: 07:14:4E:1B:30:9D:45:1A:3F:B6:C7:15:CC:A4:36:03:DC:15:DC:B1 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 01A0CB908C3DB6495B578D83AD1A694F4859 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 1ACB Signing time: Wed 23 Sep 2026 00:00:42 +0000 Manifest this update: Wed 23 Sep 2026 00:00:42 +0000 Manifest next update: Thu 24 Sep 2026 00:00:42 +0000 Files and hashes: 1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=) 2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=) 3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=) 4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=) 5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=) 6: 4V-9xblXh3p4hsMcELpD2FlsUlA.roa (hash: kRr8MpAPoenaKhVsIA64eElM5LVWHVB6/SUqnX6gbUI=) 7: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=) 8: 67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa (hash: L8+iE4412JG/GqWOxLjJAzwI6Ft8pIvwH1MR+Hkkdb4=) 9: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=) 10: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=) 11: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=) 12: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=) 13: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=) 14: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=) 15: MxzqwWMUSsptURJMzavxSHfUO8w.roa (hash: poWnPXle6XHD8AxyCDLX0yoA7QSiBEOVvbwg5OVZcvQ=) 16: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=) 17: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=) 18: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=) 19: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=) 20: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=) 21: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=) 22: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=) 23: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=) 24: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: GVR1I+DWt6PyR2oC3exdjXJPwXX345iE0tJ714naW9Q=) 25: dbcdybGv00nsOtltVa4dyFU_6EE.roa (hash: usoQZJzAP9Yyuh6A0tgLlXKSV5FhHtp8AP7C2gTLa9A=) 26: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=) 27: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=) 28: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=) 29: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=) 30: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=) 31: qUwK9s2mmBLTPQlCS2E3qnCndLo.roa (hash: dl9QrW5kzVjvXWRYqlw9UrndrhoQTxzNmZ6VZwh8ncM=) 32: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 22:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cb:90:8c:3d:b6:49:5b:57:8d:83:ad:1a:69:4f:48:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Sep 23 00:00:42 2026 GMT Not After : Sep 24 00:00:42 2026 GMT Subject: CN=07144e1b309d451a3fb6c715cca43603dc15dcb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:17:2b:3d:6d:c2:15:b4:22:a0:53:4c:a4:b9: 0b:cd:bd:21:d7:26:76:73:01:18:91:db:4f:c7:0f: 6e:02:fa:a5:cd:0f:52:de:a4:ba:05:af:20:a4:91: 58:f0:eb:5b:bc:6e:b3:bb:07:25:24:3f:43:a3:11: 05:cb:d4:d8:13:6d:a2:8d:94:76:99:9b:98:57:7a: aa:2e:fa:29:fc:ad:73:9d:20:cc:7c:31:6b:e2:2b: 67:34:1f:d0:e0:4f:f0:62:30:a1:0c:f0:78:40:73: 62:79:60:48:f2:a2:52:cb:7f:18:3a:dc:a6:9f:1a: b0:e4:58:fc:71:31:53:7c:22:e3:0c:87:7f:6c:13: d7:68:6a:14:f7:ef:36:7e:2e:30:0f:25:8a:c5:d9: 56:32:08:9b:6b:fb:d4:31:4f:48:08:b6:15:f9:ed: b0:78:06:b7:af:37:ad:4d:a0:31:39:70:7b:ea:10: 2a:2a:4b:b0:44:1e:83:bd:49:03:31:69:f4:3f:3d: 63:3b:55:41:bc:ad:0d:93:dc:bd:03:25:2e:57:f2: 82:55:20:b5:d0:c0:34:89:78:89:bb:df:b2:0d:1f: 72:75:53:ff:5f:41:78:d6:79:01:ba:11:81:66:c4: ea:a9:de:90:33:41:7c:33:75:da:e1:47:b9:38:3b: 5d:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:14:4E:1B:30:9D:45:1A:3F:B6:C7:15:CC:A4:36:03:DC:15:DC:B1 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:0a:6a:32:37:51:b3:de:e0:78:c5:dd:8d:18:e4:45:4f:04: 10:bf:a4:94:93:02:3b:02:77:ba:bc:2e:e4:42:f8:5f:72:f2: 0d:13:a2:ba:83:70:7c:8a:3d:7c:ca:ed:fa:e4:eb:b5:65:d5: 88:cc:13:f5:65:88:1f:7b:6a:1d:6f:ce:01:65:c9:79:a8:8c: 6e:92:cc:e5:70:08:8d:ae:f8:9b:61:9a:ae:15:34:10:03:f6: 78:a1:ed:54:5a:6a:b2:0d:cb:12:58:d2:1d:36:71:06:0f:6a: 49:49:4a:f7:b0:7e:c9:86:2c:84:cf:88:80:37:61:35:93:fa: 3f:13:34:73:9c:30:e3:e6:9f:d7:b0:0a:dc:f3:da:c4:fb:89: 51:a9:94:69:f5:30:cb:2d:12:a4:e7:76:90:9f:9e:0d:c3:cf: 13:b6:a8:51:f5:2d:22:32:05:7d:e6:02:69:ff:ed:a4:45:31: 50:2d:ee:62:44:67:fa:8b:5c:35:8d:1a:d7:0f:eb:77:4c:10: b8:dd:39:11:90:58:14:78:c4:63:4b:8c:db:28:c2:89:07:0f: fb:a8:c8:5e:45:45:e0:72:1d:ec:fc:9d:08:9b:f5:21:e4:d5: d4:7d:20:6b:b6:ea:d7:31:e1:8c:d7:f8:57:e3:d9:12:be:74: ac:33:73:3a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDLkIw9tklbV42DrRppT0hZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwOTIzMDAwMDQyWhcNMjYwOTI0MDAwMDQyWjAzMTEwLwYDVQQD EygwNzE0NGUxYjMwOWQ0NTFhM2ZiNmM3MTVjY2E0MzYwM2RjMTVkY2IxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8RcrPW3CFbQioFNMpLkLzb0h1yZ2 cwEYkdtPxw9uAvqlzQ9S3qS6Ba8gpJFY8OtbvG6zuwclJD9DoxEFy9TYE22ijZR2 mZuYV3qqLvop/K1znSDMfDFr4itnNB/Q4E/wYjChDPB4QHNieWBI8qJSy38YOtym nxqw5Fj8cTFTfCLjDId/bBPXaGoU9+82fi4wDyWKxdlWMgiba/vUMU9ICLYV+e2w eAa3rzetTaAxOXB76hAqKkuwRB6DvUkDMWn0Pz1jO1VBvK0Nk9y9AyUuV/KCVSC1 0MA0iXiJu9+yDR9ydVP/X0F41nkBuhGBZsTqqd6QM0F8M3Xa4Ue5ODtdPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAcUThswnUUaP7bHFcykNgPcFdyxMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQpqMjdR s97geMXdjRjkRU8EEL+klJMCOwJ3urwu5EL4X3LyDROiuoNwfIo9fMrt+uTrtWXV iMwT9WWIH3tqHW/OAWXJeaiMbpLM5XAIja74m2GarhU0EAP2eKHtVFpqsg3LEljS HTZxBg9qSUlK97B+yYYshM+IgDdhNZP6PxM0c5ww4+af17AK3PPaxPuJUamUafUw yy0SpOd2kJ+eDcPPE7aoUfUtIjIFfeYCaf/tpEUxUC3uYkRn+otcNY0a1w/rd0wQ uN05EZBYFHjEY0uM2yjCiQcP+6jIXkVF4HId7PydCJv1IeTV1H0ga7bq1zHhjNf4 V+PZEr50rDNzOg== -----END CERTIFICATE-----Generated at Wed Sep 23 09:08:55 2026 by rpki-client