$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft File: ciqMHTEYlQFhCP-9FFdcd8wodzo.mft (raw, json) Hash identifier: OPXHiv6fHhQabx+1kJTQBt4wmRQnykqTt5T71o9Jx/k= Subject key identifier: DA:0F:9C:42:89:34:99:32:81:53:B9:2E:36:AA:B2:DF:60:4C:93:07 Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a Certificate serial: 01A0CD7EDD0A157A78BFEE12C073027BAA90 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft Manifest number: 1ACC Signing time: Wed 23 Sep 2026 09:00:38 +0000 Manifest this update: Wed 23 Sep 2026 09:00:38 +0000 Manifest next update: Thu 24 Sep 2026 09:00:38 +0000 Files and hashes: 1: 1-1BIMeBNcdXRbBNswP7KTxnlaNw.roa (hash: XOTeJ0cuUnQcT0tnl60mfbUFfprJlHgG/H5vYJdFjiM=) 2: 1-IfIeAFwEYZYt1AbAaJ3ANXh6ug.roa (hash: OEQJozfIVE+wz/wi8qbg6CK+tB+DGXWVAhUVGFc8xNg=) 3: 1W3BSwVG-h7UZlkgwu2hlwiy8YA.roa (hash: Fu4OZcK7zm2ud74FBJ+MpudFzFh4S7/e94Cue8aAGCc=) 4: 2MDP90gwIl_EWMQjgZlpg454Ip4.roa (hash: nd7zyXuxf38jWPMB3bAoKGO1cSR8h6SDS15Yno0Q0rk=) 5: 31zbye1HoJ0ws1Eh6tN1mKqtLis.roa (hash: KmX0t9KENmI6tfPFla1LDdY+IdArcnbdHHSlZkTV5jQ=) 6: 4V-9xblXh3p4hsMcELpD2FlsUlA.roa (hash: kRr8MpAPoenaKhVsIA64eElM5LVWHVB6/SUqnX6gbUI=) 7: 5Utp3I9pSTiaAdIgsLekd1EY7HM.roa (hash: kWtVz2PVP/1t1NLqnBcfGWT7QBTWMOHR3VTXM1hEX4Q=) 8: 67NPNnvEQ5HB8sJH7z0dUe6Gw40.roa (hash: L8+iE4412JG/GqWOxLjJAzwI6Ft8pIvwH1MR+Hkkdb4=) 9: 87uWXXeS50J42uFFc7bzdF0ivAE.roa (hash: rWcMBkk1AN0QzgpUjsusl3Dc5VIi4za/ojWf/PquanI=) 10: 9VNosHGj56snz30vc3qvzEoSPXo.roa (hash: mWldzN63chLvyzqhSlJl48JtjaWtMR4osvAFDD6Aybs=) 11: CdethGpZm2QuoSVJ4aiwMMYTk0Y.roa (hash: YIGg3I4hDg7BBUgcAz3JoVCk5c+QEE4qX20+BQrMq5s=) 12: EwZq0Wt1O9SveXRnrufcdCq3340.roa (hash: zBk7sAJtzOLS7Fsio/tcoHCXbNOE2x6tTTfHvwTzYdI=) 13: IjU4DCvco1H_BuxEmdM0i3N9AiY.roa (hash: IcI+UuAYue3QiGRJF1n3ivgYYn4aRUMwuNTnE3mK5xc=) 14: LPwI5fzITGqUU5gQD6RQhLychw4.roa (hash: thvb3WWBCkuBh6Qux8xtS7MFGQzIZ761rYppztcjvK0=) 15: MxzqwWMUSsptURJMzavxSHfUO8w.roa (hash: poWnPXle6XHD8AxyCDLX0yoA7QSiBEOVvbwg5OVZcvQ=) 16: N2FCQYbf7oikjwWt145FrEyeXnc.roa (hash: gP0inurJmLCIjOkRMs8jx3kflFBSnD7htxoeUwgsN5Y=) 17: NCOWApM6XRQVHGsAiRAmRViwcqA.roa (hash: HtaRQ8HXrrZOFEYkvwEaA5J1ye5R+BKpmmuVr4iFI0Q=) 18: OK28gHpIcyQTj8SN4SiY-5CVhhc.roa (hash: kgnBWkf2v4+4RUEkxH+z4XaXAROP1D5YzoEWysnTtWM=) 19: P8rBCs2H7HxpxtlvaoFTbqVkHsU.roa (hash: Qm44ePgg82K36X8yasC1ueusZGoMnFdEjkvoWJ3eT58=) 20: PJaNnDg9JeWzm2cGeqEs7HLDP2U.roa (hash: 4JSDHei9iGsFkeICAhGO6H9mT0Tu5LPmJvZL+xdQYuM=) 21: PWnRwbK2MqG8Diozy6kB8JyTkxw.roa (hash: V6RM58J4sVw4RCDq9KuKXPbXpQS4tW8cKXcNjNGjG8w=) 22: Rw8rV7EtLHiqh-bwyfCLoxeGGXU.roa (hash: sS9rOcEm3gHPDxUG0F08OZoN9aNma6XaWO6OWPz4OaQ=) 23: SOof68gdgSTczI_uQV673uF4Cb0.roa (hash: Hr0tUJM0+JDGQQ8+iqx7PAB6O78jSVwToEN9B6dj4IE=) 24: ciqMHTEYlQFhCP-9FFdcd8wodzo.crl (hash: aR3Ltf31COY3Oa4Akx0VlYumedCtaf4LIohIXgEwJqA=) 25: dbcdybGv00nsOtltVa4dyFU_6EE.roa (hash: usoQZJzAP9Yyuh6A0tgLlXKSV5FhHtp8AP7C2gTLa9A=) 26: fRqO_uDc374Erw8HQ_D2GcdMKuU.roa (hash: /VvxLlJ95Psy66m2lY1bhU6v57I1clxnkrKUA4W37Zk=) 27: hLrAoq7RjC1ZGqXHogD2wBYgwxw.roa (hash: i213vpxqv6sYX5VvcgsgIL3t01XOl6AvFdjwzS3yUxM=) 28: i2MIJHCwSpBCL98yRJRNxiadOCQ.roa (hash: NzVv0Rz1C/xQLakl+NDDtdVuf7W9qk8hfPDVuUBImnU=) 29: jtTG-jKD8OSKOGMXnrAukF2vE_M.roa (hash: +I6zU/baCmnYzZ9rbIW59191EldxdJsWs1MvOP34C8k=) 30: nEWYMu_4NA4MfkJsquDKi_gTHjg.roa (hash: V1qAtqQ6ngIEaA6kqCH4JVaIMgBM1SY6PJyH/obtL1M=) 31: qUwK9s2mmBLTPQlCS2E3qnCndLo.roa (hash: dl9QrW5kzVjvXWRYqlw9UrndrhoQTxzNmZ6VZwh8ncM=) 32: vqnq2rv-6PMsbDy5k3RKwL2xw98.roa (hash: 5AhTA+RnVsEo/k44da/diRTwbIz60x7AY2p3h1jDzvE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 08:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:cd:7e:dd:0a:15:7a:78:bf:ee:12:c0:73:02:7b:aa:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a Validity Not Before: Sep 23 09:00:38 2026 GMT Not After : Sep 24 09:00:38 2026 GMT Subject: CN=da0f9c42893499328153b92e36aab2df604c9307 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:03:d5:67:1f:14:8e:43:f6:c9:4b:12:19:43: 8e:54:4f:59:2e:1c:e4:c9:7d:32:03:b9:dd:7e:d5: 17:d2:e6:a8:d4:f2:29:de:b8:78:d6:10:ae:84:41: 1a:71:b0:59:51:25:38:31:4e:9c:6c:38:72:05:b3: 24:56:2c:85:19:1e:55:8f:88:b2:48:41:22:1c:9a: f3:35:10:e4:79:12:7c:1b:8a:63:cd:cb:ee:ed:d5: 71:5b:42:a3:0d:5a:ee:7f:c0:1b:6f:f8:30:8f:1c: 79:90:7c:13:0e:ac:85:d7:80:ec:e8:b4:20:1f:46: 44:91:12:05:69:65:d8:2f:31:fb:7d:83:35:52:ce: 29:7f:1c:7e:fe:21:5f:5d:3b:7f:4e:8c:7b:14:f3: 7a:48:ea:05:74:36:e4:3a:f3:75:5e:cc:62:88:6f: 02:77:e3:cb:0a:3a:2e:37:11:cd:15:14:90:22:28: a8:c6:2e:88:8c:4f:e2:47:3a:b4:5a:33:57:ac:6f: 90:a3:36:fa:1a:f3:1f:4d:e5:6e:fb:3b:66:b7:d0: 7f:ac:95:dc:67:a4:60:ec:4e:92:5e:79:d1:cc:df: fd:1e:e7:97:c0:36:9c:8d:85:be:3e:48:56:ab:38: 13:e1:da:6b:ea:0e:f6:f2:31:b7:fb:88:9d:ad:db: 91:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:0F:9C:42:89:34:99:32:81:53:B9:2E:36:AA:B2:DF:60:4C:93:07 X509v3 Authority Key Identifier: keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:0a:d6:0a:7e:f3:4e:b9:f2:57:40:4c:b7:e3:18:52:87:9f: 76:1a:05:e3:d9:6b:f3:07:9d:84:78:6e:22:ec:2a:26:f9:a9: ad:0c:af:6e:27:8e:84:bb:0e:69:a9:2c:fe:1c:60:a3:58:bb: 80:cf:5a:12:4f:7a:f6:ea:cb:43:03:20:34:69:a0:e1:fd:09: 98:db:36:18:7e:10:eb:b8:89:e3:9e:b8:97:3f:45:f9:06:65: 1e:85:a7:a3:4e:6d:dc:b9:fc:d4:db:62:d2:7d:e2:51:4d:61: 22:6a:db:87:fe:1f:fb:0f:01:11:09:68:fc:82:43:a1:93:65: 30:8c:0c:8a:e9:5d:fc:6b:c4:d3:7e:20:21:79:69:9b:0d:98: 4b:e8:7f:7a:eb:56:a1:d7:73:13:94:ae:31:0a:0e:6e:47:8c: fc:35:f4:bd:18:a4:ca:b6:1c:93:0f:86:75:8a:f1:e2:8d:8b: 41:8a:83:75:ec:14:d6:6f:9c:19:43:90:21:da:6b:28:93:cb: db:4c:9c:71:2e:36:06:38:08:c1:d7:cf:46:2d:16:36:08:73: a0:8c:b5:59:5c:33:cf:fd:85:b8:e8:9e:fe:89:93:47:db:44: 8e:bf:d1:86:e0:4b:32:e2:6f:9c:23:4b:cd:11:ab:96:7c:4d: 14:a5:41:33 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDNft0KFXp4v+4SwHMCe6qQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My ODc3M2EwHhcNMjYwOTIzMDkwMDM4WhcNMjYwOTI0MDkwMDM4WjAzMTEwLwYDVQQD EyhkYTBmOWM0Mjg5MzQ5OTMyODE1M2I5MmUzNmFhYjJkZjYwNGM5MzA3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngPVZx8UjkP2yUsSGUOOVE9ZLhzk yX0yA7ndftUX0uao1PIp3rh41hCuhEEacbBZUSU4MU6cbDhyBbMkViyFGR5Vj4iy SEEiHJrzNRDkeRJ8G4pjzcvu7dVxW0KjDVruf8Abb/gwjxx5kHwTDqyF14Ds6LQg H0ZEkRIFaWXYLzH7fYM1Us4pfxx+/iFfXTt/Tox7FPN6SOoFdDbkOvN1XsxiiG8C d+PLCjouNxHNFRSQIiioxi6IjE/iRzq0WjNXrG+Qozb6GvMfTeVu+ztmt9B/rJXc Z6Rg7E6SXnnRzN/9HueXwDacjYW+PkhWqzgT4dpr6g728jG3+4idrduRDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNoPnEKJNJkygVO5Ljaqst9gTJMHMB8GA1UdIwQY MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt YTU1OGVlNjU0MzFmLzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAggrWCn7z TrnyV0BMt+MYUoefdhoF49lr8wedhHhuIuwqJvmprQyvbieOhLsOaaks/hxgo1i7 gM9aEk969urLQwMgNGmg4f0JmNs2GH4Q67iJ4564lz9F+QZlHoWno05t3Ln81Nti 0n3iUU1hImrbh/4f+w8BEQlo/IJDoZNlMIwMiuld/GvE034gIXlpmw2YS+h/eutW oddzE5SuMQoObkeM/DX0vRikyrYckw+GdYrx4o2LQYqDdewU1m+cGUOQIdprKJPL 20yccS42BjgIwdfPRi0WNghzoIy1WVwzz/2FuOie/omTR9tEjr/RhuBLMuJvnCNL zRGrlnxNFKVBMw== -----END CERTIFICATE-----Generated at Wed Sep 23 13:11:34 2026 by rpki-client