$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json) Hash identifier: bcaQL8sQpvR7ujAAO+EvEy2mN5TguKzdceJ1jDA0teY= Subject key identifier: F9:2E:63:D1:AC:04:DE:9D:1D:15:18:17:3B:E7:66:9E:FC:13:0F:EF Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 01A0D50287A477B7C72DC46527DC3A7FF948 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft Manifest number: 1A76 Signing time: Thu 24 Sep 2026 20:01:47 +0000 Manifest this update: Thu 24 Sep 2026 20:01:47 +0000 Manifest next update: Fri 25 Sep 2026 20:01:47 +0000 Files and hashes: 1: 2uP2P6fTf1qo4PWRRqgeE7TTacE.roa (hash: 9eSLYCb2FWzNsHTSZC1SEnCMNPegGVcyv6j21qK1mw8=) 2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=) 3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=) 4: AogunF2vY6jwFQqloSaO1hbzpk8.roa (hash: it2LBzN2gPXG+ZsVF9U3YkMRcRGbDQsz+oO4JZZUzeg=) 5: JNtEUjv1u2nrR2kJY3xTk9eLdQU.roa (hash: y7e9qF3W4oZOepFOJNd5APdu3FIuFqB+iMZzLRxwKEo=) 6: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=) 7: Qi3PbQnrdw7q8NtmLcDOyzuEuok.roa (hash: Ene2M6hdbbKNY0YIKXvUxR9PygRHkyqGW28j+nRBH9E=) 8: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: lyYCFBxAMgdqXQSBRi2A51fyEIuJkHVXQoZ0DqsfuI4=) 9: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=) 10: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=) 11: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 20:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d5:02:87:a4:77:b7:c7:2d:c4:65:27:dc:3a:7f:f9:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Sep 24 20:01:47 2026 GMT Not After : Sep 25 20:01:47 2026 GMT Subject: CN=f92e63d1ac04de9d1d1518173be7669efc130fef Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:21:50:8c:51:6e:ff:aa:ab:83:aa:83:92:f3: 9e:27:36:16:6d:a3:37:fc:ae:84:72:f7:75:8d:eb: 78:51:f8:51:f6:79:75:a2:11:9c:f9:ae:7a:e6:a3: bf:5a:b2:95:16:e7:72:b2:c6:75:ff:e2:38:1f:0c: cf:00:5a:e0:19:07:69:e8:14:76:aa:16:e8:1d:4f: 4a:f6:bc:c0:5f:b9:30:af:6f:bb:e4:2c:cd:85:e1: b1:fe:56:59:b6:31:d1:40:9e:d8:99:54:ec:d3:2d: b8:b8:c4:73:3c:76:7f:63:5d:79:6e:30:85:cf:1a: f6:b4:2e:ea:a6:2a:fc:be:51:e5:47:03:5e:4c:65: 1f:7d:cd:32:ff:ef:e0:e7:e3:72:16:a4:88:83:2d: 65:52:fb:d8:a6:cb:e1:27:29:63:ee:50:72:65:89: c9:87:06:1f:9b:a0:ee:f7:b1:a6:80:1a:92:08:5a: a0:3a:1d:53:58:4a:90:e9:b0:6a:47:63:b2:bd:31: 05:92:a6:dc:3d:63:6a:d1:c6:36:67:eb:e4:4c:40: 11:27:93:8b:46:97:45:98:14:7d:e4:03:cd:32:ae: 5a:ca:6f:04:13:d8:14:41:07:5e:65:b6:87:89:e0: b6:92:af:0a:35:d9:68:ab:f5:71:e9:43:b5:6f:24: f9:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:2E:63:D1:AC:04:DE:9D:1D:15:18:17:3B:E7:66:9E:FC:13:0F:EF X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:af:68:76:00:19:ed:01:81:1e:54:7b:88:ab:65:2c:70:ec: 07:a6:2b:d0:06:90:b1:83:57:55:d3:be:5a:dd:ab:f6:32:07: d9:00:87:ff:7f:c3:bc:80:33:b3:9c:8d:89:a1:6d:88:92:2d: 8b:3e:2f:aa:8a:35:77:1b:06:2a:71:dd:4b:3e:59:25:37:b7: a3:e3:98:b8:9e:92:bd:19:34:93:c3:f1:75:6f:35:ee:71:ed: 20:db:32:86:76:02:4a:11:25:65:e5:a7:b3:ef:e6:a6:21:d8: 79:33:d6:42:c8:14:bd:f3:db:8d:d4:3e:76:d0:f3:4b:07:f7: 57:c5:fb:f9:b7:0e:35:4d:17:ca:c3:9f:8b:b9:f8:b6:f9:f9: fd:82:c0:a4:12:a5:2e:26:b1:c6:2a:e5:2a:40:a4:a4:d1:3a: 62:48:3f:51:8f:2a:f7:73:8a:47:7b:5f:7f:50:22:64:ef:b0: b9:97:25:cb:51:9f:36:72:1c:74:c2:8c:b8:72:68:67:61:e0: 03:dd:a0:4b:84:5a:ce:c7:00:42:73:88:16:78:8f:2d:17:d1: 52:de:82:f3:bf:b4:94:d9:9f:38:fc:f5:5d:7e:ba:8e:f1:ea: 9d:33:1a:33:fd:b6:ff:2c:37:b6:a9:21:5b:1c:b2:61:92:94: ff:a7:0c:0b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDVAoekd7fHLcRlJ9w6f/lIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjYwOTI0MjAwMTQ3WhcNMjYwOTI1MjAwMTQ3WjAzMTEwLwYDVQQD EyhmOTJlNjNkMWFjMDRkZTlkMWQxNTE4MTczYmU3NjY5ZWZjMTMwZmVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiFQjFFu/6qrg6qDkvOeJzYWbaM3 /K6Ecvd1jet4UfhR9nl1ohGc+a565qO/WrKVFudyssZ1/+I4HwzPAFrgGQdp6BR2 qhboHU9K9rzAX7kwr2+75CzNheGx/lZZtjHRQJ7YmVTs0y24uMRzPHZ/Y115bjCF zxr2tC7qpir8vlHlRwNeTGUffc0y/+/g5+NyFqSIgy1lUvvYpsvhJylj7lByZYnJ hwYfm6Du97GmgBqSCFqgOh1TWEqQ6bBqR2OyvTEFkqbcPWNq0cY2Z+vkTEARJ5OL RpdFmBR95APNMq5aym8EE9gUQQdeZbaHieC2kq8KNdloq/Vx6UO1byT5PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPkuY9GsBN6dHRUYFzvnZp78Ew/vMB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADa9odgAZ 7QGBHlR7iKtlLHDsB6Yr0AaQsYNXVdO+Wt2r9jIH2QCH/3/DvIAzs5yNiaFtiJIt iz4vqoo1dxsGKnHdSz5ZJTe3o+OYuJ6SvRk0k8PxdW817nHtINsyhnYCShElZeWn s+/mpiHYeTPWQsgUvfPbjdQ+dtDzSwf3V8X7+bcONU0XysOfi7n4tvn5/YLApBKl LiaxxirlKkCkpNE6Ykg/UY8q93OKR3tff1AiZO+wuZcly1GfNnIcdMKMuHJoZ2Hg A92gS4RazscAQnOIFniPLRfRUt6C87+0lNmfOPz1XX66jvHqnTMaM/22/yw3tqkh WxyyYZKU/6cMCw== -----END CERTIFICATE-----Generated at Fri Sep 25 07:01:06 2026 by rpki-client