$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: NZqwze+TOrBoMzqcHUMXBFlVd7S9g+eOdIowO/V4V6I= Subject key identifier: D4:44:23:6C:60:52:ED:56:8A:73:F1:48:09:43:7C:22:5C:B5:9A:95 Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 01A0B463CE86D2A0F5592D8A5AC6D4D8582F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 1ABC Signing time: Fri 18 Sep 2026 12:00:34 +0000 Manifest this update: Fri 18 Sep 2026 12:00:34 +0000 Manifest next update: Sat 19 Sep 2026 12:00:34 +0000 Files and hashes: 1: 1-Dw7363-gcZT5BcZS3h3DULOLy8.roa (hash: ycAjWS2LKG3rf+AnuA7L1QjlHbaxU1ClqDSIOlIjNCE=) 2: 27CGJUkZFvLCFNZtatgUYhCQSUA.roa (hash: h/e0yaSQ56vooHU901Mb2m1o+DUEj4JzcC4ZcGaGixw=) 3: BiYRVVML9NNTA_8LHQsEIyn-udM.roa (hash: MQi6PP1rzRM1KN1VV4mGhoaMI5G3SPq1bp7SEkx+KmA=) 4: Nc3Qv6HWCUL0coHdhzehCvqorjQ.roa (hash: 1cr7/XMm8bJJ1VGTZJBo+emXZtefD8zXujejZu9BwnE=) 5: UBIi44YElhqYA3_XPQMiMHY33Ug.roa (hash: oMX079Hs0rsRW/ukFok6HicF7IaxGAO9FzHNhpkuS/A=) 6: cd86fuGEpcvGitdJ6j4qmONtrs4.roa (hash: OyWo2jddiuk9oXVabZhwBWcG9HobQGDOXj6VfpvDkjo=) 7: deTEkBZi5H7AIejV16ysjHwAbxY.roa (hash: l0JbGg+HLxrf5Ag/2z2pTojVken0ajBmDjhItX+Hm3I=) 8: i-f-GFNW7EWY7uYw_DjdHPLZIEc.roa (hash: Lu14Av/K1ThdwY4U86jUJpa6Z2xIOpuEfesYLD//+vY=) 9: oKVovXTv2aNAyZu9y-AHgX6RbJ8.roa (hash: UsgdfjEOvyD+5ioDpDRHljoPckkLzWdsqZQnU51Gug0=) 10: ocHryKy0JCZoZXuWFydbiaPAXvA.roa (hash: VJkfS4R1R0/kVOkQFygl/eqzEOXMlTWCdbkGDaHwbCQ=) 11: pGPZirCKZzbNWc11cAMZui5y53g.roa (hash: x16id1SP+uWE4b9i/PFLiuYNReYseV++lthZDwFfk5U=) 12: pKSlP4qI-iIWoFFAgY7hZYUI5lE.roa (hash: fJiLeKrrQ0jkNTOG3gU1SfB8kCZt5PRpsv9OHklxoM8=) 13: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: v1tVwnbYYEO0ovnqw9h3xAWOLenjBEpzF1e1ikecPsY=) 14: sQ8qQg5RChJp9JsfMBZ7VZwT8WE.roa (hash: obNWII8S7VxaHifOdhDpl8/q/V3M1i4VuliV8Z+MBow=) 15: wGWwo0E6K55d816ADtVpaqGsYoE.roa (hash: Qv1Am1EocmBUM6XTSjIqfN+fr9y61yBhGrH08ROvpPo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 12:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b4:63:ce:86:d2:a0:f5:59:2d:8a:5a:c6:d4:d8:58:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Sep 18 12:00:34 2026 GMT Not After : Sep 19 12:00:34 2026 GMT Subject: CN=d444236c6052ed568a73f14809437c225cb59a95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:e9:d0:83:38:ea:ad:f4:85:70:ed:1b:5e: c9:74:43:9a:df:cd:be:9d:80:27:32:71:fc:d8:2d: 42:03:29:ab:11:10:83:76:ec:6d:06:9f:6d:9b:e3: 98:7e:97:04:58:16:86:18:59:0e:00:f9:26:2e:15: e0:61:1c:c5:23:1c:d1:97:97:c2:b6:68:11:1c:84: bc:51:4f:e3:c2:ed:9e:16:27:f2:b2:d1:5e:df:9e: 34:c7:2a:75:c2:03:e3:5e:bd:2b:df:8d:d5:5b:a7: 07:cc:7c:ea:20:d1:5c:fe:6b:a9:38:61:81:86:81: 15:b6:e2:61:85:de:5e:63:6c:5b:d5:84:70:ed:e4: 2e:e7:b6:89:3c:6a:0c:39:e0:56:92:d9:39:61:a5: 4a:95:a6:42:58:26:13:88:db:3f:54:84:37:f7:26: 1e:c2:79:ce:00:f2:fd:b5:4c:a5:8e:96:84:1e:bd: 73:72:aa:48:1b:f4:c0:a3:5e:cf:f9:d4:28:d0:44: d0:27:5d:50:5d:62:de:be:90:25:0d:7c:71:a2:16: d8:9e:ce:4e:a8:56:bb:0f:19:54:99:12:1c:5f:27: b9:a1:88:bb:9e:3e:f1:a7:fd:33:04:5c:f2:27:db: 74:c9:97:01:48:4a:b8:79:90:75:e3:b2:eb:1f:af: 80:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:44:23:6C:60:52:ED:56:8A:73:F1:48:09:43:7C:22:5C:B5:9A:95 X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:f4:64:42:16:4d:77:d6:ca:21:84:87:ed:b9:c2:0b:9c:e2: ee:6d:76:c0:70:a7:ed:33:3a:f5:5e:a8:1e:70:ba:c8:d6:e7: a3:ba:50:73:e1:49:e2:dd:5d:85:3b:c5:36:ae:ff:b4:18:9d: 65:25:ab:24:2d:1b:86:a6:80:48:7a:81:f1:b6:74:41:f9:2f: 2d:e7:2b:6f:05:10:7d:72:68:74:f8:6a:fe:5d:a3:d9:2f:57: 96:14:3a:8b:a9:f0:a9:44:2f:3b:de:2a:c3:03:26:9f:df:16: ef:ba:4d:b0:8e:07:1b:d4:58:1b:af:51:3e:9d:bb:b1:e1:8a: cd:10:13:0a:a0:5b:b1:4e:09:eb:9d:bb:09:13:6a:47:85:0f: 18:03:dc:93:cb:57:2d:0c:83:91:1a:ee:19:90:e0:22:a6:18: 0f:df:1a:bc:de:30:05:75:bf:15:52:d3:9a:f6:58:51:64:5b: d2:28:70:eb:1b:95:96:df:03:2e:0e:8a:87:13:04:84:6a:ec: d0:0a:bb:08:52:4d:a6:d2:dc:96:05:46:b9:93:c2:82:73:f6: 0d:cb:84:d7:b4:c4:8b:54:74:c1:0e:89:ac:03:c5:b8:de:c1: d6:c2:de:cd:a4:3f:42:46:b8:fd:54:e9:2e:1d:b4:0c:f2:ef: 84:9f:af:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC0Y86G0qD1WS2KWsbU2FgvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYwOTE4MTIwMDM0WhcNMjYwOTE5MTIwMDM0WjAzMTEwLwYDVQQD EyhkNDQ0MjM2YzYwNTJlZDU2OGE3M2YxNDgwOTQzN2MyMjVjYjU5YTk1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyB/p0IM46q30hXDtG17JdEOa382+ nYAnMnH82C1CAymrERCDduxtBp9tm+OYfpcEWBaGGFkOAPkmLhXgYRzFIxzRl5fC tmgRHIS8UU/jwu2eFifystFe3540xyp1wgPjXr0r343VW6cHzHzqINFc/mupOGGB hoEVtuJhhd5eY2xb1YRw7eQu57aJPGoMOeBWktk5YaVKlaZCWCYTiNs/VIQ39yYe wnnOAPL9tUyljpaEHr1zcqpIG/TAo17P+dQo0ETQJ11QXWLevpAlDXxxohbYns5O qFa7DxlUmRIcXye5oYi7nj7xp/0zBFzyJ9t0yZcBSEq4eZB147LrH6+ArwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNREI2xgUu1WinPxSAlDfCJctZqVMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHfRkQhZN d9bKIYSH7bnCC5zi7m12wHCn7TM69V6oHnC6yNbno7pQc+FJ4t1dhTvFNq7/tBid ZSWrJC0bhqaASHqB8bZ0QfkvLecrbwUQfXJodPhq/l2j2S9XlhQ6i6nwqUQvO94q wwMmn98W77pNsI4HG9RYG69RPp27seGKzRATCqBbsU4J6527CRNqR4UPGAPck8tX LQyDkRruGZDgIqYYD98avN4wBXW/FVLTmvZYUWRb0ihw6xuVlt8DLg6KhxMEhGrs 0Aq7CFJNptLclgVGuZPCgnP2DcuE17TEi1R0wQ6JrAPFuN7B1sLezaQ/Qka4/VTp Lh20DPLvhJ+vSg== -----END CERTIFICATE-----Generated at Fri Sep 18 22:58:52 2026 by rpki-client