$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft File: 520NqzR6OOK4e1oiovfJ4hwYybw.mft (raw, json) Hash identifier: yV5dwtPNPNcXx4Fp+EA87hVEq6jdPWkqju7qmK6uTgs= Subject key identifier: AB:01:FE:BE:23:81:28:72:3C:98:FD:9D:89:3D:45:2C:D0:70:47:BF Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 01A06D5DA056D4F28B3F35D052E08DB6C715 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft Manifest number: 1526 Signing time: Fri 04 Sep 2026 17:00:47 +0000 Manifest this update: Fri 04 Sep 2026 17:00:47 +0000 Manifest next update: Sat 05 Sep 2026 17:00:47 +0000 Files and hashes: 1: 520NqzR6OOK4e1oiovfJ4hwYybw.crl (hash: crehsvx88ONITrwAt5NCP1yi87Jfc0Pl0P32690C+JA=) 2: 7EPxlfzuNdNfziGNw3Hj7EoZj1Q.roa (hash: fYUfx118C/cw672kHDWSH3DD1Ik9WuMEeaQ/qAV9tYE=) 3: 9APVRCMV0aD4aoinCZAU6dTzv6o.roa (hash: eAlTYE6nYoq2zXMMLGCxVShv5D16kuVpMGM7yMSDORo=) 4: 9EzrkfCb3685-QENXXhTIl2uZz4.roa (hash: 4o0MB77YQKRQiZHQrZxR1nkb/HsRFN1Kq0iR4K53WZA=) 5: DVIKLwP8b0UVJE_X0Zz4hLCMFmU.roa (hash: 2ROrixfhF0UtgJihhtThPaEztRX+VVHt8WTM1ZfZQ1o=) 6: FQRb71bWD6shffXHJwVxCbwHPwk.roa (hash: pGalM2d2H9Jqz6EfqZRh9cBkrVl+lAOWHYOdCpXe268=) 7: Fn3txwFOnsHfJqp3dmOvAMcvgHc.roa (hash: 0tFPd6mFP89u9IcgrQmVyEuYoDxe9S4zwwRr4qndNks=) 8: RqZv9lI-beWajs98dICrEK2DwUM.roa (hash: z0DWSEDfb+oWc/lkT9R9ehjWWb2y0A0CPcHglnAYRf8=) 9: Ud0XI3ub85_CL2l55YZW3cXrctA.roa (hash: 2gMJyy7om8/uY1IqvCz0ubvDeUV63nAu6cUom48+3U0=) 10: ao5k8aMHz2Rr-UFohnKN0Vsy0ts.roa (hash: qeXz8tDdKItxGK8qtWsvUAbM0Ooz+MmMiDN8cvBIyTQ=) 11: bbXWGNkALy-ajnXnVwsq6VcslC8.roa (hash: lOmBCerqz+GglurufDI5e+15DQVwzjxcTvAfkACkLYE=) 12: jTMEUhkl6sKPDlW6gGgXZsH4VwQ.roa (hash: bLe2Zk8IquF+7aI/fXPQxZklmLIeFhH3W5DkdYCydQA=) 13: r-NoE_XHTABnwPRM9GdFHoEeHJo.roa (hash: qsD5Rt9CKRxXFQG5JSeN7cqv7sQvsG2HbFGsWmdhdi8=) 14: rIIpXZCn7E3HgJjpCaYYUR4k6ZI.roa (hash: Vvylnj2QqF4AFfq4GCTBxANmDk4TfXB5W5GNlTLI/Qw=) 15: s9E0mrs6RE5G3diI6qJ2dNaQlCY.roa (hash: ALHEFczsxrK3P9zm6czuHQOWsz9Vxib3j6fIwRLXdsA=) 16: smuPovOHBHHaIAv32qcc0ZyhNkQ.roa (hash: HcQ/8p3eoCWjnnKfMtVzm8focRBIq46dCnVV7vdjMxQ=) 17: v94LL-qGGgahldRNvzQc-ZVS3KI.roa (hash: a3YAXYAGQiNiI/eRCe9RKvTaP1hHvgR2d27wk4bq6Cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6d:5d:a0:56:d4:f2:8b:3f:35:d0:52:e0:8d:b6:c7:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Sep 4 17:00:47 2026 GMT Not After : Sep 5 17:00:47 2026 GMT Subject: CN=ab01febe238128723c98fd9d893d452cd07047bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:28:8a:6b:46:cd:b6:b6:7b:54:76:53:23:e7: e7:bb:5c:96:d1:f0:bc:4e:21:19:a2:47:0a:4f:d8: c4:45:6e:12:f9:59:b5:9c:c4:ac:91:44:25:74:b7: 50:11:56:5b:a2:99:68:ff:2a:bb:e7:d1:15:dd:11: ff:e2:02:a8:c4:b4:5a:ca:0b:88:42:2d:85:e9:f8: cb:64:a8:84:44:90:6a:21:4d:19:1b:33:f4:b7:d3: 16:d7:b1:81:9a:00:31:ee:94:51:60:c6:d7:33:ae: 20:4a:97:c9:0e:0f:59:13:73:ec:b3:3f:fe:23:39: bc:ed:a6:5f:92:f9:39:06:79:ed:41:58:76:e7:42: a6:50:4f:06:07:75:7f:0f:0c:92:3b:a0:b3:66:e9: 54:7d:23:48:d4:96:69:34:1c:cd:1c:f3:3b:da:c3: 77:49:12:2f:44:70:82:03:a0:9e:42:87:31:6b:39: 17:dd:e3:07:d1:4b:17:24:89:ea:c2:a8:96:d8:ac: 90:d1:c6:a0:c6:7a:5f:61:29:59:be:24:4d:d5:23: d0:a2:3a:94:77:68:83:6c:e6:71:8f:5c:66:e8:8a: 91:c4:19:3b:c9:2a:4b:8c:62:cb:86:0b:c4:d8:83: dd:c3:24:11:8a:41:fd:bc:e1:2e:2f:5c:c3:b2:a3: 98:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:01:FE:BE:23:81:28:72:3C:98:FD:9D:89:3D:45:2C:D0:70:47:BF X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:a3:e7:41:af:ab:67:af:be:5a:5f:be:6d:9d:e5:0d:3c:6d: ab:54:5a:aa:36:f0:30:2c:45:f7:f7:56:2c:87:b8:de:fc:55: bb:23:dd:a0:64:66:b1:39:6b:80:0f:01:f3:c4:cd:ae:27:fd: 38:a5:2d:ac:a4:70:ab:88:97:44:f2:14:3d:7e:0a:e2:a0:06: a4:a3:c7:82:6d:ea:fc:29:24:b7:4b:fc:8a:4f:87:bf:b3:5b: de:ae:f7:7a:d8:d2:fe:f8:1b:50:df:05:e3:8d:7d:54:4c:78: 43:88:5b:17:84:41:66:2c:da:ee:25:ec:22:10:0f:44:77:c5: ba:c5:2d:fa:6c:2e:d3:68:2d:d3:49:fd:85:56:90:c5:ca:2f: d7:54:c5:7f:d4:94:ad:db:33:c2:1f:0d:c5:fb:e3:a7:e5:2d: 0a:3e:3c:d3:b2:4c:b8:f0:dd:aa:26:4a:12:32:62:22:8c:d9: cd:1e:0c:0b:6d:a3:0f:7d:bb:ee:c7:25:a3:96:41:40:2a:1f: 27:36:e5:c2:de:86:ea:a5:0e:de:ff:ee:75:a4:45:8a:12:36: 3b:06:e3:2d:d0:31:b4:81:35:d3:97:51:a8:c9:8a:04:d7:88: 48:0d:33:37:6a:4b:16:41:02:be:f7:9a:52:d7:90:74:73:8d: eb:31:78:fa -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBtXaBW1PKLPzXQUuCNtscVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYwOTA0MTcwMDQ3WhcNMjYwOTA1MTcwMDQ3WjAzMTEwLwYDVQQD EyhhYjAxZmViZTIzODEyODcyM2M5OGZkOWQ4OTNkNDUyY2QwNzA0N2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCiKa0bNtrZ7VHZTI+fnu1yW0fC8 TiEZokcKT9jERW4S+Vm1nMSskUQldLdQEVZboplo/yq759EV3RH/4gKoxLRayguI Qi2F6fjLZKiERJBqIU0ZGzP0t9MW17GBmgAx7pRRYMbXM64gSpfJDg9ZE3Pssz/+ Izm87aZfkvk5BnntQVh250KmUE8GB3V/DwySO6CzZulUfSNI1JZpNBzNHPM72sN3 SRIvRHCCA6CeQocxazkX3eMH0UsXJInqwqiW2KyQ0cagxnpfYSlZviRN1SPQojqU d2iDbOZxj1xm6IqRxBk7ySpLjGLLhgvE2IPdwyQRikH9vOEuL1zDsqOYywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKsB/r4jgShyPJj9nYk9RSzQcEe/MB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj6PnQa+r Z6++Wl++bZ3lDTxtq1RaqjbwMCxF9/dWLIe43vxVuyPdoGRmsTlrgA8B88TNrif9 OKUtrKRwq4iXRPIUPX4K4qAGpKPHgm3q/Ckkt0v8ik+Hv7Nb3q73etjS/vgbUN8F 4419VEx4Q4hbF4RBZiza7iXsIhAPRHfFusUt+mwu02gt00n9hVaQxcov11TFf9SU rdszwh8Nxfvjp+UtCj4807JMuPDdqiZKEjJiIozZzR4MC22jD3277sclo5ZBQCof Jzblwt6G6qUO3v/udaRFihI2OwbjLdAxtIE105dRqMmKBNeISA0zN2pLFkECvvea UteQdHON6zF4+g== -----END CERTIFICATE-----Generated at Fri Sep 4 23:50:12 2026 by rpki-client