$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft File: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft (raw, json) Hash identifier: lrmbGqE/AhvO5OMFBquI/vF6TDla9iYXejvP94qTFVw= Subject key identifier: 54:BF:A1:29:67:E2:FB:35:59:68:36:59:A4:DC:4C:02:1E:B2:9C:42 Authority key identifier: D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C Certificate issuer: /CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Certificate serial: 01A0DF4EF94C8C79436F18B10DECA14C05F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft Manifest number: 078F Signing time: Sat 26 Sep 2026 20:01:29 +0000 Manifest this update: Sat 26 Sep 2026 20:01:29 +0000 Manifest next update: Sun 27 Sep 2026 20:01:29 +0000 Files and hashes: 1: 1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl (hash: 0joOBKzxa0oCamzulp7N3cR8ZwlBPX6+n/ftZXrNL9E=) 2: 7Pp8VbVpyOqLvs1kKzvwfwhRkGo.roa (hash: 6Ks2LS2FCnPCE4CsuFiuAe1Op8O0mGMtouDqQZpDygY=) 3: 8VR_70lIhmbfQBWM0i8fejstj38.roa (hash: Vj2s6dE2P9YyRs2ziRnc2lYG3zxZVM5Ki2i2rLNZoPU=) 4: Bwqkw8hQYoLkRSGSy5raojcWLEM.roa (hash: s1cp6dxJOLvgMnvUq9xTUKfWPnoAGmbO9eTZnTJu10c=) 5: Js0D1dKcCRCyaMS4X9qvQh8BEYU.roa (hash: dexsbuxyvdOI74SuhajyHOcLTDp1qWzKLhChO62hrlM=) 6: NKqrv9sDZ1nAU7J1HrXdGMdmfec.roa (hash: 9v6YxW8qyH+sqKsdab1x1A8WsrkKuelVETBIelHHSR8=) 7: QAp6yJwPuhUvd9i3Kzl_JEzAJVg.roa (hash: Jys9YgG9ppmSQvYF69uVgiEGyzFWr92qTU99vvfDxys=) 8: XuHYtXTJlwVBCGN3yungnO5pdQI.roa (hash: gSbsrnpOJSy2l2TUoL9bEjo+iLtH7tQ6JWbYBCOLZio=) 9: d-ZqqORaz3ph08om-TNqwy5rKhI.roa (hash: JkQ79pA7pU30Bi/gmhAjEhaIh0mpuYAeeVT2V2BMbw8=) 10: gWq9l39B760m8BwJ6FnVCEx3RYw.roa (hash: xDFQoaIioQRvVfbb2XuMIMFADpDMmuQXWxpgyLuFXOs=) 11: o5v2otthTxI9MaotpF4RXsxny8c.roa (hash: 8Fkmii+rqIIBVQH5OTZvGOuhbJRNm26073tjiOdkjrw=) 12: pChNr3xOwGeIYeWfyjrB2pRGT1k.roa (hash: TuBrbJECgEzxz9W1Y1v2rvBjPMA5ppOrlaAsyOWhGos=) 13: tX8g4ysst6UayyhKxWn9caeZ6q8.roa (hash: qur0XBVBl5kmixRG1CpBlc3VfyHSfeNNM+Fvm2r43zc=) 14: wur7LoBXGPmpSWYqNcKF64RczZc.roa (hash: bPE+qqedOgayQ6lK7PZoR7nqIaBzdYhDVn214fqUaAQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 27 Sep 2026 19:30:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:df:4e:f9:4c:8c:79:43:6f:18:b1:0d:ec:a1:4c:05:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4ce2bf0001cd430e9277fb00ed1abe51c0b5c7c Validity Not Before: Sep 26 20:01:29 2026 GMT Not After : Sep 27 20:01:29 2026 GMT Subject: CN=54bfa12967e2fb3559683659a4dc4c021eb29c42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2d:89:8f:56:44:8e:15:29:8c:ba:72:76:08: 71:52:62:a7:ab:f6:43:5b:cf:7b:cd:ed:32:51:0a: aa:c2:78:16:aa:3e:fd:c9:e5:5c:36:3b:67:a0:43: 95:16:8b:56:a1:91:ba:86:bb:f5:26:34:41:5d:6d: 34:8d:76:89:04:5b:44:f4:52:bb:a4:93:b4:e1:6d: 3e:50:87:48:23:3e:78:9a:d8:58:a4:3e:9f:c2:07: 29:b2:0b:df:9a:c1:95:06:8f:54:f6:72:19:0d:5a: e7:84:b8:27:a2:05:9b:ef:f3:56:86:cc:d2:be:d9: bd:04:e6:8b:20:22:d6:20:a9:e1:ba:86:66:f1:2f: b9:8f:2b:60:2e:60:32:ea:86:b0:a3:27:9a:05:73: d3:81:9e:10:ed:1c:cb:63:2e:8f:2d:90:03:77:ed: 37:6f:18:5a:8e:00:d8:7f:c6:3c:72:2e:d4:bc:b4: 79:30:97:b5:77:32:a0:3e:b8:50:19:1a:b0:46:2d: 0e:e1:2c:bb:cf:2f:f3:c6:be:a1:3b:8c:95:a0:1a: dc:8a:c0:cf:5f:01:46:2e:fa:38:e0:d3:dc:4c:3a: cb:ac:0f:2a:5b:63:63:62:40:19:ae:39:dc:23:1d: 48:1b:7e:d8:f1:e1:3a:30:05:5e:d0:d9:1c:90:dd: 5c:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:BF:A1:29:67:E2:FB:35:59:68:36:59:A4:DC:4C:02:1E:B2:9C:42 X509v3 Authority Key Identifier: keyid:D4:CE:2B:F0:00:1C:D4:30:E9:27:7F:B0:0E:D1:AB:E5:1C:0B:5C:7C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/ba0bd3-b365-4461-8ffa-1f5431e2a5af/1/1M4r8AAc1DDpJ3-wDtGr5RwLXHw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:64:20:a9:1d:db:13:b6:7f:aa:7f:57:00:de:c4:6d:2b:ef: b0:72:64:47:c8:54:45:68:7b:da:9b:86:1a:57:91:0c:af:f8: b1:ae:65:12:c4:8c:b9:e4:8e:45:6f:ec:d6:70:0f:9e:2d:d6: bc:8a:1b:b1:37:80:b6:2a:67:fa:53:bf:83:a9:c0:b1:4b:a9: f5:d3:72:72:e2:25:00:04:9b:24:89:b5:92:2d:58:c3:d3:d2: e8:87:ea:26:0c:1f:15:93:95:32:25:e0:de:19:a4:ce:91:28: 0e:0c:5c:1b:db:5e:cd:01:15:29:72:d0:e9:bd:5d:dc:e4:d2: c1:09:1a:60:06:06:07:4e:ae:fd:5f:b6:55:17:97:8e:c9:75: 15:21:ef:af:89:61:12:f2:38:37:26:85:0f:8c:d5:22:19:55: f3:e1:c4:99:eb:69:e1:2b:e5:e3:7a:f3:15:f3:c2:ea:0e:e4: f3:d3:b6:35:6d:d6:58:bb:ee:76:b2:c2:3a:b5:44:48:6e:7b: cc:b9:67:31:33:bc:72:af:f6:68:65:41:18:dd:20:47:cf:b8: a3:a3:39:3e:db:02:a1:95:c9:32:d5:08:94:3f:96:86:03:b1: ac:49:2e:68:ea:cf:0a:22:56:1f:08:db:58:c9:de:71:64:df: 28:c0:28:cb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDfTvlMjHlDbxixDeyhTAX1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0Y2UyYmYwMDAxY2Q0MzBlOTI3N2ZiMDBlZDFhYmU1MWMw YjVjN2MwHhcNMjYwOTI2MjAwMTI5WhcNMjYwOTI3MjAwMTI5WjAzMTEwLwYDVQQD Eyg1NGJmYTEyOTY3ZTJmYjM1NTk2ODM2NTlhNGRjNGMwMjFlYjI5YzQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC2Jj1ZEjhUpjLpydghxUmKnq/ZD W897ze0yUQqqwngWqj79yeVcNjtnoEOVFotWoZG6hrv1JjRBXW00jXaJBFtE9FK7 pJO04W0+UIdIIz54mthYpD6fwgcpsgvfmsGVBo9U9nIZDVrnhLgnogWb7/NWhszS vtm9BOaLICLWIKnhuoZm8S+5jytgLmAy6oawoyeaBXPTgZ4Q7RzLYy6PLZADd+03 bxhajgDYf8Y8ci7UvLR5MJe1dzKgPrhQGRqwRi0O4Sy7zy/zxr6hO4yVoBrcisDP XwFGLvo44NPcTDrLrA8qW2NjYkAZrjncIx1IG37Y8eE6MAVe0NkckN1ctQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFS/oSln4vs1WWg2WaTcTAIespxCMB8GA1UdIwQY MBaAFNTOK/AAHNQw6Sd/sA7Rq+UcC1x8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEt MWY1NDMxZTJhNWFmLzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9iYTBiZDMtYjM2NS00NDYxLThmZmEtMWY1NDMxZTJhNWFm LzEvMU00cjhBQWMxRERwSjMtd0R0R3I1UndMWEh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPmQgqR3b E7Z/qn9XAN7EbSvvsHJkR8hURWh72puGGleRDK/4sa5lEsSMueSORW/s1nAPni3W vIobsTeAtipn+lO/g6nAsUup9dNycuIlAASbJIm1ki1Yw9PS6IfqJgwfFZOVMiXg 3hmkzpEoDgxcG9tezQEVKXLQ6b1d3OTSwQkaYAYGB06u/V+2VReXjsl1FSHvr4lh EvI4NyaFD4zVIhlV8+HEmetp4Svl43rzFfPC6g7k89O2NW3WWLvudrLCOrVESG57 zLlnMTO8cq/2aGVBGN0gR8+4o6M5PtsCoZXJMtUIlD+WhgOxrEkuaOrPCiJWHwjb WMnecWTfKMAoyw== -----END CERTIFICATE-----Generated at Sun Sep 27 01:55:20 2026 by rpki-client