$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft File: E9rSS2ZH6yz6hzmJxtZtF060tYY.mft (raw, json) Hash identifier: jmEznYhuGsEaPt8TghSONlUy9aU5SSGj5HiqLmSOguo= Subject key identifier: 03:3B:B8:C4:EA:1C:40:8F:EC:A5:C4:89:1E:7C:C0:6B:F8:D1:93:9E Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86 Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586 Certificate serial: 01A08AC3C9FDEB5D2F7F659FCAC70ED7D9C5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft Manifest number: 01C8 Signing time: Thu 10 Sep 2026 10:01:22 +0000 Manifest this update: Thu 10 Sep 2026 10:01:22 +0000 Manifest next update: Fri 11 Sep 2026 10:01:22 +0000 Files and hashes: 1: 5FYGYJ3CTJgz_RO6RtjrvdukztM.roa (hash: WXX9l7hN5GLWTcdL5pzYOVjuzZXZGjSqNLVxArCt+5I=) 2: E9rSS2ZH6yz6hzmJxtZtF060tYY.crl (hash: dHp7sz2YNEEQP7AE0OHmOXMtAXzgemXN1ijBYlEjcTQ=) 3: EU6S0HJNgtU92lCj2E5oAPOEdLs.roa (hash: 1lpHBr2sLsew7tFbnn94rLgLk3IsikjEq2tOn5QLKjw=) 4: MDPAodA0zvA2NWT7ER8dOVR7L88.roa (hash: mJmiRwrgZ5I3NJ+cWSYWfQPR/ysaLHDjUSeXrv0sX/Y=) 5: TOpSp8N8inyCCRSUbFq7bgDiwZI.roa (hash: FJio1I2qAIA9DwKgU1NmquliJzX0e/Kc95cX9EOp7Z4=) 6: dpL5ZtEitf4atUPkEQBrdg3AXa4.roa (hash: rbxc/D01AOG8KldlHELzWOgJqjk9Wg1ayGFfbIWBJws=) 7: hOGDR0EybYX5uiEIH4dx1wBVH0I.roa (hash: YqwjG2i8QtY5ZfAttTtEJOybBG61FVR5wpzHYZpRL/g=) 8: jY3UCSn5SIqE6D7R33WIRi-Qpnc.roa (hash: P4ee7fsjy47kxDvjwPwpXo+ufHLr43WngBeFPsDCjZc=) 9: lBW5YHPb8dUMIQp7Ni-iMJP_E4Y.roa (hash: cbZo3D7fpp0X2deua8SfRD7Y1+8SplMIfDE6x9KtmDE=) 10: q9AZ9P7QUfekPrQysKLIfDnMJbU.roa (hash: LLX9K9xCwxCQlj+HJY24QlDZarm7oVsZ3lkpY8WxkSM=) 11: uNi1GWE-vm98aOz8PbUTScKWUd0.roa (hash: 2DDJ/sYmsUqQUvarD2q6Qibfp+tAmVVdlr8pKbLjGSg=) 12: yRZVehU6pPF-e8bf4h76KS5NUpg.roa (hash: kz7zsud3YYXglVH2w964aIAQdIKUpEdRIscf5oZrTlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 10:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:c3:c9:fd:eb:5d:2f:7f:65:9f:ca:c7:0e:d7:d9:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586 Validity Not Before: Sep 10 10:01:22 2026 GMT Not After : Sep 11 10:01:22 2026 GMT Subject: CN=033bb8c4ea1c408feca5c4891e7cc06bf8d1939e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:e4:5b:4f:cc:2e:0b:32:b4:d0:4c:fe:af:36: 25:18:1f:b7:74:31:c3:8a:15:eb:df:3c:8e:22:10: 01:d2:7c:ab:1c:66:3d:13:5d:3b:56:d1:e8:19:90: cd:45:90:bf:38:eb:3d:2f:cc:d5:1f:7e:93:06:31: 00:a8:84:96:6c:0e:3e:8d:5d:ef:1b:c3:d1:7d:84: 7e:68:b1:47:fd:48:3d:e4:68:89:a7:10:51:e9:e6: cb:ac:34:0e:27:42:24:9d:e5:6b:c3:39:79:f8:13: 1b:a4:db:bb:b7:5e:98:eb:8a:d2:b9:53:84:e7:41: 4e:12:83:8a:17:78:ed:bb:00:e8:16:22:12:ea:f3: 64:32:12:05:05:a2:3c:b0:7b:ce:3c:ef:37:92:4f: be:05:ff:5d:90:9f:9e:10:4b:60:4c:3f:5e:cd:ce: ea:90:22:d1:b3:9f:61:97:06:e0:9d:5a:2e:dc:ba: 09:fc:de:09:43:4c:cd:9f:9c:be:89:68:27:df:59: 97:35:ae:02:f0:a4:a1:4d:21:6d:1f:45:12:cd:ab: 0e:25:e1:8d:64:66:81:6f:21:da:58:87:e1:c7:60: f8:75:49:a0:ca:28:87:b2:b2:2f:87:73:f0:40:cd: 0a:51:3c:10:e2:fc:29:5b:dd:ba:5b:2e:61:3e:f1: 66:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:3B:B8:C4:EA:1C:40:8F:EC:A5:C4:89:1E:7C:C0:6B:F8:D1:93:9E X509v3 Authority Key Identifier: keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fb:8c:ca:6a:70:c5:e4:29:14:4f:24:a7:3a:42:aa:ad:f4: 8f:2d:d7:d3:0f:51:d9:8a:f8:8a:eb:54:f8:ce:bc:66:30:04: 74:c7:e4:c9:57:64:5c:04:20:f5:ff:d7:68:fe:f5:65:d5:32: 0c:29:43:c7:53:1e:1d:4c:46:d2:89:5f:85:bb:ae:48:26:c3: 7d:05:09:f4:2c:e4:e7:0b:5d:7a:53:b2:56:df:71:8e:fa:8f: 20:6c:2a:9d:80:69:f3:da:ae:d2:5f:a4:96:ad:97:df:87:d1: 75:59:d4:e9:d8:8b:13:f2:1d:55:0b:50:2d:9c:d9:8a:7a:b7: 8f:4e:6f:3f:55:2c:69:01:f3:d4:f4:9c:42:0e:b3:d3:45:d0: 79:51:d0:50:fb:78:d9:a9:65:0a:ab:19:c0:59:25:d2:0b:a7: f5:70:16:d9:9b:27:72:71:19:d0:e4:43:aa:6d:df:2a:e4:df: b2:a1:7a:66:8d:29:5e:5c:43:86:2c:ff:2c:10:cc:21:ff:de: c4:8d:ab:ad:d8:bc:55:4c:af:41:4e:0a:2b:aa:59:ff:18:8b: db:a8:7b:ba:64:60:ab:d0:4d:46:76:dd:34:f3:c4:df:fe:66: 7c:ed:6d:f0:ee:df:e8:b7:95:38:16:f3:df:55:27:55:0b:c1: 22:72:83:ad -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKw8n9610vf2WfyscO19nFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZGFkMjRiNjY0N2ViMmNmYTg3Mzk4OWM2ZDY2ZDE3NGVi NGI1ODYwHhcNMjYwOTEwMTAwMTIyWhcNMjYwOTExMTAwMTIyWjAzMTEwLwYDVQQD EygwMzNiYjhjNGVhMWM0MDhmZWNhNWM0ODkxZTdjYzA2YmY4ZDE5MzllMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ORbT8wuCzK00Ez+rzYlGB+3dDHD ihXr3zyOIhAB0nyrHGY9E107VtHoGZDNRZC/OOs9L8zVH36TBjEAqISWbA4+jV3v G8PRfYR+aLFH/Ug95GiJpxBR6ebLrDQOJ0IkneVrwzl5+BMbpNu7t16Y64rSuVOE 50FOEoOKF3jtuwDoFiIS6vNkMhIFBaI8sHvOPO83kk++Bf9dkJ+eEEtgTD9ezc7q kCLRs59hlwbgnVou3LoJ/N4JQ0zNn5y+iWgn31mXNa4C8KShTSFtH0USzasOJeGN ZGaBbyHaWIfhx2D4dUmgyiiHsrIvh3PwQM0KUTwQ4vwpW926Wy5hPvFmLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAM7uMTqHECP7KXEiR58wGv40ZOeMB8GA1UdIwQY MBaAFBPa0ktmR+ss+oc5icbWbRdOtLWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMt MWFhNmZlNDA2YTU4LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMtMWFhNmZlNDA2YTU4 LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfuMympw xeQpFE8kpzpCqq30jy3X0w9R2Yr4iutU+M68ZjAEdMfkyVdkXAQg9f/XaP71ZdUy DClDx1MeHUxG0olfhbuuSCbDfQUJ9Czk5wtdelOyVt9xjvqPIGwqnYBp89qu0l+k lq2X34fRdVnU6diLE/IdVQtQLZzZinq3j05vP1UsaQHz1PScQg6z00XQeVHQUPt4 2allCqsZwFkl0gun9XAW2ZsncnEZ0ORDqm3fKuTfsqF6Zo0pXlxDhiz/LBDMIf/e xI2rrdi8VUyvQU4KK6pZ/xiL26h7umRgq9BNRnbdNPPE3/5mfO1t8O7f6LeVOBbz 31UnVQvBInKDrQ== -----END CERTIFICATE-----Generated at Thu Sep 10 20:24:28 2026 by rpki-client