$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: kgXo03GQGxMsvM3XNrQifqBDtIliYoUgbHRxlB/OaBg= Subject key identifier: D2:62:97:69:8A:D9:49:6C:8E:79:5E:86:70:81:EC:16:D0:7C:37:4F Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 01A0890B85F348804F8F48F4A00237D13F23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1AE6 Signing time: Thu 10 Sep 2026 02:00:28 +0000 Manifest this update: Thu 10 Sep 2026 02:00:28 +0000 Manifest next update: Fri 11 Sep 2026 02:00:28 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: Pi6WATXFh1p5mqJhPTivWCt/Y/271tiCY7GSEwN0Ao0=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 5: 3geV6AQmnNE3--gs3xHupJZtVFw.roa (hash: sNT96XO64aXnjNnHk7Dhs9S+Zq3PRzmgEqOTblaXNls=) 6: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 7: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 8: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 9: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 10: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 11: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 12: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 13: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 14: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 15: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 16: GxIVjDapSVdQZlCoMGPtyoGOzgo.roa (hash: aL3bSMxCFK+rbwgtnr61IppJLesQ5DjTyxJXruCPs+0=) 17: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 18: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 19: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 20: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 21: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 22: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 23: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 24: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 25: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 26: d8X74tq4Ex7dEljJD2jNuzdNoAA.roa (hash: dctWKohNXyt7A8Qzki86kF43sOMR/qJKkbpEQ+X8fJA=) 27: diqL8yy16y9LeHsnwIPIVvp6VbU.roa (hash: YGl2HS6I4il7qWh5+OC1YzjKf4mXOjsrZzrKCkNnHPM=) 28: gdiJRVH83qzM0Hc5PweB6gWC6-8.roa (hash: pgZ+GtjefMqu429BIRcG12cEE/zIXfPx6RFdA+xRHiE=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 02:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:0b:85:f3:48:80:4f:8f:48:f4:a0:02:37:d1:3f:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Sep 10 02:00:28 2026 GMT Not After : Sep 11 02:00:28 2026 GMT Subject: CN=d26297698ad9496c8e795e867081ec16d07c374f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:1d:3a:ad:c9:a6:2a:4f:26:1e:0b:92:84:18: 1c:c1:b2:fa:d7:14:8f:fa:c8:5a:e1:9f:a6:ee:14: 7f:a2:3e:04:3a:51:83:ac:87:0f:1d:5f:74:ab:77: 18:3d:4f:b1:b9:0a:de:dc:b7:02:1f:6e:18:87:8f: 08:e9:c3:1f:ad:2b:80:9d:20:e6:10:63:9d:59:86: 3c:f3:da:0d:2e:97:78:e7:e9:f3:08:4e:42:2a:9b: 31:23:53:5f:72:8f:e9:d0:1c:72:98:22:90:25:99: b4:8f:b2:83:f7:32:08:f1:65:72:fa:00:f9:3e:b0: 4c:a3:23:79:cf:c8:79:60:21:64:29:e3:63:d5:60: f6:d3:fa:6d:eb:77:41:ee:16:7a:55:86:05:27:0d: df:d0:ba:95:86:fd:93:d1:dd:63:64:0c:50:12:b4: ed:e4:93:78:27:70:da:88:d3:2c:48:dc:b5:71:b3: 72:a1:65:25:1d:c9:79:f8:b5:7e:c2:33:47:ea:d5: 0f:87:7d:05:2f:84:c9:84:24:9b:2a:3e:77:29:5d: 09:91:d9:4e:a6:40:8f:fb:bc:5d:88:3d:36:61:0b: 0f:ce:4e:49:5d:8f:0f:b4:63:f6:d6:d3:1b:94:53: 44:f2:38:cc:39:d4:59:44:2c:d0:62:bf:5a:7a:78: 05:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:62:97:69:8A:D9:49:6C:8E:79:5E:86:70:81:EC:16:D0:7C:37:4F X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:63:40:49:b3:66:fa:b2:fd:b3:e2:ff:ca:19:f9:b8:36:45: a0:22:e8:30:ea:a1:5d:77:2e:86:1f:1b:f5:89:2e:00:f7:58: ce:47:28:78:7e:aa:d0:c2:19:f9:76:5b:d7:8b:7f:d7:aa:90: 53:2b:62:33:a3:d3:d3:3d:90:48:88:aa:f9:97:4f:23:0b:de: 69:dd:05:9e:85:2b:ec:95:5d:94:2d:83:50:3a:65:30:cf:88: 92:37:d3:85:61:eb:ef:a6:bd:47:7d:fb:16:c2:be:bd:d7:63: 3c:b5:79:83:e6:67:f5:ff:f3:c8:dd:a8:bd:da:b9:47:ac:93: b8:47:e2:e8:df:18:ee:24:5a:4a:f1:53:f1:ab:fd:fc:69:91: c7:10:62:33:24:26:ba:4c:29:88:e3:65:a6:c4:c3:5b:93:b4: 00:11:20:ff:74:48:a4:34:38:6c:9a:8f:3a:b5:af:67:8a:30: ec:e2:34:dc:96:17:ec:8b:2e:7c:41:81:c4:26:2e:e3:3e:df: 51:24:dd:a1:6b:59:b3:2d:a8:35:09:dc:6c:75:78:53:3c:1f: a5:be:35:ac:27:92:82:89:1d:e6:a1:54:3d:06:a9:21:df:f1: 85:e8:50:7d:20:fa:12:09:24:80:26:f7:5c:6a:bd:6e:ae:0e: 64:8d:a6:30 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJC4XzSIBPj0j0oAI30T8jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYwOTEwMDIwMDI4WhcNMjYwOTExMDIwMDI4WjAzMTEwLwYDVQQD EyhkMjYyOTc2OThhZDk0OTZjOGU3OTVlODY3MDgxZWMxNmQwN2MzNzRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqx06rcmmKk8mHguShBgcwbL61xSP +sha4Z+m7hR/oj4EOlGDrIcPHV90q3cYPU+xuQre3LcCH24Yh48I6cMfrSuAnSDm EGOdWYY889oNLpd45+nzCE5CKpsxI1Nfco/p0BxymCKQJZm0j7KD9zII8WVy+gD5 PrBMoyN5z8h5YCFkKeNj1WD20/pt63dB7hZ6VYYFJw3f0LqVhv2T0d1jZAxQErTt 5JN4J3DaiNMsSNy1cbNyoWUlHcl5+LV+wjNH6tUPh30FL4TJhCSbKj53KV0JkdlO pkCP+7xdiD02YQsPzk5JXY8PtGP21tMblFNE8jjMOdRZRCzQYr9aengFMQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNJil2mK2UlsjnlehnCB7BbQfDdPMB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGNASbNm +rL9s+L/yhn5uDZFoCLoMOqhXXcuhh8b9YkuAPdYzkcoeH6q0MIZ+XZb14t/16qQ UytiM6PT0z2QSIiq+ZdPIwvead0FnoUr7JVdlC2DUDplMM+IkjfThWHr76a9R337 FsK+vddjPLV5g+Zn9f/zyN2ovdq5R6yTuEfi6N8Y7iRaSvFT8av9/GmRxxBiMyQm ukwpiONlpsTDW5O0ABEg/3RIpDQ4bJqPOrWvZ4ow7OI03JYX7IsufEGBxCYu4z7f USTdoWtZsy2oNQncbHV4Uzwfpb41rCeSgokd5qFUPQapId/xhehQfSD6EgkkgCb3 XGq9bq4OZI2mMA== -----END CERTIFICATE-----Generated at Thu Sep 10 10:16:24 2026 by rpki-client