$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: whG4L6lI4iRiu6SS1fN8Nxgdsz3ccdpzKl7i1hfT0N4= Subject key identifier: 45:0F:BA:1B:E9:4E:56:DD:00:05:2E:22:4B:35:E0:88:47:A4:70:01 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 01A08B31690D56273963540C6E737B9BDC70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 0F8B Signing time: Thu 10 Sep 2026 12:01:06 +0000 Manifest this update: Thu 10 Sep 2026 12:01:06 +0000 Manifest next update: Fri 11 Sep 2026 12:01:06 +0000 Files and hashes: 1: 1raBdrG8cJ9Bp5UTf1-3ySXpvNU.roa (hash: nidyHf42+8qviczWax8TG8WbQgA/HNtQCPEG+F+WBIY=) 2: 2kDI2fX-vOvB11NNeAS3cg-93eM.asa (hash: NA7gOR6dP2dN+8of3Z/jNBI4ucvB9u9QIPByWzroYZo=) 3: 4p-Cm-GajEDg95U2oK6uzfsp0JU.asa (hash: 5kxjukz9UrNDQRzs1WDtvD2HHIl/VN2fV1l1vptM11w=) 4: D20r0Dc3ziO-pvHNC0RCH6WWn4M.asa (hash: iaKS5DFhrhjGhN9Po/Gl1SfI1i51StPCSZ9Lx4T3V/o=) 5: JLWdtgjMTs_4Sq7DTqKgddlwfrY.asa (hash: 9mBXiLiJ86zw/4udWl2MUcosM1kylDDeUDtsF/0LHfI=) 6: KeXwRGdfZ0moU2iD3Q2mbtR6C3k.asa (hash: kKAEUwnnTtlt/PROwq+dzQgzZQgqzq3CPnTsKxDqyks=) 7: L2QCsrjPe2KM3zZLG_j-necXdRQ.asa (hash: WdEBpYb6JsNA+UMdvTX09oNiIH0VyRdO15C/0tlTHTA=) 8: OGZW3EGUH5W_Sl4Rah9ArDm_EJo.asa (hash: q8G/683GpwIgrnSyD7lVID7X1jS34HiXZGHtfK+B8v4=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: bqKa0YRsYxH7tFUT4rHgcN42asw.roa (hash: 8oWhUO/dKOps3lszSUNTka8Z4cLC6TKDR/CwR798z8A=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: p5zNzQPaIB94IBWFj0Evjw09b6Y.asa (hash: eOPidDTFtzDIvGAErv5iz3BORzDmQalbdnPuHerit6s=) 13: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: dhYurZv6GunudG3Ebyxe2mmUqa7OkeLc+n9tz4mEORs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 12:01:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8b:31:69:0d:56:27:39:63:54:0c:6e:73:7b:9b:dc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Sep 10 12:01:06 2026 GMT Not After : Sep 11 12:01:06 2026 GMT Subject: CN=450fba1be94e56dd00052e224b35e08847a47001 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:3d:e2:c7:74:f8:97:5e:9f:ce:95:0c:98:06: fb:8c:9b:0d:93:18:f5:97:55:7e:9e:f3:f3:28:f8: 9f:5b:bd:00:fb:24:0f:d0:5a:ab:bc:c3:39:6b:6f: f5:81:79:4c:23:a7:0f:88:d4:6a:e0:7d:62:0b:83: d6:df:50:84:ae:2a:f2:09:e9:16:f5:5c:b0:f3:aa: ac:2d:ff:61:a9:51:ff:3f:f6:a6:13:bd:04:97:83: 19:0c:a9:37:48:9f:dc:68:eb:11:a0:f1:4a:1d:1f: a5:0f:84:49:62:b6:a5:11:e5:69:54:be:92:d2:ca: 9e:1e:be:83:58:bc:f0:88:b6:d1:83:7a:49:58:ee: b9:2a:ef:86:4d:ef:16:b0:bd:9a:ac:54:90:91:7c: 07:4f:ab:c3:4b:bc:df:78:bc:fd:e4:ff:56:64:be: 20:49:46:70:6e:44:3c:1b:ca:91:77:25:a9:6e:fd: 06:57:43:d8:1c:f9:6d:2e:29:80:13:07:25:e4:50: c7:c1:61:8c:13:f3:0b:dd:e9:31:e7:60:c1:63:13: 90:52:96:7f:fb:a9:3d:15:61:bc:d6:09:8c:b2:9a: 6a:f2:73:d8:1d:6e:0c:90:08:da:70:62:39:46:95: 6d:8f:d8:d1:2c:c3:f9:33:d6:bd:1f:4c:86:1d:41: ce:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0F:BA:1B:E9:4E:56:DD:00:05:2E:22:4B:35:E0:88:47:A4:70:01 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:fa:20:24:6d:e0:08:c2:2d:88:1f:69:84:3e:fa:58:a8:31: 17:18:27:b8:5e:1c:85:e9:b4:d9:15:a8:cf:7a:b5:fa:b4:9b: 17:a3:14:08:74:c3:96:38:21:d2:0d:9e:c0:68:21:d7:ed:c3: 5e:ed:4f:aa:a8:ec:7d:8b:7b:23:96:d6:b4:a5:f3:00:81:dc: 46:b7:dc:61:7c:a4:2c:e2:ab:f8:b0:d4:2c:9c:5a:8c:6e:c6: 37:2e:54:4b:65:a8:df:09:e7:b7:da:f7:1b:c5:a9:c6:38:4d: a2:c9:50:c8:35:70:f8:1b:5d:8e:03:78:3f:6a:8e:2b:35:fa: 5f:bf:fc:41:ea:41:d6:b2:ad:cb:ac:86:64:61:ae:cd:c3:b9: 1e:49:3b:2e:0c:21:59:bd:0d:a9:fd:62:8a:65:e6:d7:0d:f8: e2:90:24:d3:f5:02:2f:01:19:e5:c0:c0:64:76:cc:64:cd:c1: 6d:f0:b1:ea:87:60:80:e5:44:50:46:b9:2c:f3:4d:0e:dd:7f: 40:f1:6e:d8:ff:44:3e:85:80:98:b8:c9:fd:91:b2:21:0c:49: 92:73:90:ca:b8:96:55:cf:73:ac:ac:cc:1d:d6:c1:a1:63:82: c9:0e:9d:f5:ab:76:06:04:8c:ed:ae:5d:19:e8:28:d8:a3:a5: da:5a:e4:3c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCLMWkNVic5Y1QMbnN7m9xwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYwOTEwMTIwMTA2WhcNMjYwOTExMTIwMTA2WjAzMTEwLwYDVQQD Eyg0NTBmYmExYmU5NGU1NmRkMDAwNTJlMjI0YjM1ZTA4ODQ3YTQ3MDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqD3ix3T4l16fzpUMmAb7jJsNkxj1 l1V+nvPzKPifW70A+yQP0FqrvMM5a2/1gXlMI6cPiNRq4H1iC4PW31CEriryCekW 9Vyw86qsLf9hqVH/P/amE70El4MZDKk3SJ/caOsRoPFKHR+lD4RJYralEeVpVL6S 0sqeHr6DWLzwiLbRg3pJWO65Ku+GTe8WsL2arFSQkXwHT6vDS7zfeLz95P9WZL4g SUZwbkQ8G8qRdyWpbv0GV0PYHPltLimAEwcl5FDHwWGME/ML3ekx52DBYxOQUpZ/ +6k9FWG81gmMsppq8nPYHW4MkAjacGI5RpVtj9jRLMP5M9a9H0yGHUHOCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEUPuhvpTlbdAAUuIks14IhHpHABMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWPogJG3g CMItiB9phD76WKgxFxgnuF4chem02RWoz3q1+rSbF6MUCHTDljgh0g2ewGgh1+3D Xu1PqqjsfYt7I5bWtKXzAIHcRrfcYXykLOKr+LDULJxajG7GNy5US2Wo3wnnt9r3 G8WpxjhNoslQyDVw+BtdjgN4P2qOKzX6X7/8QepB1rKty6yGZGGuzcO5Hkk7Lgwh Wb0Nqf1iimXm1w344pAk0/UCLwEZ5cDAZHbMZM3BbfCx6odggOVEUEa5LPNNDt1/ QPFu2P9EPoWAmLjJ/ZGyIQxJknOQyriWVc9zrKzMHdbBoWOCyQ6d9at2BgSM7a5d Gego2KOl2lrkPA== -----END CERTIFICATE-----Generated at Thu Sep 10 21:56:59 2026 by rpki-client