$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: seUee5WTwvG9vpmjkY+Iq9NLR3GiGcLEXCY+taLuOnw= Subject key identifier: 00:BB:D5:A6:E2:3E:83:A1:3D:FA:45:48:B6:3B:AE:10:27:AD:0D:4E Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 01A06D5DB5BC552D973BC5FAFBC4B9E882C8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 140A Signing time: Fri 04 Sep 2026 17:00:52 +0000 Manifest this update: Fri 04 Sep 2026 17:00:52 +0000 Manifest next update: Sat 05 Sep 2026 17:00:52 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 3: IT-G9anfftKLn-JNHdB3nhqaHRg.roa (hash: 8S5tnd+3z64Mysha0HCn0KENKA3IjsNdvVfiIIaQQlM=) 4: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 5: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 6: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 7: W6ODKTsWXuuxM7X4e3pi5Yx9bfY.roa (hash: Qe6g3w03gb/tVMQZy9HNCKxhMyO1J+uEJoKBGhQ1KGM=) 8: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 9: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 10: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 11: g40nZDbHYl7qlSg77AKf4r37XCM.roa (hash: bENh9i+XtP2fEGRFJH3lV6YIPsznIq+IWHYPSo2J8bA=) 12: mQVVU0yW21pC8IYFai3gUt7H-pE.roa (hash: H5zFgqItky5UWDxQkcovYBDjwRGeK4Gj998+PN5ijik=) 13: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: MMT9pjNmX9r4/vU4hub2B2bIudjDEdxpZtD2+eW1W9E=) 14: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 16:00:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6d:5d:b5:bc:55:2d:97:3b:c5:fa:fb:c4:b9:e8:82:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Sep 4 17:00:52 2026 GMT Not After : Sep 5 17:00:52 2026 GMT Subject: CN=00bbd5a6e23e83a13dfa4548b63bae1027ad0d4e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:e2:e1:ff:a9:2a:0e:d9:b3:87:f0:4b:8d:a7: 8e:34:f7:eb:d7:41:ea:f1:02:ca:e0:b1:2a:19:e6: da:65:2d:7d:5d:69:b1:50:52:f7:96:68:b2:a3:f2: 4b:a7:d7:ec:01:47:86:6f:50:a3:73:cc:62:7b:3c: a8:e7:bc:3a:57:a0:27:70:34:82:3b:91:90:74:c6: d6:9a:70:46:22:93:9b:e5:e7:e8:60:f5:e7:84:81: f1:43:9c:49:e0:df:82:72:1f:ad:1f:fc:df:71:14: 68:f5:7b:61:a9:72:54:e7:28:b8:6c:e7:5c:6d:3a: ac:bd:b3:a8:97:3c:59:b6:8e:81:37:50:7a:b7:d8: 15:f7:8a:9a:05:08:51:37:d4:56:44:24:c8:11:22: 26:7c:b5:3c:a9:08:c5:51:23:81:70:6f:dc:f5:b7: ae:9b:c7:ae:d1:c5:85:18:67:45:09:ac:19:e5:43: 0a:7b:12:2c:c2:f4:af:d7:66:8a:06:e9:09:bd:42: 22:21:45:06:05:70:70:81:fd:49:17:ff:c5:7b:11: f4:7c:4f:0c:8f:60:c6:48:2e:e6:49:b9:70:90:40: 2b:e5:ca:9a:e2:21:83:81:29:f0:43:75:0b:b7:34: da:13:67:b3:78:1e:a2:26:e5:aa:25:39:01:0c:d3: 01:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BB:D5:A6:E2:3E:83:A1:3D:FA:45:48:B6:3B:AE:10:27:AD:0D:4E X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:16:a5:ec:6f:00:eb:67:b8:8e:d9:07:9e:45:dc:71:1a:20: 0d:ff:89:bb:09:05:db:30:da:63:3f:12:5c:5c:b0:b8:c7:07: ae:ab:83:b8:42:8e:5c:f3:49:84:4d:f7:06:9e:bf:b0:0d:ef: ea:e7:60:ac:7e:45:ae:10:a0:9a:c6:fc:c2:59:ec:8c:fc:f3: b7:0c:69:9b:d5:40:89:a9:3e:68:f5:06:21:1b:bd:3d:5b:21: 28:60:0a:39:82:7b:09:50:94:77:ac:4b:e2:a6:11:80:77:c6: 13:9e:24:0c:79:d5:e8:da:37:78:5a:5f:95:3c:31:25:2c:99: 0e:a8:66:b8:93:db:11:57:d0:e3:f2:e1:24:8b:6c:c8:28:3e: b0:c3:83:b2:f3:f6:19:74:5a:5b:bf:e1:77:0b:93:17:ee:0d: 7a:65:7a:58:75:37:da:13:e2:06:cd:61:d2:d9:f5:4d:12:dd: ca:91:38:91:40:aa:17:d1:7a:c0:f1:75:c7:4a:ce:9d:7a:45: f2:76:af:f6:26:f7:00:35:c5:78:6c:73:66:77:e4:71:af:97: f6:27:d0:ba:67:f7:4f:30:19:63:73:98:4c:3f:29:b7:b7:f8: ad:1f:9b:19:b6:9e:c3:07:2d:3c:4d:30:28:a7:b2:79:98:b1: f0:c6:b7:60 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBtXbW8VS2XO8X6+8S56ILIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYwOTA0MTcwMDUyWhcNMjYwOTA1MTcwMDUyWjAzMTEwLwYDVQQD EygwMGJiZDVhNmUyM2U4M2ExM2RmYTQ1NDhiNjNiYWUxMDI3YWQwZDRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqeLh/6kqDtmzh/BLjaeONPfr10Hq 8QLK4LEqGebaZS19XWmxUFL3lmiyo/JLp9fsAUeGb1Cjc8xiezyo57w6V6AncDSC O5GQdMbWmnBGIpOb5efoYPXnhIHxQ5xJ4N+Cch+tH/zfcRRo9XthqXJU5yi4bOdc bTqsvbOolzxZto6BN1B6t9gV94qaBQhRN9RWRCTIESImfLU8qQjFUSOBcG/c9beu m8eu0cWFGGdFCawZ5UMKexIswvSv12aKBukJvUIiIUUGBXBwgf1JF//FexH0fE8M j2DGSC7mSblwkEAr5cqa4iGDgSnwQ3ULtzTaE2ezeB6iJuWqJTkBDNMBfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAC71abiPoOhPfpFSLY7rhAnrQ1OMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAShal7G8A 62e4jtkHnkXccRogDf+JuwkF2zDaYz8SXFywuMcHrquDuEKOXPNJhE33Bp6/sA3v 6udgrH5FrhCgmsb8wlnsjPzztwxpm9VAiak+aPUGIRu9PVshKGAKOYJ7CVCUd6xL 4qYRgHfGE54kDHnV6No3eFpflTwxJSyZDqhmuJPbEVfQ4/LhJItsyCg+sMODsvP2 GXRaW7/hdwuTF+4NemV6WHU32hPiBs1h0tn1TRLdypE4kUCqF9F6wPF1x0rOnXpF 8nav9ib3ADXFeGxzZnfkca+X9ifQumf3TzAZY3OYTD8pt7f4rR+bGbaewwctPE0w KKeyeZix8Ma3YA== -----END CERTIFICATE-----Generated at Fri Sep 4 23:45:48 2026 by rpki-client