$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: LF1kdmTlyR9ws0EhC/dwtYy6OYFGxnbNgJzbVDhsmb0= Subject key identifier: 24:80:4B:C0:47:00:A0:05:49:43:0E:D4:16:A5:99:B6:FA:90:5C:D3 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 01A08A1E9FEE70006090AF325D55597A8FFE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 1A45 Signing time: Thu 10 Sep 2026 07:00:57 +0000 Manifest this update: Thu 10 Sep 2026 07:00:57 +0000 Manifest next update: Fri 11 Sep 2026 07:00:57 +0000 Files and hashes: 1: 8HNqyROtCPcfRiv1Sx49M6ONZYg.roa (hash: zFpstxzrvOg/IGEksLOhRDjWqdDtkzz+78pgZXkJ73Y=) 2: AIs-v4MTJP3X4O8YQJnAripw4vs.roa (hash: kHs1izlvzimCPZa6IfF/iyB6cbHIdll4P1d4fiptxlM=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: BojZGc5mVz3Z6/JbFtjlXY/YnpxTIXDeB6BPto3Bon0=) 4: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=) 5: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=) 6: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=) 7: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=) 8: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=) 9: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=) 10: lyIOq6TA50RExwMG01O0x9KQ_K8.roa (hash: upG12PbzyM39hFjrEWs8ykSga/yXg/EqgsBSnOyEtfg=) 11: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=) 12: z9CW8ENT4ms8qSgnRvUL6_vDjPY.roa (hash: lH3Kl/j3Y/mCc0yq2REHce8PieFSAQY5Zjhu7gCcN4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 07:00:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:1e:9f:ee:70:00:60:90:af:32:5d:55:59:7a:8f:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Sep 10 07:00:57 2026 GMT Not After : Sep 11 07:00:57 2026 GMT Subject: CN=24804bc04700a00549430ed416a599b6fa905cd3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:8b:a4:7a:32:7a:c6:5d:e0:58:12:5f:5b:e8: b8:d4:02:41:db:dc:fe:e6:ce:84:d1:8e:76:e5:06: a0:c1:39:c5:16:7d:ed:6d:ff:df:16:bd:b1:06:39: 28:54:48:fd:da:76:31:02:1e:70:5f:f4:7d:79:f3: be:0b:0e:d8:76:d5:65:b8:b7:4c:38:d1:e6:d5:c1: 52:23:a2:79:3b:66:86:68:dc:27:e0:22:5c:13:eb: 9e:33:e2:a3:90:5e:17:7a:85:63:89:5f:02:30:7e: 25:7f:23:f7:2c:89:94:3a:56:85:f4:17:4f:eb:1e: c4:ee:39:0e:0e:e4:ff:ba:d8:14:ef:45:40:e9:e0: c8:0b:18:dc:69:71:50:bf:3b:c2:74:52:b8:0c:a8: fd:09:35:fa:fc:62:e1:8d:bc:ae:45:c5:4c:ea:8b: d9:ac:21:26:aa:7e:05:4e:25:cb:89:97:e3:86:7a: c0:7e:0c:d8:f6:4d:1b:d3:18:85:f8:38:d3:e1:fc: 40:f2:73:11:34:a6:c1:2e:4a:75:df:38:21:32:19: 5c:72:52:2a:57:a9:e8:62:3a:04:c8:0b:3b:4f:f5: 7a:e0:50:a5:cb:2a:69:dd:80:3d:3a:f3:0b:b4:30: 50:2b:64:1b:67:9d:0d:b7:3d:e2:f5:d6:b0:5c:ab: 63:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:80:4B:C0:47:00:A0:05:49:43:0E:D4:16:A5:99:B6:FA:90:5C:D3 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ce:d5:b8:fb:c2:ed:15:36:ef:ae:12:aa:18:da:2d:02:4c: 59:65:21:ef:2e:6a:fc:80:be:59:11:70:70:86:52:80:4e:cd: a3:42:3c:b8:99:5f:94:cf:f3:5f:3e:20:ed:da:51:0c:c1:62: 90:14:c1:d7:21:9c:e7:2b:ec:14:03:94:7b:a8:b1:d3:98:0e: e1:4d:48:76:f0:20:c3:b1:73:1b:fd:82:b2:82:3e:74:0d:07: d7:a1:e7:fa:d4:f3:00:82:e7:a5:5c:a2:f4:5a:a7:ab:68:8b: 02:e7:a4:de:d1:57:36:f1:26:c2:8b:d7:75:70:e2:82:67:24: 78:0a:e3:53:d9:cd:7a:9c:82:48:d4:0a:cb:18:23:2f:03:a5: 15:4d:96:3c:ad:36:cd:85:16:fe:c3:2a:fb:df:30:21:d6:42: 83:1f:38:cd:b1:1c:bc:01:ae:ad:02:9e:95:27:18:05:79:fd: 18:e1:64:39:53:1b:b2:95:54:b5:c0:21:03:4b:0b:97:9c:84: e8:8c:fd:4e:42:f6:41:1d:a3:c9:a4:f5:a6:ab:f4:11:c8:09: 4f:46:de:56:77:ff:e7:aa:cc:b1:2f:2d:f2:65:df:6b:f5:11: 62:67:54:fa:15:24:39:51:55:0d:14:85:cd:69:3c:f4:be:3d: 00:c5:be:d9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKHp/ucABgkK8yXVVZeo/+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYwOTEwMDcwMDU3WhcNMjYwOTExMDcwMDU3WjAzMTEwLwYDVQQD EygyNDgwNGJjMDQ3MDBhMDA1NDk0MzBlZDQxNmE1OTliNmZhOTA1Y2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIukejJ6xl3gWBJfW+i41AJB29z+ 5s6E0Y525QagwTnFFn3tbf/fFr2xBjkoVEj92nYxAh5wX/R9efO+Cw7YdtVluLdM ONHm1cFSI6J5O2aGaNwn4CJcE+ueM+KjkF4XeoVjiV8CMH4lfyP3LImUOlaF9BdP 6x7E7jkODuT/utgU70VA6eDICxjcaXFQvzvCdFK4DKj9CTX6/GLhjbyuRcVM6ovZ rCEmqn4FTiXLiZfjhnrAfgzY9k0b0xiF+DjT4fxA8nMRNKbBLkp13zghMhlcclIq V6noYjoEyAs7T/V64FClyypp3YA9OvMLtDBQK2QbZ50Ntz3i9dawXKtjgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCSAS8BHAKAFSUMO1Balmbb6kFzTMB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQM7VuPvC 7RU2764SqhjaLQJMWWUh7y5q/IC+WRFwcIZSgE7No0I8uJlflM/zXz4g7dpRDMFi kBTB1yGc5yvsFAOUe6ix05gO4U1IdvAgw7FzG/2CsoI+dA0H16Hn+tTzAILnpVyi 9Fqnq2iLAuek3tFXNvEmwovXdXDigmckeArjU9nNepyCSNQKyxgjLwOlFU2WPK02 zYUW/sMq+98wIdZCgx84zbEcvAGurQKelScYBXn9GOFkOVMbspVUtcAhA0sLl5yE 6Iz9TkL2QR2jyaT1pqv0EcgJT0beVnf/56rMsS8t8mXfa/URYmdU+hUkOVFVDRSF zWk89L49AMW+2Q== -----END CERTIFICATE-----Generated at Thu Sep 10 12:34:28 2026 by rpki-client