$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: 1m/0IXgS2JBSfoTZj0kq1w51D/ymPCo6IdvYKyLfUyM= Subject key identifier: 4D:64:A5:EE:96:42:8D:0D:CD:3E:4B:C9:B7:ED:C3:9F:D2:3F:78:FF Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 01A088D4C020A761A53DDDCDCA3468ACB415 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 1455 Signing time: Thu 10 Sep 2026 01:00:38 +0000 Manifest this update: Thu 10 Sep 2026 01:00:38 +0000 Manifest next update: Fri 11 Sep 2026 01:00:38 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: IqJPAFAjp3O5hgER/R5EZi8P3GVK0lW+GS08aJIwVSM=) 2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=) 3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=) 4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=) 5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=) 6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=) 7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=) 8: TbKjk9biFGhLJW-0EAJ-G1mE3dg.roa (hash: NXGH0uYXNrJkmlvbFICP94ZCbP2H5y85Tnuyfhnefi8=) 9: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=) 10: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=) 11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=) 12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=) 13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=) 14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=) 15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 01:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:88:d4:c0:20:a7:61:a5:3d:dd:cd:ca:34:68:ac:b4:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Sep 10 01:00:38 2026 GMT Not After : Sep 11 01:00:38 2026 GMT Subject: CN=4d64a5ee96428d0dcd3e4bc9b7edc39fd23f78ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:96:49:ee:88:8c:49:88:a6:52:e8:3c:75:1d: 7b:19:5b:eb:c0:e6:ff:da:eb:65:38:8c:b0:f0:1e: 39:19:c3:6a:6e:b4:e5:36:bb:e0:0b:8c:67:bc:68: 66:64:01:04:74:2e:52:9d:86:30:80:ae:a4:7f:a1: c7:39:9a:20:9e:23:70:00:77:c9:87:9c:40:27:9b: fd:c6:2c:76:d5:48:8d:f2:d3:b3:11:1f:a1:fa:bb: ab:80:40:ca:a7:24:46:61:47:6c:6b:92:10:cf:6f: 66:17:aa:c2:97:19:45:09:cd:34:7f:c6:71:35:62: db:13:78:c4:9c:82:52:5c:b0:77:0c:c5:79:b3:36: 26:21:2e:6c:95:47:a4:ff:bb:f0:f8:97:18:6f:22: 6c:c6:23:51:49:03:f6:cf:fa:bf:8a:b6:d3:1f:c2: 94:0e:39:0a:08:8a:59:f7:28:52:17:ee:96:41:8a: 80:29:c8:77:a8:24:86:55:22:e4:7a:62:31:46:c7: b0:24:58:80:23:3c:b6:23:ae:fc:82:06:e3:2a:fb: cf:71:62:16:4a:4b:08:2f:4f:26:a7:ab:ca:9b:c6: c2:a0:13:fa:39:f2:57:44:b6:9c:e2:aa:95:bf:3b: 29:71:cb:37:70:fe:92:59:08:0b:86:99:cb:df:6b: db:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:64:A5:EE:96:42:8D:0D:CD:3E:4B:C9:B7:ED:C3:9F:D2:3F:78:FF X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:9c:d7:d9:62:05:db:76:6f:10:3c:04:65:2d:dc:97:c6:b3: 53:41:7e:6e:22:78:a9:01:84:85:48:b9:0b:03:48:c9:ae:a2: 96:98:fe:b0:a0:05:36:70:1c:6e:1a:6b:01:c0:7f:64:0e:ee: cf:7d:cf:43:20:8d:20:83:28:3b:48:74:f5:80:3a:73:71:62: 0b:22:af:fa:58:32:d8:41:cc:88:f4:50:38:d1:6b:da:c1:31: 1a:cd:b8:1d:b5:27:71:b3:ab:39:71:78:fd:34:98:f9:a4:59: 42:bb:36:02:18:5a:4d:42:4b:fe:6a:98:1a:96:f3:19:63:43: 37:ac:fa:4a:2f:9d:4d:c3:b4:46:3f:9b:ab:ec:a2:4d:fe:57: 5e:b0:35:d7:ae:9d:aa:b2:e1:02:85:03:2f:22:98:a9:b8:4b: 13:4a:a5:de:e9:68:7f:47:3b:2e:81:33:22:b3:95:c4:63:90: 57:17:7d:53:74:b0:aa:42:6a:d7:03:d4:be:64:56:eb:0a:38: 14:6e:a0:21:47:a5:47:96:74:0e:17:28:5b:b0:dd:01:a7:c6: c2:93:12:cf:54:86:12:51:fc:bd:98:45:a6:35:53:40:78:6c: 37:53:75:08:f7:ca:ea:0d:e5:87:e0:a5:99:3b:45:28:b0:02: c3:dd:75:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCI1MAgp2GlPd3NyjRorLQVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYwOTEwMDEwMDM4WhcNMjYwOTExMDEwMDM4WjAzMTEwLwYDVQQD Eyg0ZDY0YTVlZTk2NDI4ZDBkY2QzZTRiYzliN2VkYzM5ZmQyM2Y3OGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZZJ7oiMSYimUug8dR17GVvrwOb/ 2utlOIyw8B45GcNqbrTlNrvgC4xnvGhmZAEEdC5SnYYwgK6kf6HHOZogniNwAHfJ h5xAJ5v9xix21UiN8tOzER+h+rurgEDKpyRGYUdsa5IQz29mF6rClxlFCc00f8Zx NWLbE3jEnIJSXLB3DMV5szYmIS5slUek/7vw+JcYbyJsxiNRSQP2z/q/irbTH8KU DjkKCIpZ9yhSF+6WQYqAKch3qCSGVSLkemIxRsewJFiAIzy2I678ggbjKvvPcWIW SksIL08mp6vKm8bCoBP6OfJXRLac4qqVvzspccs3cP6SWQgLhpnL32vbuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE1kpe6WQo0NzT5Lybftw5/SP3j/MB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATJzX2WIF 23ZvEDwEZS3cl8azU0F+biJ4qQGEhUi5CwNIya6ilpj+sKAFNnAcbhprAcB/ZA7u z33PQyCNIIMoO0h09YA6c3FiCyKv+lgy2EHMiPRQONFr2sExGs24HbUncbOrOXF4 /TSY+aRZQrs2AhhaTUJL/mqYGpbzGWNDN6z6Si+dTcO0Rj+bq+yiTf5XXrA1166d qrLhAoUDLyKYqbhLE0ql3ulof0c7LoEzIrOVxGOQVxd9U3SwqkJq1wPUvmRW6wo4 FG6gIUelR5Z0DhcoW7DdAafGwpMSz1SGElH8vZhFpjVTQHhsN1N1CPfK6g3lh+Cl mTtFKLACw911uw== -----END CERTIFICATE-----Generated at Thu Sep 10 10:09:34 2026 by rpki-client