$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft File: 9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json) Hash identifier: s0ilHC4QkBBmRdPOWuBigFH54K+24o9Exj3XTTZGNIk= Subject key identifier: 5D:40:59:D8:CE:ED:64:A5:E7:79:D1:5B:E7:1B:E1:D7:80:A8:9C:2E Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Certificate serial: 01A0F5D71F71C13E98550C5073DE2C9F8FF7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft Manifest number: 10A3 Signing time: Thu 01 Oct 2026 05:01:51 +0000 Manifest this update: Thu 01 Oct 2026 05:01:51 +0000 Manifest next update: Fri 02 Oct 2026 05:01:51 +0000 Files and hashes: 1: 1-TEmL5jbsK3PrKD8j52WhCZ0qeI.roa (hash: VGXlZbSa6lTTDzWoioV4bwS7txIXqiiihar6C8uT+sc=) 2: 7C0V1hBB2j4Z0mWBIUgnztA_FKo.roa (hash: NHdUGwrw8MVcwcj4xNyKJAEIGlAjm+SSRTtlFS7q5aU=) 3: 7HQY9fTNwYAKnHQdVkUdWkP7cMo.roa (hash: 02qwEv7GDGKTAQsJKIO+MBvgNnjaQx6u58d0cZrljtQ=) 4: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: y1gHStwIQrgIsbM1waQcjtK+en8fWnGqrxcQNceAaLs=) 5: DvDmZHxr7NLVC2ShFbjqDWMVPSU.roa (hash: HGxEJ7LQfFiHhcT+DYcnCzFrTwYKp05D1m1E5DMnD6I=) 6: OUHOzLFqtWz2bbGyeYwSXrj00Uk.roa (hash: nlfqukJpNrtb/c5u87BSEisv1zmW8J3zLBOfs6U7Nrw=) 7: RZj6Q6dbNwuwz_b4LiYbYjt7s0Q.roa (hash: rZ5431yDGBLhE9MGa187xIN7yECgb8/EV3ZIyUsR8Xg=) 8: WSPBUC21vET1uaZZlnbFvCFRchE.roa (hash: 3N3I5TdJSWNVy1VYKwR1h9RK2xmp3aVZDnmQUt1fbBg=) 9: WzC3ng1LgvNoGeAWK-E4mAth79c.roa (hash: in7OVP806sec7BG3P2bRg0+XxW/GuztBYg8LKPCWtFc=) 10: b-KOOCgewsVhwidcvQfpRRWqU7I.roa (hash: X+AfcL5bK9mDooKI7JczwqJxSPkb+6057fPwNRB9rIo=) 11: sp7cckHOAVZ1urLLSuO5BmgV-dQ.roa (hash: YprGBhX6AZyr1/u6kF21WaMH+OCGQvlx5wwg1Z8Rfhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Oct 2026 05:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f5:d7:1f:71:c1:3e:98:55:0c:50:73:de:2c:9f:8f:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Validity Not Before: Oct 1 05:01:51 2026 GMT Not After : Oct 2 05:01:51 2026 GMT Subject: CN=5d4059d8ceed64a5e779d15be71be1d780a89c2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:87:ed:3f:80:fd:4c:84:df:aa:9e:d9:61:f2: 4a:84:b4:90:85:1c:86:cd:70:ca:36:fd:5a:49:98: df:95:59:5d:98:b1:2c:04:2a:c6:28:cd:a7:ca:65: b8:20:81:01:05:33:ae:da:02:6f:33:42:0f:9b:67: 0b:ea:65:50:27:50:b2:05:12:42:99:70:98:1a:aa: 37:7d:67:0e:ae:d2:a6:6d:82:f8:6e:fb:e9:5a:62: 88:f3:08:cf:c0:b5:fb:75:06:f9:ee:e0:ad:13:6e: f0:40:27:0a:60:85:da:5c:74:a9:37:fd:aa:bb:5b: 86:4f:70:f7:72:34:3b:fa:ab:1f:9c:2e:a5:9a:a0: 00:d8:65:7f:a5:3e:5a:0c:fc:ce:52:e6:06:79:de: af:88:01:a9:41:53:ca:c4:73:d5:06:38:74:fa:68: ab:6d:48:fa:33:e0:4b:9d:d3:03:1f:fa:a7:65:d8: 74:b6:f0:52:33:df:d1:8d:10:8a:54:56:dc:ea:98: de:07:88:32:54:63:4e:84:dc:0a:85:eb:78:d0:77: 92:82:c6:fd:a3:1e:72:2a:28:a5:a5:09:02:9f:cc: 01:d6:5e:7c:84:a8:9b:16:ce:f5:e5:c5:e1:f4:72: 38:62:39:7b:31:3d:02:9b:cc:1a:9f:d5:e8:eb:97: 97:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:40:59:D8:CE:ED:64:A5:E7:79:D1:5B:E7:1B:E1:D7:80:A8:9C:2E X509v3 Authority Key Identifier: keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:02:f9:02:b3:b4:20:10:f3:c0:38:e5:e1:42:e6:11:be:d8: 4d:24:09:fb:0b:a1:e0:79:0c:5c:76:c3:bb:82:bb:d5:b6:1a: 4c:fb:6a:05:52:41:46:ab:ce:cc:2d:60:12:22:9c:50:ab:05: 8b:7e:3f:fb:92:09:9a:39:eb:28:a9:c9:a3:c0:b5:5d:89:d6: e7:93:88:4e:be:a0:b2:9e:64:a0:65:3c:d9:7e:69:34:82:36: 22:ff:41:ba:e7:3c:08:d5:2a:c9:4a:07:87:2e:b9:09:fc:bf: 3f:74:44:68:ff:e8:24:55:0d:c0:78:da:bc:e8:58:41:78:4b: 7c:72:24:33:05:89:32:3d:e8:f0:de:78:e2:12:34:f5:1f:3a: 2c:0a:91:54:de:0a:a4:30:fa:d7:9f:a2:e0:87:b9:29:1f:c9: ee:0c:32:41:9c:2f:9a:c7:b1:15:af:de:d0:39:63:0e:37:39: 39:29:d5:e3:27:87:9b:6c:8b:8b:76:93:d6:db:0a:e2:32:aa: 46:1c:b0:a2:0c:6d:a9:c2:67:df:0b:22:3f:4a:91:92:5d:62: e4:cf:8e:83:60:e6:0d:fa:de:6c:5b:a5:29:87:1a:dc:a1:fb: 7f:84:ef:68:b1:22:12:15:6c:cf:8d:05:64:12:eb:b8:6b:fb: f2:f6:7e:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaD11x9xwT6YVQxQc94sn4/3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1 ODg4MjcwHhcNMjYxMDAxMDUwMTUxWhcNMjYxMDAyMDUwMTUxWjAzMTEwLwYDVQQD Eyg1ZDQwNTlkOGNlZWQ2NGE1ZTc3OWQxNWJlNzFiZTFkNzgwYTg5YzJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4ftP4D9TITfqp7ZYfJKhLSQhRyG zXDKNv1aSZjflVldmLEsBCrGKM2nymW4IIEBBTOu2gJvM0IPm2cL6mVQJ1CyBRJC mXCYGqo3fWcOrtKmbYL4bvvpWmKI8wjPwLX7dQb57uCtE27wQCcKYIXaXHSpN/2q u1uGT3D3cjQ7+qsfnC6lmqAA2GV/pT5aDPzOUuYGed6viAGpQVPKxHPVBjh0+mir bUj6M+BLndMDH/qnZdh0tvBSM9/RjRCKVFbc6pjeB4gyVGNOhNwKhet40HeSgsb9 ox5yKiilpQkCn8wB1l58hKibFs715cXh9HI4Yjl7MT0Cm8wan9Xo65eXwwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF1AWdjO7WSl53nRW+cb4deAqJwuMB8GA1UdIwQY MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct OGNmNDFjYWZkY2UyLzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcgL5ArO0 IBDzwDjl4ULmEb7YTSQJ+wuh4HkMXHbDu4K71bYaTPtqBVJBRqvOzC1gEiKcUKsF i34/+5IJmjnrKKnJo8C1XYnW55OITr6gsp5koGU82X5pNII2Iv9Buuc8CNUqyUoH hy65Cfy/P3REaP/oJFUNwHjavOhYQXhLfHIkMwWJMj3o8N544hI09R86LAqRVN4K pDD615+i4Ie5KR/J7gwyQZwvmsexFa/e0DljDjc5OSnV4yeHm2yLi3aT1tsK4jKq RhywogxtqcJn3wsiP0qRkl1i5M+Og2DmDfrebFulKYca3KH7f4TvaLEiEhVsz40F ZBLruGv78vZ+Xw== -----END CERTIFICATE-----Generated at Thu Oct 1 13:25:32 2026 by rpki-client