$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft File: 9dmpKCydJUfFZmNPO6zMvPJYiCc.mft (raw, json) Hash identifier: HPJIgAEn5FUDiqfo/Qw8Vc6Qf3Y5iC+GwLd8Ca06Dvg= Subject key identifier: 95:89:A8:6D:37:5B:8B:79:B9:5C:C4:5D:F0:38:60:FB:E2:78:C9:9C Authority key identifier: F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 Certificate issuer: /CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Certificate serial: 01A0F1FA7A6D30D5BC75A6365DAC4B8F063D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft Manifest number: 10A1 Signing time: Wed 30 Sep 2026 11:01:59 +0000 Manifest this update: Wed 30 Sep 2026 11:01:59 +0000 Manifest next update: Thu 01 Oct 2026 11:01:59 +0000 Files and hashes: 1: 1-TEmL5jbsK3PrKD8j52WhCZ0qeI.roa (hash: VGXlZbSa6lTTDzWoioV4bwS7txIXqiiihar6C8uT+sc=) 2: 7C0V1hBB2j4Z0mWBIUgnztA_FKo.roa (hash: NHdUGwrw8MVcwcj4xNyKJAEIGlAjm+SSRTtlFS7q5aU=) 3: 7HQY9fTNwYAKnHQdVkUdWkP7cMo.roa (hash: 02qwEv7GDGKTAQsJKIO+MBvgNnjaQx6u58d0cZrljtQ=) 4: 9dmpKCydJUfFZmNPO6zMvPJYiCc.crl (hash: MMD34rlh5VDCUZ4pDNwp+twliy0rTnYVLLrs5rhnnpU=) 5: DvDmZHxr7NLVC2ShFbjqDWMVPSU.roa (hash: HGxEJ7LQfFiHhcT+DYcnCzFrTwYKp05D1m1E5DMnD6I=) 6: OUHOzLFqtWz2bbGyeYwSXrj00Uk.roa (hash: nlfqukJpNrtb/c5u87BSEisv1zmW8J3zLBOfs6U7Nrw=) 7: RZj6Q6dbNwuwz_b4LiYbYjt7s0Q.roa (hash: rZ5431yDGBLhE9MGa187xIN7yECgb8/EV3ZIyUsR8Xg=) 8: WSPBUC21vET1uaZZlnbFvCFRchE.roa (hash: 3N3I5TdJSWNVy1VYKwR1h9RK2xmp3aVZDnmQUt1fbBg=) 9: WzC3ng1LgvNoGeAWK-E4mAth79c.roa (hash: in7OVP806sec7BG3P2bRg0+XxW/GuztBYg8LKPCWtFc=) 10: b-KOOCgewsVhwidcvQfpRRWqU7I.roa (hash: X+AfcL5bK9mDooKI7JczwqJxSPkb+6057fPwNRB9rIo=) 11: sp7cckHOAVZ1urLLSuO5BmgV-dQ.roa (hash: YprGBhX6AZyr1/u6kF21WaMH+OCGQvlx5wwg1Z8Rfhk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f1:fa:7a:6d:30:d5:bc:75:a6:36:5d:ac:4b:8f:06:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f5d9a9282c9d2547c566634f3bacccbcf2588827 Validity Not Before: Sep 30 11:01:59 2026 GMT Not After : Oct 1 11:01:59 2026 GMT Subject: CN=9589a86d375b8b79b95cc45df03860fbe278c99c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:01:55:13:cf:c9:2c:1b:3d:0b:a4:ac:88:ea: d5:c4:38:a7:06:57:cf:68:85:b8:9d:5e:ff:d5:de: a8:30:70:ab:d5:a7:55:8a:4f:5e:b3:aa:9b:aa:c9: 05:80:71:a0:7f:9e:6d:06:c1:a2:a1:a2:d3:9e:50: 0e:b1:f9:2d:62:eb:b1:c8:3f:87:bb:1c:2b:04:39: a3:c9:cc:69:6f:a6:4b:92:f3:ff:83:2d:1e:4f:39: 68:ce:6a:df:dd:da:54:0b:5e:45:50:8c:1e:67:32: 8c:5f:dd:5e:ac:83:02:ea:14:38:d3:34:7e:f4:c1: d3:4c:65:02:25:fd:2c:69:f5:79:09:de:fe:f8:52: bb:32:04:fc:d8:9a:4c:50:06:c6:d0:9e:2d:e2:73: b5:79:1b:7b:37:bf:e1:b4:4c:a9:94:42:2b:ef:17: ad:a4:db:0b:aa:b7:1f:cc:88:6b:63:78:b3:43:1c: 21:2f:bf:7e:d2:8f:58:39:ea:ba:42:05:f4:b5:26: ce:57:46:99:9d:99:55:69:7d:43:77:25:e8:3f:23: d0:51:05:66:87:ee:60:40:ee:77:f7:82:7d:9b:ee: 59:69:91:e6:48:df:c3:8e:8a:c7:8e:e7:4b:1d:33: d3:4e:5e:76:74:fa:92:df:f9:ea:8e:75:7b:14:7d: 3c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:89:A8:6D:37:5B:8B:79:B9:5C:C4:5D:F0:38:60:FB:E2:78:C9:9C X509v3 Authority Key Identifier: keyid:F5:D9:A9:28:2C:9D:25:47:C5:66:63:4F:3B:AC:CC:BC:F2:58:88:27 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9dmpKCydJUfFZmNPO6zMvPJYiCc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/33/0d0755-1897-47ef-8df7-8cf41cafdce2/1/9dmpKCydJUfFZmNPO6zMvPJYiCc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:6a:a7:ee:37:0d:ef:6f:cf:3a:2d:7c:d8:6b:15:c7:3c:7c: 65:6c:c4:a1:9a:1e:02:30:69:09:a3:b5:06:9d:eb:9b:1e:4b: 29:7f:57:53:5f:86:d7:74:70:0d:f0:5b:0d:48:c8:a7:9b:42: ad:84:9f:3b:2d:5c:87:df:23:f4:f2:97:f4:70:ac:d9:3d:11: 87:b9:4d:ae:37:e0:33:cf:68:20:7a:07:6f:e4:07:d1:bc:ae: 2b:9c:f7:63:02:c0:23:17:ad:7a:a0:59:9d:d5:14:59:f5:ef: 4d:85:b5:2a:63:b5:ef:f5:ba:39:15:68:dd:85:2c:f4:be:23: a6:75:22:3c:5d:8a:5d:87:d1:79:10:91:62:09:b6:3d:d2:a3: d3:45:fb:2d:99:a0:d9:81:4b:91:40:46:2b:bd:ca:fc:14:4b: 7d:07:fa:2f:90:05:36:e5:c1:5a:a8:e9:3f:59:f0:c8:1b:cf: a5:b3:8a:02:73:06:d4:c8:24:9e:d5:bd:fe:da:7f:e6:15:00: 6f:d4:91:79:a3:62:5f:1f:f8:8d:6d:55:1c:14:4f:cf:a6:80: fc:d9:c1:b2:81:13:36:ff:8b:ad:94:1c:14:1c:00:4a:53:d2: 6d:82:9e:c5:19:c1:d2:d1:e5:99:ee:5c:86:91:ab:6e:fb:e7: 26:48:0c:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDx+nptMNW8daY2XaxLjwY9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1ZDlhOTI4MmM5ZDI1NDdjNTY2NjM0ZjNiYWNjY2JjZjI1 ODg4MjcwHhcNMjYwOTMwMTEwMTU5WhcNMjYxMDAxMTEwMTU5WjAzMTEwLwYDVQQD Eyg5NTg5YTg2ZDM3NWI4Yjc5Yjk1Y2M0NWRmMDM4NjBmYmUyNzhjOTljMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQFVE8/JLBs9C6SsiOrVxDinBlfP aIW4nV7/1d6oMHCr1adVik9es6qbqskFgHGgf55tBsGioaLTnlAOsfktYuuxyD+H uxwrBDmjycxpb6ZLkvP/gy0eTzlozmrf3dpUC15FUIweZzKMX91erIMC6hQ40zR+ 9MHTTGUCJf0safV5Cd7++FK7MgT82JpMUAbG0J4t4nO1eRt7N7/htEyplEIr7xet pNsLqrcfzIhrY3izQxwhL79+0o9YOeq6QgX0tSbOV0aZnZlVaX1DdyXoPyPQUQVm h+5gQO5394J9m+5ZaZHmSN/DjorHjudLHTPTTl52dPqS3/nqjnV7FH08vwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJWJqG03W4t5uVzEXfA4YPvieMmcMB8GA1UdIwQY MBaAFPXZqSgsnSVHxWZjTzuszLzyWIgnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjct OGNmNDFjYWZkY2UyLzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMy8wZDA3NTUtMTg5Ny00N2VmLThkZjctOGNmNDFjYWZkY2Uy LzEvOWRtcEtDeWRKVWZGWm1OUE82ek12UEpZaUNjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGqn7jcN 72/POi182GsVxzx8ZWzEoZoeAjBpCaO1Bp3rmx5LKX9XU1+G13RwDfBbDUjIp5tC rYSfOy1ch98j9PKX9HCs2T0Rh7lNrjfgM89oIHoHb+QH0byuK5z3YwLAIxeteqBZ ndUUWfXvTYW1KmO17/W6ORVo3YUs9L4jpnUiPF2KXYfReRCRYgm2PdKj00X7LZmg 2YFLkUBGK73K/BRLfQf6L5AFNuXBWqjpP1nwyBvPpbOKAnMG1MgkntW9/tp/5hUA b9SReaNiXx/4jW1VHBRPz6aA/NnBsoETNv+LrZQcFBwASlPSbYKexRnB0tHlme5c hpGrbvvnJkgMmg== -----END CERTIFICATE-----Generated at Wed Sep 30 21:58:00 2026 by rpki-client