$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: iG4uTXxaFnP45Z6ltwsdICwqIT1E/cmukyQxOvwYCPs= Subject key identifier: F4:AE:27:01:06:38:1B:36:FA:26:87:6A:A8:36:B7:FE:92:F5:DA:A6 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 01A08A1F42B3E42B280AF1B79EACEFF6E679 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 176D Signing time: Thu 10 Sep 2026 07:01:39 +0000 Manifest this update: Thu 10 Sep 2026 07:01:39 +0000 Manifest next update: Fri 11 Sep 2026 07:01:39 +0000 Files and hashes: 1: 1vjKgLyMbmbnD9BN-ENq6mCvpdQ.roa (hash: j6oOw0mW9VGeX6HTh7Pt8Y8xHM75I2sfi2YWe7POauE=) 2: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=) 3: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=) 4: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=) 5: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=) 6: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=) 7: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=) 8: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=) 9: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: WgfZ3Y/W+yIYLfb9PiZHNA0xkxNwmDd+pZr7K7PLuds=) 10: kFKOxKY8VUTuxTf-yKfjHz8Wd2Y.roa (hash: riEmPQV4v2zfq30QZ7AZjXHbnN49xJeD9nNq0fiSPhg=) 11: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=) 12: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=) 13: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=) 14: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=) 15: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=) 16: y8jNpNhJhN8HEtdIA-w7AJf_i5Q.roa (hash: 8sIOOrWgw4Q4JWzlfJJ/cqOkQmwBNx1SNCCheRpOVMM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 07:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:1f:42:b3:e4:2b:28:0a:f1:b7:9e:ac:ef:f6:e6:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Sep 10 07:01:39 2026 GMT Not After : Sep 11 07:01:39 2026 GMT Subject: CN=f4ae270106381b36fa26876aa836b7fe92f5daa6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b0:6f:fc:38:39:a8:92:80:6b:5a:f2:ce:f0: 90:0f:eb:e7:b6:58:a4:de:c6:d4:c8:6a:76:73:da: a8:6f:c7:99:09:7c:52:50:39:c3:74:83:b1:b7:ad: ff:91:8a:ec:a5:48:ad:26:15:ca:53:03:cf:dc:e2: 38:b5:4f:86:aa:f3:9e:b5:0c:56:9f:b4:d2:de:d7: b9:20:2e:51:41:a6:0b:38:ee:8e:ee:aa:9a:26:ed: 7d:d9:2b:9f:c3:27:b3:28:83:43:0b:99:aa:08:30: 78:8a:54:ed:68:3e:f4:ef:19:05:26:0b:98:34:66: 8f:6e:8d:64:0a:f9:38:4d:61:df:06:83:74:ac:8e: 52:8f:9c:04:1e:56:fd:5e:bc:b4:f0:ce:fd:5c:46: 7a:b3:98:99:99:2a:a9:e7:ab:00:09:52:a2:ec:d4: 64:ff:54:f6:bb:59:60:fd:31:48:3e:12:d8:71:81: b8:ec:6c:44:cf:46:c8:ac:90:4b:bd:a8:d1:e5:a7: 8f:62:db:ae:dd:ea:9e:b4:4d:0c:f7:32:c0:3c:3a: 4c:b3:b7:d2:9a:ac:ff:e1:0c:6f:cc:21:69:12:35: 1a:e0:a2:10:e9:3a:6f:97:87:3b:b9:5d:29:27:99: b6:d6:15:d4:57:59:16:64:e3:3f:4d:ea:1f:64:fa: 91:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:AE:27:01:06:38:1B:36:FA:26:87:6A:A8:36:B7:FE:92:F5:DA:A6 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:3e:bc:d1:a8:c2:e7:87:47:4f:b4:a4:2a:3e:d2:8f:f7:52: 31:4d:b8:f8:07:e2:a1:4e:3e:22:41:0d:5f:0d:76:68:b7:17: 22:0a:fa:00:ea:50:20:e4:64:72:dc:e4:a2:b2:dc:72:31:91: 55:f8:08:2b:d1:21:8a:56:43:bb:64:97:92:a7:b5:d9:40:16: 91:36:0f:dc:ff:ae:e0:a6:8f:c3:e3:af:03:d7:06:14:7f:d2: 2d:06:97:08:02:90:91:0f:d2:fa:0e:05:38:89:33:74:06:31: 22:fd:f0:a5:20:18:78:f4:9b:03:b7:ea:27:2d:11:e5:00:b9: b1:a6:91:a1:60:b4:fb:ed:8e:ef:9e:01:f1:eb:8e:53:7d:ec: e4:9f:58:c9:fc:c4:28:c6:f0:6b:59:7a:1f:71:dc:66:61:f9: da:6c:57:fd:78:58:11:e4:fb:d7:8f:28:f1:7c:05:75:9f:bd: 06:ab:cb:b1:ac:2e:a1:b8:1b:ac:d9:c9:49:f2:ce:b5:23:ca: 95:54:65:9e:e7:e8:50:e2:7a:29:73:0e:18:a1:6b:c3:c1:59: 4a:2c:d4:5c:39:94:20:0a:89:9e:10:94:73:b1:82:78:ba:d3: 34:ec:a0:38:04:8e:d9:46:87:ee:8e:bc:6c:d1:fe:bd:35:6e: 4d:94:8c:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKH0Kz5CsoCvG3nqzv9uZ5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYwOTEwMDcwMTM5WhcNMjYwOTExMDcwMTM5WjAzMTEwLwYDVQQD EyhmNGFlMjcwMTA2MzgxYjM2ZmEyNjg3NmFhODM2YjdmZTkyZjVkYWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7Bv/Dg5qJKAa1ryzvCQD+vntlik 3sbUyGp2c9qob8eZCXxSUDnDdIOxt63/kYrspUitJhXKUwPP3OI4tU+GqvOetQxW n7TS3te5IC5RQaYLOO6O7qqaJu192SufwyezKINDC5mqCDB4ilTtaD707xkFJguY NGaPbo1kCvk4TWHfBoN0rI5Sj5wEHlb9Xry08M79XEZ6s5iZmSqp56sACVKi7NRk /1T2u1lg/TFIPhLYcYG47GxEz0bIrJBLvajR5aePYtuu3eqetE0M9zLAPDpMs7fS mqz/4QxvzCFpEjUa4KIQ6Tpvl4c7uV0pJ5m21hXUV1kWZOM/TeofZPqRNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPSuJwEGOBs2+iaHaqg2t/6S9dqmMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYj680ajC 54dHT7SkKj7Sj/dSMU24+AfioU4+IkENXw12aLcXIgr6AOpQIORkctzkorLccjGR VfgIK9EhilZDu2SXkqe12UAWkTYP3P+u4KaPw+OvA9cGFH/SLQaXCAKQkQ/S+g4F OIkzdAYxIv3wpSAYePSbA7fqJy0R5QC5saaRoWC0++2O754B8euOU33s5J9YyfzE KMbwa1l6H3HcZmH52mxX/XhYEeT7148o8XwFdZ+9BqvLsawuobgbrNnJSfLOtSPK lVRlnufoUOJ6KXMOGKFrw8FZSizUXDmUIAqJnhCUc7GCeLrTNOygOASO2UaH7o68 bNH+vTVuTZSMQg== -----END CERTIFICATE-----Generated at Thu Sep 10 12:28:32 2026 by rpki-client