$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json) Hash identifier: yN+IFhYMusBxyb0/F8t/kqJvS0NeSrLKU5Rc+qR73DE= Subject key identifier: 55:BD:6C:09:BC:CF:58:D0:37:EB:65:3C:82:46:1A:C6:97:4C:95:B6 Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 01A0E6D2C28014C1493AB5A615F813D6A8D3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft Manifest number: 1297 Signing time: Mon 28 Sep 2026 07:02:47 +0000 Manifest this update: Mon 28 Sep 2026 07:02:47 +0000 Manifest next update: Tue 29 Sep 2026 07:02:47 +0000 Files and hashes: 1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=) 2: 9UWbCEXqjRhjC5AwqWBCIFK_AT4.asa (hash: UFf7/mopkwyI/qLLTDxzlcrPF+4ju/94DUIEHv1Zj3E=) 3: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: ms4NXUWTP41b2T2uaHfzYjisq/5P3cButqNUYof6h7k=) 4: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=) 5: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=) 6: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=) 7: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=) 8: TpSktW1NAsZq923aUoE53pMX0hw.roa (hash: ljs6mrp9Kdtic0OnoNEza6FCINLSHSxZypr5fLwF++Q=) 9: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=) 10: egQEbfnW1MXHUAUDIXi9mc2fB-c.roa (hash: 1BkfZIfCGpyU9bVzsVuHecgL4efqavb1+AuIHnc1Rt8=) 11: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=) 12: w1zIh0CnKegnO0T7ra_SO9YilV8.roa (hash: KzpnZqdHE55q0MkGU3Ic0fB1a+0zqfLi5dqRW/lkoPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 07:02:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e6:d2:c2:80:14:c1:49:3a:b5:a6:15:f8:13:d6:a8:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Sep 28 07:02:47 2026 GMT Not After : Sep 29 07:02:47 2026 GMT Subject: CN=55bd6c09bccf58d037eb653c82461ac6974c95b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:55:37:8b:e7:8e:a3:e0:aa:ea:f5:b6:10:73: 53:47:57:5b:77:34:3c:d0:98:ba:8e:1e:23:b9:33: 65:e9:6c:81:e8:9c:ec:2b:34:c5:a0:b7:89:fa:f6: 60:e6:04:d9:e3:a2:49:6a:ac:97:41:54:77:a3:c8: 17:e8:d8:ea:de:17:a4:d7:d0:e2:a1:f7:9a:e4:4f: d9:5d:f8:de:50:7b:e6:b8:ef:7d:f1:11:af:de:e5: f9:ac:5a:e2:d3:30:1d:c4:0e:10:e8:1b:11:07:d1: e0:f3:bf:ee:03:87:d0:75:29:1b:96:c6:9f:16:14: 0f:3c:f9:1e:c0:81:48:fc:33:48:82:1e:30:da:c9: 9e:fe:9b:8d:9d:28:e4:06:2f:7b:2f:b7:c2:cc:d6: 41:8e:e3:74:58:b4:7b:3f:5f:cd:a2:54:1a:8d:1a: bf:40:3a:77:4f:a4:cb:85:d3:e3:e7:31:d5:d0:72: 52:7d:89:17:28:7f:1f:e4:22:9c:48:5b:d7:c0:66: 45:d7:a8:75:37:0b:c4:27:1b:77:0a:91:97:57:e9: 2b:26:f5:94:4f:e1:fb:eb:7f:3e:7f:da:59:6e:11: 0d:d9:55:bf:38:c7:16:64:6c:13:41:3e:7d:53:62: 95:b8:54:a5:29:1b:30:18:f7:b6:22:6d:23:f0:22: 99:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:BD:6C:09:BC:CF:58:D0:37:EB:65:3C:82:46:1A:C6:97:4C:95:B6 X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:f3:eb:93:22:44:f5:d7:61:8f:71:81:ef:d8:16:b5:29:e0: 17:ed:6d:02:92:8b:23:bb:63:51:38:41:b7:b8:d9:4b:01:6f: a0:e4:df:ce:b4:3d:24:c0:43:48:1b:e2:c2:1f:83:89:15:8f: e2:70:62:f3:5c:90:8c:cc:47:38:06:6a:fc:d0:e2:f4:00:4f: c6:86:52:dc:df:55:56:41:6b:c7:44:14:5e:32:9f:44:f3:7e: 93:c8:70:ea:29:c6:42:f5:32:67:17:75:2e:5d:cd:73:27:08: 0c:cd:50:ec:98:64:fe:06:0b:c3:cb:2f:d0:db:b8:16:02:5a: 07:4f:63:15:45:3e:9b:c8:04:e8:6f:ae:bb:2c:7c:f2:63:e1: 5e:35:25:11:0f:08:4a:50:84:fa:b8:79:78:c5:1c:e5:b4:ab: 55:e3:f2:65:46:33:ba:11:13:26:d3:1a:2c:63:f5:d6:5c:d3: a0:8f:2a:76:c8:0f:f6:ea:ac:b5:22:24:6c:42:57:d4:42:02: 80:1c:af:ab:f2:34:95:73:84:60:c1:de:a2:1e:86:fb:81:3c: af:fe:53:64:6b:5d:87:b2:72:a0:c2:c1:b1:00:c4:5f:3b:28: 19:5c:43:60:59:6d:7d:66:9f:53:0a:ac:4f:84:09:bb:15:2d: 5f:ec:99:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDm0sKAFMFJOrWmFfgT1qjTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwOTI4MDcwMjQ3WhcNMjYwOTI5MDcwMjQ3WjAzMTEwLwYDVQQD Eyg1NWJkNmMwOWJjY2Y1OGQwMzdlYjY1M2M4MjQ2MWFjNjk3NGM5NWI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlU3i+eOo+Cq6vW2EHNTR1dbdzQ8 0Ji6jh4juTNl6WyB6JzsKzTFoLeJ+vZg5gTZ46JJaqyXQVR3o8gX6Njq3hek19Di ofea5E/ZXfjeUHvmuO998RGv3uX5rFri0zAdxA4Q6BsRB9Hg87/uA4fQdSkblsaf FhQPPPkewIFI/DNIgh4w2sme/puNnSjkBi97L7fCzNZBjuN0WLR7P1/NolQajRq/ QDp3T6TLhdPj5zHV0HJSfYkXKH8f5CKcSFvXwGZF16h1NwvEJxt3CpGXV+krJvWU T+H7638+f9pZbhEN2VW/OMcWZGwTQT59U2KVuFSlKRswGPe2Im0j8CKZ2wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFW9bAm8z1jQN+tlPIJGGsaXTJW2MB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyvPrkyJE 9ddhj3GB79gWtSngF+1tApKLI7tjUThBt7jZSwFvoOTfzrQ9JMBDSBviwh+DiRWP 4nBi81yQjMxHOAZq/NDi9ABPxoZS3N9VVkFrx0QUXjKfRPN+k8hw6inGQvUyZxd1 Ll3NcycIDM1Q7Jhk/gYLw8sv0Nu4FgJaB09jFUU+m8gE6G+uuyx88mPhXjUlEQ8I SlCE+rh5eMUc5bSrVePyZUYzuhETJtMaLGP11lzToI8qdsgP9uqstSIkbEJX1EIC gByvq/I0lXOEYMHeoh6G+4E8r/5TZGtdh7JyoMLBsQDEXzsoGVxDYFltfWafUwqs T4QJuxUtX+yZWA== -----END CERTIFICATE-----Generated at Mon Sep 28 11:13:45 2026 by rpki-client