$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft File: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft (raw, json) Hash identifier: W2S1dB4XdgWrcnl965G+dMryFNf5I9i5GdQaMbhcpLw= Subject key identifier: 42:53:70:59:F7:64:05:E2:CA:6D:76:24:95:7F:5B:24:68:93:BA:18 Authority key identifier: F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F Certificate issuer: /CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Certificate serial: 019FEA0BFD0299CA15FC82CC16F49420F81E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft Manifest number: 1214 Signing time: Mon 10 Aug 2026 05:01:21 +0000 Manifest this update: Mon 10 Aug 2026 05:01:21 +0000 Manifest next update: Tue 11 Aug 2026 05:01:21 +0000 Files and hashes: 1: 6JluXjhm_3nHCCaPoS3TfBvKy-U.roa (hash: o1cOjM+O0qiescaG0asYe3SHOLXy9bPb72S0RHPk1N0=) 2: 9UWbCEXqjRhjC5AwqWBCIFK_AT4.asa (hash: UFf7/mopkwyI/qLLTDxzlcrPF+4ju/94DUIEHv1Zj3E=) 3: 9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl (hash: YeSaGQ6ez3f0x4cZ8b9UjABHjDGC+Kj55WWFgnV/D7g=) 4: EXPtgF3pZHjNUJl2LJCVZFox4fI.roa (hash: eBmFuREOuZdP3B6dGKEKnHjrjSuhSyhM471vSjq0eBQ=) 5: EtFx9f4oiCywxFykUSR2QjU7eFQ.roa (hash: b2AfdRFwbg0njOLl9hGqSCvFbx4kUQActP2xft37G50=) 6: GDHsmxtHVdYa1bZaIWOH1_OImP0.roa (hash: 7pk8LdfcytaksybidRQnrYPauwLqusCRjPdg0+T84EQ=) 7: M_AsK8xtgHW--enKh1Fv-0yD_GQ.roa (hash: kvJW1SXagKB0pbzliKf7XR3LeE5GTsMSJYvmlREXthM=) 8: TpSktW1NAsZq923aUoE53pMX0hw.roa (hash: ljs6mrp9Kdtic0OnoNEza6FCINLSHSxZypr5fLwF++Q=) 9: _DBibvy1y9JoyoGE-bKCjSoDWyc.roa (hash: tHTDVPFwK8Ocp3huDTizupo9HBbejkSKeT8H3qb/iR8=) 10: egQEbfnW1MXHUAUDIXi9mc2fB-c.roa (hash: 1BkfZIfCGpyU9bVzsVuHecgL4efqavb1+AuIHnc1Rt8=) 11: jFHWQVied9oZQfm4vhIvSC4eiV0.roa (hash: dr0KfgCKcAC1kV4SsWObX5dDQnEh0pKNGg0bXRatP4I=) 12: u21fpxmmOR9mlnHoRxP6iE7HrmQ.roa (hash: UB+VK364X+iu32GdfVjBn8r1mi4BDsfoTepchYMyQUY=) 13: w1zIh0CnKegnO0T7ra_SO9YilV8.roa (hash: KzpnZqdHE55q0MkGU3Ic0fB1a+0zqfLi5dqRW/lkoPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 11 Aug 2026 05:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:ea:0b:fd:02:99:ca:15:fc:82:cc:16:f4:94:20:f8:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f6c3e027d2d1c2d36d7c954867226c83b65eb56f Validity Not Before: Aug 10 05:01:21 2026 GMT Not After : Aug 11 05:01:21 2026 GMT Subject: CN=42537059f76405e2ca6d7624957f5b246893ba18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:1b:42:1b:1c:12:76:15:d5:e1:c3:30:76:f9: d1:a1:66:ea:b6:c4:0f:85:8c:41:f8:7c:94:43:0e: a1:00:3c:25:d3:03:57:48:ec:e6:6d:27:5b:e8:4d: 67:78:bb:07:e7:bb:57:19:64:57:83:c0:de:67:57: b3:f5:42:0d:02:96:df:76:4a:c8:b2:d4:84:eb:be: ef:a4:63:3e:48:72:d9:e1:c8:3c:39:51:3a:f7:e2: be:5c:02:4e:b2:80:b8:52:09:21:1c:89:64:22:1e: 79:77:19:a4:bf:3e:ec:a0:50:54:47:4b:e7:58:b2: e3:ff:13:8f:00:9e:ac:ed:72:9e:8c:71:07:ae:0f: 8e:2d:3d:d3:a5:ef:e5:e0:43:8b:ef:90:0e:72:43: 49:36:c7:9a:a6:7b:09:36:b4:0c:08:a4:ea:72:f2: 52:c1:72:8d:a7:dc:70:bf:9e:16:d3:46:97:eb:91: b8:37:1d:97:8d:86:05:f8:5d:48:6a:a3:d7:8b:24: 44:01:d4:69:3c:86:8f:54:4b:64:81:2c:28:27:8e: 79:d4:58:d0:f2:59:27:5f:f4:48:13:28:9c:69:db: 58:5c:05:f7:50:e1:b5:2e:8f:e0:5b:60:44:82:c8: 84:10:d7:61:cc:19:e6:9e:7f:23:04:61:11:bb:15: a6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:53:70:59:F7:64:05:E2:CA:6D:76:24:95:7F:5B:24:68:93:BA:18 X509v3 Authority Key Identifier: keyid:F6:C3:E0:27:D2:D1:C2:D3:6D:7C:95:48:67:22:6C:83:B6:5E:B5:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/2b2878-5b79-40f7-b4b5-356c4d7bb452/1/9sPgJ9LRwtNtfJVIZyJsg7ZetW8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:65:e2:48:1b:4e:bc:68:f4:7a:d0:cc:87:74:fc:9c:76:d2: 69:c6:73:08:05:a9:d6:68:4c:c2:8d:dc:82:4a:14:d5:88:c5: 21:1a:08:61:34:dd:57:3b:24:2b:06:0a:44:e6:9c:51:e8:ef: 69:df:6e:ac:5a:81:c6:f9:d7:01:5b:cb:07:38:af:21:e6:b0: fe:1b:fb:56:88:90:00:1d:45:58:e5:81:cf:3b:10:77:f9:37: 07:de:6b:f9:47:a1:6e:42:57:33:9a:f2:c8:c6:ed:88:c4:85: cd:23:a8:16:96:c4:d2:50:39:8f:4f:ed:c9:36:51:47:05:ac: 85:17:50:06:4e:9d:a7:79:08:2e:9c:17:99:31:4b:60:7b:8d: 11:19:19:1c:ed:a9:ae:e0:dd:e8:bb:20:95:f4:81:31:bc:de: bc:e9:c3:51:e2:ec:54:69:f8:28:31:db:13:5a:e2:c6:23:d0: 3e:a3:32:69:e4:f7:77:a4:4c:27:d1:3c:3d:84:4c:e9:e4:84: d9:de:7a:e8:c6:aa:3d:ec:04:b5:f5:39:d0:25:d9:75:92:41: 82:79:73:f5:d0:ac:58:37:8e:f5:00:fe:f7:c0:45:b4:c4:0a: b5:cf:86:63:c3:ad:54:a9:f5:03:11:87:74:3e:b3:5c:17:83: 04:de:38:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/qC/0CmcoV/ILMFvSUIPgeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY2YzNlMDI3ZDJkMWMyZDM2ZDdjOTU0ODY3MjI2YzgzYjY1 ZWI1NmYwHhcNMjYwODEwMDUwMTIxWhcNMjYwODExMDUwMTIxWjAzMTEwLwYDVQQD Eyg0MjUzNzA1OWY3NjQwNWUyY2E2ZDc2MjQ5NTdmNWIyNDY4OTNiYTE4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhtCGxwSdhXV4cMwdvnRoWbqtsQP hYxB+HyUQw6hADwl0wNXSOzmbSdb6E1neLsH57tXGWRXg8DeZ1ez9UINApbfdkrI stSE677vpGM+SHLZ4cg8OVE69+K+XAJOsoC4UgkhHIlkIh55dxmkvz7soFBUR0vn WLLj/xOPAJ6s7XKejHEHrg+OLT3Tpe/l4EOL75AOckNJNseapnsJNrQMCKTqcvJS wXKNp9xwv54W00aX65G4Nx2XjYYF+F1IaqPXiyREAdRpPIaPVEtkgSwoJ4551FjQ 8lknX/RIEyicadtYXAX3UOG1Lo/gW2BEgsiEENdhzBnmnn8jBGERuxWmYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJTcFn3ZAXiym12JJV/WyRok7oYMB8GA1UdIwQY MBaAFPbD4CfS0cLTbXyVSGcibIO2XrVvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUt MzU2YzRkN2JiNDUyLzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8yYjI4NzgtNWI3OS00MGY3LWI0YjUtMzU2YzRkN2JiNDUy LzEvOXNQZ0o5TFJ3dE50ZkpWSVp5SnNnN1pldFc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd2XiSBtO vGj0etDMh3T8nHbSacZzCAWp1mhMwo3cgkoU1YjFIRoIYTTdVzskKwYKROacUejv ad9urFqBxvnXAVvLBzivIeaw/hv7VoiQAB1FWOWBzzsQd/k3B95r+UehbkJXM5ry yMbtiMSFzSOoFpbE0lA5j0/tyTZRRwWshRdQBk6dp3kILpwXmTFLYHuNERkZHO2p ruDd6LsglfSBMbzevOnDUeLsVGn4KDHbE1rixiPQPqMyaeT3d6RMJ9E8PYRM6eSE 2d566MaqPewEtfU50CXZdZJBgnlz9dCsWDeO9QD+98BFtMQKtc+GY8OtVKn1AxGH dD6zXBeDBN44mA== -----END CERTIFICATE-----Generated at Mon Aug 10 13:43:27 2026 by rpki-client