$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json) Hash identifier: 8BSKS/F9eFybBOQZiwhCxQ4vC61f6uq3klZgwbWHnZ4= Subject key identifier: A3:8F:3E:79:6B:E8:91:CF:72:53:77:C0:8E:CA:45:19:4C:11:3E:97 Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 01A08A667D7ED88BD28FE6B444922161F24B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft Manifest number: 1A4F Signing time: Thu 10 Sep 2026 08:19:27 +0000 Manifest this update: Thu 10 Sep 2026 08:19:27 +0000 Manifest next update: Fri 11 Sep 2026 08:19:27 +0000 Files and hashes: 1: 1pNjMggR1gYBaftihFMx8w1rMhE.roa (hash: PULZtkL3C3zDaM8kMCwf21Yb0UEXTXjrHY8fh/1iHFc=) 2: BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa (hash: HBZO37pz26No65orIL67yFB8MvBngZCIHxDCzlTkjJc=) 3: C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa (hash: hyN/ftVawg2QF6kkYn1VlnFyi9JVIm7PN5l5sJloEAU=) 4: CiXCz7OWck5adEg6z95YRceHxmU.roa (hash: EasCRjc+VBWg+tlVvV7czSSDbpGCqgxTM2n5TXY0Ipc=) 5: Uqxv6RJDJys9akW4OeqacWtytrA.roa (hash: RSQidgq4mEPgxtmCFTLFsYGLsEkeze9gOf1NNbRSvgc=) 6: Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa (hash: DTSBhlEZWBIgKWeFJQfKtS9sYqKdFbuY0AXldEHxAZ4=) 7: eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa (hash: X2Eq1j8xxP8127RbRQQH82ZQaRO794u+GIRwZ/G/1eM=) 8: mK3OtIQBuc5E_Igw6gzRMSv2d3c.roa (hash: DMwAvTUmsGM0zrMHUTJobXjFU2+cLUzH4tvhaMwkiwc=) 9: nUVyELULlyE5fyAdMqySIUcD1Kg.roa (hash: 7IAppAs9x9RzUF7a3+rIPbPjrq3AFXyVcrF/g7C0QPU=) 10: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: XWQQ60BMzbJExeD+ngdGKJHCa0j4iIE99CA67T+fS5U=) 11: taXjOwEPFjUj9cMa7Gq70xb_Xw8.roa (hash: amO1PgtWxEDUcYd/ZIcEzv+wLt54N13hJwoq+TKEsJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:19:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:66:7d:7e:d8:8b:d2:8f:e6:b4:44:92:21:61:f2:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Sep 10 08:19:27 2026 GMT Not After : Sep 11 08:19:27 2026 GMT Subject: CN=a38f3e796be891cf725377c08eca45194c113e97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:5a:57:5b:84:b1:17:fc:91:9f:5e:a8:b5:aa: 9f:fc:25:6b:f8:ef:82:3e:c9:37:d7:cf:f6:63:45: 5a:c4:be:b0:cb:f3:ea:e9:06:c8:05:0f:a7:33:4a: 1f:19:94:f6:ad:d6:73:fa:29:34:c2:76:2d:11:bf: 6c:1a:d2:11:0d:e2:e3:58:41:bd:73:06:1e:f0:70: 2b:e8:7a:da:fe:7b:c7:c1:b0:7f:70:bb:9c:0a:b5: fd:8e:01:a7:4e:90:bb:b6:69:d6:68:bf:e1:c4:a8: f5:9b:c0:9b:03:af:5f:b5:0c:37:fd:57:48:7d:04: 72:2a:3c:93:30:ca:e2:8b:f1:20:b8:c3:13:bc:d7: 3e:a0:79:17:d8:0f:ac:2c:d2:ff:82:4a:07:f2:d4: e7:5a:9a:d9:ea:10:36:45:be:db:e9:a6:e9:5b:09: 83:92:97:35:0a:3b:de:13:24:88:fa:3c:89:a9:30: 79:89:4c:ef:28:36:e8:15:95:e1:a9:3c:69:c9:78: 43:3d:b7:92:f1:15:16:8c:e3:ff:dc:b7:86:f8:bb: f7:6b:f8:d8:fd:ab:78:ab:6d:b0:7b:81:b2:d6:a0: c0:b1:59:f8:8c:48:19:48:94:3c:51:7d:0c:ee:35: 23:f1:8b:37:31:a1:98:e9:63:fd:cd:97:52:da:d7: 80:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:8F:3E:79:6B:E8:91:CF:72:53:77:C0:8E:CA:45:19:4C:11:3E:97 X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:80:35:94:ef:82:d9:4e:63:e4:26:83:80:3f:40:6c:3d:f3: d4:ec:f7:74:7e:91:69:01:6d:ce:d2:30:ae:de:b5:b0:b9:f5: c0:4f:2e:4b:b2:bb:0b:2d:6a:5b:fa:e7:41:15:e6:8e:34:ba: a7:7d:7c:d9:58:bb:64:19:06:75:a2:2c:dc:c3:22:ae:fa:96: 62:5d:48:28:e3:a8:6e:76:0b:0a:5e:67:be:4d:0d:a6:66:c8: be:e2:67:0d:12:a2:bb:9c:72:0c:5e:a1:42:5f:b5:b8:25:4c: 1e:ff:cc:76:e4:c1:ec:f5:1f:1f:02:64:a6:9c:b3:9e:35:21: dc:54:00:c6:44:db:32:2b:6f:fc:6a:5d:7a:18:16:51:93:14: 29:84:a7:0b:7b:11:d2:a4:39:49:33:88:93:26:e2:ad:28:f4: 1e:b3:35:e0:9e:90:86:b8:28:4f:9c:45:1a:96:fe:99:aa:f9: 8c:a2:7a:a6:34:57:1f:71:66:4d:ac:0f:b4:19:06:f5:45:43: f4:38:b8:ad:64:a1:2e:85:d1:cc:67:e7:34:75:92:d3:b0:9c: f1:3c:53:38:af:18:0f:2a:2a:6b:77:22:f9:8e:d8:b6:2e:64: 9e:ab:4b:c6:d6:f7:1d:6c:9e:15:2d:d1:b5:97:c4:f8:51:72: 16:90:e0:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKZn1+2IvSj+a0RJIhYfJLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjYwOTEwMDgxOTI3WhcNMjYwOTExMDgxOTI3WjAzMTEwLwYDVQQD EyhhMzhmM2U3OTZiZTg5MWNmNzI1Mzc3YzA4ZWNhNDUxOTRjMTEzZTk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1pXW4SxF/yRn16otaqf/CVr+O+C Psk318/2Y0VaxL6wy/Pq6QbIBQ+nM0ofGZT2rdZz+ik0wnYtEb9sGtIRDeLjWEG9 cwYe8HAr6Hra/nvHwbB/cLucCrX9jgGnTpC7tmnWaL/hxKj1m8CbA69ftQw3/VdI fQRyKjyTMMrii/EguMMTvNc+oHkX2A+sLNL/gkoH8tTnWprZ6hA2Rb7b6abpWwmD kpc1CjveEySI+jyJqTB5iUzvKDboFZXhqTxpyXhDPbeS8RUWjOP/3LeG+Lv3a/jY /at4q22we4Gy1qDAsVn4jEgZSJQ8UX0M7jUj8Ys3MaGY6WP9zZdS2teAZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOPPnlr6JHPclN3wI7KRRlMET6XMB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGIA1lO+C 2U5j5CaDgD9AbD3z1Oz3dH6RaQFtztIwrt61sLn1wE8uS7K7Cy1qW/rnQRXmjjS6 p3182Vi7ZBkGdaIs3MMirvqWYl1IKOOobnYLCl5nvk0NpmbIvuJnDRKiu5xyDF6h Ql+1uCVMHv/MduTB7PUfHwJkppyznjUh3FQAxkTbMitv/GpdehgWUZMUKYSnC3sR 0qQ5STOIkybirSj0HrM14J6QhrgoT5xFGpb+mar5jKJ6pjRXH3FmTawPtBkG9UVD 9Di4rWShLoXRzGfnNHWS07Cc8TxTOK8YDyoqa3ci+Y7Yti5knqtLxtb3HWyeFS3R tZfE+FFyFpDgWQ== -----END CERTIFICATE-----Generated at Thu Sep 10 17:07:59 2026 by rpki-client