$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft File: f2vRprBGJcVx2DD4eLHAI4JHQIw.mft (raw, json) Hash identifier: BEtK7wapGKcw6mL09IHVxahLJGedxZKXGPs+h01DkPs= Subject key identifier: FF:8D:F6:07:51:CD:1D:AD:D5:73:91:FF:C7:45:3E:D3:81:A8:BF:BD Authority key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C Certificate issuer: /CN=7f6bd1a6b04625c571d830f878b1c0238247408c Certificate serial: 01A0C4B2869084EC9E22EBB43516733C979B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft Manifest number: 090C Signing time: Mon 21 Sep 2026 16:00:29 +0000 Manifest this update: Mon 21 Sep 2026 16:00:29 +0000 Manifest next update: Tue 22 Sep 2026 16:00:29 +0000 Files and hashes: 1: 3O71K1jq21K-s1uKNpoLxwxfjs4.roa (hash: 9K3ZJvCfhWt1RrhHN5T33vgZGrICVU040sK1K6zYTsw=) 2: 47pEOcmY00O0DUGgL3Q3yGiCQHE.roa (hash: TFpqFNWwVVskKy+bcbitaKF0H2oKC6z9SWwPnfz7znI=) 3: PIJcLY46PYSHoDgSOZxEPuH417I.roa (hash: srTkWvbqzoKRLCgdMr4N/amg9swAtdMCENwqQ8aPPow=) 4: Q7kbnNNnbSsZFlsov6ILXxHCTdM.roa (hash: VhgI6TuEjkaCFM/zUTKmnIt5ZWs9IQY5K9aBKoHxwD8=) 5: Uu5eZINyZZ5cw3XYuxNE-79F3yQ.roa (hash: nAVaVHwJ6YxohUATNt0J/Xnb1/Zu7QH4N9aATQyW7hI=) 6: WyQhrcQcI54FWZmH__lrHoE3FWU.roa (hash: 1vjfP6Nqw8yzFBCOkKdm5HoQUw0v3VTrGmhqLtnS2VE=) 7: f2vRprBGJcVx2DD4eLHAI4JHQIw.crl (hash: PvRt37QlL3qcTSOMPhgyuvxKvlHAMTimn7vBP5Q5f98=) 8: gU8hFrAdmGCPNYOjTnvshD8WKTw.roa (hash: aIL6rAim8v0vCsXPaXDt9dqDXZOi08bdb924MpXBpn8=) 9: iZHuJcN5SGRqzNew0iuIDSSeFRo.roa (hash: xBLovi5yJfWqWf4uNxOyhNCZnh9Kt/cScch8+xkXzcw=) 10: l1MJKpxpJrooh4yYg2GeABzuRlk.roa (hash: auDKOkr78/mYWOPaTVOBS3ng5JPSWspfHkibCydvr1k=) 11: rDDIhE0qYfgop087nvS_8O3QtQQ.roa (hash: GNcKt07HGLjSb7pRK/gwNbmbWxAvVfknp/F4+LGsKVg=) 12: uQMfLgCocO-cV1Dq7f8ShCaJ1pI.roa (hash: f2D0zf6gxtDdlo1Fb2b+kXB8Dad/xNYHEZ1SOFzPCFU=) 13: xQbVNLrkghSR1KoodNn_gRkFImc.roa (hash: pt58nZViNxpnnxA6XeQ7GFV7JLxJTNDbZQ9f75iTc5I=) 14: xe57pNkOwTWSUGNF8UIEoEduU54.roa (hash: zBDWDrkIwaQkkFGZ8gEh2OgP8GVyE2SsL8caaKS4W5M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 22 Sep 2026 16:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c4:b2:86:90:84:ec:9e:22:eb:b4:35:16:73:3c:97:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7f6bd1a6b04625c571d830f878b1c0238247408c Validity Not Before: Sep 21 16:00:29 2026 GMT Not After : Sep 22 16:00:29 2026 GMT Subject: CN=ff8df60751cd1dadd57391ffc7453ed381a8bfbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a7:89:90:b8:f9:62:22:31:3f:a0:bb:5e:53: e5:c5:2e:f6:25:6c:35:a1:41:c1:90:a2:d3:70:98: 11:fe:3c:f0:58:6d:7e:0d:53:4a:9c:64:5b:84:06: 2f:8e:8b:30:4d:10:5c:a9:06:c8:f0:bb:82:98:72: 1a:5a:b2:47:95:99:58:85:05:3c:6c:e5:4d:0c:df: 83:3b:3d:0c:8a:ee:ad:89:1e:cc:c2:9b:6e:4c:7f: 9c:d7:19:fb:c3:cc:bc:54:4a:16:c7:e1:80:f9:19: e8:02:6c:00:cf:1d:22:fd:be:35:d4:3e:25:18:3e: 24:71:0e:81:62:79:a9:e1:ff:ad:e9:76:db:a2:d2: 9f:90:1a:88:22:0a:c3:1a:20:84:b5:97:53:25:c7: 58:12:fe:6a:84:55:28:bd:10:69:71:ae:29:78:34: 1b:8f:d3:ca:b9:41:89:34:0a:0c:dd:e0:54:1b:7c: 7f:1c:0a:e6:3b:ab:1e:b1:2f:d6:7a:dc:15:c6:66: 93:7e:ad:82:fb:f3:51:f8:5b:e9:96:63:5c:1f:57: c2:b6:5c:3b:e3:9b:5b:dd:a8:5a:6a:b6:a7:a5:cd: 35:63:a6:14:37:65:5c:84:33:36:aa:77:43:ce:e4: 05:a8:5e:f4:e0:8d:d3:9f:87:f0:bd:2b:7f:a6:57: 01:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:8D:F6:07:51:CD:1D:AD:D5:73:91:FF:C7:45:3E:D3:81:A8:BF:BD X509v3 Authority Key Identifier: keyid:7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b8:f3:02:80:b6:5d:81:61:c8:53:a2:5b:94:cc:bd:72:7f: da:f4:d1:50:b8:0b:ec:43:e3:a1:7a:d9:52:06:dd:cd:8b:35: 32:40:a1:4e:43:98:f5:28:a4:10:cc:85:c8:2a:13:ab:cf:40: 59:c1:e9:7e:72:06:74:76:8b:2a:e4:8c:76:de:79:ed:77:c3: a4:66:d8:7f:44:d5:6d:50:77:c7:78:e0:b7:21:18:18:b9:9a: 84:f3:0c:e2:d8:0c:34:bd:7a:02:63:a6:f7:4c:07:95:a1:5c: 49:6a:e7:fa:0b:48:b0:b6:dc:19:02:c8:39:d3:45:aa:32:07: 57:94:b5:11:cf:f5:dc:ec:29:b0:c4:d8:41:bb:86:68:52:ac: ec:e1:8c:cd:71:fa:a4:36:22:bb:eb:06:17:d8:d7:a3:c4:7b: db:14:ec:f8:9e:24:07:cb:e2:9a:5e:66:7e:b0:0a:18:84:ca: c6:12:df:33:cc:3c:40:9e:f6:49:cd:91:d5:3e:bd:70:4d:72: 43:55:ad:9b:9c:46:04:f5:e3:1e:79:95:4e:00:3d:61:d5:5c: 7c:af:32:67:a1:02:4f:c3:0e:57:ae:f3:bb:72:8a:75:f8:2f: 31:f7:9b:2f:60:b2:6e:67:96:38:07:1d:fe:fe:47:4b:d5:15: 07:58:f0:a8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDEsoaQhOyeIuu0NRZzPJebMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdmNmJkMWE2YjA0NjI1YzU3MWQ4MzBmODc4YjFjMDIzODI0 NzQwOGMwHhcNMjYwOTIxMTYwMDI5WhcNMjYwOTIyMTYwMDI5WjAzMTEwLwYDVQQD EyhmZjhkZjYwNzUxY2QxZGFkZDU3MzkxZmZjNzQ1M2VkMzgxYThiZmJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aeJkLj5YiIxP6C7XlPlxS72JWw1 oUHBkKLTcJgR/jzwWG1+DVNKnGRbhAYvjoswTRBcqQbI8LuCmHIaWrJHlZlYhQU8 bOVNDN+DOz0Miu6tiR7MwptuTH+c1xn7w8y8VEoWx+GA+RnoAmwAzx0i/b411D4l GD4kcQ6BYnmp4f+t6XbbotKfkBqIIgrDGiCEtZdTJcdYEv5qhFUovRBpca4peDQb j9PKuUGJNAoM3eBUG3x/HArmO6sesS/WetwVxmaTfq2C+/NR+FvplmNcH1fCtlw7 45tb3ahaaranpc01Y6YUN2VchDM2qndDzuQFqF704I3Tn4fwvSt/plcBjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP+N9gdRzR2t1XOR/8dFPtOBqL+9MB8GA1UdIwQY MBaAFH9r0aawRiXFcdgw+HixwCOCR0CMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEt ODliNmMzMjMxNWMyLzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OC9iYzY2ZDctNTdhYi00NzVkLTk2YmEtODliNmMzMjMxNWMy LzEvZjJ2UnByQkdKY1Z4MkRENGVMSEFJNEpIUUl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLjzAoC2 XYFhyFOiW5TMvXJ/2vTRULgL7EPjoXrZUgbdzYs1MkChTkOY9SikEMyFyCoTq89A WcHpfnIGdHaLKuSMdt557XfDpGbYf0TVbVB3x3jgtyEYGLmahPMM4tgMNL16AmOm 90wHlaFcSWrn+gtIsLbcGQLIOdNFqjIHV5S1Ec/13OwpsMTYQbuGaFKs7OGMzXH6 pDYiu+sGF9jXo8R72xTs+J4kB8viml5mfrAKGITKxhLfM8w8QJ72Sc2R1T69cE1y Q1Wtm5xGBPXjHnmVTgA9YdVcfK8yZ6ECT8MOV67zu3KKdfgvMfebL2CybmeWOAcd /v5HS9UVB1jwqA== -----END CERTIFICATE-----Generated at Tue Sep 22 03:03:00 2026 by rpki-client