$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft File: CnMngF3yD7XB1vTokHR0PK6ySvc.mft (raw, json) Hash identifier: JXCmb/2H0NM+hsGkWDzebIpK2LkaxElVIbuxhUd+4nQ= Subject key identifier: 46:87:A1:54:50:D9:32:4A:77:4D:78:09:2F:3C:92:0A:45:7C:0D:1F Authority key identifier: 0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 Certificate issuer: /CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Certificate serial: 01A0B1994C41E452C03552C313F5654846B1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft Manifest number: 1A7B Signing time: Thu 17 Sep 2026 23:00:08 +0000 Manifest this update: Thu 17 Sep 2026 23:00:08 +0000 Manifest next update: Fri 18 Sep 2026 23:00:08 +0000 Files and hashes: 1: 2rTA2bFQLnTk-wBE54CdmsvNmbE.roa (hash: rTmmlhzm12lVyQhx6ghJTLh2ggevz2u8kAMqAN9SK3c=) 2: CnMngF3yD7XB1vTokHR0PK6ySvc.crl (hash: GMwMWP6X+zJbb+DHlfxGg07sDgrotL+j9kBT0bMEXGs=) 3: GiXGWF3XbNUka_6eZbMkF4lwUUU.roa (hash: Ghc0ZSrMNmrLcxpN1ogM8Bq5yh44DA/gg5TX6sTsGwk=) 4: Hq4X_7yYD_a8EYI4a9NBlnQVc3w.roa (hash: z+0vTxrgxYAsB4o2ZlASjMWqhGlPslViBNl8Jj/ge4E=) 5: JpWfmu7Zc6MPpU8ubphtHfVf2jg.roa (hash: O/QTbkFDD3rtzSPUctcOhfkfZ3hImjATVsAJ0E69A4g=) 6: Ow_kueRJVip82pUj00XLQYjimrs.roa (hash: 85eWZxYsHFwXWd/YsiQWTMazT60hSpQui9cmEWNnT5M=) 7: RGm2lZRMnSfKm4B97NAwBPy9lYQ.roa (hash: Wjqw6vgltXyXDlwoAetJMPKopD3DI3ppoohYHWiU90I=) 8: T8B0kkg4BVlceQJgbiJPcySAVzI.roa (hash: yXFJztGLWwXHOTbokOH+zERGWTqm5J1lqmfqfodFEZc=) 9: W_-_HaUod-cjK_nA0bLneyeWAes.roa (hash: 1x91spJR0Mlu6Fz+Qjwjj0FIGT4+k9oC+PPm0TZ/70g=) 10: bUcBfMu_9o4dYCM9sDK4nJufEqY.roa (hash: iEsA+ypslVdiqyHUg8Q2SIRt6ca1DLneY25H0pJSVOc=) 11: fT61awwkD08cT0v6ICZahtW3HFI.roa (hash: OGczwb/UeMWoa3ZnMERuw+jjcJf8SRTCZaw4MXLAhCE=) 12: gndzUxO1CNccN-YEVyYR7nMztTA.roa (hash: 97uyyMTTG7hyUktNtazYQf48Ni/TGW9HZQJtjllnVwc=) 13: j9edvCOgCpRUHjoOk20-cN9wmxg.roa (hash: 6DgXQwbEU+KDyumiNCNLUw/9Wxv+6tWPT8AusYvqDwo=) 14: wyPD1FfvZSgN54YMSxhg6oBiVDQ.roa (hash: x43Z5uj7ACBLhAYU7mriWUpP8c6bdaVxKIh05vTvKqo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 22:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b1:99:4c:41:e4:52:c0:35:52:c3:13:f5:65:48:46:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7327805df20fb5c1d6f4e89074743caeb24af7 Validity Not Before: Sep 17 23:00:08 2026 GMT Not After : Sep 18 23:00:08 2026 GMT Subject: CN=4687a15450d9324a774d78092f3c920a457c0d1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:0d:0c:7c:7f:82:5b:0c:15:0e:c1:7b:10:f4: 8e:9a:d0:45:de:6e:c6:0b:9f:0e:5d:79:27:2a:6a: f0:cd:5b:5b:e8:d3:89:0a:b4:a8:f5:5e:19:e9:e6: 5f:27:58:1c:dc:c9:5d:11:9c:db:16:66:8b:f2:97: 20:19:04:41:40:82:66:ff:78:ab:d5:a5:8a:22:75: 7d:32:28:9a:a2:5e:14:e3:55:5a:a7:3b:57:ff:1c: 4c:cd:85:86:9d:23:39:a9:a6:e6:7d:08:c1:f5:5a: 02:85:a9:ca:58:70:fb:bb:ac:c4:86:23:32:c3:97: cb:7b:09:65:9f:51:2f:86:0d:e5:02:85:1e:9c:76: c8:89:1d:c4:ca:15:ee:00:12:a3:5e:86:82:b1:10: 53:6f:1d:72:40:d1:56:57:0f:c4:f0:88:6a:82:d8: 95:a3:ca:59:5a:63:f8:8f:38:38:a2:69:f3:94:82: 43:5c:b8:e1:2d:16:e8:68:c7:ec:45:53:45:8e:f0: d2:b4:c4:12:49:c6:82:03:bb:9d:33:83:58:65:af: 83:a7:b2:1d:1e:5c:4a:34:9d:c0:3a:37:89:45:c8: 54:25:7b:96:76:cd:f3:c5:c7:69:fb:b4:c9:dd:6b: 5e:e9:bb:10:05:c5:f1:58:05:2e:a7:68:cb:d5:90: 7f:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:87:A1:54:50:D9:32:4A:77:4D:78:09:2F:3C:92:0A:45:7C:0D:1F X509v3 Authority Key Identifier: keyid:0A:73:27:80:5D:F2:0F:B5:C1:D6:F4:E8:90:74:74:3C:AE:B2:4A:F7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CnMngF3yD7XB1vTokHR0PK6ySvc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8b1fac-5a21-4848-a66a-10bb4579d528/1/CnMngF3yD7XB1vTokHR0PK6ySvc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:50:c8:f9:22:18:d9:fe:16:7b:b3:dd:53:48:24:8c:fd:75: b9:d2:d1:bd:74:8c:0d:0d:a8:8a:15:79:eb:1b:22:e8:1b:84: e3:07:7a:c8:72:e1:03:3f:1b:6a:98:05:ee:f2:4c:3a:48:bd: 78:02:e8:88:b2:41:11:77:39:95:32:42:b2:da:54:d5:07:7c: 9d:de:ae:ec:29:4c:dc:ed:ff:e6:7b:3e:22:de:2e:51:08:1e: e8:1a:08:82:27:74:18:f0:7c:9f:10:43:b5:f7:1b:60:35:c7: c8:d8:24:d7:9c:43:59:a1:be:4d:b9:c2:05:9e:cc:cd:b3:0c: cb:f7:2f:eb:d9:a0:42:ae:cf:e2:d4:6f:bf:e0:03:75:a4:7a: 9a:51:18:01:2b:49:6a:c9:f2:14:79:d7:8d:c7:c8:68:bd:e0: 22:5a:18:04:25:d7:c8:74:14:84:4e:2a:43:38:3e:50:ca:27: 4a:17:e8:ff:5e:79:6d:e3:0e:40:aa:6a:ec:86:1f:bc:e8:39: e4:0a:e6:2a:ff:3f:22:c6:ea:ae:3a:bc:a6:e1:ef:25:b4:52: 8d:a7:38:4f:c8:64:df:2d:7f:6a:58:f8:ec:12:c6:e4:a1:de: 06:77:2b:68:f1:81:dc:a8:5a:35:e4:ae:0c:ef:0d:44:9e:83: f2:dd:b2:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCxmUxB5FLANVLDE/VlSEaxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhNzMyNzgwNWRmMjBmYjVjMWQ2ZjRlODkwNzQ3NDNjYWVi MjRhZjcwHhcNMjYwOTE3MjMwMDA4WhcNMjYwOTE4MjMwMDA4WjAzMTEwLwYDVQQD Eyg0Njg3YTE1NDUwZDkzMjRhNzc0ZDc4MDkyZjNjOTIwYTQ1N2MwZDFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg0MfH+CWwwVDsF7EPSOmtBF3m7G C58OXXknKmrwzVtb6NOJCrSo9V4Z6eZfJ1gc3MldEZzbFmaL8pcgGQRBQIJm/3ir 1aWKInV9Miiaol4U41VapztX/xxMzYWGnSM5qabmfQjB9VoChanKWHD7u6zEhiMy w5fLewlln1Evhg3lAoUenHbIiR3EyhXuABKjXoaCsRBTbx1yQNFWVw/E8IhqgtiV o8pZWmP4jzg4omnzlIJDXLjhLRboaMfsRVNFjvDStMQSScaCA7udM4NYZa+Dp7Id HlxKNJ3AOjeJRchUJXuWds3zxcdp+7TJ3Wte6bsQBcXxWAUup2jL1ZB/GQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEaHoVRQ2TJKd014CS88kgpFfA0fMB8GA1UdIwQY MBaAFApzJ4Bd8g+1wdb06JB0dDyuskr3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEt MTBiYjQ1NzlkNTI4LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80YS84YjFmYWMtNWEyMS00ODQ4LWE2NmEtMTBiYjQ1NzlkNTI4 LzEvQ25NbmdGM3lEN1hCMXZUb2tIUjBQSzZ5U3ZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK1DI+SIY 2f4We7PdU0gkjP11udLRvXSMDQ2oihV56xsi6BuE4wd6yHLhAz8bapgF7vJMOki9 eALoiLJBEXc5lTJCstpU1Qd8nd6u7ClM3O3/5ns+It4uUQge6BoIgid0GPB8nxBD tfcbYDXHyNgk15xDWaG+TbnCBZ7MzbMMy/cv69mgQq7P4tRvv+ADdaR6mlEYAStJ asnyFHnXjcfIaL3gIloYBCXXyHQUhE4qQzg+UMonShfo/155beMOQKpq7IYfvOg5 5ArmKv8/Isbqrjq8puHvJbRSjac4T8hk3y1/alj47BLG5KHeBncraPGB3KhaNeSu DO8NRJ6D8t2yrw== -----END CERTIFICATE-----Generated at Fri Sep 18 01:35:32 2026 by rpki-client