$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft File: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft (raw, json) Hash identifier: WDomI2lM+lSzS9im5pODNB2iK6l66namVchZThBgc7Q= Subject key identifier: 0E:8C:7F:43:61:E9:E7:F9:E8:6C:1D:62:77:AF:B2:22:53:58:A7:11 Authority key identifier: A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B Certificate issuer: /CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Certificate serial: 01A0B2077496534544B64A5FDBBEA55CBC97 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft Manifest number: 173B Signing time: Fri 18 Sep 2026 01:00:28 +0000 Manifest this update: Fri 18 Sep 2026 01:00:28 +0000 Manifest next update: Sat 19 Sep 2026 01:00:28 +0000 Files and hashes: 1: 0inTqtkV7aRdA0poVknUSc5weqM.roa (hash: tQvVVhfk99FYUlPYyVFhzpH6v9igywPSJePiCAXt2L8=) 2: 2AD88r0V-sPnIFkoVtY1Vz1-xto.roa (hash: zIM2AaPfHJC6B6zXhXel8ktXA+t+zTVgveI41tZmcC0=) 3: 6TbA_Za4Eowieja7n7niJ7Rt1gs.roa (hash: scQ2AMr4c5KWoojUsMClo/2J+rhonxe/8Y7reFR2/oA=) 4: GHszpS3-Dwi_R7QrobaC-6mzjVA.roa (hash: KYs3hrYFykvRa+MGqLwUV/+w9WDj/E2vkaV5H8LeqGw=) 5: KOWxSmH0_bapiUsF2I5NvMk2mAE.roa (hash: qlla291EA5iael/7BwH1F/97Ya9GRn26shYvkPQjZ4Q=) 6: OYUqnwa8yQK0vig2w6Um7A1Wcg4.roa (hash: vSXWDq1SS7TbMrb96ytcbFUS3oNQ6vxE3t+U54lGeWc=) 7: _qefhBTX4GrLHAKY0SuGouHYv88.roa (hash: ZZ2WFS7hoXoz7ExsxVHk1ghS6uAk+/8jwy793fgoALQ=) 8: aA_qu5IgNcJltCsGsxXyXwjv3A8.roa (hash: Dy2evysieg8Bw8Kefzu6MvOLG6ZrZ3EW+74fqHbs4Tc=) 9: cYegkqTDRQkQYBG0QAGLC43ERoE.roa (hash: Jj0rGclcjFrkbXAtvfPBQZbVxQ41VQry0fjFc8pn/lw=) 10: hB3YY5wUUGfV6IIyHwEnpTSv42A.roa (hash: 1OC88dVocx3G+QkH4qBimK+HQdGVwhYEBjKSlW54FuM=) 11: pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl (hash: 9JAim+HgBv43Pe1Sv5+XNuzLA/qNxOTj7dmILvfWQqw=) 12: thPKVIAn4Mtb5x7VAf0Ti0_MWKQ.roa (hash: U0wPlIAv75ZKpiMwZqpBCEwATCl9LCbwg1gs4MzHORI=) 13: tpKBXwzKN2mHCmBOzrBx0WRWZGY.roa (hash: 7rikcS4Ls1HmHeVnsKZgA/s/j4eis9rsmH9qENfz2po=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Sep 2026 22:53:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b2:07:74:96:53:45:44:b6:4a:5f:db:be:a5:5c:bc:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4ce9640a3ef2fea19374ad8f99f423d7aa7c76b Validity Not Before: Sep 18 01:00:28 2026 GMT Not After : Sep 19 01:00:28 2026 GMT Subject: CN=0e8c7f4361e9e7f9e86c1d6277afb2225358a711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:e0:81:9f:ae:cf:b0:d3:e0:d3:5c:11:94:6b: 1e:d3:7e:36:9c:0e:e5:ca:f4:54:9a:d3:12:07:65: a8:d0:11:ed:e8:34:8a:94:b4:5b:c1:72:6d:ec:2a: 91:8c:57:f3:42:cd:a6:88:93:56:e6:5c:9d:3d:4b: f7:f1:13:20:9e:be:3e:da:d8:bd:29:51:1d:e5:42: fa:b3:12:96:c5:d6:47:f4:7f:48:37:d6:9f:32:f2: 80:88:a5:a1:b0:de:58:d2:6d:2a:9f:e8:98:1c:db: 9d:ce:bc:52:2f:dc:25:fb:e3:07:97:2f:3d:b6:b0: 38:77:13:78:ca:b1:da:38:ea:53:da:db:13:78:fa: 54:6c:44:5a:d8:eb:73:5a:c8:c2:ac:5d:29:be:bc: 46:5d:8f:bf:26:4f:57:be:2c:68:bf:86:ce:9a:bc: f4:95:19:2e:02:27:97:46:e9:85:c3:83:8a:f3:f4: 82:d8:e3:b2:37:ba:a9:fd:1e:14:bb:14:ef:24:0a: 21:90:6d:0a:f1:25:bb:a6:2e:d8:9f:91:a8:10:0b: 73:de:e3:27:f7:43:1f:dc:3c:58:81:0c:e1:b5:ad: e4:29:a6:62:d0:2e:ac:31:03:81:ce:ee:f5:89:88: 6c:a3:c1:7f:00:4a:4f:8b:fa:94:30:54:ca:65:8c: d9:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:8C:7F:43:61:E9:E7:F9:E8:6C:1D:62:77:AF:B2:22:53:58:A7:11 X509v3 Authority Key Identifier: keyid:A4:CE:96:40:A3:EF:2F:EA:19:37:4A:D8:F9:9F:42:3D:7A:A7:C7:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/f8a5d1-260a-46a4-a8e4-283fe54a6f2f/1/pM6WQKPvL-oZN0rY-Z9CPXqnx2s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:1b:79:3c:ca:e7:52:76:8c:cf:7e:c4:d6:75:9c:75:ab:15: 4f:c9:be:ba:c3:60:57:bf:cf:38:97:14:55:a2:e7:b2:ed:f0: 23:e4:7c:67:8e:ef:7a:40:a6:3a:d0:22:a8:40:6e:7b:ce:db: 64:b5:f1:41:7c:af:fa:be:32:55:af:ad:f1:46:18:0f:c1:99: 31:9b:94:fb:d7:b2:f5:17:bd:05:ed:43:e2:c8:f0:53:58:a1: 6a:c8:b4:33:03:7e:05:14:92:78:21:d8:c7:ac:9f:65:bb:8d: a5:74:13:10:53:ff:9d:7d:c0:22:be:3d:7e:18:df:f9:0a:b4: c6:d2:aa:64:49:00:f3:dc:25:a7:2d:6a:a9:2a:57:7f:3c:42: 04:e3:f4:6a:8b:22:ec:cb:cf:df:df:c1:68:0c:48:12:6e:ae: eb:cf:4c:db:44:c3:1a:4a:22:08:e8:f8:4e:96:2d:14:83:54: 86:c3:cf:38:6e:81:c7:e1:b8:98:4a:95:3e:5a:9f:24:2e:41: f7:2b:4a:59:7a:3c:4e:89:31:a2:ed:06:71:49:66:78:bb:17: 1b:fe:c7:c0:f2:6e:27:24:90:d8:8f:58:b6:5a:30:77:ec:d1: 57:ce:c6:35:7d:84:2d:3b:58:7e:99:ce:df:38:c7:27:40:8b: ff:6c:4f:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCyB3SWU0VEtkpf276lXLyXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0Y2U5NjQwYTNlZjJmZWExOTM3NGFkOGY5OWY0MjNkN2Fh N2M3NmIwHhcNMjYwOTE4MDEwMDI4WhcNMjYwOTE5MDEwMDI4WjAzMTEwLwYDVQQD EygwZThjN2Y0MzYxZTllN2Y5ZTg2YzFkNjI3N2FmYjIyMjUzNThhNzExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw+CBn67PsNPg01wRlGse0342nA7l yvRUmtMSB2Wo0BHt6DSKlLRbwXJt7CqRjFfzQs2miJNW5lydPUv38RMgnr4+2ti9 KVEd5UL6sxKWxdZH9H9IN9afMvKAiKWhsN5Y0m0qn+iYHNudzrxSL9wl++MHly89 trA4dxN4yrHaOOpT2tsTePpUbERa2OtzWsjCrF0pvrxGXY+/Jk9Xvixov4bOmrz0 lRkuAieXRumFw4OK8/SC2OOyN7qp/R4UuxTvJAohkG0K8SW7pi7Yn5GoEAtz3uMn 90Mf3DxYgQzhta3kKaZi0C6sMQOBzu71iYhso8F/AEpPi/qUMFTKZYzZcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA6Mf0Nh6ef56GwdYnevsiJTWKcRMB8GA1UdIwQY MBaAFKTOlkCj7y/qGTdK2PmfQj16p8drMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQt MjgzZmU1NGE2ZjJmLzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yi9mOGE1ZDEtMjYwYS00NmE0LWE4ZTQtMjgzZmU1NGE2ZjJm LzEvcE02V1FLUHZMLW9aTjByWS1aOUNQWHFueDJzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmht5PMrn UnaMz37E1nWcdasVT8m+usNgV7/POJcUVaLnsu3wI+R8Z47vekCmOtAiqEBue87b ZLXxQXyv+r4yVa+t8UYYD8GZMZuU+9ey9Re9Be1D4sjwU1ihasi0MwN+BRSSeCHY x6yfZbuNpXQTEFP/nX3AIr49fhjf+Qq0xtKqZEkA89wlpy1qqSpXfzxCBOP0aosi 7MvP39/BaAxIEm6u689M20TDGkoiCOj4TpYtFINUhsPPOG6Bx+G4mEqVPlqfJC5B 9ytKWXo8Tokxou0GcUlmeLsXG/7HwPJuJySQ2I9Ytlowd+zRV87GNX2ELTtYfpnO 3zjHJ0CL/2xP2w== -----END CERTIFICATE-----Generated at Fri Sep 18 05:01:17 2026 by rpki-client