$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json) Hash identifier: KmTbGDI6pnkeXpsUrhJ/DAZNkFd2tHjRtO/tZJNAvf8= Subject key identifier: 81:71:4B:A6:43:C7:DD:21:C9:9C:90:DF:68:51:E9:F5:A1:0C:91:6C Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 01A0B6895C7A119A6E66FAE7A0F5C894EAE3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft Manifest number: 1A79 Signing time: Fri 18 Sep 2026 22:00:50 +0000 Manifest this update: Fri 18 Sep 2026 22:00:50 +0000 Manifest next update: Sat 19 Sep 2026 22:00:50 +0000 Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=) 2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=) 3: 6_wUl3GqIrEH4GZEGOhIBl2ojCM.roa (hash: EOAmxk1uh+unv8x/RkCPHT0HqdAKwWQp9eiosO51a/Y=) 4: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=) 5: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=) 6: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=) 7: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=) 8: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=) 9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: H6+db2aYAB6Rftl/v3GcnAs+NluMupl/Cx3+Xepvt00=) 10: tdd9dtqfJz8b261bk6JHpfES0Tc.roa (hash: 59X3VpR48VTmddAG5znhTReZ1Oc8j9zqQITK+23bgXI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 19 Sep 2026 22:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b6:89:5c:7a:11:9a:6e:66:fa:e7:a0:f5:c8:94:ea:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Sep 18 22:00:50 2026 GMT Not After : Sep 19 22:00:50 2026 GMT Subject: CN=81714ba643c7dd21c99c90df6851e9f5a10c916c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:14:06:6c:36:2f:ef:e1:ab:dd:92:b1:be:85: c4:1f:25:6d:6d:af:d9:de:ea:87:98:99:00:c2:f1: 65:db:22:37:50:1e:1f:a1:c2:11:8e:b1:c6:66:de: 14:6a:6b:44:2d:7d:79:16:e6:7d:92:bb:41:22:79: bb:ee:ef:79:d4:c3:7d:bc:42:50:b6:00:38:6f:ea: 03:e2:f3:06:ed:94:0d:7e:80:bf:ce:c7:5d:27:7c: 97:91:b8:aa:d3:45:01:58:ff:e8:a3:a8:3d:90:28: b2:0d:32:66:52:ce:3b:2f:8d:cf:35:eb:a4:4b:ed: 96:b6:9d:64:ce:b9:11:ce:c5:e3:c3:3e:36:89:cb: 6e:bc:3a:65:cc:11:2f:0d:7e:00:9f:56:df:7a:3c: 63:8c:d3:78:a5:70:ee:53:f6:5f:42:6d:71:ea:cd: 78:1d:cf:c5:8a:55:c6:ee:96:80:e9:5b:ce:fc:79: 9b:87:a0:15:eb:da:bb:74:bc:cf:6e:1a:ba:91:e7: e4:60:c4:7a:57:a4:63:e2:17:b3:bd:49:61:5a:bd: 7a:ab:00:30:b8:17:51:f1:7c:7b:c0:5d:af:78:ab: 95:f5:3d:6a:74:5a:05:24:d2:c5:dc:63:bf:d1:c8: 24:b3:ac:c7:7e:91:07:fc:28:8b:7b:76:4b:3d:62: 69:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:71:4B:A6:43:C7:DD:21:C9:9C:90:DF:68:51:E9:F5:A1:0C:91:6C X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:a4:a9:e7:6d:98:82:06:ff:2d:e8:7e:cd:c8:44:26:88:32: ba:89:b3:b1:c0:3c:47:76:28:30:8c:d9:c7:82:83:46:68:1b: 2e:c0:26:bf:d2:6d:d0:5f:ce:6c:48:0a:69:8c:4d:d3:bf:38: 3e:bc:7a:10:0b:7e:4c:82:72:7d:01:5e:e4:c4:bb:cd:4d:2d: 14:c7:39:84:05:af:e9:37:e0:b7:99:d1:d3:f0:d1:84:92:50: c3:a0:8b:6a:f3:6b:a6:87:35:89:e1:94:34:65:d1:e9:98:a2: 48:18:3e:bf:08:8a:dd:f5:47:1b:f5:df:41:26:8a:83:69:4e: 9f:fa:f6:ba:fe:89:2e:35:8d:df:86:a3:76:0e:78:ed:51:a9: c9:ea:39:3f:b8:ef:98:e6:2c:03:3e:c9:8a:99:c1:87:8a:73: 11:14:c9:2e:55:e3:fe:63:bb:ec:50:eb:d5:bb:f6:f2:b5:0a: 0a:ab:38:58:93:db:a0:8c:4e:e3:41:d6:9f:9c:b9:f7:a8:02: 8b:bd:1d:4b:58:f0:52:06:0d:98:e8:89:24:98:e4:c0:a2:4c: 7e:f0:9c:3a:22:0e:a5:17:6f:64:e9:f4:69:fc:39:c1:57:e4: c6:47:d0:c7:8f:f9:95:38:ed:2e:03:41:80:3d:44:1f:70:c5: 77:91:f3:48 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC2iVx6EZpuZvrnoPXIlOrjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYwOTE4MjIwMDUwWhcNMjYwOTE5MjIwMDUwWjAzMTEwLwYDVQQD Eyg4MTcxNGJhNjQzYzdkZDIxYzk5YzkwZGY2ODUxZTlmNWExMGM5MTZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBQGbDYv7+Gr3ZKxvoXEHyVtba/Z 3uqHmJkAwvFl2yI3UB4focIRjrHGZt4UamtELX15FuZ9krtBInm77u951MN9vEJQ tgA4b+oD4vMG7ZQNfoC/zsddJ3yXkbiq00UBWP/oo6g9kCiyDTJmUs47L43PNeuk S+2Wtp1kzrkRzsXjwz42ictuvDplzBEvDX4An1bfejxjjNN4pXDuU/ZfQm1x6s14 Hc/FilXG7paA6VvO/Hmbh6AV69q7dLzPbhq6kefkYMR6V6Rj4hezvUlhWr16qwAw uBdR8Xx7wF2veKuV9T1qdFoFJNLF3GO/0cgks6zHfpEH/CiLe3ZLPWJpeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFxS6ZDx90hyZyQ32hR6fWhDJFsMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOKSp522Y ggb/Leh+zchEJogyuomzscA8R3YoMIzZx4KDRmgbLsAmv9Jt0F/ObEgKaYxN0784 Prx6EAt+TIJyfQFe5MS7zU0tFMc5hAWv6Tfgt5nR0/DRhJJQw6CLavNrpoc1ieGU NGXR6ZiiSBg+vwiK3fVHG/XfQSaKg2lOn/r2uv6JLjWN34ajdg547VGpyeo5P7jv mOYsAz7JipnBh4pzERTJLlXj/mO77FDr1bv28rUKCqs4WJPboIxO40HWn5y596gC i70dS1jwUgYNmOiJJJjkwKJMfvCcOiIOpRdvZOn0afw5wVfkxkfQx4/5lTjtLgNB gD1EH3DFd5HzSA== -----END CERTIFICATE-----Generated at Sat Sep 19 05:58:01 2026 by rpki-client