$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json) Hash identifier: Rmld1mdqjsUQG0RCZI3ny87QN/dUNdn7FLT8hYUpbxQ= Subject key identifier: 69:0B:32:9E:E9:92:6F:33:08:76:A2:8E:2B:7E:A0:97:7D:C2:FD:A6 Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 01A11003F194FC088F8E5AC88581FCA43340 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft Manifest number: 1AA9 Signing time: Tue 06 Oct 2026 07:00:56 +0000 Manifest this update: Tue 06 Oct 2026 07:00:56 +0000 Manifest next update: Wed 07 Oct 2026 07:00:56 +0000 Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=) 2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=) 3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=) 4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=) 5: UssRL_azfcBW0-ZAXO28l_WRTQ8.roa (hash: Q1CPH56Bt7FCDBhQza5YAQW6lKSo+XxyyUkTKJFqTBQ=) 6: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=) 7: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=) 8: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=) 9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: 0AiqZkvbXzHwLQGBlrfwTFuFJuedzGyifvigeH68LMk=) 10: wa9zMyfDDEuwe9jHEEf5XR0rY1U.roa (hash: w6cKFExTNVukVfdOoaJCYRMUgY7AI2mb+j8X2JfaAr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:10:03:f1:94:fc:08:8f:8e:5a:c8:85:81:fc:a4:33:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Oct 6 07:00:56 2026 GMT Not After : Oct 7 07:00:56 2026 GMT Subject: CN=690b329ee9926f330876a28e2b7ea0977dc2fda6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:23:c0:3b:f1:06:87:fd:b1:91:2d:08:e0: e9:d3:8d:7b:54:8b:a5:aa:f8:04:3d:6a:44:9d:fd: 00:f5:50:8f:40:9e:bf:13:2e:48:c1:a4:b6:ad:2c: 66:4e:a3:1c:64:95:5c:17:94:1b:0e:ca:93:8b:9f: 7a:17:8d:6d:39:79:fb:2c:b9:e5:46:4a:30:44:25: 0e:39:57:a4:99:db:3b:88:54:2a:4d:b1:a2:38:76: 4d:e8:fc:c7:16:c7:c1:07:49:ac:fa:58:7a:02:e8: 8c:d6:01:0f:fe:0d:b7:61:5a:6a:d8:42:2e:1c:dd: 39:91:a3:ad:ca:38:66:d2:37:28:c5:af:35:8b:8d: 25:ee:3f:88:d1:0d:5d:ec:dc:1f:db:79:ec:82:66: b1:cf:a9:7c:e4:eb:8b:17:aa:6d:a0:2d:a9:62:86: 79:28:33:ff:0e:73:fa:66:e2:64:4c:32:30:f7:06: 77:5c:c1:ee:80:78:2f:97:0b:a7:dc:af:3d:34:e7: eb:fa:09:a9:8c:a9:a7:af:00:f9:4c:b9:b8:3a:a1: 5f:62:b0:18:e5:bd:e2:ba:80:3a:ca:50:b3:ce:27: ec:8a:6f:1b:6d:4e:03:3a:ab:de:69:87:44:8a:f3: e9:df:2d:77:73:e7:99:cd:44:b0:5a:3a:ce:00:8f: 3b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0B:32:9E:E9:92:6F:33:08:76:A2:8E:2B:7E:A0:97:7D:C2:FD:A6 X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:2f:c9:e8:74:6e:11:df:95:cb:7a:61:04:02:e1:9b:74:f6: 86:4b:9b:89:e3:c5:40:c9:5c:e7:cf:7c:e2:d3:29:af:78:8a: 58:97:d8:88:9d:12:b7:e0:f5:32:a8:eb:d7:b2:45:82:e1:3f: d3:3e:1a:98:7e:01:1b:36:0a:f1:5a:5e:1b:82:e3:24:b5:95: 3d:c0:5d:90:b4:18:75:80:cb:3a:e5:91:19:dd:9a:e9:33:fd: ec:79:63:3a:90:6b:a8:3f:f8:98:e4:e7:e7:18:a0:39:ed:6e: 7a:23:e2:f6:b9:04:61:96:6e:c1:13:4d:dc:f5:a6:1b:d7:d9: 11:dd:a2:0b:5e:d1:44:01:74:f3:a0:4b:37:07:f6:c2:32:18: ad:bf:18:31:f7:a1:cf:c3:75:76:97:75:64:ab:31:de:ca:a4: ec:30:92:71:88:39:34:c1:b0:5c:12:46:5e:75:0c:c8:9a:33: 5b:21:2b:4c:4b:1b:56:10:99:e6:81:79:18:6e:a4:75:06:d0: a7:cd:ce:08:61:ab:87:0d:b8:3e:07:44:63:8e:ef:2c:5e:c2: 23:93:4c:c1:29:49:5b:b5:66:53:51:4c:33:e9:8f:fd:8d:42: d0:fe:46:44:2d:b5:84:1b:c3:9e:9c:f4:37:e6:a3:f6:4a:dc: 34:ba:7c:c9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEQA/GU/AiPjlrIhYH8pDNAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYxMDA2MDcwMDU2WhcNMjYxMDA3MDcwMDU2WjAzMTEwLwYDVQQD Eyg2OTBiMzI5ZWU5OTI2ZjMzMDg3NmEyOGUyYjdlYTA5NzdkYzJmZGE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzQQjwDvxBof9sZEtCODp0417VIul qvgEPWpEnf0A9VCPQJ6/Ey5IwaS2rSxmTqMcZJVcF5QbDsqTi596F41tOXn7LLnl RkowRCUOOVekmds7iFQqTbGiOHZN6PzHFsfBB0ms+lh6AuiM1gEP/g23YVpq2EIu HN05kaOtyjhm0jcoxa81i40l7j+I0Q1d7Nwf23nsgmaxz6l85OuLF6ptoC2pYoZ5 KDP/DnP6ZuJkTDIw9wZ3XMHugHgvlwun3K89NOfr+gmpjKmnrwD5TLm4OqFfYrAY 5b3iuoA6ylCzzifsim8bbU4DOqveaYdEivPp3y13c+eZzUSwWjrOAI87TwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGkLMp7pkm8zCHaijit+oJd9wv2mMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuS/J6HRu Ed+Vy3phBALhm3T2hkubiePFQMlc58984tMpr3iKWJfYiJ0St+D1Mqjr17JFguE/ 0z4amH4BGzYK8VpeG4LjJLWVPcBdkLQYdYDLOuWRGd2a6TP97HljOpBrqD/4mOTn 5xigOe1ueiPi9rkEYZZuwRNN3PWmG9fZEd2iC17RRAF086BLNwf2wjIYrb8YMfeh z8N1dpd1ZKsx3sqk7DCScYg5NMGwXBJGXnUMyJozWyErTEsbVhCZ5oF5GG6kdQbQ p83OCGGrhw24PgdEY47vLF7CI5NMwSlJW7VmU1FMM+mP/Y1C0P5GRC21hBvDnpz0 N+aj9krcNLp8yQ== -----END CERTIFICATE-----Generated at Tue Oct 6 14:37:18 2026 by rpki-client