$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft File: _2mO6y5J_LX5xlqZhXrynOBmQdk.mft (raw, json) Hash identifier: eqMqUKZBsFrNSLVQiV5GsgpCYk2E5HQTlaPtvoWav7A= Subject key identifier: FA:5B:D0:BC:28:C2:A6:07:75:65:08:7B:75:1C:57:7E:96:8F:71:3D Authority key identifier: FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 Certificate issuer: /CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Certificate serial: 01A0E85313DCA458C6196A885D0CFE4B33AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft Manifest number: 1A88 Signing time: Mon 28 Sep 2026 14:02:33 +0000 Manifest this update: Mon 28 Sep 2026 14:02:33 +0000 Manifest next update: Tue 29 Sep 2026 14:02:33 +0000 Files and hashes: 1: 1S2b0qfA-tzXPijJ9Qx0uZkaVHY.roa (hash: YEqko0/rX2ob+3AZDq3uooNVJSO5Y7pQBV9N/OfoJ0U=) 2: 8A3g6hd04la3Px2TyuTjfHWXmdY.roa (hash: iwl9hWmxy1BIkyJmP1xReY7WIyqXtDNFiAQ47HDp3qA=) 3: CutVr_X7gS8lDaDuNw9F7uzem1c.roa (hash: A1mIXRTWd/wu1bWANlXDqimnRKUXOgou4evCbpodPm0=) 4: E3TSZxhxz52fsgneQ6hYKE9lnR0.roa (hash: Jo3p0YGshAOZXbJIFqjcNfVnpH22iKmlH4Gttc0OVQE=) 5: J_a4ymcJIY3L6HOzFARmH41d5es.asa (hash: bpzpa0qKowmOhDsx7cnZXh9EOSP6XWxhHtsK/Z/ggTU=) 6: LfkCmSO1I7GGpJ0of5l-0c5AGBc.asa (hash: UgfWuPDLjqxThrUgxhNFddbI4VXPReh33QeUjBvYjVs=) 7: LuOgAc37LU8V7dGgdj8hy6ymH64.asa (hash: pkN431oI3RFQuibIh8RwZRrzTHAA18y2t6J/hjni00c=) 8: NAZAaNdWKeXHuv43xyaeXGZkj24.roa (hash: 7OpOUts+KUACTRn/Jnhi/5hlzxiHmq7rQOZw5wD3ZMs=) 9: VHaZ9xAWUz6t5_O77Zl57zRscxg.roa (hash: 2yv7yBBLi6h8Nduk7IpZ8p6TZNV35NVDX377GsAgTP4=) 10: _2mO6y5J_LX5xlqZhXrynOBmQdk.crl (hash: 5fSpeqLNxOAHf3u/SEccL2xYOhi6GYqUVIp/XS8Tba0=) 11: cIcqaLXZmekavhCmoIAJhBRw3JE.roa (hash: 8QflktthB1MZE1m+SbfCOvT58wwBH/AnF87SL9k5yss=) 12: fxCBjLdqX_evkWfiqAm6qjLArlI.roa (hash: tk7gywwYFiYzZLlhE1m73NGnM9inNgbBSNjaCbvZCNY=) 13: hRI7RDa7PGK-ctecQ63wDq0HUqI.roa (hash: tUVamYyn9duDeEqDyKxRIvl+qRN9U3COd67wexVVyLs=) 14: oaZumtYBqB2DBSwMpqnmqOIkGm0.roa (hash: 9YqR7q1fJK+xrhMWwkV3smWMIV3JZ5y1OxTGOkJ6aPk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 14:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e8:53:13:dc:a4:58:c6:19:6a:88:5d:0c:fe:4b:33:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ff698eeb2e49fcb5f9c65a99857af29ce06641d9 Validity Not Before: Sep 28 14:02:33 2026 GMT Not After : Sep 29 14:02:33 2026 GMT Subject: CN=fa5bd0bc28c2a6077565087b751c577e968f713d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c7:96:4d:15:66:e3:66:1b:8a:29:b6:cb:17: dd:03:a1:75:a3:b0:97:ce:39:dd:a6:ce:b9:bf:60: 5b:49:c3:e3:e9:ae:f0:ca:47:20:ab:c9:ab:7a:eb: d0:9b:8f:be:20:65:8e:26:95:32:ae:0b:cc:37:d7: ba:20:19:06:09:c8:57:d4:04:93:f3:37:68:61:d2: 22:d1:02:0d:8c:b9:01:ec:d2:b1:43:99:54:b6:00: 6b:c1:7c:6f:2a:b7:e7:1c:fc:90:08:10:de:d1:32: e5:dd:56:fc:01:56:63:93:ff:7a:4c:c1:2f:39:d7: 93:cb:51:83:43:68:bd:66:c3:00:54:5d:82:dd:d2: 0c:1a:f3:20:2a:6f:7b:f9:cf:1e:a3:a2:dd:80:8e: 48:e6:ba:97:93:70:bf:24:b4:07:8b:d6:1b:9c:3f: 6a:fd:f6:30:14:61:18:35:77:75:9f:c7:68:72:67: fc:e3:61:d1:2a:ba:f9:be:ad:b6:98:01:e0:a2:e3: 8a:7b:c7:72:88:da:65:ee:c0:cf:45:62:c3:9e:11: a6:16:09:06:67:74:d5:73:9d:a0:ce:5b:c7:8c:e5: 8b:fb:ca:3b:a9:38:f3:62:c5:1e:32:79:d3:82:49: da:c0:7f:02:ee:5f:43:0f:fd:df:e4:3e:92:51:9d: d0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5B:D0:BC:28:C2:A6:07:75:65:08:7B:75:1C:57:7E:96:8F:71:3D X509v3 Authority Key Identifier: keyid:FF:69:8E:EB:2E:49:FC:B5:F9:C6:5A:99:85:7A:F2:9C:E0:66:41:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2mO6y5J_LX5xlqZhXrynOBmQdk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/b4d75d-953a-4036-9839-57cd68d9cb4e/1/_2mO6y5J_LX5xlqZhXrynOBmQdk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:35:bf:fd:36:ed:61:e0:81:d5:51:fd:f8:41:eb:a2:0b:dc: 4c:5c:61:d2:ad:fe:d0:df:0a:33:68:26:d3:65:31:2a:5e:15: c3:56:6d:59:dd:18:50:a1:4f:f9:da:16:88:aa:6a:ca:a2:b3: 26:ec:d3:50:98:2b:e0:53:04:db:10:b2:72:8a:03:f9:7e:42: d3:ec:01:ff:be:56:44:ea:32:a1:14:b8:94:d6:8f:07:15:09: cc:ed:fc:f4:6f:2a:88:82:8f:77:44:ef:c8:36:86:ff:24:d6: 00:f1:c7:b6:a1:38:a3:0b:59:be:92:1c:fb:0b:e4:02:14:af: 00:78:53:e8:dd:53:cd:5b:92:7b:3e:ce:dc:a1:a0:8a:c7:8a: fd:88:29:0c:44:95:ea:da:e8:ba:7a:28:38:cd:1e:b3:08:d2: 59:61:ed:37:be:6d:c3:02:e2:c7:de:71:7d:e0:f0:b7:c2:63: 1d:d1:b9:06:fc:6a:9b:c6:c3:b7:39:28:7c:86:e8:25:da:c2: cd:7a:b3:a4:2d:5d:16:e3:d8:ff:ca:5c:f1:f5:d7:5f:9d:0a: 53:3e:ef:c4:dd:55:1c:17:63:91:3d:9d:3e:0b:84:e0:71:3c: ec:9c:a5:c8:db:b0:f1:ec:e6:af:7b:05:37:4e:50:d2:7e:ae: ea:ba:6f:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDoUxPcpFjGGWqIXQz+SzOtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmNjk4ZWViMmU0OWZjYjVmOWM2NWE5OTg1N2FmMjljZTA2 NjQxZDkwHhcNMjYwOTI4MTQwMjMzWhcNMjYwOTI5MTQwMjMzWjAzMTEwLwYDVQQD EyhmYTViZDBiYzI4YzJhNjA3NzU2NTA4N2I3NTFjNTc3ZTk2OGY3MTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkMeWTRVm42Ybiim2yxfdA6F1o7CX zjndps65v2BbScPj6a7wykcgq8mreuvQm4++IGWOJpUyrgvMN9e6IBkGCchX1AST 8zdoYdIi0QINjLkB7NKxQ5lUtgBrwXxvKrfnHPyQCBDe0TLl3Vb8AVZjk/96TMEv OdeTy1GDQ2i9ZsMAVF2C3dIMGvMgKm97+c8eo6LdgI5I5rqXk3C/JLQHi9YbnD9q /fYwFGEYNXd1n8docmf842HRKrr5vq22mAHgouOKe8dyiNpl7sDPRWLDnhGmFgkG Z3TVc52gzlvHjOWL+8o7qTjzYsUeMnnTgknawH8C7l9DD/3f5D6SUZ3QGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPpb0LwowqYHdWUIe3UcV36Wj3E9MB8GA1UdIwQY MBaAFP9pjusuSfy1+cZamYV68pzgZkHZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4Mzkt NTdjZDY4ZDljYjRlLzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi9iNGQ3NWQtOTUzYS00MDM2LTk4MzktNTdjZDY4ZDljYjRl LzEvXzJtTzZ5NUpfTFg1eGxxWmhYcnluT0JtUWRrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMjW//Tbt YeCB1VH9+EHrogvcTFxh0q3+0N8KM2gm02UxKl4Vw1ZtWd0YUKFP+doWiKpqyqKz JuzTUJgr4FME2xCycooD+X5C0+wB/75WROoyoRS4lNaPBxUJzO389G8qiIKPd0Tv yDaG/yTWAPHHtqE4owtZvpIc+wvkAhSvAHhT6N1TzVuSez7O3KGgiseK/YgpDESV 6trounooOM0eswjSWWHtN75twwLix95xfeDwt8JjHdG5Bvxqm8bDtzkofIboJdrC zXqzpC1dFuPY/8pc8fXXX50KUz7vxN1VHBdjkT2dPguE4HE87JylyNuw8ezmr3sF N05Q0n6u6rpv0Q== -----END CERTIFICATE-----Generated at Mon Sep 28 19:32:21 2026 by rpki-client