$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft File: J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json) Hash identifier: 0Kkg7C6RkHdl/XhjU2nfI50JURJLZtiMAgCWggBLZ5Y= Subject key identifier: A9:52:F0:E1:BB:49:00:DC:A0:EA:4C:9F:83:30:37:B2:93:80:AD:BE Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Certificate serial: 01A089E7CD0D92B31DE9344EC39EAA38EACB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft Manifest number: 0FAB Signing time: Thu 10 Sep 2026 06:01:04 +0000 Manifest this update: Thu 10 Sep 2026 06:01:04 +0000 Manifest next update: Fri 11 Sep 2026 06:01:04 +0000 Files and hashes: 1: GVQM2fhWiAA1vaxgASrTGcM3NXg.roa (hash: qmify2cyOKHa4dPo1mFD43WN2hWzTZnDzaDfO9d6xj0=) 2: ILvL_afGBYqG8JBvyBOjNle1meU.roa (hash: FpoDCBUDymC1x5/mCiLH7CBZidOwMMBt/UJmW1vuU7I=) 3: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: zgaJml67dl2hZqk060C/iDeQ3k8sT//aQHlIIPGvkFU=) 4: MPe538bYpU8guVH5-86a4aQXXWo.roa (hash: r21A8jzF/GtpSrRHEgbvnBNm4NeKTp/0Wc3vPf+aR0s=) 5: MuaQsZpK85YLuwzSbgYhrnef72s.roa (hash: bdvuUkwflnueXXPnGyW7DncDokUJqOrDxizqAK6rLFQ=) 6: OIf5o3TuUaTGCWR1GyZJ8zyr1DU.roa (hash: Id91w3MsfuN+1fBJYgr9h61G7NpSD3kW83pc4b6qwCg=) 7: WRGpi7HwRnNDY3PI2oGKfGXaKgI.roa (hash: LFMATL8ZKYUpfJmXC93H6TmCx5lCUajaaJNv71P4C9w=) 8: _jP7HoE6xSVGQtiue_1k6La3slE.roa (hash: lNbPgbdDGD01z1JbLvmrn22+TQAyCpvm6Vuj52vD43Q=) 9: c_so8ZAo99s903KgX6q1bd_ayQY.roa (hash: qk06hv+tknoEnl/WncFnILZI0t8DHr6k+PuJJrOlT6s=) 10: l-al53GTn2U3_oux5KceKXfKkVM.roa (hash: VwmHIGN92Mm8C6FgCJrZ5LFSIkTya2qnm7OsmBE8eyE=) 11: nI8D-AwVuUhZS_gQCeDbQORZ77k.roa (hash: zi3GVIgGpTx+NCwINdJlKP5OnWevf0ir3DqN9LIx3e8=) 12: zsjg_uNpmMmffhFlupWb75dFOf8.roa (hash: HE/uSl70PUzAoBt7ot8n4K8Er2xcIutkfXUuzgDxPFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 06:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:e7:cd:0d:92:b3:1d:e9:34:4e:c3:9e:aa:38:ea:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Validity Not Before: Sep 10 06:01:04 2026 GMT Not After : Sep 11 06:01:04 2026 GMT Subject: CN=a952f0e1bb4900dca0ea4c9f833037b29380adbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:43:04:97:78:81:e2:6d:2b:3b:e3:89:df:65: 23:8a:1d:7a:64:50:4d:0f:6d:70:95:21:4f:4a:03: 42:b0:b8:5c:93:67:a6:25:8f:8c:bd:36:00:04:28: dd:1c:58:93:13:3c:ea:28:8e:c6:23:fb:01:f1:ab: d2:a1:4c:a5:a1:63:c2:25:79:48:bb:33:4d:f9:d6: f9:4b:d2:0f:1e:3c:b4:31:22:50:0a:a3:2f:c0:8a: 91:4d:b8:8d:62:14:28:8c:72:1e:af:24:d9:ed:72: 8b:7b:ef:d0:4f:c0:f9:0d:f7:b7:78:7e:87:c4:71: 9b:ee:c0:0f:1a:f3:75:33:ec:73:b9:cc:50:1a:3f: d7:07:15:33:bc:0f:67:74:30:4e:d7:a3:44:2b:d6: fb:a2:61:b7:fe:c8:e6:41:c1:c8:89:72:26:e0:02: 6b:f5:d3:50:b4:bc:ed:34:43:6b:eb:93:d4:cb:a7: 5a:3d:90:b5:e2:d8:17:63:54:f2:5b:96:68:87:91: 8b:c9:9a:71:5e:c0:9a:26:e9:1d:8e:84:a0:a6:67: 8f:03:42:ce:16:80:4c:54:25:35:e6:8c:c2:03:96: b2:d9:59:ea:95:9a:bd:2f:d5:b6:80:64:be:89:a2: b5:3a:62:eb:91:42:28:28:d0:e4:04:69:f6:13:0f: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:52:F0:E1:BB:49:00:DC:A0:EA:4C:9F:83:30:37:B2:93:80:AD:BE X509v3 Authority Key Identifier: keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4d:1d:96:d4:fc:1b:17:20:55:b6:b5:a0:07:57:d8:3a:75: 7b:27:c5:36:51:00:f7:8b:a7:fb:92:d4:33:a1:57:8f:76:34: 5b:ee:18:0d:c0:a4:08:7f:38:57:f2:03:74:98:37:40:00:e5: 10:08:15:00:be:e7:51:35:0e:a1:28:89:24:25:71:e6:a4:c5: ef:bc:36:af:8d:c7:01:1a:84:65:64:db:02:3f:73:b2:04:61: cb:08:7e:c3:d6:2a:1f:3f:9d:c3:0d:c8:d8:e9:34:15:75:50: 9e:fc:6b:8d:fe:25:05:a0:ca:fb:de:90:f0:9a:24:bd:59:77: f2:fc:e5:88:53:5e:94:71:44:6e:38:7f:2f:5e:40:23:1b:27: d6:50:d5:cf:40:13:81:70:6b:b8:35:08:65:a2:b2:70:32:42: 33:e1:dc:6a:ba:67:61:be:ba:7c:0e:3b:be:fd:e5:45:07:0b: 1c:1f:ab:40:e4:91:20:17:86:d3:36:eb:1e:9a:a9:f9:9e:74: 12:f6:a3:e9:2e:aa:e6:fd:6e:09:2b:88:07:aa:cf:b0:ff:0c: 05:ee:65:2b:aa:eb:9f:99:fe:aa:b2:0c:1d:19:c8:cf:ed:d7: 6e:2e:ad:5a:89:31:89:a5:a1:ec:44:c2:a9:b6:94:36:ad:d7: da:d7:e7:79 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJ580NkrMd6TROw56qOOrLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5 ZmMyYzkwHhcNMjYwOTEwMDYwMTA0WhcNMjYwOTExMDYwMTA0WjAzMTEwLwYDVQQD EyhhOTUyZjBlMWJiNDkwMGRjYTBlYTRjOWY4MzMwMzdiMjkzODBhZGJlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukMEl3iB4m0rO+OJ32Ujih16ZFBN D21wlSFPSgNCsLhck2emJY+MvTYABCjdHFiTEzzqKI7GI/sB8avSoUyloWPCJXlI uzNN+db5S9IPHjy0MSJQCqMvwIqRTbiNYhQojHIeryTZ7XKLe+/QT8D5Dfe3eH6H xHGb7sAPGvN1M+xzucxQGj/XBxUzvA9ndDBO16NEK9b7omG3/sjmQcHIiXIm4AJr 9dNQtLztNENr65PUy6daPZC14tgXY1TyW5Zoh5GLyZpxXsCaJukdjoSgpmePA0LO FoBMVCU15ozCA5ay2VnqlZq9L9W2gGS+iaK1OmLrkUIoKNDkBGn2Ew8/SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlS8OG7SQDcoOpMn4MwN7KTgK2+MB8GA1UdIwQY MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct MWM2ZWU0NGUxMWFkLzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoE0dltT8 GxcgVba1oAdX2Dp1eyfFNlEA94un+5LUM6FXj3Y0W+4YDcCkCH84V/IDdJg3QADl EAgVAL7nUTUOoSiJJCVx5qTF77w2r43HARqEZWTbAj9zsgRhywh+w9YqHz+dww3I 2Ok0FXVQnvxrjf4lBaDK+96Q8JokvVl38vzliFNelHFEbjh/L15AIxsn1lDVz0AT gXBruDUIZaKycDJCM+HcarpnYb66fA47vv3lRQcLHB+rQOSRIBeG0zbrHpqp+Z50 Evaj6S6q5v1uCSuIB6rPsP8MBe5lK6rrn5n+qrIMHRnIz+3Xbi6tWokxiaWh7ETC qbaUNq3X2tfneQ== -----END CERTIFICATE-----Generated at Thu Sep 10 11:18:35 2026 by rpki-client