$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft File: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft (raw, json) Hash identifier: uT00B2XbJTFM1KsekCSDVYiDOII0llzIM8edVN3O1nc= Subject key identifier: 21:7B:5B:B3:3A:3A:A2:1D:91:2B:E6:8B:1A:D7:C3:41:A7:1B:2C:9F Authority key identifier: 0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 Certificate issuer: /CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Certificate serial: 01A0D501C9DCCE3637AFE09B13B2CA8825CA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft Manifest number: 189E Signing time: Thu 24 Sep 2026 20:00:59 +0000 Manifest this update: Thu 24 Sep 2026 20:00:59 +0000 Manifest next update: Fri 25 Sep 2026 20:00:59 +0000 Files and hashes: 1: 1-TT49rcizdqvLPJimvOy2wpPtYY.roa (hash: Mr8ZdwPM/IiY7ibw7JXGQfEO2ReyfLieMRNepnprPzE=) 2: 3JAtxwaL9PZhHZwQTT5YiNh22Fw.roa (hash: CWRHx3TZjefSlBd9NDpJRO/t7H8jBiSewFf17t/Njyw=) 3: 7y4miIX_lWfX-fN2k76SB3SrHbw.roa (hash: sGNdk8908M1ISWNMX9nM2wU9ta85DpO6L5cd7TvwES4=) 4: 8clp5oorAoBsYchPl6cs1_-_yQQ.roa (hash: aGkbot2FyDEKH3zE5peM5m5OBxwq4qCPpi/iz6/R4Ek=) 5: Cawe25tqfGGJs6n4gKI57FsVYWg.roa (hash: NB+MRtNZHu4vvSgnR8KFr0cA3CZnUgip7ZoVVLCCGZM=) 6: DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl (hash: 5F7vGTmeENQ2BxSklF3dqrdF5fHODUui7Vm0sY7fSmY=) 7: Tn3PJSMlMlIzmmP-FZ5TPbh397w.roa (hash: G7E+P3kn4Uq0XN1nP2CmPH/f6877A5TCeW8erfewEzk=) 8: YjTpXYu9NyrNBICY01OHLKH6j3c.roa (hash: L0BG0GvSHQmxeE9rdU6fttHmYduY9CqbE/eTXrcQHRQ=) 9: a3_aA8o-Hdj3p1zSlS7CIv-PMNA.roa (hash: d3XqhyCeJJcJXCDGdv5KzGLONzJ74f2hEc/ZEGAlyf0=) 10: fr-QZrPazBBhZoKl5RxUHW_lsyI.roa (hash: baaneFSMPOisaKzNlkgXnvlbeimO3h1V4sE4AAlv6Y8=) 11: gcItYV1e-J4dmkDnznqDmxsYmQk.roa (hash: CqSPJ8JBYKngu+rxorbWDUNYiEfBWAGX/fu3mmNz+QI=) 12: hArmSNbdGOWTCB88yZcFmdYTlh4.roa (hash: 7xymzSJN5yrlSsnHKXxLCTdMfGJHdPCknvmy4DP+pt0=) 13: nHgifZHPBcIw6s06tGKLHCI4zgw.roa (hash: c7ejrTFJgQw1yik3Spq12DDz0GK+Gtiw+nh8SdakP2I=) 14: upgJf2GWuY-tBaXXz-EbWegIfXw.roa (hash: WSFcnYhOO+7s2dKUiwj0OyNxd0ziOfeGAvF8AAMHs9g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 25 Sep 2026 14:17:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d5:01:c9:dc:ce:36:37:af:e0:9b:13:b2:ca:88:25:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0ef5cb2f590d041654f4dfdb60a28f9a1544f444 Validity Not Before: Sep 24 20:00:59 2026 GMT Not After : Sep 25 20:00:59 2026 GMT Subject: CN=217b5bb33a3aa21d912be68b1ad7c341a71b2c9f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:9a:02:82:88:2f:ed:84:74:7e:3a:4a:03:47: 43:6b:e0:d6:79:8b:0f:94:e4:ce:b4:c1:ed:f8:79: 06:77:79:40:63:d7:43:57:c0:3a:a9:46:e8:c7:ff: 2e:65:47:86:9a:eb:92:06:9e:a6:a1:af:9a:af:28: e9:98:33:b1:f5:86:d1:26:9a:fe:63:ac:64:47:44: 4d:aa:20:23:e1:c1:85:c9:14:8b:67:22:2b:f6:64: 8b:1e:65:06:9c:65:ef:5b:e7:a7:7b:de:cf:f9:fd: 12:41:b9:1e:91:ae:6f:bb:bb:73:de:5f:0b:b5:25: 04:20:0d:dc:57:98:23:35:42:63:23:b3:c9:96:82: 61:6a:eb:15:21:c5:c2:14:4e:50:35:35:d2:1a:ef: db:04:7f:84:a2:2b:c9:e5:0d:3e:74:ec:74:24:76: 6c:90:1b:db:cb:d9:8f:11:fe:c5:ab:7c:f7:f7:90: e5:ae:b5:52:7e:72:75:bf:a8:fb:92:01:ce:b1:7c: 37:33:26:30:be:a7:cd:59:39:06:49:dc:8f:bf:b1: 58:a0:fa:4e:24:a9:65:9c:b2:26:54:6f:fa:9a:68: 90:2d:9b:57:9b:29:27:83:9d:5a:6b:f8:83:62:d0: 65:07:3c:db:9b:01:0e:2a:21:e1:cb:bd:13:bd:47: 10:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7B:5B:B3:3A:3A:A2:1D:91:2B:E6:8B:1A:D7:C3:41:A7:1B:2C:9F X509v3 Authority Key Identifier: keyid:0E:F5:CB:2F:59:0D:04:16:54:F4:DF:DB:60:A2:8F:9A:15:44:F4:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/87/226f04-f7db-491a-bafb-ee435d3cd585/1/DvXLL1kNBBZU9N_bYKKPmhVE9EQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:bc:6c:f1:bc:4f:33:92:6b:f5:ec:4b:04:53:82:bc:6e:ae: 50:f1:d2:07:a4:c1:af:2b:2e:51:2b:db:27:12:f0:96:52:cf: 60:c7:cc:26:72:87:a4:ed:bc:7e:9d:a5:50:94:a8:f4:d1:9d: 1c:71:0e:49:f6:ce:a0:56:08:6d:66:7a:ea:88:51:4b:0f:29: 01:90:80:74:f8:b0:2c:5b:0c:69:7c:5c:be:be:b1:ac:1a:3b: d0:79:d1:66:8b:a5:2b:bf:22:19:d5:f8:6e:5c:d5:0a:d3:1b: e5:75:da:44:54:87:ed:a3:aa:52:a4:1f:af:ad:49:38:36:a6: 63:18:d3:56:26:80:2a:79:1f:44:c3:44:51:73:27:2b:97:49: 5c:c7:17:78:e8:46:72:ae:e6:63:81:0b:d7:82:86:82:6f:28: de:35:48:c1:2d:6a:b4:fb:da:69:1d:b3:cc:91:45:6c:85:64: ef:4e:47:35:02:22:56:1a:6b:4f:ee:9f:0d:51:7d:20:da:8a: da:0e:62:0a:db:d5:70:dd:d6:a2:e1:a0:f4:b3:b6:ee:5f:63: ca:a6:3d:06:bf:8b:70:7d:73:7b:6b:c3:52:54:18:b0:1e:bd: d3:ba:34:a8:0f:eb:3a:02:94:9d:f9:2b:00:b8:5a:69:18:0f: 84:70:2c:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDVAcnczjY3r+CbE7LKiCXKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlZjVjYjJmNTkwZDA0MTY1NGY0ZGZkYjYwYTI4ZjlhMTU0 NGY0NDQwHhcNMjYwOTI0MjAwMDU5WhcNMjYwOTI1MjAwMDU5WjAzMTEwLwYDVQQD EygyMTdiNWJiMzNhM2FhMjFkOTEyYmU2OGIxYWQ3YzM0MWE3MWIyYzlmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZoCgogv7YR0fjpKA0dDa+DWeYsP lOTOtMHt+HkGd3lAY9dDV8A6qUbox/8uZUeGmuuSBp6moa+aryjpmDOx9YbRJpr+ Y6xkR0RNqiAj4cGFyRSLZyIr9mSLHmUGnGXvW+ene97P+f0SQbkeka5vu7tz3l8L tSUEIA3cV5gjNUJjI7PJloJhausVIcXCFE5QNTXSGu/bBH+EoivJ5Q0+dOx0JHZs kBvby9mPEf7Fq3z395DlrrVSfnJ1v6j7kgHOsXw3MyYwvqfNWTkGSdyPv7FYoPpO JKllnLImVG/6mmiQLZtXmykng51aa/iDYtBlBzzbmwEOKiHhy70TvUcQDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCF7W7M6OqIdkSvmixrXw0GnGyyfMB8GA1UdIwQY MBaAFA71yy9ZDQQWVPTf22Cij5oVRPREMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmIt ZWU0MzVkM2NkNTg1LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84Ny8yMjZmMDQtZjdkYi00OTFhLWJhZmItZWU0MzVkM2NkNTg1 LzEvRHZYTEwxa05CQlpVOU5fYllLS1BtaFZFOUVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcbxs8bxP M5Jr9exLBFOCvG6uUPHSB6TBrysuUSvbJxLwllLPYMfMJnKHpO28fp2lUJSo9NGd HHEOSfbOoFYIbWZ66ohRSw8pAZCAdPiwLFsMaXxcvr6xrBo70HnRZoulK78iGdX4 blzVCtMb5XXaRFSH7aOqUqQfr61JODamYxjTViaAKnkfRMNEUXMnK5dJXMcXeOhG cq7mY4EL14KGgm8o3jVIwS1qtPvaaR2zzJFFbIVk705HNQIiVhprT+6fDVF9INqK 2g5iCtvVcN3WouGg9LO27l9jyqY9Br+LcH1ze2vDUlQYsB6907o0qA/rOgKUnfkr ALhaaRgPhHAsfA== -----END CERTIFICATE-----Generated at Thu Sep 24 22:52:45 2026 by rpki-client