$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft File: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft (raw, json) Hash identifier: OF4f7BowwhexiAKg4j/fc7MK1mvZ6JEWUikm+gNrfJw= Subject key identifier: 73:4E:33:98:7B:F1:2B:73:96:9F:48:19:FF:93:13:D6:ED:22:CD:1C Authority key identifier: 3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 Certificate issuer: /CN=3eb1788fe220e46434692d1cc437072d792d7888 Certificate serial: 01A0E663EA4B46940E0F33423AC8C09BA2D1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft Manifest number: 1A7E Signing time: Mon 28 Sep 2026 05:01:42 +0000 Manifest this update: Mon 28 Sep 2026 05:01:42 +0000 Manifest next update: Tue 29 Sep 2026 05:01:42 +0000 Files and hashes: 1: 2MINrSF-904_xnWHt9aLmREzfgM.roa (hash: 2JlxQCyPp6ZuyhE6H5mjVo5s7oH/wwZoUZTFvN2689w=) 2: 5ofwE8fWcu41y5nE1W98Xt08B9U.roa (hash: vBHKAReKnkwdzg96lnBkzkJIhU9wk+NEk4UwhyvZN8M=) 3: 6D7xnslgrR1jYkhOQFOsCCy_Ilo.roa (hash: vZ6+RacR9VxPA5+UlqTbSm8U/9rgsp0IuJGD6MdbbQo=) 4: DXimx1XY9etEzx_enIQDGBa9bm4.roa (hash: PZFvhgHYjMFhesaC5VQQRMgpbART5/jL2VnPsqgnMoo=) 5: J1cLQGWUhIVSfZKk_j_qK7xfNRk.roa (hash: txu0I6tcoeoOCvYRp5YDtz869JeJI1kFO2/j3Mpeh2A=) 6: PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl (hash: XrE5PBvqbNog8zqgJ61ZS0LUPJB2p9E9I4H5vWNH468=) 7: WzKCG2YANYwDiCPMEDnF3wWEIL4.asa (hash: j0Le2/fYLgItT8RcFxl99L6MkmGjdvtEmpaCnBgE1Nw=) 8: h7z0dcjyEiQrTlWfLJHvO8mytLk.asa (hash: wvs5YngkGWwMTiaT1xG6NC51mWPXd//9JXNAJ/RSeS4=) 9: kOMx0_xNVRgDDoEQ7tlUClFr3ws.asa (hash: 0ziRnXqAEvChx1eTjtol5U+/7UMoVmq7jdKvDvVj9NA=) 10: kjwvRpYiwOhcBYij8xZk0n0qpVs.asa (hash: eLOVHbyXbAmwSoR/i5JEDYllBqHeZO1blxzW1aKtYRM=) 11: taTHP1eAZV5DFgScGmkLmOoYJTk.roa (hash: w4zToqhdyScOj4eQSJZgMvLZqXoAq5qiIOEJ0CUK/zQ=) 12: zh7TzogLebptNJwvcCWZ7OOFbkA.asa (hash: KV2Noq8YepqhgkaIi7JvU21NOnAiECfq1AqTeUrEQYc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 05:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e6:63:ea:4b:46:94:0e:0f:33:42:3a:c8:c0:9b:a2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3eb1788fe220e46434692d1cc437072d792d7888 Validity Not Before: Sep 28 05:01:42 2026 GMT Not After : Sep 29 05:01:42 2026 GMT Subject: CN=734e33987bf12b73969f4819ff9313d6ed22cd1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:fa:44:2e:9d:5a:d5:bf:e6:13:b9:23:b4:bb: 5d:64:97:b4:fb:35:82:1e:f7:4b:6f:ac:36:f9:02: e5:29:49:01:14:cb:91:9b:88:16:05:d0:73:d3:e3: e7:d5:1e:60:85:85:00:1a:4e:51:ab:78:d2:40:c8: fe:4d:28:26:c4:06:be:7a:ba:f5:84:80:b1:27:a5: f9:9b:4b:52:1e:f8:a5:df:51:8c:e4:0f:fe:75:94: 1b:1e:ba:d9:1d:c9:80:9d:09:44:e2:15:b9:9e:9a: 6b:4b:07:f3:10:42:85:7d:50:46:51:8d:a5:99:f6: 43:3f:b0:bb:1d:94:99:0a:2a:76:f6:d5:e5:5b:e1: fd:cb:b0:f0:fe:39:ab:3c:73:79:e5:71:b0:37:0c: 68:d6:d8:da:2c:59:22:e4:f8:03:61:ec:3b:2b:49: da:9e:ac:44:96:76:c1:70:a0:27:a9:26:c0:46:41: ae:16:77:07:c9:48:23:2e:24:0a:ae:b7:2d:c1:ea: 1c:46:23:31:7f:e5:da:d6:eb:79:ef:06:d6:09:a5: d0:92:23:52:db:37:bd:3e:4e:0a:c7:80:1f:e8:e2: 44:70:e5:af:57:6b:c0:53:7d:ed:13:44:4e:a0:6b: 28:ef:82:b1:48:d7:a2:a0:f9:c0:32:e2:bf:02:f0: 49:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:4E:33:98:7B:F1:2B:73:96:9F:48:19:FF:93:13:D6:ED:22:CD:1C X509v3 Authority Key Identifier: keyid:3E:B1:78:8F:E2:20:E4:64:34:69:2D:1C:C4:37:07:2D:79:2D:78:88 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/22f570-0b26-4004-8ed0-d9509473072c/1/PrF4j-Ig5GQ0aS0cxDcHLXkteIg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:fc:de:cf:bc:b5:9d:83:05:6f:a5:58:2a:db:4a:e0:c8:4b: b9:52:fe:83:9e:f9:08:e3:54:8f:89:30:20:63:a9:16:d0:55: 19:fc:32:1e:e5:a0:eb:9f:6f:8f:a7:94:60:c3:c1:79:5c:49: 42:35:d3:e7:41:09:00:bb:dc:3d:af:d9:98:2a:14:55:bd:f7: 10:8a:03:a8:d4:aa:f7:f9:c0:46:98:b9:79:e0:3b:99:87:1a: 3b:d2:c0:a0:4c:9e:0f:26:f4:71:27:85:47:69:3e:57:31:59: 64:d9:28:4c:60:ac:48:af:bf:aa:1b:23:9b:b4:2b:61:f9:00: 05:ea:8f:17:b0:54:25:4f:76:b4:f4:5e:b3:13:32:4a:e3:41: a1:b2:b4:db:81:35:32:98:91:56:e2:08:48:6f:1d:c8:c1:ec: 8b:9f:9c:0f:3c:5a:65:b4:43:84:dd:b2:cb:ac:55:f3:e0:8b: 31:4b:33:8f:5a:55:8e:66:df:d3:a7:67:98:56:2d:71:f8:65: f2:3f:4b:01:e9:69:3e:7f:66:53:02:58:70:1f:0e:c4:0a:c9: 5c:79:e9:b7:c4:d6:d9:a8:35:fe:d5:08:12:61:09:d5:4d:ff: e1:ad:46:d3:ad:b0:11:7e:03:89:4c:10:3b:5a:6a:21:24:15: f5:54:9e:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDmY+pLRpQODzNCOsjAm6LRMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNlYjE3ODhmZTIyMGU0NjQzNDY5MmQxY2M0MzcwNzJkNzky ZDc4ODgwHhcNMjYwOTI4MDUwMTQyWhcNMjYwOTI5MDUwMTQyWjAzMTEwLwYDVQQD Eyg3MzRlMzM5ODdiZjEyYjczOTY5ZjQ4MTlmZjkzMTNkNmVkMjJjZDFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvpELp1a1b/mE7kjtLtdZJe0+zWC HvdLb6w2+QLlKUkBFMuRm4gWBdBz0+Pn1R5ghYUAGk5Rq3jSQMj+TSgmxAa+err1 hICxJ6X5m0tSHvil31GM5A/+dZQbHrrZHcmAnQlE4hW5npprSwfzEEKFfVBGUY2l mfZDP7C7HZSZCip29tXlW+H9y7Dw/jmrPHN55XGwNwxo1tjaLFki5PgDYew7K0na nqxElnbBcKAnqSbARkGuFncHyUgjLiQKrrctweocRiMxf+Xa1ut57wbWCaXQkiNS 2ze9Pk4Kx4Af6OJEcOWvV2vAU33tE0ROoGso74KxSNeioPnAMuK/AvBJKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHNOM5h78Stzlp9IGf+TE9btIs0cMB8GA1UdIwQY MBaAFD6xeI/iIORkNGktHMQ3By15LXiIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAt ZDk1MDk0NzMwNzJjLzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84ZS8yMmY1NzAtMGIyNi00MDA0LThlZDAtZDk1MDk0NzMwNzJj LzEvUHJGNGotSWc1R1EwYVMwY3hEY0hMWGt0ZUlnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPzez7y1 nYMFb6VYKttK4MhLuVL+g575CONUj4kwIGOpFtBVGfwyHuWg659vj6eUYMPBeVxJ QjXT50EJALvcPa/ZmCoUVb33EIoDqNSq9/nARpi5eeA7mYcaO9LAoEyeDyb0cSeF R2k+VzFZZNkoTGCsSK+/qhsjm7QrYfkABeqPF7BUJU92tPResxMySuNBobK024E1 MpiRVuIISG8dyMHsi5+cDzxaZbRDhN2yy6xV8+CLMUszj1pVjmbf06dnmFYtcfhl 8j9LAelpPn9mUwJYcB8OxArJXHnpt8TW2ag1/tUIEmEJ1U3/4a1G062wEX4DiUwQ O1pqISQV9VSeQw== -----END CERTIFICATE-----Generated at Mon Sep 28 16:38:25 2026 by rpki-client