$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft File: mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft (raw, json) Hash identifier: +7a5r7M8Kj3Xe8RurcTFYm14EmCS43yhTA+3KY2eAWI= Subject key identifier: 40:5D:2F:DF:21:B6:8D:17:E4:75:9E:F7:3A:10:18:1A:FE:BA:48:20 Authority key identifier: 99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 Certificate issuer: /CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Certificate serial: 01A0C9A1BDB752BB4218B9945445AEA7D5F4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft Manifest number: 1AFB Signing time: Tue 22 Sep 2026 15:00:15 +0000 Manifest this update: Tue 22 Sep 2026 15:00:15 +0000 Manifest next update: Wed 23 Sep 2026 15:00:15 +0000 Files and hashes: 1: 5OGPGzofiEFa09GnFOAn5hhvk48.roa (hash: h2LTT9rBOO/bxXO9EO5NFwg/fB9HG26CM4uymezMPKI=) 2: IPMiCKDGg-4bycZ4wSrvvc3HolI.roa (hash: Up0dPWNya84ceqWIOnzBSjlOj2l1pRl6VXrPutXxbZ4=) 3: OyXa5XHUgsJSBsdbc3Qrhq4QU1Y.roa (hash: Gyfd0tsIEQsaZgvjHA4zwq5b2ZqvTwYd6Np55tiRmHQ=) 4: P_IQf465IziNUba5nDDuA9mYb2E.roa (hash: NtF/MIHSktYf3HQG++BY9SW33um7HsSxglhUDmVhaCg=) 5: THhHEbJLNflyjg0CGgDKLOWHmNw.roa (hash: hE5im+TYFFs2d+KHjtsfg9PpKV6WFy0Jtd49aeuY6Po=) 6: e7Lvz7EuGDsmNFIhRbwvynj9xTY.asa (hash: ns2I70ZkX4z8+mK5f+FUnkH52JTj0mfI9C5qd0rPQ1g=) 7: fAdn8Z_ML-dPlVuJzZcpwNX8yP0.roa (hash: TvHE+DlvCu4H8IA0bykF4ovpHKLwUpd/Kus76I9JyBk=) 8: mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl (hash: 0rDYc747QxywRsxz2RPM4JZISirtPQQI+t8b/oyo864=) 9: vREpqPygKpqEUBRK1WP9YRnHT1U.roa (hash: aIOz9LGkgfShAFeGoLvJK3zSpzEcpe5gJpmAOuZIS1I=) 10: z0oaUfPMt3Z_xl8gY8NTLVtXaGM.roa (hash: q9SpH5VN4ogoXvDgwfQyWPD2v94u40id/9IL4OGY508=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Sep 2026 14:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:c9:a1:bd:b7:52:bb:42:18:b9:94:54:45:ae:a7:d5:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99d5bfad45d7c65a6e343028509fd1892e97b9d0 Validity Not Before: Sep 22 15:00:15 2026 GMT Not After : Sep 23 15:00:15 2026 GMT Subject: CN=405d2fdf21b68d17e4759ef73a10181afeba4820 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:a0:d1:70:60:17:c4:17:e0:65:dd:22:74:b7: d9:cc:e1:d1:c6:80:4a:fb:dd:74:4c:0c:4d:9f:11: d5:6c:3a:47:8c:83:99:ce:0e:e9:29:47:12:64:f6: 75:83:8e:2e:ea:0b:4e:55:83:2c:a6:6f:c4:c5:8f: 72:4b:55:32:02:9b:db:a5:3d:ae:00:a4:6b:29:b9: af:a9:f9:9d:08:43:e2:b4:af:0b:1f:c6:d1:91:02: 5b:6f:a4:28:47:1c:ca:f2:f0:9a:a5:55:9c:0d:fb: da:1a:6e:64:3a:32:95:3d:24:66:af:f7:f8:a2:27: 3f:d1:48:c8:e6:13:e4:2e:63:89:5f:88:2f:63:22: fa:cb:f4:b2:3b:17:90:7c:3c:33:74:1a:cb:b3:21: 8d:30:25:a3:d5:ef:93:61:4f:d7:b3:c8:51:b4:9d: f6:a9:1b:db:b6:d5:d0:40:94:f0:54:32:dd:bb:cc: af:02:93:d4:c1:61:3d:a7:4f:bc:de:4b:3e:16:dd: ef:46:1e:80:49:8b:8f:e7:a4:b7:8c:c0:0d:71:5a: 96:a4:ce:80:6c:56:a3:f6:c8:0a:28:7c:38:40:0f: ec:48:97:54:6d:97:34:21:e6:7b:06:60:05:ad:ec: 7a:5f:05:57:ab:5e:fb:58:98:d8:91:d2:d2:b3:10: 04:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:5D:2F:DF:21:B6:8D:17:E4:75:9E:F7:3A:10:18:1A:FE:BA:48:20 X509v3 Authority Key Identifier: keyid:99:D5:BF:AD:45:D7:C6:5A:6E:34:30:28:50:9F:D1:89:2E:97:B9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mdW_rUXXxlpuNDAoUJ_RiS6XudA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/8171e3-2d29-4cb6-8a94-7551809cb731/1/mdW_rUXXxlpuNDAoUJ_RiS6XudA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:39:af:67:6e:19:3b:42:68:4b:48:3d:9b:8c:5e:51:1c:d5: 32:7a:40:e9:f5:4e:5f:1b:65:1a:15:93:46:38:e9:e4:be:ab: f6:35:a4:ea:b5:1d:23:a5:9c:f4:29:29:a3:ee:a4:58:fc:f9: af:2e:8e:6a:b8:9e:c9:de:c9:ac:e7:7a:a4:2e:fc:9d:8d:60: 1d:59:19:cf:89:d7:0a:db:1c:c2:0a:c8:cc:79:00:7d:68:d5: f3:03:7e:bf:23:68:62:f6:e4:a6:30:cf:9d:89:f5:c2:5d:53: 4c:45:1a:81:14:5b:ac:2f:93:11:80:84:da:4c:5f:45:0c:b5: be:be:95:cf:14:ae:93:21:89:c0:f8:f0:69:66:70:2d:2a:5a: 2f:de:05:3f:59:18:62:fc:30:a5:4b:13:ff:74:ad:24:94:a4: 76:75:65:81:64:ce:03:c1:a6:ca:e5:8d:b3:ab:c5:1b:a7:d5: 63:a8:f8:88:3c:95:c5:84:06:f6:95:8c:9b:d1:84:eb:1d:bb: 81:79:93:f5:63:7b:1e:19:f6:04:e6:78:1b:e4:3c:d4:31:2d: 48:c2:30:cc:17:45:e6:ae:a5:3b:1f:cd:fc:e3:6d:99:79:9a: 88:00:a0:de:dc:7b:50:a6:da:b8:1e:76:1b:b9:52:6e:43:68: 26:00:b2:a3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDJob23UrtCGLmUVEWup9X0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk5ZDViZmFkNDVkN2M2NWE2ZTM0MzAyODUwOWZkMTg5MmU5 N2I5ZDAwHhcNMjYwOTIyMTUwMDE1WhcNMjYwOTIzMTUwMDE1WjAzMTEwLwYDVQQD Eyg0MDVkMmZkZjIxYjY4ZDE3ZTQ3NTllZjczYTEwMTgxYWZlYmE0ODIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6DRcGAXxBfgZd0idLfZzOHRxoBK +910TAxNnxHVbDpHjIOZzg7pKUcSZPZ1g44u6gtOVYMspm/ExY9yS1UyApvbpT2u AKRrKbmvqfmdCEPitK8LH8bRkQJbb6QoRxzK8vCapVWcDfvaGm5kOjKVPSRmr/f4 oic/0UjI5hPkLmOJX4gvYyL6y/SyOxeQfDwzdBrLsyGNMCWj1e+TYU/Xs8hRtJ32 qRvbttXQQJTwVDLdu8yvApPUwWE9p0+83ks+Ft3vRh6ASYuP56S3jMANcVqWpM6A bFaj9sgKKHw4QA/sSJdUbZc0IeZ7BmAFrex6XwVXq177WJjYkdLSsxAEgwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEBdL98hto0X5HWe9zoQGBr+ukggMB8GA1UdIwQY MBaAFJnVv61F18ZabjQwKFCf0Ykul7nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQt NzU1MTgwOWNiNzMxLzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC84MTcxZTMtMmQyOS00Y2I2LThhOTQtNzU1MTgwOWNiNzMx LzEvbWRXX3JVWFh4bHB1TkRBb1VKX1JpUzZYdWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcDmvZ24Z O0JoS0g9m4xeURzVMnpA6fVOXxtlGhWTRjjp5L6r9jWk6rUdI6Wc9Ckpo+6kWPz5 ry6Oarieyd7JrOd6pC78nY1gHVkZz4nXCtscwgrIzHkAfWjV8wN+vyNoYvbkpjDP nYn1wl1TTEUagRRbrC+TEYCE2kxfRQy1vr6VzxSukyGJwPjwaWZwLSpaL94FP1kY YvwwpUsT/3StJJSkdnVlgWTOA8GmyuWNs6vFG6fVY6j4iDyVxYQG9pWMm9GE6x27 gXmT9WN7Hhn2BOZ4G+Q81DEtSMIwzBdF5q6lOx/N/ONtmXmaiACg3tx7UKbauB52 G7lSbkNoJgCyow== -----END CERTIFICATE-----Generated at Tue Sep 22 18:01:09 2026 by rpki-client