$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft File: RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft (raw, json) Hash identifier: k9tkeXPB/Tt+vSalo1vyUPhjaZqF9uj9yj2iLDrEMwQ= Subject key identifier: 70:C4:80:CA:03:57:8C:81:63:1F:4F:D0:12:07:A6:A8:77:33:EB:4B Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33 Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533 Certificate serial: 01A05A442D8F0B9A911C9BD56723DDA90684 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft Manifest number: A8 Signing time: Tue 01 Sep 2026 00:00:12 +0000 Manifest this update: Tue 01 Sep 2026 00:00:12 +0000 Manifest next update: Wed 02 Sep 2026 00:00:12 +0000 Files and hashes: 1: 27SFGjL64PRRMSLcGYBH49SrHwY.roa (hash: PITM8gWftdzoJkt0rkZ9FWqRBqnEUQ3T5vRe+zc5/CY=) 2: 5tISpF8rQEYFqX2FwQmh5rWJ0Zk.roa (hash: AczR6yQs7ci1IaX5b+iS3KJri6446eAoxlf9O/ku2LE=) 3: CFo5ABZ8MUKR3Fd6UO8--zq7M8k.roa (hash: 2+XQO3qwflJmVUasaub9xdlpRBF+UPsxhcWzlGiEL9U=) 4: CJ-zj836A3TR54KML6nA2kNlyiY.roa (hash: AuGdHKTStnhkWfUpHj8s2x6Pp9jt1yZgqVw4hJJIo3Y=) 5: HLt3ChQvLj8LY2RlhdFsx32ZjtQ.roa (hash: wKiOyGKSsl/R2H5PXAn1g9VUgp4V7yTcuvPe7XIgMUI=) 6: N1LDUBXoMuyaQ5RB_L5TdL6A_bo.roa (hash: ydFk7XHt/wPpdtN+nRxyF+IGde9jjOJbhdYJVNBXgSE=) 7: RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl (hash: J3AztmFrRjkNRh+/VsZGzdGBnQHvjmG0QzDJ8NEoY6c=) 8: fJB8oRf1C6vKaO7myZ7LMHrSK0E.roa (hash: Z3DT4Iuv/+d3kQTawlogZW0GVTOl0W6XRptIt8v4Yuc=) 9: nk9xUVbrQk03Ta5kBEtwBRsxj3o.roa (hash: y8rjtAjlPGYqktsMfNPd+YZPmUHg0mqok5iv3DPzIpQ=) 10: qfTY39j6wENhgC39URgloBvaDwc.roa (hash: MJgSYqEnjtZo7TnO5PmqwrhzDK5fq5ePybyEEHZ72Z8=) 11: xNYBtHtKlWI4iA2yM39CNxxB3YE.roa (hash: c5VvgWr2oNDztERgklFXuCsqKhPSllyvYEbuD8nPSxI=) 12: zaDnFGvlfelI_tMjoTP339vPBGw.roa (hash: 6zQB6LLudq9lrD59fSKuhQnrVhHCZxEGxEn2HPI44zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 01 Sep 2026 21:38:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:5a:44:2d:8f:0b:9a:91:1c:9b:d5:67:23:dd:a9:06:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533 Validity Not Before: Sep 1 00:00:12 2026 GMT Not After : Sep 2 00:00:12 2026 GMT Subject: CN=70c480ca03578c81631f4fd01207a6a87733eb4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:0f:10:99:c1:7f:f4:c3:17:62:08:ed:a0:1e: 85:d6:73:62:a6:c1:8c:52:0c:66:04:02:48:8b:f6: ed:c9:b7:c8:95:d5:3b:25:a0:05:34:e3:80:78:96: 0a:eb:c7:07:f5:b1:18:67:f7:c0:c7:3d:72:06:02: a6:6a:83:e0:ef:d1:6c:1c:32:2c:0b:04:1c:d4:3f: a6:76:28:51:29:e8:10:99:96:f9:8f:26:6b:d3:39: 45:df:e9:c9:27:ea:9e:37:1f:f2:ea:c8:39:33:b5: 12:f6:1b:b9:3a:3e:04:05:6b:97:8c:8e:fa:16:9f: 6e:1d:da:11:13:3a:e2:6f:23:6f:64:20:bb:95:a2: ab:07:24:0f:c3:7a:54:88:1d:40:11:ca:85:d1:d9: b1:f0:72:d4:29:25:a0:cb:6b:0b:85:26:36:e9:1a: df:91:b8:23:60:80:b3:f0:68:52:21:43:c9:c5:64: c2:13:fb:62:13:df:5a:38:57:76:42:7f:0e:7c:7b: 3a:83:f9:a2:6e:40:98:3f:dc:2e:5f:82:5e:3b:01: a3:9c:2b:88:f3:eb:91:32:44:21:38:ef:87:c6:f0: 8f:57:db:16:b3:ae:99:19:b3:e1:26:e1:63:ad:d9: 04:cd:ca:ec:90:fe:86:86:c4:31:f1:c6:e2:6c:f2: 39:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C4:80:CA:03:57:8C:81:63:1F:4F:D0:12:07:A6:A8:77:33:EB:4B X509v3 Authority Key Identifier: keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:7f:24:15:96:0b:6f:a1:4c:95:66:50:e8:fb:2f:0b:82:d9: f3:ac:b0:9a:05:28:8d:9d:5c:f9:21:93:d2:6f:4f:84:95:32: b0:3b:ab:0d:cc:b6:76:28:f9:0b:2f:e2:1d:ad:a6:bc:d1:b2: f5:d9:fa:a5:6b:c5:7c:09:98:29:e3:e2:bd:64:67:3f:ee:71: 6b:e3:ad:9d:fe:74:af:5d:6c:24:e8:8c:9b:72:73:6f:b2:99: b4:16:2f:c7:b7:d6:33:cd:1a:d3:4b:98:16:ce:ea:95:3c:c5: b3:b4:11:32:da:8f:bf:4d:52:81:0b:1c:17:57:09:c8:0a:54: d8:41:5d:f4:46:3d:99:e3:ec:27:e4:00:d4:9f:ab:6e:63:69: 36:62:4a:31:cb:02:a4:bd:33:cc:e5:db:69:e7:7b:47:b8:e1: 55:40:ac:8e:b8:ec:c3:ec:46:6d:17:68:38:28:90:9c:46:90: 0b:d1:fb:0d:94:bb:6a:d9:2a:6f:25:f1:e9:10:7e:ac:06:b1: 12:62:16:af:63:d1:78:d4:37:46:09:b3:14:a9:7c:b8:4a:9c: 58:9b:56:d0:d3:5c:bf:6f:42:12:9d:77:97:7f:b0:82:f0:55: b1:ce:29:7d:b5:a4:fd:dc:51:5e:99:6e:21:07:0f:5d:75:f7: 00:29:da:af -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBaRC2PC5qRHJvVZyPdqQaEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTkxMjA4MDljMjNiZjMwMzNlM2Y1NzM5OTUyNzZmMGM3 YTI1MzMwHhcNMjYwOTAxMDAwMDEyWhcNMjYwOTAyMDAwMDEyWjAzMTEwLwYDVQQD Eyg3MGM0ODBjYTAzNTc4YzgxNjMxZjRmZDAxMjA3YTZhODc3MzNlYjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQ8QmcF/9MMXYgjtoB6F1nNipsGM UgxmBAJIi/btybfIldU7JaAFNOOAeJYK68cH9bEYZ/fAxz1yBgKmaoPg79FsHDIs CwQc1D+mdihRKegQmZb5jyZr0zlF3+nJJ+qeNx/y6sg5M7US9hu5Oj4EBWuXjI76 Fp9uHdoREzribyNvZCC7laKrByQPw3pUiB1AEcqF0dmx8HLUKSWgy2sLhSY26Rrf kbgjYICz8GhSIUPJxWTCE/tiE99aOFd2Qn8OfHs6g/mibkCYP9wuX4JeOwGjnCuI 8+uRMkQhOO+HxvCPV9sWs66ZGbPhJuFjrdkEzcrskP6GhsQx8cbibPI5PQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHDEgMoDV4yBYx9P0BIHpqh3M+tLMB8GA1UdIwQY MBaAFERZEggJwjvzAz4/VzmVJ28MeiUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASn8kFZYL b6FMlWZQ6PsvC4LZ86ywmgUojZ1c+SGT0m9PhJUysDurDcy2dij5Cy/iHa2mvNGy 9dn6pWvFfAmYKePivWRnP+5xa+Otnf50r11sJOiMm3Jzb7KZtBYvx7fWM80a00uY Fs7qlTzFs7QRMtqPv01SgQscF1cJyApU2EFd9EY9mePsJ+QA1J+rbmNpNmJKMcsC pL0zzOXbaed7R7jhVUCsjrjsw+xGbRdoOCiQnEaQC9H7DZS7atkqbyXx6RB+rAax EmIWr2PReNQ3RgmzFKl8uEqcWJtW0NNcv29CEp13l3+wgvBVsc4pfbWk/dxRXplu IQcPXXX3ACnarw== -----END CERTIFICATE-----Generated at Tue Sep 1 04:20:24 2026 by rpki-client