$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft File: u2qi6QuXDRvK7tElJWMlCBFT-dA.mft (raw, json) Hash identifier: 4R1jJESOViH/U3xf8JzL7+m4MqlzFxz2yOj+IgRG6qQ= Subject key identifier: 9B:02:94:1D:95:8F:E1:93:B4:19:37:46:B9:E3:D4:33:75:0F:17:8D Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0 Certificate issuer: /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0 Certificate serial: 01A02A3BF5DEC550FCE9A19756A69F7BC4F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft Manifest number: 91 Signing time: Sat 22 Aug 2026 16:09:27 +0000 Manifest this update: Sat 22 Aug 2026 16:09:27 +0000 Manifest next update: Sun 23 Aug 2026 16:09:27 +0000 Files and hashes: 1: 1-x0LA5b_Qa7duH02aAFMCbeAziE.roa (hash: D5E/NlS1WcmJBkiWUYiira8KCkqBtxvWMFgI/iWwLtQ=) 2: 57AVFEKk7vZln1xu08ncf1wfVP8.roa (hash: DpOPXY5JzxueLGeQrTDBAs7bP1zTXtO/7VEht/dL00M=) 3: 5AtrV7yOPOGzp3dD9scm4jFp88g.roa (hash: Iyw+z4hUQvrtjBYppz1+vkyM47qxvTh/rZ/AFbdmSyE=) 4: 75cRJGWWWeEGDBP5zSNTjgoUGow.roa (hash: q+98+01kCf3O5JbXFHN6n+KofQN/z5Q/5IhPWdMNYis=) 5: 929vYbDJj4se9paqibWN3-3R8HA.roa (hash: W9ddFPxvbc6tqGzHqj597SIXQeJ26nx3+gxFSTYVhW8=) 6: D7KL_t8m5p_P5HS6tBJz60jqRuY.roa (hash: jfzjwfhBOC59qmvETUXU9tEBiy4ydRtuEjCteglCB4c=) 7: G8t30FnyqJ9nd31D40VQeRTEtBA.roa (hash: TUmnHq75alVMMqFrQcwFLzsSHCqRjTU+zq33n/KhuME=) 8: PA7a7k_FqAbOCSSdny8A5zy4pu0.roa (hash: 6VEOQ9K5YG9bmrKa0p42IftHBCyP7E0XhFsTGVC9+aE=) 9: kCEhbc-CjGlkrVP2PS1PYrIGODw.roa (hash: 9TV84/4RfuYCLfpfpR6Gh6BK5KQrek5oB2df/+w8lAo=) 10: u2qi6QuXDRvK7tElJWMlCBFT-dA.crl (hash: 8sUJWtI6pZiuK1ygytAO1eRbDs0530Hf4P00rQFlNuw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Aug 2026 14:34:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:2a:3b:f5:de:c5:50:fc:e9:a1:97:56:a6:9f:7b:c4:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0 Validity Not Before: Aug 22 16:09:27 2026 GMT Not After : Aug 23 16:09:27 2026 GMT Subject: CN=9b02941d958fe193b4193746b9e3d433750f178d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:18:62:d9:dc:2a:43:a6:59:10:5e:0f:f4:e6: 5e:94:10:b0:ae:32:ac:c1:fd:25:15:8f:ff:3c:06: e5:32:bb:8d:28:c6:33:04:32:0a:91:41:6b:0d:23: 11:34:58:8c:f1:78:98:25:dc:ce:22:45:37:36:a1: 69:6f:ef:3a:fd:87:fa:0e:a2:1b:89:96:26:c9:f1: 5c:19:b4:5f:59:c8:02:41:fe:58:a9:00:68:4e:ee: 1f:9a:4f:e6:af:f4:e0:06:09:73:b8:8e:fc:5f:a5: 9a:ab:ce:31:50:d6:cb:d4:33:bc:38:87:c3:1c:fb: 3b:17:8d:f9:fa:96:33:0f:a6:27:87:2f:e3:c5:bb: 6c:ac:6e:30:ed:6e:46:c0:98:9e:ea:e8:d3:a8:f6: ce:84:ba:85:c2:55:f1:df:91:54:8f:dc:b5:d0:1e: 8f:cc:fe:a7:54:bf:e5:61:33:d1:2a:71:a9:fe:64: 3a:b8:0a:4a:9d:e0:95:c5:f8:6d:11:30:25:0e:f5: 98:b8:58:ec:ec:35:42:25:f2:51:02:34:a1:38:99: fc:c2:16:cb:50:e1:42:9b:d1:94:3b:2f:2a:71:0c: 0d:2f:a3:aa:a6:23:73:67:c6:c9:ca:f2:0f:4b:e7: 11:b2:d5:21:48:2a:9d:ee:29:29:2e:75:25:85:95: c2:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:02:94:1D:95:8F:E1:93:B4:19:37:46:B9:E3:D4:33:75:0F:17:8D X509v3 Authority Key Identifier: keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:93:65:2f:f6:ba:2a:10:57:a3:d2:b2:91:d2:70:04:f6:cf: 92:7c:2a:e4:b2:32:8e:24:06:ca:94:19:f1:90:3d:81:30:b9: b8:d1:cc:fc:7d:b8:b0:27:ed:ee:45:50:26:f1:4d:1b:1f:ec: 0e:b9:b5:b3:d1:09:24:c0:74:9f:74:27:ff:e2:35:ff:04:58: 78:2a:62:fb:11:27:8e:cf:89:0b:df:8e:a4:b3:aa:85:d6:35: 59:1c:eb:12:f0:36:d8:3d:54:a9:4d:04:35:bd:a9:3c:ad:1e: 3f:20:c1:db:68:a5:3c:16:c1:57:be:49:1a:8e:a6:64:42:2c: f2:2a:c2:7a:0e:85:da:da:f9:49:a0:a0:99:0a:8b:fd:e9:ff: ee:74:f7:8f:7e:02:74:e3:a1:31:d9:7d:07:ca:82:ac:c4:f4: 12:d0:dc:61:06:3d:cc:a3:4f:89:a9:73:8c:fd:df:a0:52:33: af:2e:69:d1:ca:e3:c1:23:b7:0c:8b:95:36:77:70:82:af:66: af:13:4f:cb:91:3d:9f:18:c6:9c:75:95:c2:73:46:ae:16:fa: 0d:9e:dc:40:25:6c:43:8f:c8:8b:94:22:5c:5f:4b:cd:fe:72: 5b:b0:0b:56:8e:87:c0:1a:50:43:88:88:14:f8:09:a8:c1:ec: 7f:f7:ef:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAqO/XexVD86aGXVqafe8T1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNmFhMmU5MGI5NzBkMWJjYWVlZDEyNTI1NjMyNTA4MTE1 M2Y5ZDAwHhcNMjYwODIyMTYwOTI3WhcNMjYwODIzMTYwOTI3WjAzMTEwLwYDVQQD Eyg5YjAyOTQxZDk1OGZlMTkzYjQxOTM3NDZiOWUzZDQzMzc1MGYxNzhkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhhi2dwqQ6ZZEF4P9OZelBCwrjKs wf0lFY//PAblMruNKMYzBDIKkUFrDSMRNFiM8XiYJdzOIkU3NqFpb+86/Yf6DqIb iZYmyfFcGbRfWcgCQf5YqQBoTu4fmk/mr/TgBglzuI78X6Waq84xUNbL1DO8OIfD HPs7F435+pYzD6Ynhy/jxbtsrG4w7W5GwJie6ujTqPbOhLqFwlXx35FUj9y10B6P zP6nVL/lYTPRKnGp/mQ6uApKneCVxfhtETAlDvWYuFjs7DVCJfJRAjShOJn8whbL UOFCm9GUOy8qcQwNL6OqpiNzZ8bJyvIPS+cRstUhSCqd7ikpLnUlhZXCvwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJsClB2Vj+GTtBk3Rrnj1DN1DxeNMB8GA1UdIwQY MBaAFLtqoukLlw0byu7RJSVjJQgRU/nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt NzI2MDU3YTFmMmE0LzEvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0 LzEvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepNlL/a6 KhBXo9KykdJwBPbPknwq5LIyjiQGypQZ8ZA9gTC5uNHM/H24sCft7kVQJvFNGx/s Drm1s9EJJMB0n3Qn/+I1/wRYeCpi+xEnjs+JC9+OpLOqhdY1WRzrEvA22D1UqU0E Nb2pPK0ePyDB22ilPBbBV75JGo6mZEIs8irCeg6F2tr5SaCgmQqL/en/7nT3j34C dOOhMdl9B8qCrMT0EtDcYQY9zKNPialzjP3foFIzry5p0crjwSO3DIuVNndwgq9m rxNPy5E9nxjGnHWVwnNGrhb6DZ7cQCVsQ4/Ii5QiXF9Lzf5yW7ALVo6HwBpQQ4iI FPgJqMHsf/fvcg== -----END CERTIFICATE-----Generated at Sat Aug 22 21:55:13 2026 by rpki-client