$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft File: u2qi6QuXDRvK7tElJWMlCBFT-dA.mft (raw, json) Hash identifier: +P8PWmfIJihgoh795ZhX9n4zja5QXPiHRCchA/egCc0= Subject key identifier: EE:C1:48:F8:01:70:A8:B3:C6:8C:A5:3C:12:B9:18:29:62:39:3C:E2 Authority key identifier: BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0 Certificate issuer: /CN=bb6aa2e90b970d1bcaeed125256325081153f9d0 Certificate serial: 01A120C0C7E7F603914301812C7A979573A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft Manifest number: 0112 Signing time: Fri 09 Oct 2026 13:01:07 +0000 Manifest this update: Fri 09 Oct 2026 13:01:07 +0000 Manifest next update: Sat 10 Oct 2026 13:01:07 +0000 Files and hashes: 1: 1-x0LA5b_Qa7duH02aAFMCbeAziE.roa (hash: D5E/NlS1WcmJBkiWUYiira8KCkqBtxvWMFgI/iWwLtQ=) 2: 57AVFEKk7vZln1xu08ncf1wfVP8.roa (hash: DpOPXY5JzxueLGeQrTDBAs7bP1zTXtO/7VEht/dL00M=) 3: 5AtrV7yOPOGzp3dD9scm4jFp88g.roa (hash: Iyw+z4hUQvrtjBYppz1+vkyM47qxvTh/rZ/AFbdmSyE=) 4: 75cRJGWWWeEGDBP5zSNTjgoUGow.roa (hash: q+98+01kCf3O5JbXFHN6n+KofQN/z5Q/5IhPWdMNYis=) 5: 929vYbDJj4se9paqibWN3-3R8HA.roa (hash: W9ddFPxvbc6tqGzHqj597SIXQeJ26nx3+gxFSTYVhW8=) 6: G8t30FnyqJ9nd31D40VQeRTEtBA.roa (hash: TUmnHq75alVMMqFrQcwFLzsSHCqRjTU+zq33n/KhuME=) 7: GyWzmF_PpZ9N7VpvNUnUwxN8sIg.roa (hash: aO6JHojQKb2l7UaVOSnTv4mzQmmXqQjYDswxCMnwBH4=) 8: R6r6-4m3eXKt8b9AzresZI1lWHc.roa (hash: 8di1Oi8xGenPm6U4E5v0M/GzUjBIZHCPAo+Pu/wQRBU=) 9: kCEhbc-CjGlkrVP2PS1PYrIGODw.roa (hash: 9TV84/4RfuYCLfpfpR6Gh6BK5KQrek5oB2df/+w8lAo=) 10: u2qi6QuXDRvK7tElJWMlCBFT-dA.crl (hash: lfJHaOEUfIdnPa2FXcBhURYmEHhDEdVWvGfuAVkkyYA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Oct 2026 13:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:20:c0:c7:e7:f6:03:91:43:01:81:2c:7a:97:95:73:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bb6aa2e90b970d1bcaeed125256325081153f9d0 Validity Not Before: Oct 9 13:01:07 2026 GMT Not After : Oct 10 13:01:07 2026 GMT Subject: CN=eec148f80170a8b3c68ca53c12b9182962393ce2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d5:21:22:09:ce:3b:8f:24:4d:c3:4d:d0:e2: 33:18:05:74:bb:26:eb:70:e7:a3:04:49:c4:fb:86: 55:13:8a:12:b6:e9:8d:1b:81:a7:68:58:d5:2a:9b: e1:f4:b7:60:ad:98:1f:6b:f2:cf:34:d1:31:0b:5c: e5:64:52:f9:e0:e7:65:91:60:80:a2:01:c3:75:ac: 71:7f:ab:03:04:aa:20:06:51:f0:90:3d:52:65:31: bf:29:d1:60:68:96:af:72:43:30:0b:bf:ea:1b:47: 73:a2:e4:bc:80:a4:11:be:ad:b9:e8:b0:90:7a:d4: 94:c5:a7:d2:0b:06:69:9e:2e:9e:c3:e9:a7:4a:6b: 3c:64:eb:54:6a:33:eb:84:14:ba:44:f0:97:45:ca: 0f:1c:00:8e:e6:0b:41:42:4d:8e:28:2d:d9:dd:87: 5f:30:49:fb:50:14:28:77:2b:eb:e3:23:69:1f:f0: 88:63:67:48:aa:a5:d9:9b:ac:d6:a2:b0:c0:dc:fd: f4:7a:bc:fa:8a:b3:7b:c0:b1:28:8d:a9:21:97:e8: 12:18:86:c0:8d:af:3a:a7:a2:94:ac:b2:86:07:01: 08:88:de:6b:c9:91:bc:73:32:99:b4:29:3a:bd:b9: 5f:1d:1c:a5:b9:1b:d4:55:72:5b:f8:a3:bb:df:35: 98:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:C1:48:F8:01:70:A8:B3:C6:8C:A5:3C:12:B9:18:29:62:39:3C:E2 X509v3 Authority Key Identifier: keyid:BB:6A:A2:E9:0B:97:0D:1B:CA:EE:D1:25:25:63:25:08:11:53:F9:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u2qi6QuXDRvK7tElJWMlCBFT-dA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/12eaad-8a45-4789-bab5-726057a1f2a4/1/u2qi6QuXDRvK7tElJWMlCBFT-dA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:c5:11:f7:e3:4c:59:a4:ef:d1:aa:67:5b:01:5f:6a:02:28: 34:16:d4:52:4c:d5:25:da:5c:1c:f3:91:e4:f5:5f:d1:e9:e5: 00:7a:83:1e:f1:54:89:93:b6:45:55:c1:fc:bb:59:02:8e:ce: 52:cc:4a:46:cb:d5:17:ff:43:77:05:da:a8:38:95:2f:27:3b: 74:e7:1a:bf:17:03:b5:cd:d3:f4:5f:d9:3a:6c:b9:1c:af:b6: 00:bf:8c:a0:33:00:b5:39:f6:87:26:f4:b3:57:8b:75:f0:0b: 28:00:e2:53:4b:d4:03:69:4e:12:9c:01:c7:d3:88:39:6a:55: 07:48:6c:83:6f:bd:ba:a4:42:9e:88:8d:d6:5d:05:19:a2:26: 85:8b:fa:3f:38:24:57:75:1d:aa:fb:7e:3f:f0:36:01:62:22: 60:20:5e:a2:f2:0d:96:8d:ee:60:09:b2:f3:15:ef:fc:32:aa: 73:6f:90:6c:57:a5:0e:1d:9a:98:10:f5:c4:c3:ce:16:e4:fc: d8:66:68:f0:99:f1:1a:85:c3:db:15:c2:a9:d7:e2:c5:93:f0: d2:f6:73:50:68:72:8f:5a:74:eb:de:41:54:0c:82:db:5e:ad: 0b:57:dd:ca:2f:82:62:f0:2e:e0:1a:7d:0f:4c:85:a4:b9:ad: b6:41:89:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEgwMfn9gORQwGBLHqXlXOpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiNmFhMmU5MGI5NzBkMWJjYWVlZDEyNTI1NjMyNTA4MTE1 M2Y5ZDAwHhcNMjYxMDA5MTMwMTA3WhcNMjYxMDEwMTMwMTA3WjAzMTEwLwYDVQQD EyhlZWMxNDhmODAxNzBhOGIzYzY4Y2E1M2MxMmI5MTgyOTYyMzkzY2UyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNUhIgnOO48kTcNN0OIzGAV0uybr cOejBEnE+4ZVE4oStumNG4GnaFjVKpvh9LdgrZgfa/LPNNExC1zlZFL54OdlkWCA ogHDdaxxf6sDBKogBlHwkD1SZTG/KdFgaJavckMwC7/qG0dzouS8gKQRvq256LCQ etSUxafSCwZpni6ew+mnSms8ZOtUajPrhBS6RPCXRcoPHACO5gtBQk2OKC3Z3Ydf MEn7UBQodyvr4yNpH/CIY2dIqqXZm6zWorDA3P30erz6irN7wLEojakhl+gSGIbA ja86p6KUrLKGBwEIiN5ryZG8czKZtCk6vblfHRyluRvUVXJb+KO73zWYXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO7BSPgBcKizxoylPBK5GCliOTziMB8GA1UdIwQY MBaAFLtqoukLlw0byu7RJSVjJQgRU/nQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUt NzI2MDU3YTFmMmE0LzEvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yy8xMmVhYWQtOGE0NS00Nzg5LWJhYjUtNzI2MDU3YTFmMmE0 LzEvdTJxaTZRdVhEUnZLN3RFbEpXTWxDQkZULWRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI8UR9+NM WaTv0apnWwFfagIoNBbUUkzVJdpcHPOR5PVf0enlAHqDHvFUiZO2RVXB/LtZAo7O UsxKRsvVF/9DdwXaqDiVLyc7dOcavxcDtc3T9F/ZOmy5HK+2AL+MoDMAtTn2hyb0 s1eLdfALKADiU0vUA2lOEpwBx9OIOWpVB0hsg2+9uqRCnoiN1l0FGaImhYv6Pzgk V3Udqvt+P/A2AWIiYCBeovINlo3uYAmy8xXv/DKqc2+QbFelDh2amBD1xMPOFuT8 2GZo8JnxGoXD2xXCqdfixZPw0vZzUGhyj1p0695BVAyC216tC1fdyi+CYvAu4Bp9 D0yFpLmttkGJAw== -----END CERTIFICATE-----Generated at Fri Oct 9 23:16:24 2026 by rpki-client