$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft File: 9RNpzL-GsehOGutG5tM20591Kuc.mft (raw, json) Hash identifier: rF70ydg+82g8fai/dfCZ4793XHFVGgRVF9xMCCsVXks= Subject key identifier: 08:90:AC:F0:26:67:AC:1F:31:CF:5B:DA:76:3F:62:8E:70:DD:93:0E Authority key identifier: F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 Certificate issuer: /CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Certificate serial: 01A08B9EBADF4588F7029741BEF6AA91B48D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft Manifest number: 1AEE Signing time: Thu 10 Sep 2026 14:00:30 +0000 Manifest this update: Thu 10 Sep 2026 14:00:30 +0000 Manifest next update: Fri 11 Sep 2026 14:00:30 +0000 Files and hashes: 1: 1-dWfWWM2Q4bjUSimugWWfOBMll4.roa (hash: 9k9cnyjwgTflpSvsCNop1Tp//B4oTSziXJvJrKx7enw=) 2: 1-vkSUj3IhBaF6QCupk9p-QFNkpg.roa (hash: NyoZpDBj6nyKZfID52EDPnf8kCWXyPjqV37Bafp3IEk=) 3: 1if2l0vuSUyA8aKOlZRwZBTqr58.roa (hash: MYKlinKANRkkXALYuH4dNJZg3DMiY6cZlGtlrNDBss0=) 4: 3OlFo1BIMO58jOKinsgaHCIGcPI.asa (hash: It3e1tK83I/+WtTNXWRr1Q1FRwlRAB4eApvNExQnd0Y=) 5: 6c9spiMI22fbQ_S_riFTxN6JTnQ.roa (hash: WySy31z3A7Sqe9phj35VMgqeabINWeNkJj5/iHanhck=) 6: 9RNpzL-GsehOGutG5tM20591Kuc.crl (hash: z6dHEt6wpxCEF6jH2Qxp1aprYLvhy8m+0qY2Ff3auPA=) 7: bSIf0T0EwRvYabxLmjmKKkxKJuc.roa (hash: QjhZut+rcecUKTU/gefSSs0Q8mSl4Rg0xTqiyiwiuWQ=) 8: k-YRkliMRVoXShQ8PbWy-9N7SjQ.roa (hash: lMxKbbsuVDDpKDp0TZpDMbjhyk3buYEiXF/UkdpZabc=) 9: oiD41d0i1VuwEQttPBFodXn6upI.roa (hash: uAOn8Pa9tipVHC9vk2BfHXqfrIzw8lI2qK4bQp5y4a8=) 10: qcBLaf6H5Hv30eXMa7IbsI7K2Eo.roa (hash: /8G6T8+RIvDyAMYfFzoKNpDCtHywa0CfF5MXcl8AVF4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8b:9e:ba:df:45:88:f7:02:97:41:be:f6:aa:91:b4:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f51369ccbf86b1e84e1aeb46e6d336d39f752ae7 Validity Not Before: Sep 10 14:00:30 2026 GMT Not After : Sep 11 14:00:30 2026 GMT Subject: CN=0890acf02667ac1f31cf5bda763f628e70dd930e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a5:0f:e1:40:ee:e8:46:a6:ae:1a:7e:8e:fd: b3:d6:80:bc:ff:23:cb:45:45:6c:02:c9:41:13:3a: 55:2e:5b:78:32:de:60:01:eb:db:4a:17:2b:1a:26: 63:a2:e8:54:b9:85:69:83:e6:78:b1:8c:62:65:0a: 6e:16:68:42:58:15:33:31:bd:b8:be:90:13:b3:02: 9b:a8:cb:8a:cb:2e:0e:8e:41:02:10:9d:ee:19:47: fc:a1:87:24:1b:cd:f1:49:eb:fc:e3:67:1a:eb:27: 16:0d:43:09:5d:68:4e:8a:23:7c:0a:56:aa:2c:1b: 98:d4:bb:2c:d1:9b:81:44:f1:45:bc:7e:53:3d:89: 18:29:80:35:29:46:7a:ba:8a:dd:32:11:04:3c:42: 04:4f:0b:68:a5:c3:a6:87:b0:6d:f3:77:4c:13:68: ee:c2:85:63:05:80:d1:3d:f7:3f:1e:17:2f:7c:1e: 1c:4a:3d:96:bd:e2:5b:a7:e7:29:43:a9:97:c8:9e: 01:82:ec:ed:4f:ff:97:41:e2:51:6e:05:d1:5a:04: c7:27:ed:73:22:68:26:c1:a7:f3:df:c3:4b:57:fd: 2a:32:6f:70:5c:4c:0f:76:96:13:44:cc:0f:ec:02: 4c:db:6a:c4:25:06:cf:10:5d:15:70:fa:d7:ee:d8: bc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:90:AC:F0:26:67:AC:1F:31:CF:5B:DA:76:3F:62:8E:70:DD:93:0E X509v3 Authority Key Identifier: keyid:F5:13:69:CC:BF:86:B1:E8:4E:1A:EB:46:E6:D3:36:D3:9F:75:2A:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9RNpzL-GsehOGutG5tM20591Kuc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/2d5bdf-5265-49b8-8afe-2b920bde3990/1/9RNpzL-GsehOGutG5tM20591Kuc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:bf:37:d4:46:9a:a4:0d:e7:8d:a4:0a:eb:7d:ca:6c:20:2c: e0:a8:cc:e6:a0:a0:18:92:be:49:46:2f:0e:4d:05:77:8e:a4: e6:ed:e1:4f:9c:98:f4:ac:f8:8c:d1:db:d8:a8:a3:51:83:f3: 38:6c:91:58:cf:4a:90:1c:60:77:c7:4b:4f:71:04:06:4c:b0: 47:cd:f0:c0:83:c5:99:b1:43:cc:d9:6f:3b:5e:39:90:71:a3: cb:24:ab:a3:af:28:21:71:20:b2:95:f4:da:33:86:52:32:f6: a7:ae:ec:c6:e0:2f:ea:cf:1e:47:03:16:d9:4d:bd:ad:e8:d2: 27:20:ef:6f:7a:30:4f:71:77:4a:33:1f:54:11:af:14:08:84: e4:3f:08:f7:e7:9d:fa:18:ed:8a:7d:ea:f3:08:17:78:84:e3: 79:fd:7b:5f:4d:d3:53:ad:3a:17:16:a6:a2:7f:8f:ec:92:8a: 6a:1c:bf:77:60:4b:79:08:29:ac:ed:f4:52:f7:49:7e:d7:17: 6e:6d:ac:85:bd:c0:c5:a4:7e:32:22:fd:cf:a0:8c:f2:ee:d7: 7d:e6:61:57:bf:cb:25:08:bb:c8:bd:7b:4d:0c:73:6f:c8:56: c5:46:08:90:a2:fd:64:e3:df:fb:9c:79:7d:cc:90:49:6e:0d: e1:05:4c:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCLnrrfRYj3ApdBvvaqkbSNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY1MTM2OWNjYmY4NmIxZTg0ZTFhZWI0NmU2ZDMzNmQzOWY3 NTJhZTcwHhcNMjYwOTEwMTQwMDMwWhcNMjYwOTExMTQwMDMwWjAzMTEwLwYDVQQD EygwODkwYWNmMDI2NjdhYzFmMzFjZjViZGE3NjNmNjI4ZTcwZGQ5MzBlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6UP4UDu6Eamrhp+jv2z1oC8/yPL RUVsAslBEzpVLlt4Mt5gAevbShcrGiZjouhUuYVpg+Z4sYxiZQpuFmhCWBUzMb24 vpATswKbqMuKyy4OjkECEJ3uGUf8oYckG83xSev842ca6ycWDUMJXWhOiiN8Claq LBuY1Lss0ZuBRPFFvH5TPYkYKYA1KUZ6uordMhEEPEIETwtopcOmh7Bt83dME2ju woVjBYDRPfc/HhcvfB4cSj2WveJbp+cpQ6mXyJ4BguztT/+XQeJRbgXRWgTHJ+1z Imgmwafz38NLV/0qMm9wXEwPdpYTRMwP7AJM22rEJQbPEF0VcPrX7ti84wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAiQrPAmZ6wfMc9b2nY/Yo5w3ZMOMB8GA1UdIwQY MBaAFPUTacy/hrHoThrrRubTNtOfdSrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUt MmI5MjBiZGUzOTkwLzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi8yZDViZGYtNTI2NS00OWI4LThhZmUtMmI5MjBiZGUzOTkw LzEvOVJOcHpMLUdzZWhPR3V0RzV0TTIwNTkxS3VjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy7831Eaa pA3njaQK633KbCAs4KjM5qCgGJK+SUYvDk0Fd46k5u3hT5yY9Kz4jNHb2KijUYPz OGyRWM9KkBxgd8dLT3EEBkywR83wwIPFmbFDzNlvO145kHGjyySro68oIXEgspX0 2jOGUjL2p67sxuAv6s8eRwMW2U29rejSJyDvb3owT3F3SjMfVBGvFAiE5D8I9+ed +hjtin3q8wgXeITjef17X03TU606Fxamon+P7JKKahy/d2BLeQgprO30UvdJftcX bm2shb3AxaR+MiL9z6CM8u7XfeZhV7/LJQi7yL17TQxzb8hWxUYIkKL9ZOPf+5x5 fcyQSW4N4QVMAA== -----END CERTIFICATE-----Generated at Thu Sep 10 21:12:33 2026 by rpki-client