$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft File: DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft (raw, json) Hash identifier: p1O8qqFCyhQDb7GKeG+aRet/Cd31jLzkuQtoU4ZumUE= Subject key identifier: E4:57:7C:DC:50:3C:B1:1C:C0:05:A0:C6:18:3A:19:9A:4F:B7:E6:DE Authority key identifier: 0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 Certificate issuer: /CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Certificate serial: 01A0A1149A1D573A717E922B49FC4F0322A6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft Manifest number: 1421 Signing time: Mon 14 Sep 2026 18:01:17 +0000 Manifest this update: Mon 14 Sep 2026 18:01:17 +0000 Manifest next update: Tue 15 Sep 2026 18:01:17 +0000 Files and hashes: 1: AbJQHx5ahYpjvv315eRsPQzSy6s.roa (hash: IieQfWIJT+/3Ysx4MwtAIRbsPXEZaLQ5D1UaLDyxns0=) 2: Cl4gUWWdkaLuufc7IaskeYPpLtI.roa (hash: 1MLU7eGqfR1fNhY59VB68snOwCNrx/MEqW1PogRhMWg=) 3: DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl (hash: y+iEMDFiSVaDhrMg5OpZ4ow/TLZhIk0YDC49XlkPmXw=) 4: M3d-ndtS-EWKNtc6mJwZhcKWXhE.roa (hash: IX96+0wugdLurSubiSiT1icuKiERC0yGvvvWL4yy+fQ=) 5: VDlRmZ_UUBGQIZXe-tlycFHtxuY.roa (hash: roAWquTgnTt3gI/FQ9e2D2VEpYewknrb+S48y8ncfXs=) 6: WyLq5mdKCW2UGDpdqrK7Xp2HJRc.roa (hash: 3yoswgkDWLABDVLm06inU+3X5NuNCflUQTjxzRiweyM=) 7: dQ7u4JbIzkGK7zGlgsaEjYvDyPw.roa (hash: 0Io/aF5BJoS3S7A3SgO0UMDiD52MQt1rPPj3iNE5lRA=) 8: eWt0Tak3myBNkMD7r4cZaRZMMuI.roa (hash: H9iIgQUbeHquNPmfK/S2A+3CGFk8Rb9c/Cx3jhDtaaM=) 9: h3O572ai_eUifMk-F32TUL7VkXM.roa (hash: 66/7jgHjdxS0pR5qYD6CjCTDfR7QgTTO/qDff+KDDOM=) 10: hzQ7tMh6oqC5v0mKv_jBU_A9aCw.roa (hash: fUyvgz1r/egD8D0UE0/Rhf6tbMxfTD9jAEgan6se/FA=) 11: jg4t7SrnuYvRZomc0XCPotAh4u0.roa (hash: 9RmoUuo6041b6kGDwKKpPE71TUf5ltFSivOlPvvgN5o=) 12: kP39bsnw_qJA-nAXWzwPudCCaSw.roa (hash: p5h1eBsrXq6bm8kjGVr9OVb84+2GgS0jxbrmtlhu5Yc=) 13: t9zXA_rZh6B_pE4ccfKKbM0UX8M.roa (hash: x+rDhCDJVIl1HJ9OhOXObawt9Y9MUYeu8ZdvRA+YDqY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 15 Sep 2026 14:37:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:a1:14:9a:1d:57:3a:71:7e:92:2b:49:fc:4f:03:22:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0db67c5c7fa7fe2492eec37cf427642b71d425b0 Validity Not Before: Sep 14 18:01:17 2026 GMT Not After : Sep 15 18:01:17 2026 GMT Subject: CN=e4577cdc503cb11cc005a0c6183a199a4fb7e6de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:6e:37:f5:00:5e:6e:6a:a9:27:9f:09:43:82: bb:b7:4c:0a:40:c8:d7:7e:d1:59:92:48:25:b4:f2: 67:01:63:9c:6a:96:08:1b:0f:27:64:96:39:9a:f7: 58:00:7f:60:0a:7f:7f:fe:98:38:b3:d1:5d:af:27: 5c:05:64:52:dd:97:fb:01:58:3b:f2:35:57:ed:ab: 9a:d4:79:dd:48:65:1f:f5:37:79:69:26:c6:44:95: 5a:5a:da:a7:d5:f0:b4:c8:1c:2a:ea:26:31:db:65: 41:5d:eb:dc:90:65:27:bb:73:d3:a6:5d:bb:67:ff: 98:b4:be:c6:ab:96:8f:5b:39:96:ea:4f:7a:28:76: c8:af:53:da:31:8d:e6:f6:5d:1a:65:98:fd:63:f8: 20:4b:7b:03:73:74:ab:be:ff:01:b4:f4:43:59:5c: 96:f4:0e:d1:9c:0b:af:36:fe:98:84:d4:d0:89:f5: bc:a8:10:d0:9a:6e:14:ad:b2:88:68:f7:0c:5c:63: de:5f:97:d4:4f:a0:74:6e:27:7a:b3:fd:54:2f:5a: 5b:02:8d:1b:34:17:ed:54:65:fb:f0:1d:17:1b:67: 4e:bc:3e:7a:a9:cd:67:2e:9d:50:b8:0e:3c:69:fa: 8c:e7:26:25:57:21:e7:1c:0c:7d:4d:6d:ff:2c:10: b8:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:57:7C:DC:50:3C:B1:1C:C0:05:A0:C6:18:3A:19:9A:4F:B7:E6:DE X509v3 Authority Key Identifier: keyid:0D:B6:7C:5C:7F:A7:FE:24:92:EE:C3:7C:F4:27:64:2B:71:D4:25:B0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DbZ8XH-n_iSS7sN89CdkK3HUJbA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/0f3757-f0ed-4e7e-9329-b03df996e481/1/DbZ8XH-n_iSS7sN89CdkK3HUJbA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:fa:bf:40:38:c5:9f:7f:36:a9:f4:c3:ea:8c:6e:19:84:66: ef:31:ab:5e:5c:24:cb:a0:37:ef:ee:eb:b1:1b:5e:a7:d5:41: 64:3d:23:0d:51:d4:24:f2:b5:f7:e2:bb:e7:96:2c:9e:91:d7: 30:62:17:d9:86:ef:3b:2d:24:c5:d8:45:b1:6e:8e:41:06:06: df:1f:2f:a4:82:2c:6c:86:bd:fd:35:96:8e:26:03:ad:9e:a6: aa:f7:63:9e:7f:59:1d:26:67:08:71:cb:1c:f5:05:0f:6b:76: 9a:0a:21:2e:da:1c:37:be:54:b8:84:92:21:19:59:ec:42:33: 2f:53:0e:cf:d5:e4:29:f5:19:17:77:fd:4b:57:fe:5b:b3:7a: c9:7c:42:a9:d3:0f:9e:07:28:e2:51:86:86:bf:e9:8d:e5:34: 65:8b:dc:55:66:9d:09:a0:9a:a4:bd:01:42:36:3f:e8:a5:e9: a4:07:06:cd:6d:78:44:ba:a0:23:5e:32:c0:ff:0c:4a:fe:c5: ca:9d:10:3c:ac:12:12:7a:a6:40:0b:eb:d1:fb:98:87:1f:d4: 39:63:6e:8d:a6:53:45:56:85:45:4b:f8:f9:66:7b:38:ca:4d: bd:7d:50:6e:f8:74:c8:83:5a:fc:0f:f7:8a:b7:fb:5b:0c:5f: 2f:7e:7e:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaChFJodVzpxfpIrSfxPAyKmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBkYjY3YzVjN2ZhN2ZlMjQ5MmVlYzM3Y2Y0Mjc2NDJiNzFk NDI1YjAwHhcNMjYwOTE0MTgwMTE3WhcNMjYwOTE1MTgwMTE3WjAzMTEwLwYDVQQD EyhlNDU3N2NkYzUwM2NiMTFjYzAwNWEwYzYxODNhMTk5YTRmYjdlNmRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3m439QBebmqpJ58JQ4K7t0wKQMjX ftFZkkgltPJnAWOcapYIGw8nZJY5mvdYAH9gCn9//pg4s9FdrydcBWRS3Zf7AVg7 8jVX7aua1HndSGUf9Td5aSbGRJVaWtqn1fC0yBwq6iYx22VBXevckGUnu3PTpl27 Z/+YtL7Gq5aPWzmW6k96KHbIr1PaMY3m9l0aZZj9Y/ggS3sDc3Srvv8BtPRDWVyW 9A7RnAuvNv6YhNTQifW8qBDQmm4UrbKIaPcMXGPeX5fUT6B0bid6s/1UL1pbAo0b NBftVGX78B0XG2dOvD56qc1nLp1QuA48afqM5yYlVyHnHAx9TW3/LBC4dwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFORXfNxQPLEcwAWgxhg6GZpPt+beMB8GA1UdIwQY MBaAFA22fFx/p/4kku7DfPQnZCtx1CWwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjkt YjAzZGY5OTZlNDgxLzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOS8wZjM3NTctZjBlZC00ZTdlLTkzMjktYjAzZGY5OTZlNDgx LzEvRGJaOFhILW5faVNTN3NOODlDZGtLM0hVSmJBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfq/QDjF n382qfTD6oxuGYRm7zGrXlwky6A37+7rsRtep9VBZD0jDVHUJPK19+K755YsnpHX MGIX2YbvOy0kxdhFsW6OQQYG3x8vpIIsbIa9/TWWjiYDrZ6mqvdjnn9ZHSZnCHHL HPUFD2t2mgohLtocN75UuISSIRlZ7EIzL1MOz9XkKfUZF3f9S1f+W7N6yXxCqdMP ngco4lGGhr/pjeU0ZYvcVWadCaCapL0BQjY/6KXppAcGzW14RLqgI14ywP8MSv7F yp0QPKwSEnqmQAvr0fuYhx/UOWNujaZTRVaFRUv4+WZ7OMpNvX1Qbvh0yINa/A/3 irf7WwxfL35+/g== -----END CERTIFICATE-----Generated at Mon Sep 14 23:40:42 2026 by rpki-client