$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft File: 08tc7MITufhtu6UYUh6FRuyThhw.mft (raw, json) Hash identifier: IJ7rDoLIOVKT1Q8DJn50Warp6jxBhqkOJNUwZyBm/Gc= Subject key identifier: F1:3C:48:3D:DC:58:C5:4B:9E:8C:9F:82:1C:35:CB:9A:9E:E8:B2:FB Authority key identifier: D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C Certificate issuer: /CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Certificate serial: 01A0F07A29B4204CE6A7BC43752AAB4EC9B9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft Manifest number: 1671 Signing time: Wed 30 Sep 2026 04:02:12 +0000 Manifest this update: Wed 30 Sep 2026 04:02:12 +0000 Manifest next update: Thu 01 Oct 2026 04:02:12 +0000 Files and hashes: 1: 08tc7MITufhtu6UYUh6FRuyThhw.crl (hash: SlEPy88ADfP8OhA4LH0UBBycToXIczbtUONYPkQ40oc=) 2: 3SoEwaHYmzBhPq3SqrK7-97FxfY.asa (hash: DUPJ+1lMqiRx5QPupK6EYyCTyvEki+rd8cq0JTEqc4k=) 3: 4dRn2JrP2QCTAWF-YiqGTdGG-aY.asa (hash: 5OSvsuPPRn9OvkRvh/NzOUAFS7gn9Nx/H8X3BJxRZYE=) 4: Ct0sflIrK_cXgAXTEX8rXCBCKlM.roa (hash: pgN9gxLU+eOKOCJZYi81vZeUlJY1MKjflpGIHAxbUlw=) 5: KJiyDl7iQPSHbczb71sauO3rVJk.asa (hash: xzLdynVvAziPI6SDyPFLHYP7bi2ATNLAOqyCRqeT3is=) 6: LFj2hJJ6E7iqYzWeILrxQrVLptk.roa (hash: snEdRhwSL+4U9//+ADUommVyc5tAITtVppKqVSgzWBs=) 7: M8G0hHzNaUEBYlJ18I-LLmZFBKM.asa (hash: 1CwhbIx2C5nHDxmbbu2xhBW2STO+MmyMS7p2LGmo9hk=) 8: Nll2VEGJDP-MjZyazKwqEMpaKJE.roa (hash: CRQpyoRVKRlg6q0nS/VPYWwFarEicvmg0fHkXSK4Ln0=) 9: T5M14oqasE4RWqdrD07qXbN8eGY.asa (hash: OCqN8M2KvS/h05iREDnHi+l1MPqvKGu7Rk6ZjCf3xcE=) 10: Trm4kxQ4gUhwM6zDV6KZX-ywRKE.roa (hash: E3EsOUvydU2GP/mXzofXHEmABcQ8lrxuyBxUbDage68=) 11: XHeb1AmUfX1kngDYx7cK3_EIu7Q.asa (hash: y1sVzdki0bbI48xSY39Q5D3JsNtDyY7oJ/qahJmputE=) 12: Z0SiG0C6BPcf3JRi6Nl3J9q_3os.roa (hash: NV+K1fkE6wl7yh47F8n5bFbyG2dYxLxOb6GHsNPTGww=) 13: id-lxRpZAXWjSQIYTHcFpR-BOiA.roa (hash: DJLygWwBzeOc6zwCMgS/e3psiWC9iHIdC8QxaCCmABU=) 14: mwjxtKPuHdDhkzcGADt1aiLxCIc.asa (hash: Wy5bjzVJWOG5tUKCM7dwY8G4WJIDxlDcCw2Ld4jrHPw=) 15: oMvIFNcxSvkPaWRTAOlwiUjSC3s.roa (hash: 6/Zpm1CgcWVq8/qD3TqDrcDV9ugUyfCELYTDGErExSM=) 16: vEGsYuYY06TvYutYs-QyPdXXq4Q.roa (hash: UCMk3rT/wVrhtk6MMSMiEAtXXbsHSrVjnWedze014rg=) 17: xVaYIBw7M6bRv3MOmzyAcV4by3I.asa (hash: PgzXvKG2TR216H34m8dFRwASPrUVU9Y5qcUdR1XkLTI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f0:7a:29:b4:20:4c:e6:a7:bc:43:75:2a:ab:4e:c9:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cb5cecc213b9f86dbba518521e8546ec93861c Validity Not Before: Sep 30 04:02:12 2026 GMT Not After : Oct 1 04:02:12 2026 GMT Subject: CN=f13c483ddc58c54b9e8c9f821c35cb9a9ee8b2fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:e7:72:e5:34:31:5e:88:dd:c8:43:2f:23: e5:90:37:c6:80:50:45:5b:ff:a2:c8:c8:50:66:24: 0c:bb:d3:9d:ad:00:1c:6b:9c:10:30:ec:2d:20:bf: 56:e7:38:a3:34:f7:6a:d4:fd:1a:9d:66:71:da:94: 22:f9:5b:76:35:b1:bf:dd:d9:05:9d:f7:4e:c0:0c: a0:c9:73:3d:99:88:89:ed:df:04:d5:96:1a:3f:2f: 6a:b7:29:01:57:ac:25:38:f8:8a:40:a3:87:a2:6c: e3:1b:28:c3:d0:dc:2d:c1:06:7e:c5:16:da:d1:8d: b2:d3:d5:c8:b2:ca:95:05:a4:e3:11:06:16:54:96: 65:f1:f6:82:f0:b9:bd:d8:8b:14:ec:ed:9f:f5:7d: 53:f7:1e:41:d4:59:b1:02:5b:2c:15:29:ce:04:9c: 35:9f:cd:79:b4:29:8f:1a:6c:31:ef:0e:26:f0:b9: 37:bb:34:98:79:55:ff:df:2b:79:c2:f8:d8:15:d8: 11:04:0d:e7:f3:a3:0b:41:c0:8f:4e:07:37:53:1d: 9e:3b:c7:b6:55:c8:c4:7f:68:7e:fa:6a:77:7e:f9: c2:28:c6:82:4d:5f:19:ea:ec:cd:43:12:51:bf:5c: 6f:d5:91:d4:8a:3d:3f:0c:a8:ee:8d:a5:c4:00:6b: 99:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:3C:48:3D:DC:58:C5:4B:9E:8C:9F:82:1C:35:CB:9A:9E:E8:B2:FB X509v3 Authority Key Identifier: keyid:D3:CB:5C:EC:C2:13:B9:F8:6D:BB:A5:18:52:1E:85:46:EC:93:86:1C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/08tc7MITufhtu6UYUh6FRuyThhw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e117fe-c9e7-4d41-94df-84269412d561/1/08tc7MITufhtu6UYUh6FRuyThhw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:22:19:da:91:31:87:db:c3:c2:4f:63:2e:93:bd:66:67:da: e0:1f:0b:f2:f2:ee:48:d8:a3:57:82:84:11:77:6b:e9:8c:93: 3d:2c:18:45:ab:ef:d5:ad:0d:b6:8a:b7:01:34:c7:e4:90:59: 45:6a:f9:a0:b4:a1:7c:19:02:85:b8:c4:63:73:03:e8:5e:5e: 63:e6:3e:45:fc:d9:2f:77:32:40:c5:8b:e7:30:10:09:85:13: ef:09:47:6e:6f:1e:05:56:61:72:25:76:21:02:67:8f:a6:28: 50:84:ce:bd:87:c3:5c:b7:1e:7c:6c:d3:7e:40:ea:41:bd:f7: c7:d2:ff:89:0b:58:f1:ae:10:c3:4f:87:72:f7:69:28:c0:b3: e7:a8:e4:17:ea:28:95:88:2e:4f:8d:94:b5:03:c2:ae:1b:25: ae:9f:d5:63:5c:8c:03:79:09:9a:b9:bb:c3:08:bf:63:25:3d: cd:ff:e1:63:95:3d:62:e2:c1:6d:ac:bb:b1:23:16:bb:66:89: 58:61:7a:99:9d:7f:a1:ef:50:c2:cc:5f:c6:96:da:9a:d9:ed: 46:d0:57:a2:a7:17:8b:8b:27:46:99:d3:92:58:1f:a3:18:a5: bf:83:b7:9f:a0:5e:47:1e:ef:6e:9b:f0:e4:ca:3e:56:c5:6a: 24:49:d0:1c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDweim0IEzmp7xDdSqrTsm5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2I1Y2VjYzIxM2I5Zjg2ZGJiYTUxODUyMWU4NTQ2ZWM5 Mzg2MWMwHhcNMjYwOTMwMDQwMjEyWhcNMjYxMDAxMDQwMjEyWjAzMTEwLwYDVQQD EyhmMTNjNDgzZGRjNThjNTRiOWU4YzlmODIxYzM1Y2I5YTllZThiMmZiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn/ncuU0MV6I3chDLyPlkDfGgFBF W/+iyMhQZiQMu9OdrQAca5wQMOwtIL9W5zijNPdq1P0anWZx2pQi+Vt2NbG/3dkF nfdOwAygyXM9mYiJ7d8E1ZYaPy9qtykBV6wlOPiKQKOHomzjGyjD0NwtwQZ+xRba 0Y2y09XIssqVBaTjEQYWVJZl8faC8Lm92IsU7O2f9X1T9x5B1FmxAlssFSnOBJw1 n815tCmPGmwx7w4m8Lk3uzSYeVX/3yt5wvjYFdgRBA3n86MLQcCPTgc3Ux2eO8e2 VcjEf2h++mp3fvnCKMaCTV8Z6uzNQxJRv1xv1ZHUij0/DKjujaXEAGuZuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPE8SD3cWMVLnoyfghw1y5qe6LL7MB8GA1UdIwQY MBaAFNPLXOzCE7n4bbulGFIehUbsk4YcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYt ODQyNjk0MTJkNTYxLzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9lMTE3ZmUtYzllNy00ZDQxLTk0ZGYtODQyNjk0MTJkNTYx LzEvMDh0YzdNSVR1Zmh0dTZVWVVoNkZSdXlUaGh3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqiIZ2pEx h9vDwk9jLpO9Zmfa4B8L8vLuSNijV4KEEXdr6YyTPSwYRavv1a0Ntoq3ATTH5JBZ RWr5oLShfBkChbjEY3MD6F5eY+Y+RfzZL3cyQMWL5zAQCYUT7wlHbm8eBVZhciV2 IQJnj6YoUITOvYfDXLcefGzTfkDqQb33x9L/iQtY8a4Qw0+HcvdpKMCz56jkF+oo lYguT42UtQPCrhslrp/VY1yMA3kJmrm7wwi/YyU9zf/hY5U9YuLBbay7sSMWu2aJ WGF6mZ1/oe9QwsxfxpbamtntRtBXoqcXi4snRpnTklgfoxilv4O3n6BeRx7vbpvw 5Mo+VsVqJEnQHA== -----END CERTIFICATE-----Generated at Wed Sep 30 11:24:57 2026 by rpki-client