$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json) Hash identifier: xOupVYYjuYH5fA+Kp20qeGH5avtvlbzVAxtl+2hi/TQ= Subject key identifier: 97:B3:14:AD:AB:12:68:03:D1:35:55:EB:C0:0F:FB:0D:D7:86:F8:88 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 01A0F2D61B69425FC58D7DE0D36A3B591D23 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft Manifest number: 1A91 Signing time: Wed 30 Sep 2026 15:01:52 +0000 Manifest this update: Wed 30 Sep 2026 15:01:52 +0000 Manifest next update: Thu 01 Oct 2026 15:01:52 +0000 Files and hashes: 1: 0grhf2XqQS0PbS4vuPKgFUJ4CtY.roa (hash: CABCkAtRB5z7qM37KIh3THIotph2AI+4ndFJUzJYceA=) 2: 1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa (hash: EnRdzd4XuA4kPVdeCj63BslUTaDS51Ig0OU7ONlJnmA=) 3: 7TDWyr5P0SFkG_1wE_zPclx-LJY.roa (hash: mwM+t2AjMGEMAQqYQt7qupjhUbDte5jBQzS3pFunV5E=) 4: 8qGSgqlkHDr914hHEHKKhmYVXnE.roa (hash: frQT+RP9L9JKaXT7O/jbBEr9AzGG4KNbuIOuQ79wIgI=) 5: DY4whTo7KFMsapAbjbck9KXaN2Q.roa (hash: Z3/CUxyVCWOqALKEDmYApn9KMCw1qs9OcKyU5Z8f4RU=) 6: I7MkmQek9TX_IQqyz6tzXHWahHc.roa (hash: guTyQfwBcIAtfrQpROz3rqT3lhXR49lhfULYZRlg2k4=) 7: KSert21IyVLdzTzI3FZycKPooac.roa (hash: enNDLKMhC0/+6E/ssv2WFmJ1HNQhuj49stCcOOz9a3U=) 8: MmwxwXtvbBi5TfpYulx_NsdGK8I.roa (hash: CpEEnuPEEQ/Lt5U7MuRSDkJQEaOqlXnkUBi298BTux0=) 9: bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa (hash: irzJrYBfyhTaJEK1r/bwWtkoGmHHDM2zuMWB3WPr1vw=) 10: fCGYEGlgfKRgTz2ikieXaOSbdRE.roa (hash: FYEv1aBWOrr2YMP+bkGoFPlLBNqhRh64fwSr9xKf+yc=) 11: i_8Ltd9wbcfD0mAu6VNm7MTQ_Ac.roa (hash: LXGue0t/sMA2Z7REoNuZF9MeZQKOuFmufuOtJTo72DU=) 12: l46NNfdll0CkF-GyTagj6nVywQA.roa (hash: Bz8PpZZscQ882ZYbIbT/ZfP7vpdnPTaRcDmY5jTgHws=) 13: nhzxopyxtZ3ZNpXqMYr4_bVPXYw.roa (hash: XWNHr6I19HMZl/NwLAbZ/QL51wNU0N0GDXtB6ekbpGI=) 14: qXx90FSqDeV2TFA5z5gkzjt5MT4.roa (hash: GIcu6RV+4oLEen2ihNm9iiU1rL+T3G8HifCPdddrGao=) 15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: 3uzwRxZpYQ0MC0v4TO8FuIDf1jWRL+vr6rS/cB36wOc=) 16: vy_B141YrrWxhcrnlEIljoTLECk.roa (hash: xj/TtKRTGyOPxeeyCWIfxLPuFe3BEl/1ac8Kc9RexP0=) 17: w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa (hash: jnFfoOHT3qsowloY5NEfrKxUN2Spb88yoOnFZYPFjK4=) 18: wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa (hash: dmGJEO5REXkLJeMFm08GEDBzv38Ylu5Doyq2n0KUXjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f2:d6:1b:69:42:5f:c5:8d:7d:e0:d3:6a:3b:59:1d:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Sep 30 15:01:52 2026 GMT Not After : Oct 1 15:01:52 2026 GMT Subject: CN=97b314adab126803d13555ebc00ffb0dd786f888 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c6:cc:d2:a0:5b:4a:f0:56:96:65:0a:a2:ee: f2:fe:09:64:fc:9e:f4:44:fe:a2:d7:10:e4:42:1a: 8e:ea:dc:8e:7c:06:60:04:87:7d:80:e6:2f:8b:24: d9:fd:3d:6c:70:ec:0d:ca:7a:9d:8f:14:4d:47:08: b4:0f:be:4d:44:39:16:37:4d:99:ca:4b:1c:4a:9d: 74:ab:ed:16:3f:b3:0b:1e:24:0b:fe:6a:43:b8:77: 99:1f:f9:ae:fe:7b:cc:a0:8a:d5:c4:ef:7f:f6:1e: 1f:25:50:92:72:bb:cc:47:56:c7:6e:df:9a:f3:50: 3f:a2:2e:be:0f:2d:96:81:e1:1b:f7:59:10:24:88: d1:4f:08:30:4e:1d:2c:48:b4:b7:95:31:69:b7:d3: 74:88:14:71:7c:34:0d:bd:34:3c:c2:59:9a:a1:17: 78:e6:38:86:1c:34:ff:4d:84:41:88:89:30:0c:f4: f1:b6:19:68:31:54:6f:ee:be:0f:47:d6:70:8e:9d: 73:e1:39:61:b1:ca:64:e1:b8:9d:97:66:03:28:07: 5c:06:1b:9f:70:02:91:14:e7:75:48:14:e2:9d:d3: a2:18:bc:77:70:3d:a0:b4:3a:e5:a4:a7:f4:7e:aa: 5e:c6:41:47:b5:38:e7:27:36:a3:79:b3:59:17:b8: ea:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:B3:14:AD:AB:12:68:03:D1:35:55:EB:C0:0F:FB:0D:D7:86:F8:88 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:a2:c9:48:45:3b:8d:27:24:19:41:4b:ec:a8:86:60:af:40: 30:81:8f:17:a8:89:13:a7:3a:bc:04:e8:03:8f:3f:9c:86:02: fe:ba:33:b3:6a:ca:68:fb:62:17:72:11:21:38:13:32:5e:4a: fd:28:c2:7a:03:bd:31:fc:54:61:aa:30:87:3c:a8:ee:d7:5e: 4b:2b:d4:67:90:d0:a4:92:9c:35:02:27:5a:a0:4e:eb:3d:43: 18:c3:f9:ae:98:5a:50:77:df:27:e4:69:20:ac:35:b5:58:09: 35:1d:7f:80:bc:73:2d:4a:a5:da:1f:8b:55:21:b6:9d:63:0d: 37:9c:df:ab:50:59:ce:5f:41:cd:f7:dc:55:51:e6:39:1f:9a: 1b:d9:35:0c:11:e3:ea:eb:54:98:14:ce:cf:89:46:39:c6:ca: 18:fc:7d:75:21:14:4c:f6:aa:ff:33:d8:18:af:6f:6c:dc:77: 96:46:76:b3:64:ca:39:f8:c8:38:a2:8c:d4:ae:78:99:3b:a3: 7a:c5:99:9a:c4:c2:c9:c2:cd:9d:5d:d8:e8:d8:36:19:cb:bb: 05:4d:a1:a8:0e:7d:8b:c2:b8:73:6f:ac:e3:83:c4:d2:44:6d: ad:e7:2b:e3:d9:34:60:c3:58:48:e1:62:c5:57:53:07:47:64: c4:a9:e6:82 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDy1htpQl/FjX3g02o7WR0jMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwOTMwMTUwMTUyWhcNMjYxMDAxMTUwMTUyWjAzMTEwLwYDVQQD Eyg5N2IzMTRhZGFiMTI2ODAzZDEzNTU1ZWJjMDBmZmIwZGQ3ODZmODg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsbM0qBbSvBWlmUKou7y/glk/J70 RP6i1xDkQhqO6tyOfAZgBId9gOYviyTZ/T1scOwNynqdjxRNRwi0D75NRDkWN02Z ykscSp10q+0WP7MLHiQL/mpDuHeZH/mu/nvMoIrVxO9/9h4fJVCScrvMR1bHbt+a 81A/oi6+Dy2WgeEb91kQJIjRTwgwTh0sSLS3lTFpt9N0iBRxfDQNvTQ8wlmaoRd4 5jiGHDT/TYRBiIkwDPTxthloMVRv7r4PR9Zwjp1z4Tlhscpk4bidl2YDKAdcBhuf cAKRFOd1SBTindOiGLx3cD2gtDrlpKf0fqpexkFHtTjnJzajebNZF7jq1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJezFK2rEmgD0TVV68AP+w3XhviIMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA6LJSEU7 jSckGUFL7KiGYK9AMIGPF6iJE6c6vAToA48/nIYC/rozs2rKaPtiF3IRITgTMl5K /SjCegO9MfxUYaowhzyo7tdeSyvUZ5DQpJKcNQInWqBO6z1DGMP5rphaUHffJ+Rp IKw1tVgJNR1/gLxzLUql2h+LVSG2nWMNN5zfq1BZzl9BzffcVVHmOR+aG9k1DBHj 6utUmBTOz4lGOcbKGPx9dSEUTPaq/zPYGK9vbNx3lkZ2s2TKOfjIOKKM1K54mTuj esWZmsTCycLNnV3Y6Ng2Gcu7BU2hqA59i8K4c2+s44PE0kRtrecr49k0YMNYSOFi xVdTB0dkxKnmgg== -----END CERTIFICATE-----Generated at Wed Sep 30 21:04:53 2026 by rpki-client