$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft File: rtruqRF6HVzMMgIilVoJ-qB5j9k.mft (raw, json) Hash identifier: lSp2lfp09mz377NN2VQysOPzq7rLxm7zJDsTwJmuEVU= Subject key identifier: 89:A9:A0:4D:03:52:0A:A0:C4:A8:29:B7:25:98:6F:C9:B2:8A:87:90 Authority key identifier: AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 Certificate issuer: /CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Certificate serial: 01A0EEF9427A6E2E2D113AAF6FB87B947D64 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft Manifest number: 1A8F Signing time: Tue 29 Sep 2026 21:01:47 +0000 Manifest this update: Tue 29 Sep 2026 21:01:47 +0000 Manifest next update: Wed 30 Sep 2026 21:01:47 +0000 Files and hashes: 1: 0grhf2XqQS0PbS4vuPKgFUJ4CtY.roa (hash: CABCkAtRB5z7qM37KIh3THIotph2AI+4ndFJUzJYceA=) 2: 1NhMJ7iAKt1XNkcwpqjAtxDr1tg.roa (hash: EnRdzd4XuA4kPVdeCj63BslUTaDS51Ig0OU7ONlJnmA=) 3: 7TDWyr5P0SFkG_1wE_zPclx-LJY.roa (hash: mwM+t2AjMGEMAQqYQt7qupjhUbDte5jBQzS3pFunV5E=) 4: 8qGSgqlkHDr914hHEHKKhmYVXnE.roa (hash: frQT+RP9L9JKaXT7O/jbBEr9AzGG4KNbuIOuQ79wIgI=) 5: DY4whTo7KFMsapAbjbck9KXaN2Q.roa (hash: Z3/CUxyVCWOqALKEDmYApn9KMCw1qs9OcKyU5Z8f4RU=) 6: I7MkmQek9TX_IQqyz6tzXHWahHc.roa (hash: guTyQfwBcIAtfrQpROz3rqT3lhXR49lhfULYZRlg2k4=) 7: KSert21IyVLdzTzI3FZycKPooac.roa (hash: enNDLKMhC0/+6E/ssv2WFmJ1HNQhuj49stCcOOz9a3U=) 8: MmwxwXtvbBi5TfpYulx_NsdGK8I.roa (hash: CpEEnuPEEQ/Lt5U7MuRSDkJQEaOqlXnkUBi298BTux0=) 9: bCg7tEgKsGBlhvfXQ_p7fAinDt4.roa (hash: irzJrYBfyhTaJEK1r/bwWtkoGmHHDM2zuMWB3WPr1vw=) 10: fCGYEGlgfKRgTz2ikieXaOSbdRE.roa (hash: FYEv1aBWOrr2YMP+bkGoFPlLBNqhRh64fwSr9xKf+yc=) 11: i_8Ltd9wbcfD0mAu6VNm7MTQ_Ac.roa (hash: LXGue0t/sMA2Z7REoNuZF9MeZQKOuFmufuOtJTo72DU=) 12: l46NNfdll0CkF-GyTagj6nVywQA.roa (hash: Bz8PpZZscQ882ZYbIbT/ZfP7vpdnPTaRcDmY5jTgHws=) 13: nhzxopyxtZ3ZNpXqMYr4_bVPXYw.roa (hash: XWNHr6I19HMZl/NwLAbZ/QL51wNU0N0GDXtB6ekbpGI=) 14: qXx90FSqDeV2TFA5z5gkzjt5MT4.roa (hash: GIcu6RV+4oLEen2ihNm9iiU1rL+T3G8HifCPdddrGao=) 15: rtruqRF6HVzMMgIilVoJ-qB5j9k.crl (hash: MQ557tXDaURIw+Tp9lFGC9fG6g/tVBtzfJzKIL+T7rI=) 16: vy_B141YrrWxhcrnlEIljoTLECk.roa (hash: xj/TtKRTGyOPxeeyCWIfxLPuFe3BEl/1ac8Kc9RexP0=) 17: w0RUzDJQ2sSi4lju4NoSu6IaZEM.roa (hash: jnFfoOHT3qsowloY5NEfrKxUN2Spb88yoOnFZYPFjK4=) 18: wJJlJoFiOUkrOpb9ptdc5xDpkt0.roa (hash: dmGJEO5REXkLJeMFm08GEDBzv38Ylu5Doyq2n0KUXjI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Sep 2026 21:01:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:ee:f9:42:7a:6e:2e:2d:11:3a:af:6f:b8:7b:94:7d:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aedaeea9117a1d5ccc320222955a09faa0798fd9 Validity Not Before: Sep 29 21:01:47 2026 GMT Not After : Sep 30 21:01:47 2026 GMT Subject: CN=89a9a04d03520aa0c4a829b725986fc9b28a8790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0a:64:04:76:35:72:e8:11:06:50:4d:18:48: 27:04:d6:30:51:56:3e:f4:2f:30:21:70:30:80:78: e3:4a:14:04:da:cc:61:3e:ff:3d:b9:22:46:fe:ec: 3c:2b:00:df:50:12:e1:04:ee:0e:bb:78:5d:2a:cd: 22:16:ae:c6:22:25:53:74:94:c5:93:a1:61:12:7f: f7:11:0f:be:fc:ff:b7:b9:7f:eb:63:81:35:c0:48: 2f:8d:f2:11:5a:21:be:b1:3d:f8:19:59:28:e1:f1: 12:02:73:f0:e4:f1:f4:bd:75:7e:06:c2:c7:0b:48: 1d:15:17:c6:a6:74:83:92:c5:3d:43:99:ff:a9:92: 11:4a:df:54:57:3f:2c:10:50:68:85:7b:bb:fc:ca: 60:89:eb:72:b4:be:f9:c6:ab:d8:5e:89:5a:42:e2: 73:c0:64:e3:2c:df:3b:15:7d:00:96:80:cf:4d:64: 7d:5e:79:d8:fa:67:0b:7e:e9:6e:a0:c2:48:be:85: 2d:01:eb:11:6a:ad:1c:e2:47:ae:23:a2:3a:f5:32: 74:40:18:ae:00:f1:44:a8:d3:21:5f:1e:c0:19:48: f0:d1:a9:e5:90:b9:0d:66:ee:29:11:b8:6e:c7:d0: 42:54:a6:80:0b:d5:30:b3:e5:25:96:63:4e:1f:75: e5:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:A9:A0:4D:03:52:0A:A0:C4:A8:29:B7:25:98:6F:C9:B2:8A:87:90 X509v3 Authority Key Identifier: keyid:AE:DA:EE:A9:11:7A:1D:5C:CC:32:02:22:95:5A:09:FA:A0:79:8F:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rtruqRF6HVzMMgIilVoJ-qB5j9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a13b01-4153-4ea5-bf21-99868c51329a/1/rtruqRF6HVzMMgIilVoJ-qB5j9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:04:3d:96:17:14:45:ed:1d:4d:c9:f0:3c:53:b4:c9:d1:ae: a9:60:b1:0d:6a:5e:04:5f:b1:73:08:62:6a:95:e9:26:09:6d: 2f:5b:64:9f:eb:26:75:d7:61:81:2b:23:3a:cf:1f:49:0b:05: 2b:33:34:40:e1:cc:d5:0c:64:71:82:97:90:a0:52:94:3d:be: 65:58:2d:41:77:7e:62:1b:83:eb:f4:cd:98:67:02:d3:26:42: 1a:21:eb:f3:4d:1c:ba:81:4e:16:39:ca:d0:7c:e1:46:8b:fd: 34:b7:92:f9:33:e6:99:59:5c:81:ec:6f:40:6b:af:22:53:37: 85:15:48:13:bc:f0:11:a3:5f:a3:d6:ef:1b:96:a9:06:a7:2e: da:b6:58:e3:00:36:1c:c1:8e:4e:ef:78:5d:93:8e:a2:f0:86: 52:93:86:e4:d1:9a:bd:52:78:0e:53:aa:bf:39:39:ac:96:55: b8:8a:46:7d:90:7f:0c:c2:5e:6d:15:23:7f:b5:d2:b4:d2:ee: 65:a5:8f:82:13:c0:d8:e1:39:a5:d4:4f:51:56:64:94:65:14: b8:26:92:e6:7e:f7:01:16:e0:2e:41:84:bc:56:bb:e4:7d:54: 2e:f0:33:a8:76:50:6c:4d:d3:68:67:3d:a0:8e:84:ee:cb:63: f1:d3:08:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDu+UJ6bi4tETqvb7h7lH1kMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlZGFlZWE5MTE3YTFkNWNjYzMyMDIyMjk1NWEwOWZhYTA3 OThmZDkwHhcNMjYwOTI5MjEwMTQ3WhcNMjYwOTMwMjEwMTQ3WjAzMTEwLwYDVQQD Eyg4OWE5YTA0ZDAzNTIwYWEwYzRhODI5YjcyNTk4NmZjOWIyOGE4NzkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyApkBHY1cugRBlBNGEgnBNYwUVY+ 9C8wIXAwgHjjShQE2sxhPv89uSJG/uw8KwDfUBLhBO4Ou3hdKs0iFq7GIiVTdJTF k6FhEn/3EQ++/P+3uX/rY4E1wEgvjfIRWiG+sT34GVko4fESAnPw5PH0vXV+BsLH C0gdFRfGpnSDksU9Q5n/qZIRSt9UVz8sEFBohXu7/MpgietytL75xqvYXolaQuJz wGTjLN87FX0AloDPTWR9XnnY+mcLfuluoMJIvoUtAesRaq0c4keuI6I69TJ0QBiu APFEqNMhXx7AGUjw0anlkLkNZu4pEbhux9BCVKaAC9Uws+UllmNOH3XlKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFImpoE0DUgqgxKgptyWYb8myioeQMB8GA1UdIwQY MBaAFK7a7qkReh1czDICIpVaCfqgeY/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEt OTk4NjhjNTEzMjlhLzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hMTNiMDEtNDE1My00ZWE1LWJmMjEtOTk4NjhjNTEzMjlh LzEvcnRydXFSRjZIVnpNTWdJaWxWb0otcUI1ajlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYQQ9lhcU Re0dTcnwPFO0ydGuqWCxDWpeBF+xcwhiapXpJgltL1tkn+smdddhgSsjOs8fSQsF KzM0QOHM1QxkcYKXkKBSlD2+ZVgtQXd+YhuD6/TNmGcC0yZCGiHr800cuoFOFjnK 0HzhRov9NLeS+TPmmVlcgexvQGuvIlM3hRVIE7zwEaNfo9bvG5apBqcu2rZY4wA2 HMGOTu94XZOOovCGUpOG5NGavVJ4DlOqvzk5rJZVuIpGfZB/DMJebRUjf7XStNLu ZaWPghPA2OE5pdRPUVZklGUUuCaS5n73ARbgLkGEvFa75H1ULvAzqHZQbE3TaGc9 oI6E7stj8dMIIw== -----END CERTIFICATE-----Generated at Wed Sep 30 07:32:28 2026 by rpki-client