$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json) Hash identifier: YI5SZq5TUBmpxvLPNrWUyqgOrW0/SLidyfkn6uJ5sWQ= Subject key identifier: DA:CB:34:63:CA:05:98:DE:BB:1A:92:EC:C5:C6:B3:38:0B:05:B0:FD Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 01A08CB1594D8489A6A6777A619B28AE4336 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft Manifest number: 1A51 Signing time: Thu 10 Sep 2026 19:00:27 +0000 Manifest this update: Thu 10 Sep 2026 19:00:27 +0000 Manifest next update: Fri 11 Sep 2026 19:00:27 +0000 Files and hashes: 1: 1-ehuABryUVINj2W3NK-g46DB49o.roa (hash: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU=) 2: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (hash: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU=) 3: CJMQtEYFaJCIAob5YTIM33reer0.roa (hash: 2fmW/5EjPlZQDHVPyDvXpi5tn/bBcbJ02R3RN2NWWE8=) 4: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (hash: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8=) 5: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: L1v6CPjgNUC54voyzRE7dC7zXsz7y9wWb5WEhe47C9M=) 6: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (hash: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ=) 7: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (hash: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q=) 8: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (hash: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8=) 9: nKmF1TZGqw4Rl01o8Upo8B1uARg.roa (hash: jsNr28qDsooPsLwTF7PUY4RAqfXcXlMffZUWeSf+lRc=) 10: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (hash: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8c:b1:59:4d:84:89:a6:a6:77:7a:61:9b:28:ae:43:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Sep 10 19:00:27 2026 GMT Not After : Sep 11 19:00:27 2026 GMT Subject: CN=dacb3463ca0598debb1a92ecc5c6b3380b05b0fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:42:a8:18:08:83:57:44:5d:77:82:8b:ca:74: d3:3a:5f:c9:87:ce:38:1e:ec:75:dd:d5:8a:88:b3: 69:09:80:23:28:03:e6:76:81:f0:dc:25:34:26:9e: 1c:8a:02:22:78:1f:c6:bd:18:e0:4f:8e:89:69:13: a7:f0:c6:5f:32:8f:6a:f1:d1:07:8f:c2:f5:98:c5: 3e:51:99:42:08:fb:c1:83:25:56:3c:61:d6:89:5c: 85:3b:e3:93:57:0d:f0:ea:ef:86:c3:d9:e4:f9:f7: 85:f7:f4:d3:82:e8:36:62:d6:9e:d8:11:2a:15:2f: 2b:a5:e9:f4:c7:d4:79:55:f9:da:8e:3b:80:13:07: 3f:b8:97:2e:08:7e:c8:dc:d1:29:f7:f9:85:c2:cf: 57:1c:ea:1d:02:89:80:3c:88:31:71:5b:90:30:eb: f5:5e:19:0c:5b:f8:4f:d7:de:73:aa:c1:64:73:07: f3:87:54:9d:bb:a7:c7:ae:48:aa:76:81:53:aa:4d: 9a:d3:e2:8a:84:4d:ff:3a:f9:28:b7:36:dd:24:4e: b4:9c:9f:b6:7b:b8:d8:20:a1:f3:cd:88:8d:d5:31: bf:51:94:0a:87:fe:e0:0a:1c:05:6d:fa:03:12:96: e3:b1:a9:27:9d:74:9b:72:70:5d:72:cb:a6:5c:63: 21:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:CB:34:63:CA:05:98:DE:BB:1A:92:EC:C5:C6:B3:38:0B:05:B0:FD X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:26:56:e8:01:72:c6:cb:44:d3:0f:8b:0a:93:52:bc:84:ec: 0d:58:6a:03:de:20:ea:a4:fe:96:c8:34:84:04:37:7e:86:aa: 19:9a:73:25:47:82:0d:fc:64:52:0f:cf:61:27:96:e0:18:b1: 1f:3d:17:86:a3:a8:88:09:1d:7b:06:37:d6:6f:ba:9b:5f:be: ae:77:8b:80:f4:22:2f:41:f6:09:0e:ab:16:b4:f1:0d:90:99: 17:9a:ab:02:79:58:7f:09:b5:a6:b2:2c:44:f6:eb:dc:3c:8b: 76:ba:3e:60:da:51:05:80:09:cc:2a:72:d3:b8:e1:e5:4a:10: 02:89:e1:68:9c:1d:b0:59:55:25:3a:71:6a:77:b7:19:9e:23: 34:27:ea:dc:9a:6e:60:e6:2f:0e:70:38:f4:f2:f4:64:15:ac: f0:63:e8:fe:ee:56:84:cc:46:a5:29:2c:70:84:40:aa:c0:38: c8:7f:3b:95:42:ed:1d:1e:b1:f0:ae:6d:dc:4d:b7:d9:80:87: e4:f2:c2:21:c8:fd:2d:35:1a:3a:32:1e:73:34:55:96:fe:2c: 21:7d:3a:6d:83:be:4c:1a:15:b1:ee:b2:89:86:27:54:01:b8: a3:d3:58:92:b7:be:6d:82:76:5b:53:2b:30:23:16:ad:8b:0e: 84:9a:f9:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCMsVlNhImmpnd6YZsorkM2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYwOTEwMTkwMDI3WhcNMjYwOTExMTkwMDI3WjAzMTEwLwYDVQQD EyhkYWNiMzQ2M2NhMDU5OGRlYmIxYTkyZWNjNWM2YjMzODBiMDViMGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0KoGAiDV0Rdd4KLynTTOl/Jh844 Hux13dWKiLNpCYAjKAPmdoHw3CU0Jp4cigIieB/GvRjgT46JaROn8MZfMo9q8dEH j8L1mMU+UZlCCPvBgyVWPGHWiVyFO+OTVw3w6u+Gw9nk+feF9/TTgug2Ytae2BEq FS8rpen0x9R5VfnajjuAEwc/uJcuCH7I3NEp9/mFws9XHOodAomAPIgxcVuQMOv1 XhkMW/hP195zqsFkcwfzh1Sdu6fHrkiqdoFTqk2a0+KKhE3/OvkotzbdJE60nJ+2 e7jYIKHzzYiN1TG/UZQKh/7gChwFbfoDEpbjsaknnXSbcnBdcsumXGMh1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNrLNGPKBZjeuxqS7MXGszgLBbD9MB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCZW6AFy xstE0w+LCpNSvITsDVhqA94g6qT+lsg0hAQ3foaqGZpzJUeCDfxkUg/PYSeW4Bix Hz0XhqOoiAkdewY31m+6m1++rneLgPQiL0H2CQ6rFrTxDZCZF5qrAnlYfwm1prIs RPbr3DyLdro+YNpRBYAJzCpy07jh5UoQAonhaJwdsFlVJTpxane3GZ4jNCfq3Jpu YOYvDnA49PL0ZBWs8GPo/u5WhMxGpSkscIRAqsA4yH87lULtHR6x8K5t3E232YCH 5PLCIcj9LTUaOjIeczRVlv4sIX06bYO+TBoVse6yiYYnVAG4o9NYkre+bYJ2W1Mr MCMWrYsOhJr5dA== -----END CERTIFICATE-----Generated at Thu Sep 10 23:36:47 2026 by rpki-client