$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft File: 8FIRKM9jSqavp-9S1THz_NVWKPk.mft (raw, json) Hash identifier: 75b43ft/Ix5c2vS2HkjZPteJMR2D1R1rCmUZivNJAcw= Subject key identifier: 38:0D:D9:5C:58:E0:DA:20:0E:C4:23:49:0D:47:5B:D5:EF:73:A1:5C Authority key identifier: F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 Certificate issuer: /CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Certificate serial: 01A08C0DA8DE96DDE5AB11F10487941FA8AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft Manifest number: 1A5E Signing time: Thu 10 Sep 2026 16:01:40 +0000 Manifest this update: Thu 10 Sep 2026 16:01:40 +0000 Manifest next update: Fri 11 Sep 2026 16:01:40 +0000 Files and hashes: 1: 6EiFZKIQWAEn8OFVy62rq2hePVc.roa (hash: QqaEwKcSsaYt3wwf9x5zbgaPoA6qxMBDNuqLJjfSh3E=) 2: 8FIRKM9jSqavp-9S1THz_NVWKPk.crl (hash: bMD6Hpo9UZrf3MolJPhHN1ce4dGtrX1lTko1ITOt/x8=) 3: 8nyc8D2U6ZLNC1jg1xTgLIB5O08.roa (hash: UjE3wubUY3p3vPXEL528/Y/zzZrPn9j4CkCZh6HPAm8=) 4: D8drYTgqt32Cqf3EAiV6kDEeJmQ.roa (hash: z2zUysrNuxBIuhiC3z6/alcclEfX1JrDjmY7TAheY/g=) 5: FutR1Anwjf0YPYgj24VkOnnpOKo.roa (hash: B1PUo1d5o9i7GHA7LLQ+U0epYNN9/13TWk0w7UgND6Y=) 6: HrEvCC8IhGVeGnzBd0VRZALtork.roa (hash: O2TX3efNC8L1kVYPj9yl6qN6Xg9peYzVQTc557TbA/U=) 7: Kpq8EZf55_gV3FvEsn5mjf_dpBU.roa (hash: 2nhGvk06IqlLqxKExuqHomEp9VHs4mN4Vn/X8wYfMBo=) 8: U_LfKCv5kJDOuObeAwMorX4Nmc4.roa (hash: ecSv+ahB4B19FetdtS+R40A/h+b9mvwFfb6awkKuwag=) 9: _x6aIQIYgxoNnvNtpDTT6-qH5fs.roa (hash: j+sPJji49saMlwCW4eBAQImk7LYRvTzCGkaTq0ojLDo=) 10: cCLQDT_9t51iKlaGarf8PuI7ZuE.roa (hash: p225RnWWY7l8rkaX7oOrNPhwDG+u+RY9z5HJIbVDWT8=) 11: iM98sbe2k1VYrTYz4i_WKVQpI3M.roa (hash: 03SHJ8O0TtLrq1IoptZOUrbF4kDjXLjaj0+w7qMBEN8=) 12: o1nTmEm1gCstJMw7wpnSZMxMONQ.roa (hash: pg0A+jsUZK8QeY09ViiYP2qIWGZZ0uwQp9do9UnjuSo=) 13: wYnNwRf0L8-7zAlQ9eMsEnpatqU.roa (hash: vGGDkEQtDcGYvJgapMsj38d8WJqbdN5ZD4U4q0HVb6I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8c:0d:a8:de:96:dd:e5:ab:11:f1:04:87:94:1f:a8:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0521128cf634aa6afa7ef52d531f3fcd55628f9 Validity Not Before: Sep 10 16:01:40 2026 GMT Not After : Sep 11 16:01:40 2026 GMT Subject: CN=380dd95c58e0da200ec423490d475bd5ef73a15c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fb:71:5f:f0:b5:5a:64:21:a4:b7:23:ca:2c: 46:f3:ee:18:56:bb:f9:72:c4:96:ab:a5:ca:69:33: 8a:0f:df:10:81:ca:3a:8d:ba:eb:a5:73:cc:69:da: 2e:c9:92:b4:20:95:62:81:31:44:04:e8:f0:d0:85: b5:87:93:fb:59:c3:2d:7f:b3:22:70:5c:99:3f:ae: 19:3c:5a:3c:58:cf:67:6e:55:80:aa:7b:0d:8c:91: 3e:fd:e4:22:2d:0b:52:ea:3d:8d:b3:8f:b6:62:e4: 0d:00:6b:c7:65:cb:fb:36:29:7a:7f:0c:df:e2:82: 4b:03:70:08:12:14:d7:a8:54:30:78:b5:2d:e9:e2: b3:0b:71:05:06:61:0c:49:da:b1:6a:53:72:ec:bd: 8a:db:a7:60:19:41:bc:70:bf:f1:5c:ca:1f:29:87: 13:52:1c:e8:04:0e:d9:a8:b4:20:b6:ea:69:94:c2: c1:d9:2c:26:7f:ec:d0:a3:8a:62:a0:21:ea:15:f3: d4:06:67:dc:1a:5a:7f:59:d8:37:79:49:94:91:d9: e2:1b:d0:cf:c2:6e:66:54:ff:10:f2:ef:9f:16:f8: 41:80:f4:0f:8b:95:99:cd:85:df:1e:c0:24:c6:d7: 89:89:b3:27:57:cb:24:2a:37:73:74:ba:d8:ed:53: 46:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:0D:D9:5C:58:E0:DA:20:0E:C4:23:49:0D:47:5B:D5:EF:73:A1:5C X509v3 Authority Key Identifier: keyid:F0:52:11:28:CF:63:4A:A6:AF:A7:EF:52:D5:31:F3:FC:D5:56:28:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8FIRKM9jSqavp-9S1THz_NVWKPk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4b150-dbb8-465f-8155-e4419b64212e/1/8FIRKM9jSqavp-9S1THz_NVWKPk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:75:82:28:ce:d3:17:c3:cf:48:26:c3:74:4d:fd:44:c0:9d: 79:db:4f:c3:36:80:79:fb:18:77:b2:5f:a7:e7:70:54:21:52: 27:39:db:6a:54:06:bf:a5:da:3c:da:cf:c0:d5:79:7f:8c:f4: ad:1a:56:d1:6f:e8:e2:fb:d3:88:d4:a0:bd:d3:62:f5:9a:8a: 72:6e:10:8b:ff:d9:ec:29:ac:f9:4e:41:4b:3e:49:e4:87:e2: 00:86:07:33:7b:73:f7:e9:ad:b2:e8:da:93:31:ef:fc:1c:ef: 7d:c7:2c:9b:bf:64:0b:ec:3d:f8:3b:c3:31:ce:f1:32:74:8c: 95:5a:c4:da:04:70:b8:d5:a2:1d:67:60:30:40:c0:1e:54:21: fd:f9:3d:f3:eb:3d:f0:b8:c6:6b:f8:03:04:4c:8b:87:e2:8b: 83:e0:88:ca:3e:b9:4b:9e:96:9d:46:a9:31:a4:c6:11:2f:40: 62:74:04:bf:cd:cb:1a:f1:9b:d6:61:62:b3:64:e4:a7:13:bd: 24:95:32:92:4a:2e:c4:06:1f:92:ae:28:14:91:3c:82:51:da: 6c:3a:c2:b5:42:ee:90:f2:96:de:14:fc:15:cf:d0:36:3c:b7: 04:3d:2d:f0:8c:ba:e4:c3:da:0c:7a:57:c4:56:ee:20:db:24: 49:a3:60:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCMDajelt3lqxHxBIeUH6isMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwNTIxMTI4Y2Y2MzRhYTZhZmE3ZWY1MmQ1MzFmM2ZjZDU1 NjI4ZjkwHhcNMjYwOTEwMTYwMTQwWhcNMjYwOTExMTYwMTQwWjAzMTEwLwYDVQQD EygzODBkZDk1YzU4ZTBkYTIwMGVjNDIzNDkwZDQ3NWJkNWVmNzNhMTVjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/txX/C1WmQhpLcjyixG8+4YVrv5 csSWq6XKaTOKD98Qgco6jbrrpXPMadouyZK0IJVigTFEBOjw0IW1h5P7WcMtf7Mi cFyZP64ZPFo8WM9nblWAqnsNjJE+/eQiLQtS6j2Ns4+2YuQNAGvHZcv7Nil6fwzf 4oJLA3AIEhTXqFQweLUt6eKzC3EFBmEMSdqxalNy7L2K26dgGUG8cL/xXMofKYcT UhzoBA7ZqLQgtupplMLB2Swmf+zQo4pioCHqFfPUBmfcGlp/Wdg3eUmUkdniG9DP wm5mVP8Q8u+fFvhBgPQPi5WZzYXfHsAkxteJibMnV8skKjdzdLrY7VNGjQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDgN2VxY4NogDsQjSQ1HW9Xvc6FcMB8GA1UdIwQY MBaAFPBSESjPY0qmr6fvUtUx8/zVVij5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUt ZTQ0MTliNjQyMTJlLzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi9iNGIxNTAtZGJiOC00NjVmLTgxNTUtZTQ0MTliNjQyMTJl LzEvOEZJUktNOWpTcWF2cC05UzFUSHpfTlZXS1BrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA3WCKM7T F8PPSCbDdE39RMCdedtPwzaAefsYd7Jfp+dwVCFSJznbalQGv6XaPNrPwNV5f4z0 rRpW0W/o4vvTiNSgvdNi9ZqKcm4Qi//Z7Cms+U5BSz5J5IfiAIYHM3tz9+mtsuja kzHv/Bzvfccsm79kC+w9+DvDMc7xMnSMlVrE2gRwuNWiHWdgMEDAHlQh/fk98+s9 8LjGa/gDBEyLh+KLg+CIyj65S56WnUapMaTGES9AYnQEv83LGvGb1mFis2TkpxO9 JJUykkouxAYfkq4oFJE8glHabDrCtULukPKW3hT8Fc/QNjy3BD0t8Iy65MPaDHpX xFbuINskSaNgpQ== -----END CERTIFICATE-----Generated at Thu Sep 10 22:42:15 2026 by rpki-client