$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft File: dWEnxs1ONdmPCkujYs4nMWSXGUI.mft (raw, json) Hash identifier: gDsjmAE7XP/GplV8n9mqntB5MypyuNa2kUpMEfcbedE= Subject key identifier: 80:2F:D6:A3:22:38:A4:B5:A0:C3:60:BB:27:21:E3:D5:C3:6C:49:60 Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42 Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942 Certificate serial: 01A08A8C3C05A61BA9EEA52DE89391A08FF9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft Manifest number: C1 Signing time: Thu 10 Sep 2026 09:00:41 +0000 Manifest this update: Thu 10 Sep 2026 09:00:41 +0000 Manifest next update: Fri 11 Sep 2026 09:00:41 +0000 Files and hashes: 1: 8h95uNIDYG-Ufog2I8ZoKMaLcsw.roa (hash: hikhXEetfPVBAmxhlFb36D4+i8o25j1BVGOBTUWKg+M=) 2: C3YXK2axKQQL03NOSjgoGxmbHCY.roa (hash: 44/VCgOyO6dDefynF1MFpTO2jMMF5QpDbEm5R3D+USs=) 3: EIkyoQiaHQwFX0yl3QCnz70zobQ.roa (hash: TreOi4k2EXby9E21239vBZMbdO6JXQp6FeGHzvuMLWY=) 4: Ilstpn6LoODw0rzv1fqsnj_9Dh4.roa (hash: Mn8znbmN/J+MxRnhv+qVpqesl4iX9HnxtbZyYlBp8hE=) 5: JpHy1IXUR9emW8WRyQ9wKWFBPHY.roa (hash: C+pLi3vdcWv6cPyXKJcNebdYvfzTWmkMhrsFshVCZ5g=) 6: JuX1_oQdQQlBpU0uPBnvcWB93j8.roa (hash: FZzogSqVxmvRLnflYQZMrGV7lYMhQxxacof5gMp7tHc=) 7: KI_KuOkM0mR_o_lboFwkN-bi1Fk.roa (hash: 14lNz1dQBEYnlCIOUgTsdTghcHSUoRp4iObiy4bcNE8=) 8: QAq5GlfcCx2uicmV2oYykBZI8X0.roa (hash: RYaoRoccHB52OTwDIZC5zlhORRPz3CEswpwYiOVL8sQ=) 9: VzIOsWVyN2BeULByH7QYq4dYbRU.roa (hash: 5im045bps89h9fEb8qZ1ReojgLd/qWfVKk9XBFUXXFk=) 10: YnaVL83EnDyPXsVJYrytnkQg5ug.roa (hash: Fnqs3WN0fegg9CdKzgXczrQTO3HUhiFCAXykCpf5Clk=) 11: ae6vfOe_UB5sL59_YmgnYrMvUjY.roa (hash: UYeEVkIJSbDL/qMMyz7MhtUKRqcR+Ervewhouno445k=) 12: dWEnxs1ONdmPCkujYs4nMWSXGUI.crl (hash: 0ljWCyBHrvRooYMAmNfnFBhoUB+7FdHL0jjI0lB+FbQ=) 13: f3cr88yivxk7Bgm731ewrTZYRmE.roa (hash: KBvRmTnbWWNTOespy+pTserzrz+QFhMRF5nah9piKuY=) 14: gzC5cDg-uB1dPX3dGsiEhW7fD00.roa (hash: vQbqEGTq2U/QqR6/EYIM8eMnRGnw756aRoerxRFX+wM=) 15: hRHkkew4RJW-M5MNhUrCKO9r6iI.roa (hash: xmNN9Qa+v5JHw+YLV1UBftvBMTaZmLQDrk6AQl6upks=) 16: hxrlkQurmLyBhkWbdwa67ZbnUzU.roa (hash: uuNXT/oBMFxKXMlVY9upAUC8wrIrJ/ZYSjthqsU91us=) 17: itsbDKOcLvYTL1wL-BLv0v4776c.roa (hash: ZEawOvc7lWqHf5H65rd92h3sAyZZNHxySs4Mwva3K5c=) 18: ktAcfwaispPfbZlu2PcWbivGiDc.roa (hash: ZS64/IqKl++bCkfIjOUrM7ABwkRqytdLrqhBUhYIiLo=) 19: lgcI0p4y-3yd0Er2Lcq9G4NDiZM.roa (hash: qVffLmVLe5PeGI04xzCYu2VBq+NWEXwG8HflD234N+Q=) 20: nwLLLJnWeUevVC1axaBKhwaHn44.roa (hash: 4NEbrk+ehdLN38/5gtivM/dLignUGaWU9EqjJiYFAxw=) 21: nxPePhL8tH3NJQt_EAwpwmwqNH8.roa (hash: 7XrZ+U4ErAZSq+9GdJTbU1fkc22bILilCayfqLewDgc=) 22: oXHroVFqrTFrT4dW-jOwSgxKgcQ.roa (hash: bWjEdLBfsFa6qTx3+Dfw2/yFPlyDQhUFTnCquJm018M=) 23: qw9D3bwHD-pnEIm3zYFhAcY1hDE.roa (hash: wdRWH9AxQCpUQD8h4pLTtws6prvHWse3QWuviHE/f3Q=) 24: sfoaD0gh3QgYHRuTwM6KqFkxOkQ.roa (hash: MG+l0cjg9doHuJsEha9w6usP174LVgs0j+PQfMk+iKk=) 25: si7LSWMuuhPUeaWDlYag_JlVhKs.roa (hash: nyL0gUFvTFAGinP9bvtQz8LACtq13OiZAYvgoeGB/C8=) 26: wgx1sqQMaS-I2L2y6gRiBobGYlg.roa (hash: 7eLb6fN+zf4qJF/TPfiQ9qgt4nim0I4itE886o8X68g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8a:8c:3c:05:a6:1b:a9:ee:a5:2d:e8:93:91:a0:8f:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942 Validity Not Before: Sep 10 09:00:41 2026 GMT Not After : Sep 11 09:00:41 2026 GMT Subject: CN=802fd6a32238a4b5a0c360bb2721e3d5c36c4960 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:12:72:bd:5a:da:1b:96:dd:3e:e8:6b:b7:6d: 45:9d:e7:f4:19:f4:74:f2:2e:af:1d:0f:b1:ee:64: 37:33:18:94:bc:62:0d:92:91:73:bb:55:bb:3b:d6: cf:4a:5b:16:e8:3d:35:36:ee:9d:b4:10:b8:a6:14: fb:49:d1:b0:13:bb:ec:de:7c:08:a0:6c:bf:92:5d: 0e:f8:ea:4e:97:3c:ab:35:48:d7:83:d9:3b:cb:1f: 2e:3a:6d:ce:ab:87:ae:83:3d:d3:b5:62:c8:83:56: 93:37:5c:eb:69:0e:23:dd:95:b9:89:4f:c0:e7:55: 64:5d:5d:fc:50:2d:1d:0f:41:e5:e7:9d:4d:eb:ca: 24:46:27:3a:a3:3a:1b:8a:db:86:f8:82:65:55:45: 1b:bb:a5:03:c4:28:6f:10:a7:1e:fa:4c:c5:b8:c0: 92:91:52:06:a0:e2:9b:99:1d:db:51:be:62:67:5a: 26:dc:b2:e6:0f:c2:34:65:32:64:11:bc:fd:9f:72: d8:ba:eb:ca:76:85:d4:fa:f3:ee:aa:4d:03:7c:0a: dc:52:c3:70:c7:eb:60:cb:ae:de:eb:9b:53:dd:fa: 04:3c:07:73:4c:5a:3c:86:7b:13:20:33:54:bc:35: 6d:72:be:f0:2e:79:a4:d3:21:d6:47:f7:98:f4:f4: fc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:2F:D6:A3:22:38:A4:B5:A0:C3:60:BB:27:21:E3:D5:C3:6C:49:60 X509v3 Authority Key Identifier: keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:c8:46:a7:5f:9c:b7:2d:f3:6c:d8:d2:2a:e8:5a:3e:25:45: b4:c4:09:6e:ac:ee:6e:ec:ae:19:49:b0:ac:ca:27:54:ea:d6: 18:1c:a9:0f:3a:32:2e:9e:1e:0f:d4:cd:3f:0c:d2:07:3b:a0: 2d:cc:ee:5e:a1:ab:01:6b:28:84:2d:67:68:c5:98:a5:c5:08: 59:1e:22:72:74:02:47:7e:b0:aa:25:0c:00:4c:7d:1f:28:77: 34:e6:d1:28:70:68:5c:a8:c7:3e:62:e8:bf:85:2d:09:3f:e4: c5:01:ab:26:f6:48:0f:fe:77:5d:ac:17:6a:a7:6a:05:9a:b0: 2b:6a:99:74:d9:16:48:1f:a0:69:52:c2:d7:00:a2:4c:2e:19: bb:e5:d8:db:28:1a:06:29:5b:94:43:bb:80:d2:9b:4e:0d:f6: 0c:21:41:2c:e4:60:ea:1f:ac:4c:95:a5:49:15:32:0a:51:a0: 07:24:e1:8a:b1:b4:3f:82:b2:a2:85:d1:63:74:83:39:ed:dc: 96:1f:ae:b9:5a:38:dd:4b:84:57:4e:6f:66:5f:c8:56:35:eb: 88:d1:b6:29:32:17:0f:c4:b1:46:f5:20:74:92:30:7f:45:d0: 12:5f:84:b8:fd:24:b5:5a:6a:ce:80:ed:d9:8e:83:02:4e:e1: 42:c1:5c:c7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCKjDwFphup7qUt6JORoI/5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc1NjEyN2M2Y2Q0ZTM1ZDk4ZjBhNGJhMzYyY2UyNzMxNjQ5 NzE5NDIwHhcNMjYwOTEwMDkwMDQxWhcNMjYwOTExMDkwMDQxWjAzMTEwLwYDVQQD Eyg4MDJmZDZhMzIyMzhhNGI1YTBjMzYwYmIyNzIxZTNkNWMzNmM0OTYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRJyvVraG5bdPuhrt21Fnef0GfR0 8i6vHQ+x7mQ3MxiUvGINkpFzu1W7O9bPSlsW6D01Nu6dtBC4phT7SdGwE7vs3nwI oGy/kl0O+OpOlzyrNUjXg9k7yx8uOm3Oq4eugz3TtWLIg1aTN1zraQ4j3ZW5iU/A 51VkXV38UC0dD0Hl551N68okRic6ozobituG+IJlVUUbu6UDxChvEKce+kzFuMCS kVIGoOKbmR3bUb5iZ1om3LLmD8I0ZTJkEbz9n3LYuuvKdoXU+vPuqk0DfArcUsNw x+tgy67e65tT3foEPAdzTFo8hnsTIDNUvDVtcr7wLnmk0yHWR/eY9PT8IQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIAv1qMiOKS1oMNguych49XDbElgMB8GA1UdIwQY MBaAFHVhJ8bNTjXZjwpLo2LOJzFklxlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt ODg2MmI1MTczMTdjLzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj LzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAc8hGp1+c ty3zbNjSKuhaPiVFtMQJbqzubuyuGUmwrMonVOrWGBypDzoyLp4eD9TNPwzSBzug LczuXqGrAWsohC1naMWYpcUIWR4icnQCR36wqiUMAEx9Hyh3NObRKHBoXKjHPmLo v4UtCT/kxQGrJvZID/53XawXaqdqBZqwK2qZdNkWSB+gaVLC1wCiTC4Zu+XY2yga BilblEO7gNKbTg32DCFBLORg6h+sTJWlSRUyClGgByThirG0P4KyooXRY3SDOe3c lh+uuVo43UuEV05vZl/IVjXriNG2KTIXD8SxRvUgdJIwf0XQEl+EuP0ktVpqzoDt 2Y6DAk7hQsFcxw== -----END CERTIFICATE-----Generated at Thu Sep 10 11:59:19 2026 by rpki-client