$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: 6LbSkJYqNYaghWS/o6sEo/75ELKROiQc0Ir52deIgrc= Subject key identifier: 2F:43:E1:18:09:1B:A7:8A:5C:DD:43:5E:27:C5:A0:98:D3:5B:D8:30 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 01A08CE88B1181432C3E9FAAE8E49457248B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 1A6D Signing time: Thu 10 Sep 2026 20:00:45 +0000 Manifest this update: Thu 10 Sep 2026 20:00:45 +0000 Manifest next update: Fri 11 Sep 2026 20:00:45 +0000 Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=) 2: 3BOp-YxEDCV8bR7KeQJ8iZNQrP0.roa (hash: GQeGMsayLy25d3Mzz8Sr1dTr20A68juU11xi9SJ1kwQ=) 3: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=) 4: FpZLKm-2HuyBs9RMbUcbmbopMuU.roa (hash: 3TSsOddEtljGL8cZUDm9jJjfR573z1TKNPv7WQMwWsE=) 5: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=) 6: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=) 7: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: sdcXlxfwOboNZHbniVZ5zpgLHKW1KMcZKMmEkVkKS2g=) 9: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=) 10: dKLrGCnnWV06iolZrHx2nh4vWJg.roa (hash: IGn7SudG+KQQ8pkrK3hPDPOgmXUuAfTQAKdCH2IyL6I=) 11: mEhn-x7tkmLGeYlMpZdP2RjzVPY.roa (hash: YARnW3hK0MAvwIlgDRpM5wiqLHphA51kgJTHfm2NanQ=) 12: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=) 13: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=) 14: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 11 Sep 2026 14:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:8c:e8:8b:11:81:43:2c:3e:9f:aa:e8:e4:94:57:24:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Sep 10 20:00:45 2026 GMT Not After : Sep 11 20:00:45 2026 GMT Subject: CN=2f43e118091ba78a5cdd435e27c5a098d35bd830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:13:0b:10:df:84:03:05:38:07:c5:7f:4b:18: cb:5b:87:1b:91:29:d0:b3:22:4b:fb:e4:6a:9c:80: 71:d8:b6:4b:a8:da:f5:b1:94:42:6f:e4:af:3d:86: 80:b0:f1:3f:e0:b9:b5:f9:b1:09:a4:92:87:47:9b: c0:5c:19:a0:9f:2a:70:be:86:5e:0b:8d:12:ea:d1: d2:a7:8d:24:c7:0f:4b:77:2a:b3:5e:4b:d6:24:68: 07:9a:11:6c:c9:7b:4f:21:ca:b3:49:f4:6e:66:8d: d2:60:53:c4:be:a2:ec:d4:ea:1c:ec:5f:a3:51:20: 0d:c6:8b:29:74:8f:29:cc:e9:cf:dd:3a:a7:82:25: 6c:ea:56:1f:dc:5d:a3:1b:46:63:d9:f5:3e:3e:c6: a2:69:cd:1d:a5:0b:1d:c0:3c:62:e6:b1:48:2a:95: 74:26:40:01:d1:a0:85:86:6a:36:6c:1f:8a:01:8f: 57:a9:37:de:7f:fb:22:ac:b5:59:a5:8e:f4:6f:f0: 48:0d:11:0f:b5:94:48:29:ca:0f:94:df:bd:fd:a8: 46:86:57:c8:0c:24:78:c8:a0:4e:26:a3:dd:dd:0a: 5d:bb:2a:03:cb:37:ba:67:20:f9:1d:92:f3:7c:dd: 83:e0:b5:7f:88:91:3b:db:65:85:bb:4b:90:e3:53: bd:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:43:E1:18:09:1B:A7:8A:5C:DD:43:5E:27:C5:A0:98:D3:5B:D8:30 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:8d:b3:42:66:a6:c5:cf:d2:a6:a5:95:af:85:5e:81:cf:cd: f0:2d:70:6b:03:bb:c2:32:b6:4b:10:28:6d:c0:83:ff:40:9a: 5a:81:16:c9:ef:da:b3:89:19:71:98:77:5c:d3:10:3c:a2:12: 7e:49:2c:4c:95:84:d1:e0:75:8c:8c:91:4e:de:6e:c2:39:01: 4e:5b:eb:cc:4e:fe:51:4d:70:da:f5:da:50:89:1b:97:7e:78: 62:48:4c:49:48:66:a7:dc:45:be:f3:82:77:ba:9c:0c:5f:5b: dd:7c:48:38:4a:5d:c4:56:5b:38:bb:15:d2:01:b9:1f:ff:0e: 69:2d:d3:ad:6f:d5:3c:7b:09:af:aa:88:fe:e2:5f:f3:91:6a: 45:2e:36:ff:25:62:86:04:2f:dd:00:d5:99:06:0e:6f:17:85: e3:6c:1a:94:ad:91:90:8a:b5:b5:f6:c0:de:39:c2:49:45:6f: b6:41:80:68:4c:4c:70:61:81:5c:61:0b:9d:51:03:ac:f3:ac: 75:ce:39:61:83:73:28:cb:89:c1:3a:29:3c:92:93:0d:f6:26: a4:d4:12:c8:39:72:0b:85:1a:06:bc:1f:62:2e:c2:ee:7b:68: f6:13:8b:9b:08:bf:6c:2c:0d:8b:31:a3:82:49:c8:96:78:d7: 2c:d6:32:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCM6IsRgUMsPp+q6OSUVySLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYwOTEwMjAwMDQ1WhcNMjYwOTExMjAwMDQ1WjAzMTEwLwYDVQQD EygyZjQzZTExODA5MWJhNzhhNWNkZDQzNWUyN2M1YTA5OGQzNWJkODMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBMLEN+EAwU4B8V/SxjLW4cbkSnQ syJL++RqnIBx2LZLqNr1sZRCb+SvPYaAsPE/4Lm1+bEJpJKHR5vAXBmgnypwvoZe C40S6tHSp40kxw9LdyqzXkvWJGgHmhFsyXtPIcqzSfRuZo3SYFPEvqLs1Ooc7F+j USANxospdI8pzOnP3TqngiVs6lYf3F2jG0Zj2fU+Psaiac0dpQsdwDxi5rFIKpV0 JkAB0aCFhmo2bB+KAY9XqTfef/sirLVZpY70b/BIDREPtZRIKcoPlN+9/ahGhlfI DCR4yKBOJqPd3QpduyoDyze6ZyD5HZLzfN2D4LV/iJE722WFu0uQ41O99wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC9D4RgJG6eKXN1DXifFoJjTW9gwMB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARo2zQmam xc/SpqWVr4Vegc/N8C1wawO7wjK2SxAobcCD/0CaWoEWye/as4kZcZh3XNMQPKIS fkksTJWE0eB1jIyRTt5uwjkBTlvrzE7+UU1w2vXaUIkbl354YkhMSUhmp9xFvvOC d7qcDF9b3XxIOEpdxFZbOLsV0gG5H/8OaS3TrW/VPHsJr6qI/uJf85FqRS42/yVi hgQv3QDVmQYObxeF42walK2RkIq1tfbA3jnCSUVvtkGAaExMcGGBXGELnVEDrPOs dc45YYNzKMuJwTopPJKTDfYmpNQSyDlyC4UaBrwfYi7C7nto9hOLmwi/bCwNizGj gknIlnjXLNYy9w== -----END CERTIFICATE-----Generated at Thu Sep 10 22:42:35 2026 by rpki-client