$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft File: rr85Ti8bJRyI2YiocWEIRYB4bvU.mft (raw, json) Hash identifier: khBbG5D9ddzvlhdNIHMrgkreY9X+WWx8hWf5Jc5X/7E= Subject key identifier: 92:B2:F6:34:1E:21:20:D3:93:A7:C0:BA:AE:92:F6:6C:28:CF:F7:2B Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5 Certificate serial: 01A0F2D59EA289D6CB4696498611F665D610 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft Manifest number: 1A9C Signing time: Wed 30 Sep 2026 15:01:21 +0000 Manifest this update: Wed 30 Sep 2026 15:01:21 +0000 Manifest next update: Thu 01 Oct 2026 15:01:21 +0000 Files and hashes: 1: A0jJG1saLwhFpwXvphN5KLkIp7E.roa (hash: zfUzOQxZDjIQpzcBLbTZxhWmdADgguB1bEK9a5hzld0=) 2: BHJrH90HA7e2j36fHZGtluntvoI.roa (hash: Y13mf0+6dWn2wsiZuzG7gygvh4nWO0T3oCMxSoXnKls=) 3: I3Qz77k2oYxzlmKadcI15VK2Xho.roa (hash: rl1+7VSSJCLWAX7YF+ZUOE9VZc/4GpcEkb9o7QBoLJw=) 4: IUNo-G5ABIhSuSWdeiVCc3h9D4A.roa (hash: LzcrEnLFMAnlZ+5zqbHv6+pvv/Iv59lNp1OzlwME3F8=) 5: Pwm-W2XqZjbGSCW1vqwh0IMaZZc.roa (hash: MOGwB7iZKu1QkN/hiCIWIk9cs+bF15Y23HgeypcVdhw=) 6: _4I_-jCH3XR23JxHVWzlSOPi3_M.roa (hash: tqFTpY9AJoIMPhinhdWGv8n5l6XDT7XH/JbG8DY2pa4=) 7: kz88XGl4i-o90qHpgWaNT6qB9F4.roa (hash: iFw0bXeL0s+Rwtq0iRLlZLd1+3x1hxhmoVT6WC3MudE=) 8: rr85Ti8bJRyI2YiocWEIRYB4bvU.crl (hash: imS4VhSKGYQwQLwrgQy2BB2zNrRJMGqtAHOOrsRUhw0=) 9: sqmM075pYoIhRN4MwnW9o487rF8.roa (hash: I1CZglIvCm1ewemqOSJLikUmJGVYj4wQzxEvNc+9woA=) 10: vCq8VVeEIofiFQLrkv4khGyN3iM.roa (hash: +sZQ4wGcyHE3djaR6nEoYJEVQLBZat/sIPQiTRwtVBU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 01 Oct 2026 11:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f2:d5:9e:a2:89:d6:cb:46:96:49:86:11:f6:65:d6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5 Validity Not Before: Sep 30 15:01:21 2026 GMT Not After : Oct 1 15:01:21 2026 GMT Subject: CN=92b2f6341e2120d393a7c0baae92f66c28cff72b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7b:54:ac:f6:f8:a8:a2:09:18:b8:3c:f0:ca: f8:4d:28:db:45:70:0d:b0:09:6d:83:2e:e0:8d:50: 29:c7:e0:5d:7e:7f:6d:4e:9e:f0:7f:0c:1d:d0:b4: 33:ea:1c:62:f4:f8:7b:7c:cc:23:99:bc:99:09:6a: 29:3b:07:51:d2:21:53:be:95:57:d2:d3:11:e6:04: 80:50:df:2c:3e:8c:77:0f:ac:a0:25:a6:4a:94:8b: 99:c6:45:70:7d:db:92:f8:90:a9:19:06:64:cf:60: 95:7a:39:d6:a1:9b:ea:ed:b8:1c:da:c6:25:5a:85: 41:d4:7b:17:df:2e:bd:f1:6b:ea:13:a0:0b:7b:3a: 3f:ac:81:a1:fe:01:4b:dd:6e:21:ce:b3:6a:b0:2b: 8c:4f:69:74:89:17:a8:75:b8:cc:ec:85:1e:ea:80: 38:44:5e:d4:b3:03:07:63:17:97:80:e1:f7:70:62: 65:e2:d5:9b:7c:79:7b:90:ad:ff:f9:40:d0:ba:90: f8:d9:e6:d1:13:5c:ec:0a:f9:c8:89:7d:ff:af:37: a9:af:b0:24:a0:e5:8e:ab:fc:0b:85:3a:5d:19:1c: 35:b2:00:69:4a:ce:72:83:2f:0c:42:2a:35:f0:32: 35:1c:d9:cb:7b:6b:56:19:2d:33:05:40:2d:c7:4c: 43:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:B2:F6:34:1E:21:20:D3:93:A7:C0:BA:AE:92:F6:6C:28:CF:F7:2B X509v3 Authority Key Identifier: keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:4b:55:f7:e1:68:73:86:0c:76:0f:aa:87:7e:de:03:08:f9: 45:39:06:8a:26:89:9f:f1:11:85:85:6b:29:3d:82:c9:2c:17: d1:55:32:94:17:f6:50:7d:f7:43:ed:e7:8a:73:80:9b:3b:9b: 31:b7:6c:b1:c5:5b:d3:9d:ac:e7:4a:55:15:07:6b:4f:0c:27: d7:dc:97:55:15:55:0e:4a:11:05:cd:5e:bc:9e:f7:47:07:3d: 65:27:56:f1:d3:8a:7c:2c:b1:a5:28:86:06:b3:4d:f1:89:1b: 24:dc:e8:97:ed:30:f7:af:72:08:ad:04:4e:fc:27:ff:37:62: b0:e4:d3:e7:13:74:e3:3a:3a:c2:95:23:91:f7:03:34:0c:c0: f9:1e:db:61:38:81:1f:3d:b6:2f:7d:02:10:96:46:13:66:7c: 51:0f:4c:d3:f5:3d:df:18:45:e3:59:da:c5:d4:98:e0:32:23: c8:1f:0a:17:be:e9:33:32:6b:af:7a:a9:b2:d3:69:00:71:94: 49:8a:99:f0:d2:93:ae:6b:1c:ea:3a:dc:9a:2d:07:3b:9e:43: b9:1d:45:6b:44:4f:10:67:45:65:a3:59:73:18:80:a7:96:13: b2:fc:03:7b:b2:0a:07:a8:9f:34:1f:94:e0:6c:d3:65:98:f5: 99:55:41:b3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDy1Z6iidbLRpZJhhH2ZdYQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlYmYzOTRlMmYxYjI1MWM4OGQ5ODhhODcxNjEwODQ1ODA3 ODZlZjUwHhcNMjYwOTMwMTUwMTIxWhcNMjYxMDAxMTUwMTIxWjAzMTEwLwYDVQQD Eyg5MmIyZjYzNDFlMjEyMGQzOTNhN2MwYmFhZTkyZjY2YzI4Y2ZmNzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3tUrPb4qKIJGLg88Mr4TSjbRXAN sAltgy7gjVApx+Bdfn9tTp7wfwwd0LQz6hxi9Ph7fMwjmbyZCWopOwdR0iFTvpVX 0tMR5gSAUN8sPox3D6ygJaZKlIuZxkVwfduS+JCpGQZkz2CVejnWoZvq7bgc2sYl WoVB1HsX3y698WvqE6ALezo/rIGh/gFL3W4hzrNqsCuMT2l0iReodbjM7IUe6oA4 RF7UswMHYxeXgOH3cGJl4tWbfHl7kK3/+UDQupD42ebRE1zsCvnIiX3/rzepr7Ak oOWOq/wLhTpdGRw1sgBpSs5ygy8MQio18DI1HNnLe2tWGS0zBUAtx0xDZQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKy9jQeISDTk6fAuq6S9mwoz/crMB8GA1UdIwQY MBaAFK6/OU4vGyUciNmIqHFhCEWAeG71MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2It NjFlN2Y0MGQ1ZGQ2LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOS80MDQ5OGUtZDFjMC00ODRjLWFiY2ItNjFlN2Y0MGQ1ZGQ2 LzEvcnI4NVRpOGJKUnlJMllpb2NXRUlSWUI0YnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKktV9+Fo c4YMdg+qh37eAwj5RTkGiiaJn/ERhYVrKT2CySwX0VUylBf2UH33Q+3ninOAmzub MbdsscVb052s50pVFQdrTwwn19yXVRVVDkoRBc1evJ73Rwc9ZSdW8dOKfCyxpSiG BrNN8YkbJNzol+0w969yCK0ETvwn/zdisOTT5xN04zo6wpUjkfcDNAzA+R7bYTiB Hz22L30CEJZGE2Z8UQ9M0/U93xhF41naxdSY4DIjyB8KF77pMzJrr3qpstNpAHGU SYqZ8NKTrmsc6jrcmi0HO55DuR1Fa0RPEGdFZaNZcxiAp5YTsvwDe7IKB6ifNB+U 4GzTZZj1mVVBsw== -----END CERTIFICATE-----Generated at Wed Sep 30 19:53:03 2026 by rpki-client