$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft File: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft (raw, json) Hash identifier: tJm/r6BxCqXNq3IEvhHKQQZPHrX3zvrkTAPPWhis8/4= Subject key identifier: DB:42:C1:7B:9A:50:BB:EE:34:FF:19:DD:2C:A8:DC:88:C8:7B:CC:64 Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143 Certificate serial: 01A0897994ADF36AF894E83A5FC4CB82FA83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft Manifest number: 1A4D Signing time: Thu 10 Sep 2026 04:00:41 +0000 Manifest this update: Thu 10 Sep 2026 04:00:41 +0000 Manifest next update: Fri 11 Sep 2026 04:00:41 +0000 Files and hashes: 1: 5CLXXKkA4JcsyDrUBBM3fxn2kdc.roa (hash: gFWbYqwKSpr3zQtON6eHRCE0iX3y63ZJZklzBNANHsM=) 2: 8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl (hash: R/QryaXJUh1PG56LpoIXUFfrRHkZkzgXQuDGOxPgPEM=) 3: DXIDJwT32OV423k4TIWwn2iDwyg.roa (hash: 1DgbvkANX93phDSb+AyRjq7ZFAZDrX3G2DhrbhrdrCY=) 4: Ex4sydFNNb9e9IlWuLzuPazLU44.roa (hash: tuvV0h/eTCcgOOevaItUPifNfonAkWlBsMN+IAbF80I=) 5: F0q3v2kkeTya7vdhm0lzFl3wBAA.roa (hash: BpkEUnq+/w6BrSZ1bTiqPBmMOt7WaZgSwy12/ipsBqo=) 6: GU71SIKDNqtDYi7P5ZGVJfaZ9Ng.roa (hash: 7ZQhqryE0L0rNOAz1gL32gj8EsSrO0yhlKkyCkXl4cc=) 7: PIBmTf3gSYM6zkI7Y8MKCCqkVmM.roa (hash: 5xE+UcziQ9DiquZ2A/57aqh1sjUE876lnNSATCS1lTI=) 8: TXBfEq-bhV4ePw8hLBP6UCEQEtg.roa (hash: gEbc+tVQGYMxTiSiJNGO8DDQrrsZOyqWJhw0Dv/aKqE=) 9: XN9ItxoiVygt3a0qQVsmKKlWk9E.roa (hash: iH4X65Vs6HtOKFxQaLyaQ9nZPsCEbiHQMEBYUWCi4KY=) 10: bba2QTZrp_1uueLnjfHPBxHS3PY.roa (hash: OYrkuz8mezgI3XbKfKRWAwnwwsrmJ+JNJd03sNYC3L8=) 11: djcMZ6pGXyKmA-lIeoWfJvgd_vg.roa (hash: 2V8x5uW66gGIUCrfVlUVt3oOyIC3Jcqdd44dr46xxaI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 23:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:89:79:94:ad:f3:6a:f8:94:e8:3a:5f:c4:cb:82:fa:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143 Validity Not Before: Sep 10 04:00:41 2026 GMT Not After : Sep 11 04:00:41 2026 GMT Subject: CN=db42c17b9a50bbee34ff19dd2ca8dc88c87bcc64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:39:d7:cd:33:e2:01:fc:58:62:6e:6e:60:d4: 6d:11:81:d8:f6:d6:63:51:ca:0b:58:06:0e:e4:a7: 5a:33:d8:53:c8:d9:d3:86:52:6a:f9:c5:69:b4:3b: 47:65:7c:25:de:bb:7b:3b:c8:3c:6a:2a:97:ce:fd: 67:44:81:0e:14:aa:f2:e1:35:05:49:ac:4e:83:45: 3d:ea:1e:9f:97:f7:97:48:32:81:16:74:6e:9a:c5: 96:ff:ac:bc:48:5f:e4:87:3d:4f:c6:da:82:38:91: 6f:4b:4e:01:7f:09:7b:71:92:f0:c3:3b:06:ef:34: 47:61:46:b6:7c:7d:46:ab:96:cb:c7:c2:9f:34:67: ca:3b:54:cf:29:9c:6d:ff:f9:3a:5b:00:92:37:86: b4:aa:b6:c0:ca:5e:c4:c4:3d:ec:7d:ef:d7:9e:7e: c9:18:8e:fa:79:3b:01:2e:89:f4:f9:5f:af:9f:1b: 6c:55:3a:a0:94:52:24:ca:37:72:37:7c:a8:fd:ef: 66:3f:94:89:2d:ba:96:3d:40:17:d2:21:3f:cd:89: 67:b6:cf:5e:bd:43:4f:7d:33:06:d7:22:ba:c8:8e: 0f:9a:78:94:78:f1:88:83:12:2f:89:91:88:6f:5a: e9:b4:b5:d8:a6:05:bf:0c:0d:24:0c:97:1d:8b:9a: 12:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:42:C1:7B:9A:50:BB:EE:34:FF:19:DD:2C:A8:DC:88:C8:7B:CC:64 X509v3 Authority Key Identifier: keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:c1:59:7f:93:14:9e:24:86:ec:03:78:a6:ef:89:31:91:fe: a2:6a:4a:68:b7:c8:ce:92:74:71:d3:b2:2c:5a:3d:0e:52:4d: 65:6d:f1:50:d9:14:a6:ab:66:11:e1:39:ab:ad:4d:5a:23:f6: 17:f0:06:57:5c:1b:f2:1b:49:e3:7f:b3:31:bb:4c:33:8c:87: 9d:6e:90:3e:64:08:11:3b:b2:32:3b:88:5d:91:35:55:31:28: 52:1f:fd:da:3f:56:7f:bf:00:d9:a5:5a:c9:87:a0:26:72:c1: 9a:66:5e:c5:a2:2b:38:24:a9:0b:05:7f:62:37:cc:b3:78:85: 88:6a:f5:e6:d8:c6:82:ce:f9:3e:63:7d:e6:0d:bc:e6:0b:36: d2:84:83:68:34:65:c6:47:40:b5:63:54:02:2e:8d:d8:1d:c1: 4b:31:c8:4f:2a:37:f8:aa:7b:31:da:74:c6:73:49:52:7c:02: 77:ac:7f:cd:04:09:ad:93:b5:7d:bc:d8:03:2f:6c:2c:09:06: 0d:36:08:e3:6e:9a:76:47:71:b2:b1:fe:39:32:29:3e:72:21: ee:10:fa:58:34:f8:f4:49:4f:93:c2:73:a9:30:97:fa:2d:d2: d1:35:49:12:65:0e:f7:24:f5:6b:ed:9b:f2:d6:e4:24:2b:ff: c9:ec:f6:98 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCJeZSt82r4lOg6X8TLgvqDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwZmYyYzYyMjlhZjc2M2E5OWY1MzQ5YTMyNTEwZGY0YTQ1 MjYxNDMwHhcNMjYwOTEwMDQwMDQxWhcNMjYwOTExMDQwMDQxWjAzMTEwLwYDVQQD EyhkYjQyYzE3YjlhNTBiYmVlMzRmZjE5ZGQyY2E4ZGM4OGM4N2JjYzY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjnXzTPiAfxYYm5uYNRtEYHY9tZj UcoLWAYO5KdaM9hTyNnThlJq+cVptDtHZXwl3rt7O8g8aiqXzv1nRIEOFKry4TUF SaxOg0U96h6fl/eXSDKBFnRumsWW/6y8SF/khz1PxtqCOJFvS04Bfwl7cZLwwzsG 7zRHYUa2fH1Gq5bLx8KfNGfKO1TPKZxt//k6WwCSN4a0qrbAyl7ExD3sfe/Xnn7J GI76eTsBLon0+V+vnxtsVTqglFIkyjdyN3yo/e9mP5SJLbqWPUAX0iE/zYlnts9e vUNPfTMG1yK6yI4PmniUePGIgxIviZGIb1rptLXYpgW/DA0kDJcdi5oSbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNtCwXuaULvuNP8Z3Syo3IjIe8xkMB8GA1UdIwQY MBaAFPD/LGIpr3Y6mfU0mjJRDfSkUmFDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYt ZTY5ZjdhNWQyZDkwLzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jYy8wNTFmYTItYzU4MC00YTAyLWExODYtZTY5ZjdhNWQyZDkw LzEvOFA4c1lpbXZkanFaOVRTYU1sRU45S1JTWVVNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArcFZf5MU niSG7AN4pu+JMZH+ompKaLfIzpJ0cdOyLFo9DlJNZW3xUNkUpqtmEeE5q61NWiP2 F/AGV1wb8htJ43+zMbtMM4yHnW6QPmQIETuyMjuIXZE1VTEoUh/92j9Wf78A2aVa yYegJnLBmmZexaIrOCSpCwV/YjfMs3iFiGr15tjGgs75PmN95g285gs20oSDaDRl xkdAtWNUAi6N2B3BSzHITyo3+Kp7Mdp0xnNJUnwCd6x/zQQJrZO1fbzYAy9sLAkG DTYI426adkdxsrH+OTIpPnIh7hD6WDT49ElPk8JzqTCX+i3S0TVJEmUO9yT1a+2b 8tbkJCv/yez2mA== -----END CERTIFICATE-----Generated at Thu Sep 10 10:50:28 2026 by rpki-client