$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft File: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft (raw, json) Hash identifier: Ea5rXEJzOjXekEjId1ar+r//pB15L+StBZECftR2uGs= Subject key identifier: 80:A4:7F:D5:A0:26:4D:54:51:03:2F:2C:DE:A4:AB:E5:95:1D:32:C5 Authority key identifier: 20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 Certificate issuer: /CN=206f1c32bc0a9006081d552fede67d6842921ec3 Certificate serial: 01A1084A97EAEA5470E233DC99A2EF934392 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft Manifest number: 1A9D Signing time: Sun 04 Oct 2026 19:01:08 +0000 Manifest this update: Sun 04 Oct 2026 19:01:08 +0000 Manifest next update: Mon 05 Oct 2026 19:01:08 +0000 Files and hashes: 1: 1-GhRhgsSmBC7gWKhOHnpR776bf4.roa (hash: qnv9CLKULc4l872r6nllGPstkP0XkRt6PU8gP+XhJSI=) 2: 6v4HqsYH-6som_YpUpTifh8cS0U.roa (hash: o/bzOokvVjVdRRGlEanFfeM+ssve25vJEVqBsKnyXeM=) 3: B1mlic3MBKdWlyRVytiTsaiFEpo.roa (hash: 9Ke9dxoY8TVa8fbx0FgxVlR01PX31ijJ+fbU+/+2oMs=) 4: IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl (hash: gq4jc0gwUp/NzCayTvyKI/2N/pXxRshHFxenAM19uSQ=) 5: KLTu3qbZjzlyM9kpqiHoyLcPv8M.roa (hash: Hw3psnYEIeZVvc6w8ErUMeU8xREBKOKc8FzSPBoD+z0=) 6: WimZdTjw5Lm8MtebopYruWKL5rI.roa (hash: ZsNGt4iJIvs0TYMA8I/lIAfczIzjQsE/8A1JQl2JcVU=) 7: a7uJpq_z_q_yhJkmebNUtHZmFJc.roa (hash: KAwQnqnyhO/yRaqgGOzpu3c6bjgpIJkUCJpunP3swCs=) 8: b8pxCfgVbYZbiA_OA-s4IAg2LZI.roa (hash: J+IrH96dkk4qiDFeus4aE0u+r2utLyjmelYRT1wTqnQ=) 9: bSrLWTYwlUXSgoWh2AaTKv-yqmA.roa (hash: Xoy4Bu7OUAX9sEbib55m/isLQimqg72dL3LXY0l3BGU=) 10: eM1X7x8wZM8pIbppf3y2iwcpciE.roa (hash: BhDC27TkTu5DoQZF1Cb42Wxs7AL7Hko2eWVnucF5rqA=) 11: ex0_koM3Hnul1gB4FdrgAL4TaJk.roa (hash: r9XRIZzTUJ+UJFblQTe7FtwXbaQCKtxgvzkvKCI8IbQ=) 12: iKMbSLMsYD3IPy4aFTgWFbR5-7Q.roa (hash: FLy0rWO0Tm6EmloSEokoF4mkm9Xo/LOqQZJUxQFOv+k=) 13: li3Nzxt_F2UC_oHWeAWyOoIU6tI.roa (hash: qLkVwH1CtUNyv0xKh9iCCsPrbH80JJJwsrB9STz3pME=) 14: wK7E2CITjHSS2oNwJxLPpiywZOo.asa (hash: oIOlXpucAgwg2lcnJgT+OLAJmqqKdwc6n/6fCi8en3s=) 15: waZz0IyLkJZ2XZs5mcy2zeGt7KA.roa (hash: PLFFtAchWYCJ5jmh6ddgth619HvoXK3NBze7KzilKF8=) 16: y1ma_1MpKFwpBA0ud8_GPTkN9fs.roa (hash: wYvSLwWEiQxZIUgyNEOSCPvFdda8fgf6UgQ9JrolQ/s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 12:07:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:08:4a:97:ea:ea:54:70:e2:33:dc:99:a2:ef:93:43:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=206f1c32bc0a9006081d552fede67d6842921ec3 Validity Not Before: Oct 4 19:01:08 2026 GMT Not After : Oct 5 19:01:08 2026 GMT Subject: CN=80a47fd5a0264d5451032f2cdea4abe5951d32c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c7:ae:49:a4:bc:2b:bc:04:03:36:7d:be:c5: 7b:0a:1e:ac:93:18:e4:20:4b:0b:39:36:e9:4f:18: bd:22:0b:c8:4e:24:84:19:bf:3f:5a:43:c0:6d:1c: 73:56:39:c3:d2:88:03:2e:8a:fb:00:77:49:c7:aa: e3:cc:3f:5e:04:01:8d:e3:87:3f:7d:30:82:0e:0d: 45:db:9c:08:2a:53:4a:39:67:36:2a:ac:8b:a4:4c: 0a:11:43:b2:0f:fb:26:13:ca:49:ee:6a:0e:9c:33: 76:cf:59:a4:99:0a:df:45:bb:bd:d8:58:9f:3e:37: 47:45:3e:15:4a:80:2e:e6:67:21:3b:30:ff:9a:92: 74:f7:ad:dc:2e:dd:d2:4f:92:3d:43:67:f3:ad:2c: e7:12:07:ea:b7:42:3d:bb:92:c8:2b:2b:4e:af:b6: 21:0c:d6:3d:a5:d9:ff:d9:10:5a:95:93:03:20:bf: 02:27:31:6a:2b:d6:d7:4d:1e:36:51:9c:40:8b:80: e6:83:92:ce:d4:f2:4a:27:98:1e:70:9d:11:72:00: 80:4b:20:03:0c:96:f0:07:e0:56:97:c7:75:bd:6f: 9b:02:71:c7:91:46:5e:f7:4c:77:0b:18:9b:71:60: 79:f0:b9:b9:ea:10:14:28:b8:b9:66:9d:a0:ae:74: d2:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:A4:7F:D5:A0:26:4D:54:51:03:2F:2C:DE:A4:AB:E5:95:1D:32:C5 X509v3 Authority Key Identifier: keyid:20:6F:1C:32:BC:0A:90:06:08:1D:55:2F:ED:E6:7D:68:42:92:1E:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/a91884-6f58-4ddd-8932-bba860b26c02/1/IG8cMrwKkAYIHVUv7eZ9aEKSHsM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c7:ff:41:d5:3c:8e:91:d9:c9:64:32:aa:f9:63:23:fd:be: 6d:08:92:c5:81:7c:b6:dc:e0:50:41:73:9c:3e:11:2c:e6:22: 20:9e:b6:7b:c0:9a:71:84:2a:21:16:13:38:bb:2a:c7:61:92: e5:14:44:45:29:2e:1d:b6:80:d2:55:f9:7d:cb:45:1b:a9:62: 42:40:c7:22:a6:9c:c7:8a:b9:e1:1b:19:79:26:e4:f2:44:71: 06:d6:2a:db:87:37:9f:0d:6a:1a:d1:2b:99:72:fc:bd:28:d4: b7:cd:30:70:ef:dd:a8:66:93:e7:7b:e8:b5:19:15:80:77:f1: 2a:af:3b:95:15:e1:76:24:31:2c:a1:4a:b0:f2:49:56:81:dd: b5:e0:3c:05:60:8c:da:e1:91:40:71:23:44:03:cf:42:ee:52: 1f:72:6e:14:19:a4:e9:9e:dd:e5:af:58:f6:8e:8b:82:e8:13: a6:e5:95:ad:e3:c9:6d:0d:e3:59:06:67:f1:00:b8:68:c9:02: 80:9e:1b:93:c8:3a:e2:f6:31:38:5d:9c:83:7e:c4:18:3d:94: 0e:0a:b8:ee:ab:11:ac:61:c4:d8:7e:af:a8:40:f7:b4:e9:70: 4b:77:a6:e3:4d:de:89:c5:8b:12:a5:07:a1:91:9b:a7:d7:e6: a4:ba:f6:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEISpfq6lRw4jPcmaLvk0OSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIwNmYxYzMyYmMwYTkwMDYwODFkNTUyZmVkZTY3ZDY4NDI5 MjFlYzMwHhcNMjYxMDA0MTkwMTA4WhcNMjYxMDA1MTkwMTA4WjAzMTEwLwYDVQQD Eyg4MGE0N2ZkNWEwMjY0ZDU0NTEwMzJmMmNkZWE0YWJlNTk1MWQzMmM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlseuSaS8K7wEAzZ9vsV7Ch6skxjk IEsLOTbpTxi9IgvITiSEGb8/WkPAbRxzVjnD0ogDLor7AHdJx6rjzD9eBAGN44c/ fTCCDg1F25wIKlNKOWc2KqyLpEwKEUOyD/smE8pJ7moOnDN2z1mkmQrfRbu92Fif PjdHRT4VSoAu5mchOzD/mpJ0963cLt3ST5I9Q2fzrSznEgfqt0I9u5LIKytOr7Yh DNY9pdn/2RBalZMDIL8CJzFqK9bXTR42UZxAi4Dmg5LO1PJKJ5gecJ0RcgCASyAD DJbwB+BWl8d1vW+bAnHHkUZe90x3CxibcWB58Lm56hAUKLi5Zp2grnTSQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFICkf9WgJk1UUQMvLN6kq+WVHTLFMB8GA1UdIwQY MBaAFCBvHDK8CpAGCB1VL+3mfWhCkh7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzIt YmJhODYwYjI2YzAyLzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMy9hOTE4ODQtNmY1OC00ZGRkLTg5MzItYmJhODYwYjI2YzAy LzEvSUc4Y01yd0trQVlJSFZVdjdlWjlhRUtTSHNNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoMf/QdU8 jpHZyWQyqvljI/2+bQiSxYF8ttzgUEFznD4RLOYiIJ62e8CacYQqIRYTOLsqx2GS 5RRERSkuHbaA0lX5fctFG6liQkDHIqacx4q54RsZeSbk8kRxBtYq24c3nw1qGtEr mXL8vSjUt80wcO/dqGaT53votRkVgHfxKq87lRXhdiQxLKFKsPJJVoHdteA8BWCM 2uGRQHEjRAPPQu5SH3JuFBmk6Z7d5a9Y9o6LgugTpuWVrePJbQ3jWQZn8QC4aMkC gJ4bk8g64vYxOF2cg37EGD2UDgq47qsRrGHE2H6vqED3tOlwS3em403eicWLEqUH oZGbp9fmpLr2yA== -----END CERTIFICATE-----Generated at Sun Oct 4 21:58:42 2026 by rpki-client