$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: MFArr/JgzUTr8zdiXjj0QPHK/5Fzm4tSuJXz4sXidIQ= Subject key identifier: 05:DE:43:78:34:5B:C7:F7:FF:E8:F7:95:9C:A8:2E:BE:7D:59:08:D1 Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 01A0859D13756C910EA0044E7C925434855D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 190C Signing time: Wed 09 Sep 2026 10:00:58 +0000 Manifest this update: Wed 09 Sep 2026 10:00:58 +0000 Manifest next update: Thu 10 Sep 2026 10:00:58 +0000 Files and hashes: 1: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (hash: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU=) 2: FQ-zr24LwDkwYEmw_FlDbzx5P4s.roa (hash: 72rsnmpdkRSkNBR0uk4zMj5njaCBagS3GBHGnSWVLYw=) 3: h_0cAkv9bRuqII55SmmjCPAtEkY.roa (hash: f3qXMN3stUSn8npXGtiCTxgNOHC/rASxYRfTCA56R9E=) 4: kxHXeC-RgFki1x0jEKzH48eBz8c.roa (hash: E6qamccMc25rG9FxeXNYkNGoky+PcxFg+Xq4GlM3NUs=) 5: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (hash: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk=) 6: plMF4273xJNdefV7r7jo8RJ8QbU.roa (hash: D9odZxGtxbDzG6OiIstvUcJ7z0OpJ5jME5X2lJ31p5A=) 7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: 9pyxbLJZQOLbX0uZkrZ0HOpcQWO0STmACXd3FNSVhoE=) 8: un_1tb4ETb7dJsP5Mq8V0llGT80.roa (hash: cP4I0MaCsjRNc87FbMAxnApmXsIjWX9M4UbopOynI2E=) 9: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (hash: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk=) 10: zLCHjeiw_ejDI_VbLsjC7k1DbE4.roa (hash: 5Mti0up92969Oa1c08K/2LG50PP0mj7MqErSz+8DQcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 10 Sep 2026 10:00:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:85:9d:13:75:6c:91:0e:a0:04:4e:7c:92:54:34:85:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Sep 9 10:00:58 2026 GMT Not After : Sep 10 10:00:58 2026 GMT Subject: CN=05de4378345bc7f7ffe8f7959ca82ebe7d5908d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:93:f5:e9:59:45:74:34:5e:8e:9b:3b:0d:61: 34:f5:53:42:5b:50:bb:75:13:36:42:0b:ec:99:2a: 6d:c9:ef:9f:9a:06:89:e2:b7:a1:d9:94:d1:b7:7a: 12:ab:a6:31:3e:83:c7:ef:19:43:77:8c:f1:22:ad: 96:f6:33:38:7f:34:64:b3:51:79:51:09:da:92:64: 4a:61:a1:9d:87:b3:66:db:fc:ba:40:51:06:85:e6: ea:50:18:8b:e0:81:0b:bc:36:56:f9:90:8a:8f:7d: 67:63:4c:0a:cc:d8:49:bd:cf:01:98:56:b6:9e:b2: db:df:86:49:76:d9:37:97:b5:b0:ba:01:e3:4a:4c: fe:b7:f6:e6:d2:84:68:66:07:9d:17:b5:df:1a:70: 93:a1:0b:dc:4d:38:44:42:03:3a:57:02:a9:ce:3f: d1:ee:01:69:16:38:4e:fa:50:d2:06:f2:c9:f4:8f: 54:97:4c:10:2e:63:12:01:28:e7:67:d0:3f:c4:96: 95:89:f0:fe:c4:33:38:e2:ce:9a:8f:75:a3:b5:d4: eb:f6:37:5c:1b:96:37:a5:1d:f8:95:7d:eb:eb:9b: 58:26:98:0c:d4:9a:bd:a3:07:fa:be:01:29:fb:b1: 05:be:a0:91:d0:03:a8:27:b0:96:93:be:73:b8:84: 0b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:DE:43:78:34:5B:C7:F7:FF:E8:F7:95:9C:A8:2E:BE:7D:59:08:D1 X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:0f:3a:3b:84:0d:bc:4a:90:2e:86:19:e8:8d:83:7f:2c:1c: 1e:9b:15:ac:fb:9a:d5:ac:54:c6:10:83:85:76:a4:49:3f:eb: 09:24:f8:1d:bf:4d:5e:c8:84:ee:9a:42:48:25:be:6d:b4:23: 73:e8:30:b9:c7:67:b1:a4:9e:04:81:08:c6:a5:b1:9f:c2:6b: 51:56:54:d2:17:08:f1:39:31:8d:44:13:96:6b:d4:14:e8:0b: 59:fa:b1:95:5b:d9:c6:1b:c4:73:64:41:39:68:ff:ab:96:eb: 67:28:e5:88:b2:a8:3c:94:83:21:6d:68:30:7a:07:be:ad:c7: f1:06:f7:15:e8:da:d5:a1:00:ef:35:6a:30:39:77:26:74:19: d0:66:e2:1d:f8:01:37:e0:5c:3f:d7:c2:db:e8:5a:30:7c:32: 3c:64:83:56:47:2f:2c:79:f6:fc:ea:f6:ca:e9:44:77:57:3e: ff:f2:d4:c3:a1:4f:ed:4c:ba:09:e3:5b:ad:2c:0d:a9:72:ee: 09:44:ed:0b:ca:3e:34:67:4e:cd:a7:37:0c:94:85:fa:7e:78: 73:e4:a1:a3:1b:84:fa:df:3f:48:bf:02:8c:89:d6:04:05:5c: a5:63:35:60:1c:39:b2:7a:97:67:e6:c7:b9:81:3f:fd:06:f5: c0:0b:a0:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCFnRN1bJEOoAROfJJUNIVdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjYwOTA5MTAwMDU4WhcNMjYwOTEwMTAwMDU4WjAzMTEwLwYDVQQD EygwNWRlNDM3ODM0NWJjN2Y3ZmZlOGY3OTU5Y2E4MmViZTdkNTkwOGQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45P16VlFdDRejps7DWE09VNCW1C7 dRM2QgvsmSptye+fmgaJ4reh2ZTRt3oSq6YxPoPH7xlDd4zxIq2W9jM4fzRks1F5 UQnakmRKYaGdh7Nm2/y6QFEGhebqUBiL4IELvDZW+ZCKj31nY0wKzNhJvc8BmFa2 nrLb34ZJdtk3l7WwugHjSkz+t/bm0oRoZgedF7XfGnCToQvcTThEQgM6VwKpzj/R 7gFpFjhO+lDSBvLJ9I9Ul0wQLmMSASjnZ9A/xJaVifD+xDM44s6aj3WjtdTr9jdc G5Y3pR34lX3r65tYJpgM1Jq9owf6vgEp+7EFvqCR0AOoJ7CWk75zuIQL0QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAXeQ3g0W8f3/+j3lZyoLr59WQjRMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvg86O4QN vEqQLoYZ6I2DfywcHpsVrPua1axUxhCDhXakST/rCST4Hb9NXsiE7ppCSCW+bbQj c+gwucdnsaSeBIEIxqWxn8JrUVZU0hcI8TkxjUQTlmvUFOgLWfqxlVvZxhvEc2RB OWj/q5brZyjliLKoPJSDIW1oMHoHvq3H8Qb3Feja1aEA7zVqMDl3JnQZ0GbiHfgB N+BcP9fC2+haMHwyPGSDVkcvLHn2/Or2yulEd1c+//LUw6FP7Uy6CeNbrSwNqXLu CUTtC8o+NGdOzac3DJSF+n54c+ShoxuE+t8/SL8CjInWBAVcpWM1YBw5snqXZ+bH uYE//Qb1wAugOQ== -----END CERTIFICATE-----Generated at Wed Sep 9 19:06:41 2026 by rpki-client