$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft File: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft (raw, json) Hash identifier: rUgLYI7elY1dfj52cI7qKp/qTNFz3sPz/WI0V1skplE= Subject key identifier: 42:7F:06:0E:72:F2:0D:59:A8:F3:88:8D:BA:50:F1:88:B7:51:92:90 Authority key identifier: 0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 Certificate issuer: /CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Certificate serial: 01A0D12438886DCF5CF63CC05110497249FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft Manifest number: 1A8E Signing time: Thu 24 Sep 2026 02:00:06 +0000 Manifest this update: Thu 24 Sep 2026 02:00:06 +0000 Manifest next update: Fri 25 Sep 2026 02:00:06 +0000 Files and hashes: 1: 2um_rS6WPk2IN6s5x2XbXkQen_M.roa (hash: B3h5JybIRNgVZgqeJwphCEgik9Z267VqHxwbsqTyFKg=) 2: 5du9oXm-5RnmJ8KX2xj_Zy0VqSw.roa (hash: Y1EwroZc2iGhdcqssdik2/Y5BQLLil5kyZQd3CFxooI=) 3: 8f-eDRc6_FXPO45wpxV1xiQ1HAI.roa (hash: qCD4Jc/TwmM8SzWErouUslVtMstyIPcxvXJzTBG565w=) 4: AQlhfGVcA8R2Bwt2uq11a9BJ3I8.roa (hash: ZpJgowIRgidE/63sx4+7oMD9312HUQ//RvFSY5dDQVE=) 5: D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl (hash: NIfVn3Vtsj1uhuFK0JQalTNorOZvSk91ybFcfJPMUwU=) 6: DewPVx0uxJChPazGVl04iEQt-GM.roa (hash: zJ7nbS6MIVpf02vap/KhBVzOnoGcoyj3FKo3YbsVGF0=) 7: NRE_ExP25AUx8aw3isiH4EnLbWo.roa (hash: SKLRbqjSGl9WDWUOA+lP72kkE1542Czk3hD2WUZlOgE=) 8: WLsy-DnnYnQhVtIJoLpzduDgWrE.roa (hash: V18CJCRRVUNGPvZK+aRf70kDiLaxF9fIzOBbbor2Dw4=) 9: b1zJ7NbuL57-e0rkevnmNIo0USU.roa (hash: 6oXQKWkeIUo+oie2lp60DcRhSM6jyLL6Sog8QbpX/bA=) 10: mWfbcxQdC8J-VBP4j7EBWfW3Qb4.roa (hash: osYbMfspLkdv49SbR62yA1rUcvBEuqW1/Mq+AH8uZCU=) 11: pcZnUT88SN1u2R3xPf6LVW5AwuQ.roa (hash: ZB/G3ZNzs5uxcuPvRWlbNalCCRVbwpgrXGxyYOGJMA4=) 12: xvB92g3viVT1q0eYULHN2quLguo.roa (hash: VRmr+2VnW18lzVv/zbO7wYNSjIEYoaGpdy+0x7pBFg4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 24 Sep 2026 23:00:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:d1:24:38:88:6d:cf:5c:f6:3c:c0:51:10:49:72:49:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f6363d428b7915c108825f09706004b8ea3d4b5 Validity Not Before: Sep 24 02:00:06 2026 GMT Not After : Sep 25 02:00:06 2026 GMT Subject: CN=427f060e72f20d59a8f3888dba50f188b7519290 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d8:e4:c1:33:7a:cb:ed:fd:a7:ad:3b:21:9a: 9e:7e:12:ac:cb:10:6d:da:c3:14:27:29:41:d6:0d: 52:5a:86:73:67:1b:f1:30:13:fc:5e:09:66:23:85: 4e:d1:40:36:92:e2:09:75:88:76:b8:b3:66:03:d0: fb:be:c4:d0:e8:f5:00:72:69:a0:ba:89:f4:cd:eb: 25:5b:fd:74:22:38:03:70:00:e0:1a:3d:3a:aa:29: 0a:4f:c0:b4:49:7f:7c:ae:72:ec:a5:d7:35:77:f6: dc:6d:cb:c9:18:cb:e8:b8:99:26:4b:d0:6e:c6:92: c8:ae:e0:77:5c:5b:a7:19:8b:f9:fc:2f:28:61:21: f4:29:48:e3:00:69:b0:5c:5c:a7:0e:31:d5:78:6e: 09:2c:3f:2a:2b:e2:da:0a:42:93:14:f7:26:d1:f5: 8d:b2:60:a2:8a:91:96:d7:0f:34:50:d0:94:c0:ec: 18:4b:55:e9:48:86:5f:7d:e4:c0:d3:1e:07:6e:a3: c7:4f:93:57:64:9b:70:f8:53:c6:30:24:38:cb:93: 74:63:10:b8:74:66:9b:03:2d:00:04:ff:fe:c4:d5: 1e:6f:74:f0:87:42:7c:c7:a8:a5:16:8c:b8:fb:aa: 82:bf:7b:7b:f4:0e:66:17:62:d4:36:2b:7c:1e:75: ef:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:06:0E:72:F2:0D:59:A8:F3:88:8D:BA:50:F1:88:B7:51:92:90 X509v3 Authority Key Identifier: keyid:0F:63:63:D4:28:B7:91:5C:10:88:25:F0:97:06:00:4B:8E:A3:D4:B5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/6becb0-18fd-4add-bb41-2e1c0af4faa4/1/D2Nj1Ci3kVwQiCXwlwYAS46j1LU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:8c:5c:af:4f:fb:16:89:b2:ba:08:11:97:8b:a1:41:e7:4b: 9b:37:f7:39:7e:17:dd:7b:1a:ba:12:73:af:21:c8:47:97:d3: 08:c8:b0:da:82:e3:72:57:b2:63:90:25:f5:49:47:01:22:e7: 14:d5:a3:ef:d1:96:18:e9:85:a5:10:ff:b2:ca:b8:68:ed:a6: a3:ad:20:fe:25:eb:9b:45:40:7e:32:97:e1:7a:1c:cc:4e:c5: 04:1c:60:9f:5d:a9:d2:dc:03:86:61:a4:1b:b4:8d:b5:4e:99: 96:dc:7d:99:30:96:6f:00:51:fa:fb:c3:bb:cd:7f:e1:c6:f7: 85:f8:13:ca:a6:c6:a4:6a:0a:4f:13:ee:1d:bb:0d:c1:47:d0: d3:cc:84:9a:22:ca:4e:13:bb:b5:44:c7:fa:a3:a6:62:4f:35: 15:5a:86:b8:9f:07:1a:11:31:0a:78:1c:78:fa:22:50:66:91: ad:af:98:74:3f:1f:25:35:f1:28:d0:d8:64:cc:79:1d:ce:01: a1:22:92:33:08:c4:48:75:f0:d4:5b:de:a4:e2:b0:78:e9:d6: 93:1a:f1:1c:d0:fb:92:19:1d:16:dd:ad:26:df:58:79:39:29: 85:57:6f:6d:8d:28:ec:5e:d5:cf:64:9e:88:94:31:39:f8:76: e2:4b:0b:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDRJDiIbc9c9jzAURBJckn8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBmNjM2M2Q0MjhiNzkxNWMxMDg4MjVmMDk3MDYwMDRiOGVh M2Q0YjUwHhcNMjYwOTI0MDIwMDA2WhcNMjYwOTI1MDIwMDA2WjAzMTEwLwYDVQQD Eyg0MjdmMDYwZTcyZjIwZDU5YThmMzg4OGRiYTUwZjE4OGI3NTE5MjkwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNjkwTN6y+39p607IZqefhKsyxBt 2sMUJylB1g1SWoZzZxvxMBP8XglmI4VO0UA2kuIJdYh2uLNmA9D7vsTQ6PUAcmmg uon0zeslW/10IjgDcADgGj06qikKT8C0SX98rnLspdc1d/bcbcvJGMvouJkmS9Bu xpLIruB3XFunGYv5/C8oYSH0KUjjAGmwXFynDjHVeG4JLD8qK+LaCkKTFPcm0fWN smCiipGW1w80UNCUwOwYS1XpSIZffeTA0x4HbqPHT5NXZJtw+FPGMCQ4y5N0YxC4 dGabAy0ABP/+xNUeb3Twh0J8x6ilFoy4+6qCv3t79A5mF2LUNit8HnXvowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEJ/Bg5y8g1ZqPOIjbpQ8Yi3UZKQMB8GA1UdIwQY MBaAFA9jY9Qot5FcEIgl8JcGAEuOo9S1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEt MmUxYzBhZjRmYWE0LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy82YmVjYjAtMThmZC00YWRkLWJiNDEtMmUxYzBhZjRmYWE0 LzEvRDJOajFDaTNrVndRaUNYd2x3WUFTNDZqMUxVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoxcr0/7 FomyuggRl4uhQedLmzf3OX4X3XsauhJzryHIR5fTCMiw2oLjcleyY5Al9UlHASLn FNWj79GWGOmFpRD/ssq4aO2mo60g/iXrm0VAfjKX4XoczE7FBBxgn12p0twDhmGk G7SNtU6Zltx9mTCWbwBR+vvDu81/4cb3hfgTyqbGpGoKTxPuHbsNwUfQ08yEmiLK ThO7tUTH+qOmYk81FVqGuJ8HGhExCngcePoiUGaRra+YdD8fJTXxKNDYZMx5Hc4B oSKSMwjESHXw1FvepOKweOnWkxrxHND7khkdFt2tJt9YeTkphVdvbY0o7F7Vz2Se iJQxOfh24ksLwA== -----END CERTIFICATE-----Generated at Thu Sep 24 06:18:15 2026 by rpki-client