$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json) Hash identifier: ebFi5JeHS8fUE7M8o09Um7kfLdV2lLaJjFksTOGj8z8= Subject key identifier: 40:FB:CB:36:B1:E6:A3:8F:F6:2B:11:FC:77:15:40:1E:69:54:7C:52 Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 01A10211939E19A538047440954D79AEAE1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft Manifest number: 047F Signing time: Sat 03 Oct 2026 14:01:08 +0000 Manifest this update: Sat 03 Oct 2026 14:01:08 +0000 Manifest next update: Sun 04 Oct 2026 14:01:08 +0000 Files and hashes: 1: 1E8AiSnlYGPXbOfAXqZEBvdti0Q.roa (hash: zg4/KmKPBBnWqoo6XqmqqOeEWKX38ZMsmowwS7V3CsY=) 2: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: hLP2+cuZcGkjoqUvTsi3W97WOtaGMhOnRmB+rDYrq2E=) 3: AB-3GTt7dKbgGDarr3rLpVJnw1Q.roa (hash: 8ZkLoQZEXsJMEKT0BvkO1TAaKtUbWVe7ZEC6sjqW8hc=) 4: EQogtfwIG0vfRIsrb83BkikUx6w.roa (hash: fnMUu9z6P/luxngyy5MILnRThzpFqtLF+/+Opl1fOk8=) 5: Fpers4ckw8vskaNRVclqUBp0SoI.roa (hash: /ASq7BRZjDqtnx4xF8bUwVqbxsy5sT2w1mwn2Hyex7s=) 6: GG4z91MdDpV2DBV_RNPbWkwIoJw.roa (hash: Eqt3BxDIeVAQpNBJJYqmZDf6uBVXq8wo47BPWDDy060=) 7: L6Ra25CjKp_mEEvb6fnLzB9z48Y.roa (hash: gAYyNL8en1bwIuDNmy096pQ8EjEcbk/vtZcx5FewlIM=) 8: M9gz-zDjcHMG72ncQoctT7Ig0gw.roa (hash: y0f77DJy/W9u5Zu+gCP6r/Or2FuJoDzwWHLtUiVFB3Q=) 9: Q9MMK2jX7oFaxPIBQ_rjAEBshOQ.roa (hash: dXmtL6fHBlnD6F3o0HvOrowNNpFXpHlehl60bZfG+XM=) 10: Rljxz94QZplQeuBAwuf9oFlx7r4.roa (hash: RKSS2AInFLgVvgo8kRCmVpguBnDnbeAsri/BPhh+zkc=) 11: ZmA7YXk1EXie8V8IljOsrQAeVMc.roa (hash: KfN3YtXoCnYtbOhys/L3JbGSTPU3Jpxa1rNO5rVZaaM=) 12: cGY6VU5LCoHNqWWYp31zTE9OfVQ.roa (hash: JmT+NXbdK0ja4GM6w1yJIVMBiCu7leyjjpmQYwjqaI4=) 13: hbHoK0o2p6Bt0sMLz48Nn7EIEws.roa (hash: AabyFao1094cA8E0S9PcCwFVPGA7d1c7Y+W9MYMaIkQ=) 14: ipNOGO-HZGeaSbGj4A_3vWbejCk.roa (hash: iX9jrw9KV78oXpLW2rMU6Z1RbiiCKzsCJE3wPvWfMKQ=) 15: khb_nHg0pSGTidoxptDUDhVpMRE.roa (hash: a1Y69sqRSLymfDktz/oYdmUj3z7+Bwa6JrhSMrXtZDY=) 16: rTCIQuB8b5-23Fe16EFzxOkFAo0.roa (hash: 85dTReYxmMkhMzb7ZnE2kpCceaZUsUjOdsiOl8VJLKg=) 17: unf0Pta1KwBim2xfa75YmFcO_NA.roa (hash: 2/UKKYn3OdWj/kHyqsLPSNx09K6m4+Me/8ccsKvqlJo=) 18: wMIGg_895xsUud_tObIdM45E8XQ.roa (hash: LP5aF2JP0E54B5AqB2G8lcqC6PTsBN6TaHhp9g0P2hY=) 19: ySkdtLpwthgQcRcY1mmiVALopO4.roa (hash: lcmNAh++zdti5i3/Z0f1GF+aPbDpUmxj40nEHbXXFoY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 14:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:02:11:93:9e:19:a5:38:04:74:40:95:4d:79:ae:ae:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Oct 3 14:01:08 2026 GMT Not After : Oct 4 14:01:08 2026 GMT Subject: CN=40fbcb36b1e6a38ff62b11fc7715401e69547c52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:e8:56:46:5b:42:a9:46:d4:84:e6:30:c3:59: 4c:23:f3:32:9f:e9:ca:0a:81:1c:0c:72:db:bd:05: f5:8e:cb:3a:a9:0f:51:13:d6:11:72:4f:fb:7e:32: f1:69:81:a9:7a:78:51:dc:e3:ca:ff:f3:0d:e1:cd: cf:1a:5f:0b:3c:f6:53:3c:35:21:64:2a:1b:71:79: 47:d6:46:9c:23:5d:b9:50:13:20:41:6c:a3:65:e9: 77:34:f5:ef:36:1f:63:d9:a0:e8:81:3d:ff:17:cd: f9:ce:bc:ee:2b:39:74:c6:73:cb:83:8d:74:77:f7: 5e:96:99:d3:b6:b5:33:e4:d4:d0:13:52:85:f8:98: ce:27:ba:2b:61:e6:0b:0d:72:19:4c:d5:23:58:a3: 5b:2e:b7:a7:f5:e2:5f:cf:96:1c:78:53:00:fc:c4: bc:75:ff:8e:01:05:e7:a4:2a:f2:95:a8:f7:10:87: b8:62:2a:76:5f:c6:40:06:18:6f:96:8e:25:93:e0: 9d:c3:15:f0:bd:8e:fb:cf:4d:94:65:a6:8c:10:0c: 00:56:0e:c4:94:bf:c9:5c:31:a4:ae:07:c8:79:35: 41:81:b5:59:82:93:ab:5c:24:71:ce:ab:b5:34:7b: 0b:83:5d:bc:0b:3f:5a:df:08:4e:b3:90:15:4a:07: 55:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:FB:CB:36:B1:E6:A3:8F:F6:2B:11:FC:77:15:40:1E:69:54:7C:52 X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:3f:ee:59:48:4c:4b:a1:0c:32:2a:a0:6b:90:08:a5:78:53: 31:e2:23:5e:64:18:64:33:e9:8a:4f:84:1f:24:34:66:26:b8: 47:05:25:be:02:b4:ba:72:2d:f6:5c:d8:81:f7:10:ce:fa:a8: 3e:8c:cc:97:a5:a0:ff:40:92:b8:c4:19:5a:6e:29:a0:f1:3f: 43:c1:75:57:84:fc:4a:c0:ab:96:0b:da:9b:48:b3:bb:66:95: e3:03:a8:60:7f:23:20:7c:ef:6c:41:d7:4a:18:49:2b:e5:74: 5c:49:43:1c:12:bd:e3:bc:77:5c:e8:51:d8:c6:ea:42:60:2b: f1:fb:bf:4a:a4:da:a4:02:dc:f6:bd:1e:9c:b1:98:3f:b7:83: bd:8a:c7:9a:b9:ef:61:ab:78:0d:21:02:ce:74:d1:0d:53:9e: 27:84:55:51:df:7f:4b:9c:54:7b:d6:07:be:df:34:dc:83:a3: a3:0a:95:cc:24:f6:0c:31:4d:ac:c0:55:b7:04:32:df:11:d4: 5d:f5:3a:6e:56:9e:5f:55:0f:0f:14:66:97:75:09:52:a2:cc: cf:6c:8c:29:1e:2d:83:9e:25:95:e1:8d:a9:14:9d:bd:83:48: 8d:bd:2a:70:bd:d9:b1:fb:f7:74:f6:24:4b:e4:3e:96:d8:fa: aa:48:52:e8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaECEZOeGaU4BHRAlU15rq4cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYxMDAzMTQwMTA4WhcNMjYxMDA0MTQwMTA4WjAzMTEwLwYDVQQD Eyg0MGZiY2IzNmIxZTZhMzhmZjYyYjExZmM3NzE1NDAxZTY5NTQ3YzUyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+hWRltCqUbUhOYww1lMI/Myn+nK CoEcDHLbvQX1jss6qQ9RE9YRck/7fjLxaYGpenhR3OPK//MN4c3PGl8LPPZTPDUh ZCobcXlH1kacI125UBMgQWyjZel3NPXvNh9j2aDogT3/F835zrzuKzl0xnPLg410 d/delpnTtrUz5NTQE1KF+JjOJ7orYeYLDXIZTNUjWKNbLren9eJfz5YceFMA/MS8 df+OAQXnpCrylaj3EIe4Yip2X8ZABhhvlo4lk+CdwxXwvY77z02UZaaMEAwAVg7E lL/JXDGkrgfIeTVBgbVZgpOrXCRxzqu1NHsLg128Cz9a3whOs5AVSgdVWwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFED7yzax5qOP9isR/HcVQB5pVHxSMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnz/uWUhM S6EMMiqga5AIpXhTMeIjXmQYZDPpik+EHyQ0Zia4RwUlvgK0unIt9lzYgfcQzvqo PozMl6Wg/0CSuMQZWm4poPE/Q8F1V4T8SsCrlgvam0izu2aV4wOoYH8jIHzvbEHX ShhJK+V0XElDHBK947x3XOhR2MbqQmAr8fu/SqTapALc9r0enLGYP7eDvYrHmrnv Yat4DSECznTRDVOeJ4RVUd9/S5xUe9YHvt803IOjowqVzCT2DDFNrMBVtwQy3xHU XfU6blaeX1UPDxRml3UJUqLMz2yMKR4tg54lleGNqRSdvYNIjb0qcL3Zsfv3dPYk S+Q+ltj6qkhS6A== -----END CERTIFICATE-----Generated at Sun Oct 4 00:47:15 2026 by rpki-client