$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft File: 9zQlckyuJz8pYwYNyGXG8LBCXK0.mft (raw, json) Hash identifier: 7NAG0WVQeO9lsLaFcPQj6HCtcgJIlhezwGIOVihxhaA= Subject key identifier: 11:C3:2B:2B:BA:F5:57:2B:11:C1:75:90:67:81:FE:17:AF:12:DD:5E Authority key identifier: F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD Certificate issuer: /CN=f73425724cae273f2963060dc865c6f0b0425cad Certificate serial: 019FF534DDF08BF2FB73BE5DC1E2E3248123 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft Manifest number: 03F2 Signing time: Wed 12 Aug 2026 09:01:50 +0000 Manifest this update: Wed 12 Aug 2026 09:01:50 +0000 Manifest next update: Thu 13 Aug 2026 09:01:50 +0000 Files and hashes: 1: 1E8AiSnlYGPXbOfAXqZEBvdti0Q.roa (hash: zg4/KmKPBBnWqoo6XqmqqOeEWKX38ZMsmowwS7V3CsY=) 2: 9zQlckyuJz8pYwYNyGXG8LBCXK0.crl (hash: ODWIhDg+N2gzqdRQIV3SJhTjVc040joVMdC+IVKQ+Bc=) 3: AB-3GTt7dKbgGDarr3rLpVJnw1Q.roa (hash: 8ZkLoQZEXsJMEKT0BvkO1TAaKtUbWVe7ZEC6sjqW8hc=) 4: EQogtfwIG0vfRIsrb83BkikUx6w.roa (hash: fnMUu9z6P/luxngyy5MILnRThzpFqtLF+/+Opl1fOk8=) 5: Fpers4ckw8vskaNRVclqUBp0SoI.roa (hash: /ASq7BRZjDqtnx4xF8bUwVqbxsy5sT2w1mwn2Hyex7s=) 6: GG4z91MdDpV2DBV_RNPbWkwIoJw.roa (hash: Eqt3BxDIeVAQpNBJJYqmZDf6uBVXq8wo47BPWDDy060=) 7: L6Ra25CjKp_mEEvb6fnLzB9z48Y.roa (hash: gAYyNL8en1bwIuDNmy096pQ8EjEcbk/vtZcx5FewlIM=) 8: NGuLawNRpdMEyZa7IQEIZOQvj0U.roa (hash: Eq+j44jfbWnwDN+asP0NJUV62rEOZ/IR1jxzIbqGMTU=) 9: Q9MMK2jX7oFaxPIBQ_rjAEBshOQ.roa (hash: dXmtL6fHBlnD6F3o0HvOrowNNpFXpHlehl60bZfG+XM=) 10: Rljxz94QZplQeuBAwuf9oFlx7r4.roa (hash: RKSS2AInFLgVvgo8kRCmVpguBnDnbeAsri/BPhh+zkc=) 11: ZmA7YXk1EXie8V8IljOsrQAeVMc.roa (hash: KfN3YtXoCnYtbOhys/L3JbGSTPU3Jpxa1rNO5rVZaaM=) 12: cGY6VU5LCoHNqWWYp31zTE9OfVQ.roa (hash: JmT+NXbdK0ja4GM6w1yJIVMBiCu7leyjjpmQYwjqaI4=) 13: hbHoK0o2p6Bt0sMLz48Nn7EIEws.roa (hash: AabyFao1094cA8E0S9PcCwFVPGA7d1c7Y+W9MYMaIkQ=) 14: khb_nHg0pSGTidoxptDUDhVpMRE.roa (hash: a1Y69sqRSLymfDktz/oYdmUj3z7+Bwa6JrhSMrXtZDY=) 15: rTCIQuB8b5-23Fe16EFzxOkFAo0.roa (hash: 85dTReYxmMkhMzb7ZnE2kpCceaZUsUjOdsiOl8VJLKg=) 16: svzCPtJ_Y3m9AyVp7hkA53WhSO8.roa (hash: A+aTrRICJ1trNaeeAH0idbYQjHa/sT3eD3TFBht/fL8=) 17: wMIGg_895xsUud_tObIdM45E8XQ.roa (hash: LP5aF2JP0E54B5AqB2G8lcqC6PTsBN6TaHhp9g0P2hY=) 18: ySkdtLpwthgQcRcY1mmiVALopO4.roa (hash: lcmNAh++zdti5i3/Z0f1GF+aPbDpUmxj40nEHbXXFoY=) 19: zSwZXWBfonNyDlrmaSVJFy_DDs8.roa (hash: ZdRom6cVEVjE5mIqo8VcYKi/1dFdLDzlukU7wd06Xbk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 13 Aug 2026 09:01:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9f:f5:34:dd:f0:8b:f2:fb:73:be:5d:c1:e2:e3:24:81:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f73425724cae273f2963060dc865c6f0b0425cad Validity Not Before: Aug 12 09:01:50 2026 GMT Not After : Aug 13 09:01:50 2026 GMT Subject: CN=11c32b2bbaf5572b11c175906781fe17af12dd5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:00:51:ec:f5:7c:05:fb:f7:99:4f:35:9f:ae: c4:9b:e7:52:93:4f:a5:aa:9b:00:98:37:fe:97:d5: c5:e2:85:76:1e:60:15:6d:c5:06:ed:f1:75:02:3d: b9:6f:9a:1e:4a:1d:de:bf:9b:86:88:66:f8:dc:77: 5a:1d:60:b3:93:70:6d:2c:20:02:42:49:96:a0:3d: e0:9a:22:65:53:bf:cb:2b:9c:d3:a5:a4:c4:ef:fb: c3:ec:5e:93:89:c2:f5:33:7f:21:8a:35:26:20:b3: e5:1f:9f:e2:dd:d7:13:63:d8:32:68:33:51:3a:00: 99:5b:29:e9:59:3f:89:94:ab:df:a4:f4:60:c0:98: 61:e0:2b:09:cd:89:6a:7b:11:80:3c:62:b4:39:76: 9b:0c:07:43:02:e2:64:d7:8c:f0:ac:34:40:23:ec: 42:87:97:19:f6:d1:cf:b0:e1:63:68:64:ff:3b:b9: 01:8c:07:96:e0:c1:58:18:a9:92:03:dd:8e:1d:38: 9c:e4:8e:54:7f:8e:d2:e6:90:43:d8:63:ef:a3:3b: 6d:f9:d8:39:81:b9:d9:f8:3c:1e:10:a7:ac:b0:80: 00:fb:b3:dc:f5:d8:63:15:a6:9f:e7:64:88:5e:1e: 4b:ac:a1:e0:7c:07:ba:c9:09:c4:a1:c1:9f:73:80: 2f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C3:2B:2B:BA:F5:57:2B:11:C1:75:90:67:81:FE:17:AF:12:DD:5E X509v3 Authority Key Identifier: keyid:F7:34:25:72:4C:AE:27:3F:29:63:06:0D:C8:65:C6:F0:B0:42:5C:AD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9zQlckyuJz8pYwYNyGXG8LBCXK0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9f09aa-dd5e-4e06-b28e-e871b21790de/1/9zQlckyuJz8pYwYNyGXG8LBCXK0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:e8:93:0f:0d:52:9f:a1:a3:08:4b:d9:22:8c:57:bc:cc:dc: f9:55:f9:d4:e2:93:18:d3:b9:8a:20:f9:10:a6:98:6d:d8:a3: d6:2b:9c:ab:91:6e:3c:d8:a1:cc:4c:90:a2:eb:15:58:79:15: 72:e1:d2:0c:5f:0f:63:83:8e:0a:57:09:66:f5:8f:b3:5f:88: 5e:dc:0b:c6:68:42:e5:bf:c2:e3:a4:b4:c9:d2:0f:3c:13:00: 91:94:fe:44:d0:bb:1d:d8:fb:92:8d:8b:24:ba:89:bb:f9:a4: b8:bf:af:69:2e:c2:97:e4:c7:c5:fc:7c:8e:fb:38:b6:7f:bf: 21:af:ae:e4:80:d8:c9:26:f2:fd:b3:d7:4e:20:b8:f7:a9:48: 7c:d5:89:ba:52:8d:73:fe:ad:c7:ff:25:b7:59:4c:db:33:24: ff:6e:47:e3:7d:c8:37:de:93:57:ed:23:b1:e2:73:13:31:da: 47:f8:d2:23:ed:b2:84:9c:ba:49:07:36:26:dc:78:5e:76:cb: 82:50:e6:67:39:09:23:65:47:ab:85:63:59:1a:11:82:62:d9: 03:4a:a9:a6:e5:58:23:59:1f:27:fd:6d:7e:24:4d:28:8a:78: 07:3a:7f:b4:aa:c1:72:e6:28:eb:76:7e:b0:3f:39:29:c0:16: 23:31:3b:94 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZ/1NN3wi/L7c75dweLjJIEjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY3MzQyNTcyNGNhZTI3M2YyOTYzMDYwZGM4NjVjNmYwYjA0 MjVjYWQwHhcNMjYwODEyMDkwMTUwWhcNMjYwODEzMDkwMTUwWjAzMTEwLwYDVQQD EygxMWMzMmIyYmJhZjU1NzJiMTFjMTc1OTA2NzgxZmUxN2FmMTJkZDVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkABR7PV8Bfv3mU81n67Em+dSk0+l qpsAmDf+l9XF4oV2HmAVbcUG7fF1Aj25b5oeSh3ev5uGiGb43HdaHWCzk3BtLCAC QkmWoD3gmiJlU7/LK5zTpaTE7/vD7F6TicL1M38hijUmILPlH5/i3dcTY9gyaDNR OgCZWynpWT+JlKvfpPRgwJhh4CsJzYlqexGAPGK0OXabDAdDAuJk14zwrDRAI+xC h5cZ9tHPsOFjaGT/O7kBjAeW4MFYGKmSA92OHTic5I5Uf47S5pBD2GPvoztt+dg5 gbnZ+DweEKessIAA+7Pc9dhjFaaf52SIXh5LrKHgfAe6yQnEocGfc4Av5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBHDKyu69VcrEcF1kGeB/hevEt1eMB8GA1UdIwQY MBaAFPc0JXJMric/KWMGDchlxvCwQlytMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUt ZTg3MWIyMTc5MGRlLzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZC85ZjA5YWEtZGQ1ZS00ZTA2LWIyOGUtZTg3MWIyMTc5MGRl LzEvOXpRbGNreXVKejhwWXdZTnlHWEc4TEJDWEswLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACOiTDw1S n6GjCEvZIoxXvMzc+VX51OKTGNO5iiD5EKaYbdij1iucq5FuPNihzEyQousVWHkV cuHSDF8PY4OOClcJZvWPs1+IXtwLxmhC5b/C46S0ydIPPBMAkZT+RNC7Hdj7ko2L JLqJu/mkuL+vaS7Cl+THxfx8jvs4tn+/Ia+u5IDYySby/bPXTiC496lIfNWJulKN c/6tx/8lt1lM2zMk/25H433IN96TV+0jseJzEzHaR/jSI+2yhJy6SQc2Jtx4XnbL glDmZzkJI2VHq4VjWRoRgmLZA0qppuVYI1kfJ/1tfiRNKIp4Bzp/tKrBcuYo63Z+ sD85KcAWIzE7lA== -----END CERTIFICATE-----Generated at Wed Aug 12 18:13:00 2026 by rpki-client