$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: ZgXvWtKLfD8Rox4L4xh7DNZlpATRM5gw468f6v2Rxo4= Subject key identifier: E2:45:85:B9:59:B5:7A:5D:5D:D0:0E:01:88:38:6E:9C:0F:7C:C5:1E Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 01A0BE0BB5444D41DD2098CCC2A52FF1725C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 12B7 Signing time: Sun 20 Sep 2026 09:00:33 +0000 Manifest this update: Sun 20 Sep 2026 09:00:33 +0000 Manifest next update: Mon 21 Sep 2026 09:00:33 +0000 Files and hashes: 1: 0V-6Ocf6ckJP0OmiGxbtIBGBZmU.roa (hash: BeQPwwhAk0wYxfBBr2kzYrvOfYh+U9/Tjif4YIzJ0F8=) 2: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 3: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 4: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 5: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 6: 957KjKsgQQ-VsvqavE6ngE5UV_E.roa (hash: brbR3ebf55NlnYJGtD6lvlUEhjYCWu8BA/oxkjsOs0I=) 7: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=) 8: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 9: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: vDEFcBoGk0+9CyesR3FfF1zKo7CSIHXEezEhPH95BiY=) 10: ISsGxHIyrOPNYfVnvYomPgXoioM.roa (hash: Rohi1FBRyCEDtd+NeWD1TRuQbRscn3zM0CYpnIqNU38=) 11: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 12: ebH1LH3rtcCFyoMlHWJucoddnKk.roa (hash: w5pFXYTG5xXpiPZ27k95gUc+ufkXKutPUdAJkQwEA8E=) 13: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 14: ltlQZdBprIAZtA0AlHcwNThjuJ8.roa (hash: w4tQk9JwHDO4yRlDh9QyPlHelxD0WmS14timwLhZHpI=) 15: m6qwRKca6itBiUVdwN1KXUT2lxA.roa (hash: /aV+oJ7nRkyO35tfs9XJfVVL79kGBuqCjU4aDL711gY=) 16: uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa (hash: jeR1y8042HqLS1mMvheBMUQZBnBjFCW3QvpduHp+6M0=) 17: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Sep 2026 09:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:be:0b:b5:44:4d:41:dd:20:98:cc:c2:a5:2f:f1:72:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Sep 20 09:00:33 2026 GMT Not After : Sep 21 09:00:33 2026 GMT Subject: CN=e24585b959b57a5d5dd00e0188386e9c0f7cc51e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:6f:46:84:df:4d:32:8b:0b:bf:d1:1d:c2:7d: e6:7f:fe:eb:dc:05:c1:1f:3d:9c:ab:b9:65:76:a2: ea:8c:f3:19:21:de:ae:28:b9:b0:ae:36:9c:51:45: 97:e8:10:3f:a9:a1:07:25:65:3c:3b:a3:a4:56:6a: 47:25:ad:26:14:3a:a3:3e:ea:40:2d:ac:36:c4:a4: f7:c2:c1:5b:ed:a9:91:b8:2f:05:1c:9a:78:de:2d: b9:f9:1b:b1:5c:7b:70:e5:86:94:21:73:28:8a:42: f2:c2:a0:28:20:84:ad:4c:86:7d:46:79:52:3c:f1: 9a:2d:f1:9f:60:8f:b8:cc:5b:13:ff:60:71:f7:8f: 0e:34:57:be:5b:70:e5:c3:28:c1:86:f0:77:d5:14: 11:02:a0:3e:c1:c6:1f:5c:01:fb:0d:74:e3:f9:17: 85:62:9b:df:9f:b3:ac:cd:df:8d:ec:d0:47:f4:3d: 52:b5:4b:07:e7:50:dd:50:1d:06:3e:3a:f2:dd:09: aa:10:44:dc:9f:1d:63:66:51:6e:03:b0:0f:0a:1f: 16:51:55:50:47:08:0f:6b:f4:b4:19:f2:66:4a:13: f3:a6:04:20:c6:0e:9b:73:de:4d:c3:2a:9e:42:73: 97:45:00:aa:c3:c1:1f:3a:f1:d7:25:db:39:99:62: 83:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:45:85:B9:59:B5:7A:5D:5D:D0:0E:01:88:38:6E:9C:0F:7C:C5:1E X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:92:3d:e5:48:2e:22:72:05:c0:a4:8f:e2:fd:39:19:c5:53: f8:f5:3a:78:78:61:f1:63:e1:fb:13:d9:09:d7:fa:71:13:f6: c9:e3:a3:93:a8:c0:8b:00:27:ce:dd:f7:63:d7:6b:1e:1a:36: 46:ec:bd:4f:d1:92:ce:dd:0f:59:d9:19:ef:45:72:85:89:3b: 2d:29:76:ec:2c:a8:56:a0:f2:4d:27:f0:a8:86:3d:2a:f2:75: a3:fd:92:42:16:df:88:24:d8:0e:ed:68:c3:53:c2:b0:f1:ed: 30:85:31:25:55:ac:c9:17:0c:20:cc:04:bc:43:87:33:f6:fe: 41:18:b0:6f:4e:14:e7:f4:00:a8:da:ba:c1:62:05:c6:64:c7: 4c:38:93:78:02:ce:03:c5:16:76:55:ce:86:5a:5c:d8:87:fc: 46:c9:06:33:b2:0f:c9:8a:79:81:e7:f7:8f:d6:d9:65:e7:41: 2d:3e:88:8e:65:74:3d:04:d8:9f:37:52:19:df:e6:55:99:12: 4d:4a:a0:af:55:05:b8:f2:3e:99:c8:0c:d5:5a:28:1c:98:72: 0b:5d:e3:a7:82:0e:b0:1e:20:46:53:1e:72:a3:25:dc:20:5a: b9:9b:d4:1e:e2:1d:df:17:48:c5:25:13:c4:aa:d6:8f:97:6f: be:b4:aa:0d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC+C7VETUHdIJjMwqUv8XJcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwOTIwMDkwMDMzWhcNMjYwOTIxMDkwMDMzWjAzMTEwLwYDVQQD EyhlMjQ1ODViOTU5YjU3YTVkNWRkMDBlMDE4ODM4NmU5YzBmN2NjNTFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoG9GhN9NMosLv9Edwn3mf/7r3AXB Hz2cq7lldqLqjPMZId6uKLmwrjacUUWX6BA/qaEHJWU8O6OkVmpHJa0mFDqjPupA Law2xKT3wsFb7amRuC8FHJp43i25+RuxXHtw5YaUIXMoikLywqAoIIStTIZ9RnlS PPGaLfGfYI+4zFsT/2Bx948ONFe+W3DlwyjBhvB31RQRAqA+wcYfXAH7DXTj+ReF Ypvfn7Oszd+N7NBH9D1StUsH51DdUB0GPjry3QmqEETcnx1jZlFuA7APCh8WUVVQ RwgPa/S0GfJmShPzpgQgxg6bc95NwyqeQnOXRQCqw8EfOvHXJds5mWKDDwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOJFhblZtXpdXdAOAYg4bpwPfMUeMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZI95Ugu InIFwKSP4v05GcVT+PU6eHhh8WPh+xPZCdf6cRP2yeOjk6jAiwAnzt33Y9drHho2 Ruy9T9GSzt0PWdkZ70VyhYk7LSl27CyoVqDyTSfwqIY9KvJ1o/2SQhbfiCTYDu1o w1PCsPHtMIUxJVWsyRcMIMwEvEOHM/b+QRiwb04U5/QAqNq6wWIFxmTHTDiTeALO A8UWdlXOhlpc2If8RskGM7IPyYp5gef3j9bZZedBLT6IjmV0PQTYnzdSGd/mVZkS TUqgr1UFuPI+mcgM1VooHJhyC13jp4IOsB4gRlMecqMl3CBauZvUHuId3xdIxSUT xKrWj5dvvrSqDQ== -----END CERTIFICATE-----Generated at Sun Sep 20 19:04:26 2026 by rpki-client