$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: HkkWe6gwM/yof4I/ahm4DE1xu0FCiwBMRiMTHAvbIT0= Subject key identifier: 3D:60:47:E0:CE:A7:AE:C4:FA:79:1A:71:0D:A1:1B:F5:A8:0C:D0:80 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 01A098B6267F0E0937BE67D17BC4DEDA4EE5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 12A2 Signing time: Sun 13 Sep 2026 03:01:09 +0000 Manifest this update: Sun 13 Sep 2026 03:01:09 +0000 Manifest next update: Mon 14 Sep 2026 03:01:09 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 5: 957KjKsgQQ-VsvqavE6ngE5UV_E.roa (hash: brbR3ebf55NlnYJGtD6lvlUEhjYCWu8BA/oxkjsOs0I=) 6: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: jzNpVmOJijRgbK8QfDpHJxLP2tbF39niG6mjwoSLqAc=) 8: ISsGxHIyrOPNYfVnvYomPgXoioM.roa (hash: Rohi1FBRyCEDtd+NeWD1TRuQbRscn3zM0CYpnIqNU38=) 9: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 10: ebH1LH3rtcCFyoMlHWJucoddnKk.roa (hash: w5pFXYTG5xXpiPZ27k95gUc+ufkXKutPUdAJkQwEA8E=) 11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 12: m6qwRKca6itBiUVdwN1KXUT2lxA.roa (hash: /aV+oJ7nRkyO35tfs9XJfVVL79kGBuqCjU4aDL711gY=) 13: uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa (hash: jeR1y8042HqLS1mMvheBMUQZBnBjFCW3QvpduHp+6M0=) 14: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 13 Sep 2026 20:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:98:b6:26:7f:0e:09:37:be:67:d1:7b:c4:de:da:4e:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Sep 13 03:01:09 2026 GMT Not After : Sep 14 03:01:09 2026 GMT Subject: CN=3d6047e0cea7aec4fa791a710da11bf5a80cd080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:5c:73:cc:e6:4a:39:0b:68:49:33:eb:0b:be: c3:8b:0c:70:a7:73:7a:33:5d:6b:1d:dc:e6:df:58: 80:01:bb:c6:92:32:e5:bc:c4:3c:3a:cc:92:81:5e: c7:53:d6:fb:82:41:1c:ed:eb:b3:fb:36:fb:fd:25: c6:cf:bf:19:62:d8:f2:78:a6:18:11:c3:7d:7f:0d: 65:7f:bb:8c:b6:d7:9d:42:31:7e:f5:e0:1e:b4:41: 03:67:5a:17:58:0e:53:28:d4:1e:30:f6:47:fc:19: 9c:4b:5e:b7:2d:41:8a:f0:b9:9f:b5:3f:86:09:fb: d6:31:80:fc:7c:82:2e:6e:73:82:34:07:44:4a:e3: 19:69:96:d8:8a:51:23:c4:78:e7:9d:10:e0:38:a9: ac:97:3a:8f:f1:41:83:16:74:23:83:3c:ea:a8:06: 98:1e:ce:0f:2f:79:45:f2:a5:78:8f:ac:c7:a1:49: 32:d7:6a:af:34:38:5f:0e:b3:3c:40:70:f6:2d:6e: bf:55:2d:a4:64:a4:37:51:5c:38:6f:25:19:10:59: 87:58:7a:ad:c7:0f:76:ce:ec:b0:de:39:e5:00:d6: 8d:2e:7d:ad:15:ca:ea:e3:b1:5f:e5:95:0b:c0:e7: be:75:69:da:34:91:0e:8c:ee:02:b9:49:a6:9f:26: e5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:60:47:E0:CE:A7:AE:C4:FA:79:1A:71:0D:A1:1B:F5:A8:0C:D0:80 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:7d:56:47:95:64:a4:ed:b3:a4:22:59:9f:cb:29:98:7c:67: 11:35:8d:39:50:39:4f:d7:78:7a:01:ce:26:71:65:98:6d:b2: a5:bd:a8:b8:6e:0d:37:e2:5b:10:1c:ef:0d:85:36:4a:18:46: 30:c9:f1:08:96:93:e5:78:9e:0d:cc:0b:69:f4:38:de:63:00: ef:c8:8e:80:97:22:2a:6a:1c:ef:12:7c:fb:28:3b:9b:6e:70: 20:42:cc:3e:7c:47:cd:09:f2:c8:a3:69:eb:c9:88:88:44:ef: d6:21:80:45:b5:e9:09:6a:c6:c3:a0:e0:16:ea:58:b4:bc:6c: ba:26:15:df:9d:dc:ec:d9:98:f5:89:39:f6:ce:f8:78:7f:91: cc:27:f7:a8:40:72:23:a4:c5:e2:1c:19:e8:b6:d7:16:ff:ef: be:65:51:b7:f9:45:0e:09:24:07:f5:27:0c:24:d3:7a:6b:9c: 1f:73:4e:2c:8a:9f:4a:b1:84:81:7d:ad:ae:3a:ac:d6:c7:2a: 86:c0:2a:b5:cd:61:26:ca:b5:26:ad:2e:c7:e1:91:79:1d:23: a4:98:16:57:33:23:2b:16:9a:d3:f2:4d:68:f4:c6:49:89:31: a8:7d:2b:6a:03:24:13:b6:bf:17:cd:81:fe:60:90:0f:a1:e1: b4:17:0e:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCYtiZ/Dgk3vmfRe8Te2k7lMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwOTEzMDMwMTA5WhcNMjYwOTE0MDMwMTA5WjAzMTEwLwYDVQQD EygzZDYwNDdlMGNlYTdhZWM0ZmE3OTFhNzEwZGExMWJmNWE4MGNkMDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVxzzOZKOQtoSTPrC77Diwxwp3N6 M11rHdzm31iAAbvGkjLlvMQ8OsySgV7HU9b7gkEc7euz+zb7/SXGz78ZYtjyeKYY EcN9fw1lf7uMttedQjF+9eAetEEDZ1oXWA5TKNQeMPZH/BmcS163LUGK8LmftT+G CfvWMYD8fIIubnOCNAdESuMZaZbYilEjxHjnnRDgOKmslzqP8UGDFnQjgzzqqAaY Hs4PL3lF8qV4j6zHoUky12qvNDhfDrM8QHD2LW6/VS2kZKQ3UVw4byUZEFmHWHqt xw92zuyw3jnlANaNLn2tFcrq47Ff5ZULwOe+dWnaNJEOjO4CuUmmnyblYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD1gR+DOp67E+nkacQ2hG/WoDNCAMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkX1WR5Vk pO2zpCJZn8spmHxnETWNOVA5T9d4egHOJnFlmG2ypb2ouG4NN+JbEBzvDYU2ShhG MMnxCJaT5XieDcwLafQ43mMA78iOgJciKmoc7xJ8+yg7m25wIELMPnxHzQnyyKNp 68mIiETv1iGARbXpCWrGw6DgFupYtLxsuiYV353c7NmY9Yk59s74eH+RzCf3qEBy I6TF4hwZ6LbXFv/vvmVRt/lFDgkkB/UnDCTTemucH3NOLIqfSrGEgX2trjqs1scq hsAqtc1hJsq1Jq0ux+GReR0jpJgWVzMjKxaa0/JNaPTGSYkxqH0ragMkE7a/F82B /mCQD6HhtBcOpg== -----END CERTIFICATE-----Generated at Sun Sep 13 06:24:21 2026 by rpki-client