$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: lhevvRpxe/SCzrp07KJwuxdOgAjP7Q2zSgqoqT5LoLg= Subject key identifier: 27:1D:B2:00:4F:F8:AD:80:6D:88:70:9C:C6:E6:AA:1B:D4:13:03:D5 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 01A09AA4E67D7B227764200BB01D7DDFA7AA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 12A3 Signing time: Sun 13 Sep 2026 12:01:33 +0000 Manifest this update: Sun 13 Sep 2026 12:01:33 +0000 Manifest next update: Mon 14 Sep 2026 12:01:33 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 5: 957KjKsgQQ-VsvqavE6ngE5UV_E.roa (hash: brbR3ebf55NlnYJGtD6lvlUEhjYCWu8BA/oxkjsOs0I=) 6: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: wDDb1J3hE5ecEBSs4qbA4rOIVGXyWCWyK2NQAV5irhQ=) 8: ISsGxHIyrOPNYfVnvYomPgXoioM.roa (hash: Rohi1FBRyCEDtd+NeWD1TRuQbRscn3zM0CYpnIqNU38=) 9: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 10: ebH1LH3rtcCFyoMlHWJucoddnKk.roa (hash: w5pFXYTG5xXpiPZ27k95gUc+ufkXKutPUdAJkQwEA8E=) 11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 12: m6qwRKca6itBiUVdwN1KXUT2lxA.roa (hash: /aV+oJ7nRkyO35tfs9XJfVVL79kGBuqCjU4aDL711gY=) 13: uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa (hash: jeR1y8042HqLS1mMvheBMUQZBnBjFCW3QvpduHp+6M0=) 14: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 14 Sep 2026 12:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:9a:a4:e6:7d:7b:22:77:64:20:0b:b0:1d:7d:df:a7:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Sep 13 12:01:33 2026 GMT Not After : Sep 14 12:01:33 2026 GMT Subject: CN=271db2004ff8ad806d88709cc6e6aa1bd41303d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:7b:e2:91:3e:5c:92:7c:06:95:55:9e:e1:ec: f7:9d:db:b6:bc:48:7e:a3:68:83:e6:27:08:fd:c8: 78:93:a6:16:c1:7a:c3:e1:a3:9b:ac:4a:ec:39:cc: bb:a4:62:b9:cd:4b:b1:83:a8:13:15:e8:c5:c2:33: 99:72:e3:28:0a:6c:f3:6f:27:c2:39:e0:f7:47:09: e5:fb:bb:34:5a:dc:a8:06:28:d6:c6:9f:f8:05:19: 4f:86:b7:7a:8d:92:c9:3f:2f:7b:c8:04:79:2b:a5: 77:dd:9a:10:5a:e4:22:31:0a:72:85:b3:83:13:74: a1:fa:ba:0f:77:ff:49:fa:19:9f:0f:d4:90:73:3f: d2:88:49:e7:af:a1:28:f0:ff:6d:67:a5:b5:48:67: 04:bb:df:14:7a:3b:db:d9:f5:e2:e6:a4:e0:c5:3b: b8:7c:90:03:e7:28:c4:6e:d9:ed:60:2f:73:15:4e: 60:b9:0b:93:be:c3:4f:42:94:ea:8d:0b:d8:82:a2: ef:c8:d2:38:e9:57:e8:5d:8e:b2:49:3b:9e:6e:c3: a0:e8:e9:d5:7c:31:b5:ee:2f:88:15:a8:ad:2b:6a: 65:5b:c5:9b:89:b1:7c:6c:c2:68:7b:99:9d:dd:a2: 4e:93:e2:c1:72:f5:9b:88:be:8a:5f:78:e5:3a:88: 10:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1D:B2:00:4F:F8:AD:80:6D:88:70:9C:C6:E6:AA:1B:D4:13:03:D5 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:6a:52:f2:ff:8e:55:65:47:97:6e:58:7d:1e:57:74:8f:e6: 76:79:14:96:f4:6f:75:41:7e:a2:ff:48:df:79:94:9b:d9:10: 8d:00:b1:a8:a8:5f:1d:41:89:2b:a6:31:ad:bf:9b:65:47:a4: ce:aa:75:77:46:06:74:dd:e4:a1:2a:09:6a:a4:18:8a:93:2c: 27:b3:bd:14:f1:39:6d:d6:73:8c:0e:00:b0:e7:f5:05:c9:5b: 78:00:00:eb:3b:10:ab:6b:03:e6:ee:ad:5a:7a:be:b4:33:ad: 25:ee:5c:79:f1:00:35:fe:02:45:d7:07:39:2b:c2:c5:a7:77: a4:b5:89:1f:36:cc:00:a1:2f:0b:f8:04:95:c3:15:1c:f8:fc: 5e:b8:f5:6d:87:f2:75:fb:98:0d:e6:04:2a:69:51:16:ee:ba: 6f:99:20:15:25:63:86:7e:91:a9:a5:db:c6:ca:13:c9:a1:6a: 41:f5:af:6c:50:1d:a1:4a:19:94:d3:db:69:f6:ca:f8:77:14: 2e:63:17:4c:b0:00:2b:f3:5b:dc:06:f4:a5:49:c1:7f:04:b7: 2c:60:ae:68:a7:71:9d:02:5f:7f:35:aa:ea:00:62:f4:74:f0: 6e:3f:c8:e1:d2:f9:76:9f:5d:6c:e7:53:1c:52:f8:fb:f8:89: c9:a4:9e:da -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCapOZ9eyJ3ZCALsB1936eqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwOTEzMTIwMTMzWhcNMjYwOTE0MTIwMTMzWjAzMTEwLwYDVQQD EygyNzFkYjIwMDRmZjhhZDgwNmQ4ODcwOWNjNmU2YWExYmQ0MTMwM2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHvikT5cknwGlVWe4ez3ndu2vEh+ o2iD5icI/ch4k6YWwXrD4aObrErsOcy7pGK5zUuxg6gTFejFwjOZcuMoCmzzbyfC OeD3Rwnl+7s0WtyoBijWxp/4BRlPhrd6jZLJPy97yAR5K6V33ZoQWuQiMQpyhbOD E3Sh+roPd/9J+hmfD9SQcz/SiEnnr6Eo8P9tZ6W1SGcEu98Uejvb2fXi5qTgxTu4 fJAD5yjEbtntYC9zFU5guQuTvsNPQpTqjQvYgqLvyNI46VfoXY6ySTuebsOg6OnV fDG17i+IFaitK2plW8WbibF8bMJoe5md3aJOk+LBcvWbiL6KX3jlOogQTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCcdsgBP+K2AbYhwnMbmqhvUEwPVMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACGpS8v+O VWVHl25YfR5XdI/mdnkUlvRvdUF+ov9I33mUm9kQjQCxqKhfHUGJK6Yxrb+bZUek zqp1d0YGdN3koSoJaqQYipMsJ7O9FPE5bdZzjA4AsOf1BclbeAAA6zsQq2sD5u6t Wnq+tDOtJe5cefEANf4CRdcHOSvCxad3pLWJHzbMAKEvC/gElcMVHPj8Xrj1bYfy dfuYDeYEKmlRFu66b5kgFSVjhn6RqaXbxsoTyaFqQfWvbFAdoUoZlNPbafbK+HcU LmMXTLAAK/Nb3Ab0pUnBfwS3LGCuaKdxnQJffzWq6gBi9HTwbj/I4dL5dp9dbOdT HFL4+/iJyaSe2g== -----END CERTIFICATE-----Generated at Sun Sep 13 17:03:13 2026 by rpki-client