$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: 7UI+Z+LpnXzgoMoXek+6DontcJLNO93ml1kdO1Rkok8= Subject key identifier: 3A:97:07:52:63:82:26:D9:9D:26:10:F4:95:A0:06:A0:E7:FD:F4:A1 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 01A0E399EACDB2F1DD8892FBD6B8EB66BC45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 12CC Signing time: Sun 27 Sep 2026 16:01:50 +0000 Manifest this update: Sun 27 Sep 2026 16:01:50 +0000 Manifest next update: Mon 28 Sep 2026 16:01:50 +0000 Files and hashes: 1: 0V-6Ocf6ckJP0OmiGxbtIBGBZmU.roa (hash: BeQPwwhAk0wYxfBBr2kzYrvOfYh+U9/Tjif4YIzJ0F8=) 2: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 3: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 4: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 5: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 6: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=) 7: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 8: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: ZdVwZK69mNf8AAQuzbhrDuscVYm28uLKmx2E8nLbFTM=) 9: ISsGxHIyrOPNYfVnvYomPgXoioM.roa (hash: Rohi1FBRyCEDtd+NeWD1TRuQbRscn3zM0CYpnIqNU38=) 10: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 11: g-_CUB36AWobIcG-jmmWcyiDx-E.roa (hash: WlfHF8ayshGFfQ441VT2aPbuyQS92Aj33Z++6XcJ8YE=) 12: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 13: ltlQZdBprIAZtA0AlHcwNThjuJ8.roa (hash: w4tQk9JwHDO4yRlDh9QyPlHelxD0WmS14timwLhZHpI=) 14: uMOXrFLqc5T0Yg1zrL_Jmk4aCZ8.roa (hash: jeR1y8042HqLS1mMvheBMUQZBnBjFCW3QvpduHp+6M0=) 15: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 28 Sep 2026 10:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e3:99:ea:cd:b2:f1:dd:88:92:fb:d6:b8:eb:66:bc:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Sep 27 16:01:50 2026 GMT Not After : Sep 28 16:01:50 2026 GMT Subject: CN=3a970752638226d99d2610f495a006a0e7fdf4a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:8b:ad:d8:d4:8e:be:b4:71:93:19:b9:0c:b8: 59:2c:b0:6b:87:68:bc:6b:27:87:89:08:05:1d:ae: 51:99:de:6e:f9:ce:ae:f3:ff:a4:02:c0:cb:15:58: 69:09:db:6f:73:b7:1c:64:8a:54:53:46:74:d6:44: 65:f4:be:7b:df:a2:72:3b:af:b2:e7:07:63:0f:e8: 4a:58:7e:ff:ad:3d:51:19:22:3a:da:1e:d4:9e:1d: 2f:5e:8d:90:7e:41:8b:cb:de:0f:1e:cb:32:07:8f: e3:7f:59:90:91:8d:a5:1c:78:28:92:e9:51:64:ad: 9a:e5:6e:58:c8:05:04:a3:be:a0:78:76:1d:52:8b: f6:cc:e9:6c:d4:2f:13:76:27:35:01:f3:d5:a5:f0: fd:9f:32:17:36:6c:56:30:8c:b4:35:ff:75:5c:b8: 3a:67:e3:bf:cb:dc:18:d6:41:f4:e9:ff:54:c5:3c: 03:d1:61:56:37:c7:4d:43:c5:ef:61:09:b0:98:03: e8:50:92:3a:1f:dd:38:a4:29:26:bc:fa:c0:2b:3f: 1b:c5:f3:46:e7:86:5a:1b:13:23:82:80:cc:3b:67: d5:af:b9:0a:69:b8:11:c8:01:ad:0a:a8:09:cf:26: 1a:12:ef:c2:c0:86:30:54:c2:39:56:1f:a3:4e:8c: 21:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:97:07:52:63:82:26:D9:9D:26:10:F4:95:A0:06:A0:E7:FD:F4:A1 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8f:85:19:96:84:ce:77:e1:cf:ed:dc:9a:eb:54:18:1c:f3: d3:04:0a:15:4f:4e:2a:aa:86:08:1b:0c:67:85:fa:d1:08:2e: c3:11:87:01:d6:91:3c:4b:19:10:bc:9a:d8:ca:4f:40:79:e6: 51:8a:30:df:95:ae:2a:f4:80:70:03:1b:b8:92:6a:de:6f:1d: 11:c4:98:cc:eb:e2:38:aa:2a:37:63:d9:48:81:04:ad:51:5a: b8:22:64:e1:3f:1e:84:75:e4:45:09:3a:95:9d:ae:9f:fd:8f: 76:00:87:d8:33:22:7c:16:ec:a9:dd:66:bd:6e:91:22:8c:b1: 66:aa:e3:84:c2:11:d2:4b:6a:bd:55:6c:2e:4c:b3:44:14:20: 16:c0:37:a3:b7:3c:fb:36:db:84:78:ae:cb:0d:d5:2a:19:ca: 80:ab:66:12:71:ea:78:33:08:fa:19:84:eb:d7:e8:32:51:5a: 2a:ef:28:fd:20:50:9f:a7:17:b9:c9:eb:55:1d:a6:67:c9:bd: 27:50:cc:d8:3d:cd:19:57:d9:20:db:d7:8d:77:8a:25:9f:6b: e8:ed:ef:16:63:ad:c0:bb:9f:47:16:a0:c0:33:fb:ee:11:94: 04:d6:61:22:38:ef:6d:3e:22:72:20:c6:40:81:38:9b:1c:0e: 35:ba:e3:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDjmerNsvHdiJL71rjrZrxFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYwOTI3MTYwMTUwWhcNMjYwOTI4MTYwMTUwWjAzMTEwLwYDVQQD EygzYTk3MDc1MjYzODIyNmQ5OWQyNjEwZjQ5NWEwMDZhMGU3ZmRmNGExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkout2NSOvrRxkxm5DLhZLLBrh2i8 ayeHiQgFHa5Rmd5u+c6u8/+kAsDLFVhpCdtvc7ccZIpUU0Z01kRl9L5736JyO6+y 5wdjD+hKWH7/rT1RGSI62h7Unh0vXo2QfkGLy94PHssyB4/jf1mQkY2lHHgokulR ZK2a5W5YyAUEo76geHYdUov2zOls1C8Tdic1AfPVpfD9nzIXNmxWMIy0Nf91XLg6 Z+O/y9wY1kH06f9UxTwD0WFWN8dNQ8XvYQmwmAPoUJI6H904pCkmvPrAKz8bxfNG 54ZaGxMjgoDMO2fVr7kKabgRyAGtCqgJzyYaEu/CwIYwVMI5Vh+jTowhfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDqXB1JjgibZnSYQ9JWgBqDn/fShMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB4+FGZaE znfhz+3cmutUGBzz0wQKFU9OKqqGCBsMZ4X60QguwxGHAdaRPEsZELya2MpPQHnm UYow35WuKvSAcAMbuJJq3m8dEcSYzOviOKoqN2PZSIEErVFauCJk4T8ehHXkRQk6 lZ2un/2PdgCH2DMifBbsqd1mvW6RIoyxZqrjhMIR0ktqvVVsLkyzRBQgFsA3o7c8 +zbbhHiuyw3VKhnKgKtmEnHqeDMI+hmE69foMlFaKu8o/SBQn6cXucnrVR2mZ8m9 J1DM2D3NGVfZINvXjXeKJZ9r6O3vFmOtwLufRxagwDP77hGUBNZhIjjvbT4iciDG QIE4mxwONbrjng== -----END CERTIFICATE-----Generated at Sun Sep 27 19:48:39 2026 by rpki-client