$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft File: M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json) Hash identifier: z4hO7cnlbZLdEgoNlbL5tOYy4ZRnEGtCkIotiP+/OOc= Subject key identifier: A3:09:14:A9:A3:1C:9E:8E:00:B0:32:B2:0A:04:FE:5F:CD:9B:EE:E5 Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 01A06DCBACC849CE2A55E02E65EB2A00C097 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft Manifest number: 1A39 Signing time: Fri 04 Sep 2026 19:00:59 +0000 Manifest this update: Fri 04 Sep 2026 19:00:59 +0000 Manifest next update: Sat 05 Sep 2026 19:00:59 +0000 Files and hashes: 1: 0_H--D3ld_V5A2GDwFkKX4GOiA0.roa (hash: 4e5kO9YfPo607NKs0GfVmGK8Ay03F7orhMQubGrK5s8=) 2: 2Y22JjtWrl0_nviPCh47UcoiEMc.roa (hash: MjixCwl1roku3r8M7cAmmfjxaUIrhcvJpiUdNlV6IQQ=) 3: 7aJymM8-A-Vzxrith_gpYUCnxLA.roa (hash: yavsVrmsFDM2twygwL9ROfhNDdkXtjYh0veEc5aPL6U=) 4: BREu-oLiWRVnvmr0OZpze-1yZho.roa (hash: JOSLUiFQMXinZ2s3xJFw5vOALrZZO+Y0VQuZomqNcNc=) 5: KQsPApaYWV1_80rHUTYo4kduGEc.roa (hash: DMlh9LVsGQgoH2sC6mgiD6McwaNhSBUcv3JC9I342EY=) 6: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: FQNKqItMdnP9A/ehLuof1hviXJ3/is9Dc8lLBzZDSRQ=) 7: QWYP1a7mE-901Npm0STCw-0_494.roa (hash: GGXXSRYOhg9nYn3L4Ohy/bvCK7SIobkN33noxERxNSE=) 8: TTEzQtE5d70mBmiMli4rrHXXguQ.roa (hash: xIxbskYOAuc9Yjyt/8RKTk7K32KNqi0KQcR/yqDrqdI=) 9: XiniKmHk48PTd4AWdTNpS7pWYPM.roa (hash: LdHpQkrTcb3/m2EigJdifn4oDDnwzMObaFnPm4GQZsE=) 10: ajM6u9AhobNFWsjqV0zszbZBQgg.roa (hash: 9dpjav4k95AK45D3gY5gAwzQc5Jmp0J5EfW5NA6MQrY=) 11: dal6AFPAMOKunkfF7hTY8Cuz5HU.roa (hash: IVF4Tz8JdO1RxYBDwDE4cvUkOAHOkcCD98baar1MrRo=) 12: hRwQ4mV8u9tsYeBBJi9cjl-qxEg.roa (hash: Z+XgNcTxGhoujnKCI9mZu3tfZCPpFoVHO4a9tPmkGVA=) 13: m7yZ_UyERPPI7rtLGNSBX9Jm9bw.roa (hash: ykcmm9r12Ob1/PzXbUDHvDBzZdTDZhIzOR7w4XuLSwc=) 14: qxewd6X7cZwHTA-zQMlA_OAvlN8.roa (hash: Ry7YnXFLSUjxQaaprtnh0Xvr7Lu/H9g4ex/4yimbRx4=) 15: shE5nirJjfzwtVvRNs6B8132Y90.roa (hash: bZPp9AYR6VCS07rIaJOgsQumohQ23Ohhw0oW9Q96CQ4=) 16: uRrZsstrzGEOJvLMKb6O233tS-U.roa (hash: hfakJlnSmscUlq1SwhM8hNCbJeeub/2zpsFlue2e450=) 17: wuPeAwGhCGGyy1vUlZnoXQ_te9w.roa (hash: Ya4gfqovf3JM8yFavds8OzJvokLnz9/3YHuh2owqYdI=) 18: y-LHl9JCf1vCgH9ww0oXT09BT3E.roa (hash: U2dDyow3uUPlXZ81c884FwuRrB1qQId+nf/6dQa9SLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Sep 2026 19:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:6d:cb:ac:c8:49:ce:2a:55:e0:2e:65:eb:2a:00:c0:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Sep 4 19:00:59 2026 GMT Not After : Sep 5 19:00:59 2026 GMT Subject: CN=a30914a9a31c9e8e00b032b20a04fe5fcd9beee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:cc:23:ba:1f:a3:65:40:f4:68:20:85:ec:fc: 59:da:e4:df:c9:ff:74:dc:cc:56:1e:48:1d:f8:0e: 2c:0f:5d:cb:43:2e:85:0d:67:ce:90:7a:8b:ac:8c: 34:f6:38:19:7e:ac:2a:c2:16:9c:67:af:34:b2:68: 59:70:92:3a:2c:24:79:9d:e1:5a:76:19:fd:d7:22: 88:6f:31:aa:6b:83:0c:de:e4:40:4c:61:3f:36:f2: 79:23:d8:0c:e9:83:ed:16:35:7b:88:76:ea:6c:e4: ef:0d:12:d4:2d:63:a3:12:79:f4:28:43:a2:47:95: ae:da:1f:86:12:c3:4b:1b:99:66:a9:ea:25:a2:3e: 09:9a:fc:10:66:58:c8:cf:ea:0a:5b:be:7c:f4:97: 29:7f:43:9d:9d:22:02:76:17:6f:09:4f:4f:cf:48: 94:f3:84:4e:27:22:c9:fa:12:44:17:15:39:fd:63: d6:60:18:4f:50:13:66:de:76:9b:8f:c9:c4:42:c6: 72:1d:28:be:05:17:ce:18:26:63:45:91:7f:1a:04: bc:e9:b8:58:13:3e:15:40:cb:6a:43:de:0d:92:39: 1e:55:b3:a6:72:31:7a:10:c1:1b:25:51:28:8f:ac: 68:0c:11:0e:4a:71:fd:da:9c:20:f7:03:e5:e8:66: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:09:14:A9:A3:1C:9E:8E:00:B0:32:B2:0A:04:FE:5F:CD:9B:EE:E5 X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:f3:e9:19:c7:05:76:7e:f1:71:98:ea:3e:19:e2:02:06:26: a6:0d:5f:fa:4d:b3:1b:e4:b6:fd:72:53:74:fa:bc:b3:d9:b3: 8a:a6:c4:7d:4d:ac:ed:eb:56:32:49:e2:e6:8b:d1:c8:5f:b4: 8f:de:62:a0:5b:65:3e:b0:d3:42:f4:f6:7d:01:e6:68:de:b5: 9c:c6:ca:10:89:6d:94:15:d8:22:07:91:7a:93:3a:62:90:76: 0c:74:78:51:03:3d:f9:7f:eb:df:4a:16:a6:cd:80:39:97:74: f0:ea:93:53:14:39:7f:74:52:cb:74:24:06:c2:a0:06:f2:f8: e6:13:44:f1:e2:e9:62:97:14:67:a7:da:21:eb:e5:e8:31:51: bf:53:67:22:ec:28:89:35:01:b1:4c:93:4d:61:cb:3a:e4:b5: 43:59:b4:de:65:69:0f:e5:a1:02:67:da:02:a2:03:4f:b6:c4: 83:5e:6f:67:1a:5d:a9:04:fc:0a:d5:e4:89:4f:d0:37:89:86: cf:82:5d:42:2d:1d:96:03:b0:66:ba:9d:7e:6d:b1:c1:b3:f6: d5:b3:cf:85:e6:10:d6:ef:81:3f:37:c0:fe:39:f1:38:74:bd: 62:fa:d5:fa:ca:a0:e5:b5:a1:bc:46:0e:73:5d:47:0c:67:fe: c6:87:d1:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaBty6zISc4qVeAuZesqAMCXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYwOTA0MTkwMDU5WhcNMjYwOTA1MTkwMDU5WjAzMTEwLwYDVQQD EyhhMzA5MTRhOWEzMWM5ZThlMDBiMDMyYjIwYTA0ZmU1ZmNkOWJlZWU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMwjuh+jZUD0aCCF7PxZ2uTfyf90 3MxWHkgd+A4sD13LQy6FDWfOkHqLrIw09jgZfqwqwhacZ680smhZcJI6LCR5neFa dhn91yKIbzGqa4MM3uRATGE/NvJ5I9gM6YPtFjV7iHbqbOTvDRLULWOjEnn0KEOi R5Wu2h+GEsNLG5lmqeoloj4JmvwQZljIz+oKW7589Jcpf0OdnSICdhdvCU9Pz0iU 84ROJyLJ+hJEFxU5/WPWYBhPUBNm3nabj8nEQsZyHSi+BRfOGCZjRZF/GgS86bhY Ez4VQMtqQ94NkjkeVbOmcjF6EMEbJVEoj6xoDBEOSnH92pwg9wPl6Gab5wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKMJFKmjHJ6OALAysgoE/l/Nm+7lMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiPPpGccF dn7xcZjqPhniAgYmpg1f+k2zG+S2/XJTdPq8s9mziqbEfU2s7etWMkni5ovRyF+0 j95ioFtlPrDTQvT2fQHmaN61nMbKEIltlBXYIgeRepM6YpB2DHR4UQM9+X/r30oW ps2AOZd08OqTUxQ5f3RSy3QkBsKgBvL45hNE8eLpYpcUZ6faIevl6DFRv1NnIuwo iTUBsUyTTWHLOuS1Q1m03mVpD+WhAmfaAqIDT7bEg15vZxpdqQT8CtXkiU/QN4mG z4JdQi0dlgOwZrqdfm2xwbP21bPPheYQ1u+BPzfA/jnxOHS9YvrV+sqg5bWhvEYO c11HDGf+xofRVA== -----END CERTIFICATE-----Generated at Sat Sep 5 06:22:07 2026 by rpki-client