$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json) Hash identifier: ewSPeXaxME2Va1lHCWreq4OX/yfDzHXacOSaOZbo7Og= Subject key identifier: D1:82:8D:04:31:05:21:ED:E0:DF:FC:71:F8:28:FD:C1:B4:F0:A2:4B Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 01A09021069C33C5D2C69D59D267B00E34F1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft Manifest number: 1910 Signing time: Fri 11 Sep 2026 11:01:18 +0000 Manifest this update: Fri 11 Sep 2026 11:01:18 +0000 Manifest next update: Sat 12 Sep 2026 11:01:18 +0000 Files and hashes: 1: 8ZTbVFN88ElJOvnxpynWkBywvcU.roa (hash: Zi7aMmYsFeMT6y4m/OMRvzAw9FlwVPNAsEeEWMyssQs=) 2: 9gyIdfYx-vxaH69AuzYIu8sS7ec.roa (hash: vsh4e/kwYxBt1mO0Ld2w2nU9VsbUvL0v+cSn3CZdKv4=) 3: D4HmthbydYoqExoa56VFIbe7J5A.roa (hash: 1gmVpoixHN/Zn+8HJ6YdrukA3JeRxcEeBWZ/2aGh+ps=) 4: DBNPe8eVrw7_1KUjzRRA33hX58Y.roa (hash: hYdptN3L/vz/3ch52LzC/IoTDQvky7D/anqUyA/QPOc=) 5: DKZJyriLpkX0P03xQILHD2FwZEo.roa (hash: x6vx2AQsWgf7sMGXLXxiRwrb7PArAVgKRPBlJd4ah10=) 6: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: eF0JPkNKQP5SxcnBx+XcxDkc6HUE3S9eqBaZgUSsCqQ=) 7: HRwCntz8pHEtM7UJXh-KwEbXi3w.roa (hash: CKUDXMyXov9Gbf/ygH+HewYMwNtReJO+UQotN2JyBXQ=) 8: Haim4aY9ShmCS1epcJRa3-rRRmM.roa (hash: AQeMZQUR+w1eyhT+kYpVEnNYoo0tXgoBt1LUUZT+/W4=) 9: Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa (hash: HTLBGDTB6awokEWRy6DjReQvfOLjCmwPODXPDvHGn+A=) 10: LdJkopqk4m9ubmHzk4T29FnhG7o.roa (hash: Qx8FwqyP4Rxw7vIMwqfqa4V2zeYK7+dz+yeOugc8QVI=) 11: S3K9bo4j9NjF6L9mhwIsz-LYyHg.roa (hash: FX7C0FNczXeRPZms4zyJ1OukTZNK4zd0GhG7vBTsBvg=) 12: UWgtqXah3liJx-awsYUK3XIS54c.roa (hash: nisX/PCjG49hPGc2ySAUn3J0MxV+pv8+T78d4GdNMSs=) 13: _d7ohj2Ako_tiSFSE9-jnGs0uoI.roa (hash: mf32LDbJ2Su5F5H62P0/F/PId5oq7GFGgkD8WKRwmPw=) 14: f5svUnEK1n30wRVLtixbJDS7pZM.roa (hash: sILbepz7GhK0jGMQ48sIN5LBYx9eYZB9voFGWkXvx60=) 15: iK87eJg7y-_rcG1D3z4FzaXgRNE.roa (hash: uVYEVS9koySJoZQhAK0q3w5qAE9/nwHY2ro0Er3WEZY=) 16: nXrADfBP6wNtRforv4w6KFdo1Ns.roa (hash: PAoowx6zHYeOj9TxBp8LwY6JFAj6/p0gXZ/G0XMc/dg=) 17: tDoaGy6SLh3swARR-izxiYVQMmU.roa (hash: lZCnqmwKcNoIj9hNP0txhfT3ExuUcH8dWLkUpGjDKzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 12 Sep 2026 08:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:90:21:06:9c:33:c5:d2:c6:9d:59:d2:67:b0:0e:34:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Sep 11 11:01:18 2026 GMT Not After : Sep 12 11:01:18 2026 GMT Subject: CN=d1828d04310521ede0dffc71f828fdc1b4f0a24b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f5:ef:16:4a:6f:eb:ec:30:7f:97:8b:89:e2: 60:58:f3:4f:37:73:fc:ad:ef:23:18:46:a4:62:78: 63:fb:b9:52:3e:12:d9:6a:d6:0d:24:1b:46:f9:c5: f2:51:0d:40:10:18:e1:70:e7:c1:07:b8:d2:56:f2: a6:5f:fe:81:a2:29:7f:b7:33:35:8f:6f:22:27:0f: 77:1a:b9:33:32:87:06:81:88:4a:a6:fb:39:b1:ea: 1c:a6:c4:8e:19:c9:7f:e7:4f:ee:47:2f:a4:00:ff: 35:1b:86:74:44:44:2e:a3:93:ce:99:dc:d4:d5:93: 1e:e0:68:ff:35:a6:8c:95:35:b7:8e:b8:1a:eb:0b: 7a:c9:a2:bd:6a:bd:b5:d2:6d:4e:96:06:f3:3f:fa: 10:6f:e0:f5:12:43:eb:0d:15:b2:d9:2e:20:0d:64: e1:b3:79:7e:02:d8:99:08:d7:d9:4e:0f:56:7f:c7: f4:0a:e6:6c:ec:a6:ff:38:96:42:2f:d4:83:6b:00: 2a:c7:24:44:25:a4:e3:0f:c8:ca:c6:9b:93:2c:e9: 42:60:cd:5d:b9:22:9a:c9:5b:b7:62:f6:21:63:dc: 3a:d7:40:8d:99:d1:e0:db:41:57:9e:93:d0:3e:8c: 94:73:35:32:38:1c:ee:cc:a3:b5:b3:17:ee:e6:51: a5:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:82:8D:04:31:05:21:ED:E0:DF:FC:71:F8:28:FD:C1:B4:F0:A2:4B X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:4b:9b:02:e8:74:73:fd:45:53:37:68:28:9a:8f:83:75:85: ea:c5:df:6b:00:41:7c:85:e1:b4:db:a4:8e:be:a3:ec:6d:bb: 26:57:c1:3f:a3:c5:73:d6:30:04:b7:09:66:e1:ec:2f:74:60: ba:86:3c:b3:b5:9f:00:a6:38:25:ff:19:48:32:1b:fa:c0:dc: 74:6b:b7:c9:65:fe:5c:2f:6c:35:42:a0:fe:c7:76:cb:7e:c5: fe:af:da:b5:59:a4:38:c4:13:26:0e:b0:f5:bb:5c:0c:6d:7c: d5:01:89:d5:56:df:5e:e1:f7:02:c6:fe:2b:f2:a5:e8:75:33: 03:fc:59:6f:ee:50:b1:7a:b9:3c:13:49:b4:4a:0b:0c:89:81: bc:e0:61:64:c6:ee:53:73:fc:e5:ac:aa:4f:52:43:2c:c1:73: 8a:fa:c0:38:b8:72:d5:3f:19:c8:00:97:65:57:ff:b6:63:19: 72:18:ca:45:da:cc:91:89:f7:50:6d:0f:73:7c:cf:43:b0:43: 72:3c:36:25:e0:98:51:80:9e:27:08:30:af:a0:d9:f0:80:dc: bb:61:c8:0f:8e:e6:84:34:2d:90:a8:44:f7:49:5d:9e:fa:da: 1c:b2:68:ec:3e:70:84:2b:c0:81:84:a2:40:86:1d:cc:ce:61: 8a:c8:39:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaCQIQacM8XSxp1Z0mewDjTxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYwOTExMTEwMTE4WhcNMjYwOTEyMTEwMTE4WjAzMTEwLwYDVQQD EyhkMTgyOGQwNDMxMDUyMWVkZTBkZmZjNzFmODI4ZmRjMWI0ZjBhMjRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPXvFkpv6+wwf5eLieJgWPNPN3P8 re8jGEakYnhj+7lSPhLZatYNJBtG+cXyUQ1AEBjhcOfBB7jSVvKmX/6Boil/tzM1 j28iJw93GrkzMocGgYhKpvs5seocpsSOGcl/50/uRy+kAP81G4Z0REQuo5POmdzU 1ZMe4Gj/NaaMlTW3jrga6wt6yaK9ar210m1OlgbzP/oQb+D1EkPrDRWy2S4gDWTh s3l+AtiZCNfZTg9Wf8f0CuZs7Kb/OJZCL9SDawAqxyREJaTjD8jKxpuTLOlCYM1d uSKayVu3YvYhY9w610CNmdHg20FXnpPQPoyUczUyOBzuzKO1sxfu5lGl0wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNGCjQQxBSHt4N/8cfgo/cG08KJLMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUEubAuh0 c/1FUzdoKJqPg3WF6sXfawBBfIXhtNukjr6j7G27JlfBP6PFc9YwBLcJZuHsL3Rg uoY8s7WfAKY4Jf8ZSDIb+sDcdGu3yWX+XC9sNUKg/sd2y37F/q/atVmkOMQTJg6w 9btcDG181QGJ1VbfXuH3Asb+K/Kl6HUzA/xZb+5QsXq5PBNJtEoLDImBvOBhZMbu U3P85ayqT1JDLMFzivrAOLhy1T8ZyACXZVf/tmMZchjKRdrMkYn3UG0Pc3zPQ7BD cjw2JeCYUYCeJwgwr6DZ8IDcu2HID47mhDQtkKhE90ldnvraHLJo7D5whCvAgYSi QIYdzM5hisg5OA== -----END CERTIFICATE-----Generated at Fri Sep 11 15:20:07 2026 by rpki-client