$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft File: SSFvXBZbgnp_1z2BB669L2PGPiQ.mft (raw, json) Hash identifier: OHwmlCwDt3aOPJiTJc8pe0/xpoTgk7BwG5oOPPZoPHQ= Subject key identifier: 35:75:71:25:28:6B:1F:DD:0E:CA:9E:92:CB:7F:C5:57:19:91:C7:DA Authority key identifier: 49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 Certificate issuer: /CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Certificate serial: 01A0B9F857757D6E625F8816689ABDB6B474 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft Manifest number: 0B95 Signing time: Sat 19 Sep 2026 14:00:55 +0000 Manifest this update: Sat 19 Sep 2026 14:00:55 +0000 Manifest next update: Sun 20 Sep 2026 14:00:55 +0000 Files and hashes: 1: 5cflrPSBczVw-y9CBdznGslTCz8.roa (hash: e3Ui7ThS6C0Gj8prOOjSxh7lUAWtygpEnNw9xX2dtRk=) 2: 6ikDq3uU-14xeZ06o1f5sBEku08.roa (hash: 14bAM4PQevceSeTCaULI+ouG0nOTQYIq9lETR/sCBX4=) 3: 6zmwiCnaR_RUV1zVvXd131O-Byk.roa (hash: wivF7cNRJAl3OyL7EJY6TuKfTwqgRld3+ZHQke6SRP8=) 4: 8lF-x6f7B2bwP5qOnFQwpxn9L0I.roa (hash: ciLzKnjSavNPyQD1IQHv/gt0vWyFhjCiKLjRitLPEkE=) 5: DJA8iYfOt3bjbbEH0sfO-Yzt5D0.roa (hash: dll+XV6deSG185dIKUE72K/Hgk2Qi2c2WRrfDucz8Pg=) 6: DPMVT21xt_FxJ1sn3UX-_U68dhM.roa (hash: W+9Q7HyRT/GtNJeWW1rH3dBewR4z6axBBAIPrMJ0PUU=) 7: DbbcNPtDfL7-gagtJ1a0Eyc1Z_A.roa (hash: MbxJlm+ziQoeXoBZ7l2IXv7uYhNPhhJgV3LLj54kjMg=) 8: HLY3yOfkVYAqEx3IXqQjGqSe60s.roa (hash: 89cRs5OEP6GzsmQJJPOS43nhrd5JryCvGoLQgmsG8Fk=) 9: OGHkr0sseqVyPYMaosc0EKOfAbE.roa (hash: wHhBT3+BNkPQLV5c3JD9yLqsApNS0AOyvlFX/QBAowQ=) 10: QbspjSgom0qmdSedksWxw1y_dkI.roa (hash: eJ1YS4oVCoR1VNmiqp1NCkjDzMJ9GIvRJ3pjx5vZ9ic=) 11: SSFvXBZbgnp_1z2BB669L2PGPiQ.crl (hash: dF0OdMmqE+FEjS/6h3f4ABKSOoMWWcw5bhT2y/dav5w=) 12: TOVytZLtGiR_loWDvv77N1q9Wfs.roa (hash: Sv4e/TvtoYqQVyB6uh9qVYGBsdkIHsts6lbRC1DO+ec=) 13: UcQ1Ippcic9QsMq4m2D2gO9ZpIk.roa (hash: Y4z7KLj7vfcDesQxa00pP19sxOBjnRSBjEe98F7tXaU=) 14: WgBBESiMNBhg0ejLbo4ygFVFK_g.roa (hash: fOGX3A1MJMqw5iFjseRV1GnR/NKzbA2c83gmI0QyUAc=) 15: bZJA4Zdk6OCETrYbfAEHSsuzwDE.roa (hash: IUm+Or+NvYeQ78zXKIY9OqKwxZRYHCF8Axsyp7t54Y8=) 16: cLp8aoUEerNehAr3h59hozd_gn0.asa (hash: H0H1PRm+pfO0EaD/QilESt/v2w81RZ9KkTdDOLHz0OM=) 17: q-kjvAzpx-ZYDXpOS_cviEYAaOc.roa (hash: 1g4myUSs6hufFOhffJJdUxf69ZM3/4EE4AG3+gn7wds=) 18: r-jH3K8gcLw126eQ4FkoGo2cj9Q.roa (hash: WprvCGc4fvgZRtpPYXPu9X3gBWvFU60j9mgBknNXAj8=) 19: uLmKjHdh6xVL5Ct2SX4RrNBGZlY.roa (hash: M6ZErU+xYI38Ut27LDMzp6JcZbiEl5nEdPQAb8KQF+I=) 20: vEQzBYHoPzDXuty_rx-5GlAJtfQ.roa (hash: s7mP1EwT7gSUHcvBRHCBoQGsDjEPpmRpeu0/iQN+vMQ=) 21: yaioAwQqgstiMhVwqwEHasXnYDs.roa (hash: B1OftcLanWUv1RXMYsVOlCmHJWT10XchoJjDrQXqjiM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 20 Sep 2026 11:00:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:b9:f8:57:75:7d:6e:62:5f:88:16:68:9a:bd:b6:b4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49216f5c165b827a7fd73d8107aebd2f63c63e24 Validity Not Before: Sep 19 14:00:55 2026 GMT Not After : Sep 20 14:00:55 2026 GMT Subject: CN=35757125286b1fdd0eca9e92cb7fc5571991c7da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5d:da:f1:b3:b5:7e:1d:01:6e:06:ec:61:6f: d6:c0:ba:fe:72:13:5a:6f:a5:16:1e:f0:de:6f:5c: 53:98:0a:d5:e7:7c:d6:0e:b9:b3:13:c9:e9:60:61: bb:c4:5b:60:ed:24:5d:dc:b0:2b:18:03:b5:f9:36: 1a:f1:50:8f:20:17:ab:a1:61:20:1c:a9:4e:c1:e5: 75:fe:c3:0a:28:9d:da:6f:18:1a:e3:fb:84:71:d9: 36:3d:1e:d2:d0:cd:2d:3f:35:d3:ea:9d:70:2a:d9: be:c8:9c:28:8b:30:bd:5d:25:c9:d3:90:8c:da:53: e8:e3:5b:d5:fd:47:6f:c9:4b:95:a2:87:71:bd:d0: 76:ee:3b:9f:20:52:7d:21:d5:ea:c7:b1:e4:89:d6: 7b:58:ed:85:c0:f0:84:7e:8e:73:17:79:97:c3:b1: 75:29:7e:e0:21:c9:d9:f9:94:f2:3e:27:c3:f3:4f: b5:2b:99:ed:a5:e7:45:22:33:d2:b5:2c:bb:24:c4: 77:45:39:3b:9c:5d:5b:89:e7:f7:e2:91:9c:5b:f1: 7c:11:61:da:e6:26:e5:3a:1b:4b:b8:0d:84:81:7c: b5:12:0c:c0:31:71:a6:e6:11:03:af:a7:7d:ae:50: 9e:05:6a:ad:f2:8f:21:4a:5d:6c:2a:3b:9c:da:78: 5d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:75:71:25:28:6B:1F:DD:0E:CA:9E:92:CB:7F:C5:57:19:91:C7:DA X509v3 Authority Key Identifier: keyid:49:21:6F:5C:16:5B:82:7A:7F:D7:3D:81:07:AE:BD:2F:63:C6:3E:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SSFvXBZbgnp_1z2BB669L2PGPiQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/4842a9-9fcd-4bb6-bb04-0dbbc249e657/1/SSFvXBZbgnp_1z2BB669L2PGPiQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:47:d1:2a:ae:fa:85:1c:37:9e:d9:46:75:94:d2:69:d0:f9: 80:86:24:83:50:5e:a0:a8:4f:88:83:9e:ad:7c:91:70:cc:0d: 5b:76:f2:2f:3b:fb:45:73:0c:1f:6b:5c:a0:7e:4d:b4:4a:51: 36:65:ab:89:8c:91:04:0c:e9:19:e8:b9:cf:3b:55:35:ea:67: e6:37:ad:33:e8:5c:52:b1:97:20:cd:a2:f5:92:81:24:77:22: 7a:27:86:f1:bb:ff:df:c1:41:bf:d3:bd:67:3a:b8:3e:cf:08: a8:0e:10:d3:77:8a:e0:a0:67:34:88:47:8b:b7:31:1e:f7:3c: a3:c6:4c:c9:d6:17:ae:4c:6f:84:7b:a8:ab:d3:dd:5f:b3:73: c9:dc:3b:7c:9d:37:e0:c6:78:87:dd:0d:59:06:17:9e:18:39: 7b:cb:02:89:ea:52:85:d4:db:f8:8b:49:c6:77:86:f5:16:84: 47:d8:46:6b:3b:fb:10:d3:3f:bc:8c:9b:d9:62:e1:c0:df:35: 7c:04:c0:44:4d:6c:d3:9e:8a:7e:2b:e4:de:22:83:52:9e:6d: c8:46:f6:58:40:6d:a9:f9:ca:d4:58:15:0a:85:67:4a:78:25: f7:ac:e5:c0:c2:89:a0:6e:40:ca:75:86:3b:ea:b7:e3:d8:e2: 72:5a:30:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaC5+Fd1fW5iX4gWaJq9trR0MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5MjE2ZjVjMTY1YjgyN2E3ZmQ3M2Q4MTA3YWViZDJmNjNj NjNlMjQwHhcNMjYwOTE5MTQwMDU1WhcNMjYwOTIwMTQwMDU1WjAzMTEwLwYDVQQD EygzNTc1NzEyNTI4NmIxZmRkMGVjYTllOTJjYjdmYzU1NzE5OTFjN2RhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsl3a8bO1fh0BbgbsYW/WwLr+chNa b6UWHvDeb1xTmArV53zWDrmzE8npYGG7xFtg7SRd3LArGAO1+TYa8VCPIBeroWEg HKlOweV1/sMKKJ3abxga4/uEcdk2PR7S0M0tPzXT6p1wKtm+yJwoizC9XSXJ05CM 2lPo41vV/UdvyUuVoodxvdB27jufIFJ9IdXqx7HkidZ7WO2FwPCEfo5zF3mXw7F1 KX7gIcnZ+ZTyPifD80+1K5ntpedFIjPStSy7JMR3RTk7nF1bief34pGcW/F8EWHa 5iblOhtLuA2EgXy1EgzAMXGm5hEDr6d9rlCeBWqt8o8hSl1sKjuc2nhdhwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDV1cSUoax/dDsqekst/xVcZkcfaMB8GA1UdIwQY MBaAFEkhb1wWW4J6f9c9gQeuvS9jxj4kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQt MGRiYmMyNDllNjU3LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMi80ODQyYTktOWZjZC00YmI2LWJiMDQtMGRiYmMyNDllNjU3 LzEvU1NGdlhCWmJnbnBfMXoyQkI2NjlMMlBHUGlRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdUfRKq76 hRw3ntlGdZTSadD5gIYkg1BeoKhPiIOerXyRcMwNW3byLzv7RXMMH2tcoH5NtEpR NmWriYyRBAzpGei5zztVNepn5jetM+hcUrGXIM2i9ZKBJHcieieG8bv/38FBv9O9 Zzq4Ps8IqA4Q03eK4KBnNIhHi7cxHvc8o8ZMydYXrkxvhHuoq9PdX7Nzydw7fJ03 4MZ4h90NWQYXnhg5e8sCiepShdTb+ItJxneG9RaER9hGazv7ENM/vIyb2WLhwN81 fATARE1s056Kfivk3iKDUp5tyEb2WEBtqfnK1FgVCoVnSngl96zlwMKJoG5AynWG O+q349jiclow9Q== -----END CERTIFICATE-----Generated at Sat Sep 19 18:47:17 2026 by rpki-client