$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: n989aHFvqlW9UHICqAyg57va1ysZGJW2iGt9Lp/w1NY= Subject key identifier: C8:87:03:EF:93:DF:BD:21:2E:44:D5:57:AD:B4:A1:2D:CC:97:A4:23 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 01A0E99BC13740E57C2F6D5DC6DF408DCF26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 1AEF Signing time: Mon 28 Sep 2026 20:01:33 +0000 Manifest this update: Mon 28 Sep 2026 20:01:33 +0000 Manifest next update: Tue 29 Sep 2026 20:01:33 +0000 Files and hashes: 1: 3_yk5eFrwBov3U-c2HIugxbMWSI.roa (hash: kKYQPtwtsyFnBnK/TTMNwaIGIt9OfuH8gl7hmRir+s0=) 2: 5aufIPquq3w8czdEJb_x03ID0ok.roa (hash: SXHv0uNnbQMrAAz38TkQXV7mhkcxZQRjdTnk2ZFMJ+Q=) 3: C5KHI6RHNe-c2_yE7mE0xFRL3gk.roa (hash: +jtxc9DRUocKwAVf35hRGVq2koZLjGVbE1XT/GiZZ2w=) 4: KePo7Nw7FD5Mxn7olHoTuZmCdm8.roa (hash: DbkIiVGqdDfug970pR74esedhPIntvPxxOlSvJeDA4s=) 5: OT8ciThviWG76oS0x4VT1DU7_CM.roa (hash: z/3tt6KD2m+nhRRFPABZHX2/tqaQ7t/vcbTbJ5OkeGs=) 6: Y7bbNd_D_GJxw7w73h3QtuIaUD0.roa (hash: 6H7OQcEN2pqdM3pakr5EUmL8sOX3gH9g5VYKISR0rPs=) 7: _JStqxohmn4P46Jzv1xfqnIG_sQ.roa (hash: yg2AC+9uSmhpqVYsI3pa8EbjhOZNSYHEU2+Rij7qWjo=) 8: _kSC6SxEhsOLshYqTVwsSFaNbLI.roa (hash: KB6xLUsnETAFSWCWhqb4kG0B7HnLwgn6REmfOJuSowg=) 9: bIbo_daevEia3FzSMEis2R2yTQE.roa (hash: 2f8dvTsv4PE91HZTf97I67YVmPlzEU+5RlZeN9O2YSM=) 10: dWDpJgjgHWUUxlAFcGw9oho9DCA.roa (hash: EeKrlvmSYyhLjmugOgYr/BAu9l1QdnUK48FOOPpwoHE=) 11: hQVV4BaKVO0RcwRU1xZIrqWspdI.roa (hash: M8O0fjTuy4HD7k8iGHVQmJqaSZ9JfENx5xX4lrm3WxY=) 12: ixD-Arj77LHgfX3zc7lJeNIlCF0.roa (hash: IZQY7H0KoOl6mudSH5mbC7Fo+cS244qdxxA31tTlbtI=) 13: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: cX2IclDrNgJzVU227fIkAgLfMWK6SgCCBndV92QkZZ0=) 14: mmlqyHFEi9s36pRVA4gNMgQlF2g.roa (hash: YympqoHO3U16jsidTLFW4dJCW3ZK0+I6AcUV13swo18=) 15: qutDbHBwHvwdi5EGALlPGyrMVYQ.roa (hash: cMdSXzsofITh70yCwGq+Cbopm8wIcWBaikFgYr1Fwsg=) 16: viXkXLZxJ-KrBDTHEU9eV2JpXfc.roa (hash: wxGAEO+n9Vh6k1iK9Pba4O/c6CbkZthcZ5GK3ng4+Rg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Sep 2026 19:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:e9:9b:c1:37:40:e5:7c:2f:6d:5d:c6:df:40:8d:cf:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Sep 28 20:01:33 2026 GMT Not After : Sep 29 20:01:33 2026 GMT Subject: CN=c88703ef93dfbd212e44d557adb4a12dcc97a423 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:f9:88:53:46:6d:c9:84:97:1d:6b:60:78:ac: c2:f6:cb:92:e0:5a:cb:61:d8:4c:15:58:b0:41:5d: 11:f2:de:27:37:bb:79:f8:99:5f:9b:f9:50:08:40: e4:01:5a:7b:5c:bb:97:26:91:76:e2:28:08:29:b0: a3:9f:3e:46:c5:01:f5:95:a5:51:74:fe:7c:f8:0d: d5:7c:cf:1e:66:cb:9f:54:82:e0:dd:32:7f:58:28: 8f:78:33:4a:75:b8:6a:85:b2:18:28:5c:11:b6:c4: d5:ff:77:04:48:5a:51:71:13:f4:8f:0d:ec:d7:16: a5:bf:8c:71:ea:e4:82:ce:17:05:b8:5f:59:52:73: 42:1f:a1:19:ef:54:38:98:f5:b6:b2:ae:91:8c:39: 78:73:1c:8e:66:ee:a7:53:d2:50:02:8b:4d:59:3c: d3:b6:77:30:bd:6b:87:71:b5:91:df:af:98:2c:27: cf:16:37:62:8b:7c:76:c6:2c:7b:5b:c6:dc:88:31: cb:35:05:b4:83:61:ee:ef:5a:9c:b0:e6:00:34:80: 82:65:b7:63:63:f5:68:af:7e:8c:10:e4:20:9a:ec: 3b:56:3c:64:de:39:96:40:a4:ba:ab:38:36:b6:90: 37:a8:d1:87:ad:2c:a3:59:34:ef:ae:3b:d9:fd:54: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:87:03:EF:93:DF:BD:21:2E:44:D5:57:AD:B4:A1:2D:CC:97:A4:23 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:5c:9d:7f:fc:bd:ca:fd:4d:a8:97:ea:49:a7:68:14:a9:58: c6:96:15:30:f8:ab:33:45:84:5f:d8:06:f7:a2:99:a1:4e:c1: c3:6e:2d:20:48:78:00:e9:1e:a3:49:2d:8e:0d:65:ba:5b:56: 57:dd:e1:a6:4d:33:c5:38:43:5b:be:08:de:c7:b5:4b:6a:42: 0d:aa:a3:00:1d:db:04:0f:30:29:7c:bb:56:fc:d3:38:26:02: 35:1d:e0:a5:ba:10:e4:72:81:49:19:a8:33:89:dc:b8:c5:3f: 65:3f:9f:56:90:8d:74:ab:56:61:63:37:dd:1e:15:d9:a1:02: c2:92:ae:8e:a1:14:3f:89:ce:dd:5a:e4:1e:d9:95:a0:83:0f: 03:47:26:dd:dc:5e:ea:a5:e5:52:e1:d1:b4:ac:fe:5b:44:44: 28:f6:55:e0:79:93:db:95:78:0c:4b:4d:ce:99:03:e1:e7:e0: a9:8a:cc:9a:31:e7:6f:17:51:37:d5:70:34:61:96:a7:10:40: e9:cf:94:73:42:f5:fe:53:5d:4a:00:af:6f:4e:66:38:db:21: 94:1e:4b:27:6f:82:38:4d:cf:a6:70:d5:ca:37:c2:88:37:b9: 9e:a2:ac:6d:3b:a7:03:30:d0:be:32:4b:fd:82:e3:e6:13:b7: b0:49:fe:4e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaDpm8E3QOV8L21dxt9Ajc8mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjYwOTI4MjAwMTMzWhcNMjYwOTI5MjAwMTMzWjAzMTEwLwYDVQQD EyhjODg3MDNlZjkzZGZiZDIxMmU0NGQ1NTdhZGI0YTEyZGNjOTdhNDIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/mIU0ZtyYSXHWtgeKzC9suS4FrL YdhMFViwQV0R8t4nN7t5+Jlfm/lQCEDkAVp7XLuXJpF24igIKbCjnz5GxQH1laVR dP58+A3VfM8eZsufVILg3TJ/WCiPeDNKdbhqhbIYKFwRtsTV/3cESFpRcRP0jw3s 1xalv4xx6uSCzhcFuF9ZUnNCH6EZ71Q4mPW2sq6RjDl4cxyOZu6nU9JQAotNWTzT tncwvWuHcbWR36+YLCfPFjdii3x2xix7W8bciDHLNQW0g2Hu71qcsOYANICCZbdj Y/Vor36MEOQgmuw7Vjxk3jmWQKS6qzg2tpA3qNGHrSyjWTTvrjvZ/VTiyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMiHA++T370hLkTVV620oS3Ml6QjMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVydf/y9 yv1NqJfqSadoFKlYxpYVMPirM0WEX9gG96KZoU7Bw24tIEh4AOkeo0ktjg1lultW V93hpk0zxThDW74I3se1S2pCDaqjAB3bBA8wKXy7VvzTOCYCNR3gpboQ5HKBSRmo M4ncuMU/ZT+fVpCNdKtWYWM33R4V2aECwpKujqEUP4nO3VrkHtmVoIMPA0cm3dxe 6qXlUuHRtKz+W0REKPZV4HmT25V4DEtNzpkD4efgqYrMmjHnbxdRN9VwNGGWpxBA 6c+Uc0L1/lNdSgCvb05mONshlB5LJ2+COE3PpnDVyjfCiDe5nqKsbTunAzDQvjJL /YLj5hO3sEn+Tg== -----END CERTIFICATE-----Generated at Tue Sep 29 04:51:07 2026 by rpki-client