$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft File: u6Nc-KtvPqoq663Z4jc97AiTYl4.mft (raw, json) Hash identifier: AviH4XQSp0GLpIZtYH21DvigE44pqtRVLJuqSxD2GHQ= Subject key identifier: D7:C7:E6:D6:9A:99:11:2D:3E:74:38:9B:CB:62:95:8E:C9:9C:C5:6D Authority key identifier: BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E Certificate issuer: /CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Certificate serial: 01A02032145FDC0F0042705C18FAEF18093E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft Manifest number: 17DF Signing time: Thu 20 Aug 2026 17:22:27 +0000 Manifest this update: Thu 20 Aug 2026 17:22:27 +0000 Manifest next update: Fri 21 Aug 2026 17:22:27 +0000 Files and hashes: 1: 6XbZ2xpI7l6Fwo5nUGJ8LcI12BM.roa (hash: oIH5kZRy4QQWIkNsi+TOmhTdqOjqPl4X4VEu5ZY7rrc=) 2: 6yY85OHD-46vFhP-wtPZWs3MeCY.roa (hash: hOno4SiXgMirUzFVpAXsEoPlI4QIn/ikV8WWQvXsoXg=) 3: 8McrGRfEqcovWnRSpklEmiBGADA.roa (hash: xszqUKxiKaCx1G5C+PDbNWuR86U3w6LgZy01FF25iiY=) 4: BooqKG4SsYSQxh6PGW72NBqbtuw.roa (hash: TU0xZxrNhYVeehRBPFf+LnBXvIDYoAVW0L6Hmfayq5M=) 5: Dib_4B7-59g2qlFon4U52XelorA.roa (hash: 7rKsJnSr5QX2uVe31jye987BgbcYNd7z/lfjZmUFdDY=) 6: J2-fb4bt2CtctBmzmfC8H8k0-Zo.roa (hash: PhWWvX6X2tLUSE0WxzAfwrSrZ7vyehY98guTk5gmtdI=) 7: Z8qE5YUzEyCcM3jZOnTg2ZjRVpw.roa (hash: NyJPpR4fRq7MT3qJBWIBVQGhgw+n4Kp/Bk2plkqWG5w=) 8: bpUtIFcpj0wFmx0CClP1L0TgIfY.roa (hash: JpwXWXow0nu1gKjNId4RQPrmV9a8gFVj5DrvmpBJ7Ac=) 9: dkSZC1vcgEsyqm56yAJmonI1P1E.roa (hash: Wn8sFewfyDAMaX3VNG1l/GCgIijws7/FwmZlH3//5Vk=) 10: eH8mEFUxJaD15bIkdrb0eoEm43Q.roa (hash: iVNXmnAd/Aq9qGpFjFCXba0ETiSTvXsmOGBSWpVw4y4=) 11: u6Nc-KtvPqoq663Z4jc97AiTYl4.crl (hash: qVKNo8o6BmYyHVwAylD0sYDpGQIi2lNme+zRwVJb9Dc=) 12: vJiRTEd6tTiZDm_JR7rLwIox0zw.roa (hash: IYF63rRulzFNBpbGnH/dDmLviCvKmUvwCJNoi515Gao=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 21 Aug 2026 17:22:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:20:32:14:5f:dc:0f:00:42:70:5c:18:fa:ef:18:09:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bba35cf8ab6f3eaa2aebadd9e2373dec0893625e Validity Not Before: Aug 20 17:22:27 2026 GMT Not After : Aug 21 17:22:27 2026 GMT Subject: CN=d7c7e6d69a99112d3e74389bcb62958ec99cc56d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:97:0c:89:ed:d8:9b:15:d7:7e:67:12:2a:f4: 16:dc:ac:fc:46:ba:74:9b:86:02:6c:81:98:f9:65: 56:b9:4c:40:27:cd:c4:ef:66:7b:0c:7b:e1:dc:b0: ce:5e:05:df:ad:6c:86:aa:98:7d:97:64:6f:38:34: 9d:e0:04:36:2d:5b:24:ed:01:af:c3:f9:73:16:01: 05:87:e3:5f:d5:fd:31:c8:02:37:06:5b:dc:e1:67: c6:08:3b:1d:44:b1:ee:02:f2:4a:be:ed:4e:05:39: 86:35:9c:fb:9c:15:72:56:12:b4:50:f0:5a:a1:bd: f3:f4:2e:1d:97:28:72:38:2f:cc:35:4c:22:7f:60: 27:67:72:95:b6:2f:03:74:f8:17:3c:5e:39:50:20: 65:5c:7c:4c:d1:57:3c:5c:44:a6:c7:69:13:7b:d0: 7c:5c:f1:86:db:ec:49:bd:9d:a9:e6:d8:4f:9c:75: f4:4b:0c:02:ff:3f:f2:3d:77:71:de:47:f3:40:51: 85:e7:e4:24:5d:75:36:c0:86:21:62:f6:1c:27:4a: 43:72:42:56:3e:bc:8b:ed:c4:b3:1c:cf:a1:ad:06: 39:8e:43:f0:a6:70:e7:44:a5:f9:a9:12:c0:b4:57: e8:e3:9f:d4:4b:eb:13:85:d7:3d:44:cf:76:5d:f2: 05:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C7:E6:D6:9A:99:11:2D:3E:74:38:9B:CB:62:95:8E:C9:9C:C5:6D X509v3 Authority Key Identifier: keyid:BB:A3:5C:F8:AB:6F:3E:AA:2A:EB:AD:D9:E2:37:3D:EC:08:93:62:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u6Nc-KtvPqoq663Z4jc97AiTYl4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/a0e01a-9bbc-44ee-98a3-597b6e2492ab/1/u6Nc-KtvPqoq663Z4jc97AiTYl4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:fd:7f:36:ec:88:ff:11:63:9e:6c:52:96:f3:8f:73:bc:4a: 2f:3d:9a:06:c0:ec:8c:66:3d:0c:f5:1b:47:eb:ee:9e:77:86: 92:23:3b:12:05:3b:56:d8:1a:66:37:8e:c7:5a:d6:7f:bc:b2: 08:49:07:36:bf:08:c2:c9:5b:ee:14:58:35:b8:18:a9:4d:62: 1e:75:95:df:88:cb:1c:d7:e3:5b:9f:bf:b6:b4:e0:7c:9c:e4: de:87:bd:4b:6c:52:41:54:87:9d:bb:29:b2:b9:48:86:6c:ee: c4:e1:eb:f9:46:de:fd:aa:8a:e2:fb:2f:0e:72:40:1f:36:b5: 66:96:65:c2:80:8c:92:10:22:56:1c:1c:9d:be:08:76:ef:27: 70:08:4d:1c:5d:bc:82:9e:8b:47:3d:82:2e:23:ca:73:f9:19: ec:f3:5c:e7:ba:49:4f:12:47:36:f0:fc:20:83:f5:7d:6a:9c: 22:10:c6:f6:1c:4a:43:90:de:77:43:eb:92:b5:a5:b5:86:c9: 77:7d:bb:47:f8:26:2e:a3:99:b2:76:82:f0:8f:52:0c:2b:91: 86:c2:09:84:c1:44:3b:6b:71:5c:8c:49:c4:88:d9:4e:37:e7: 53:d8:8f:86:f9:ea:7f:b8:d6:68:34:bb:c3:f3:73:6b:22:2f: d3:26:5a:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaAgMhRf3A8AQnBcGPrvGAk+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJiYTM1Y2Y4YWI2ZjNlYWEyYWViYWRkOWUyMzczZGVjMDg5 MzYyNWUwHhcNMjYwODIwMTcyMjI3WhcNMjYwODIxMTcyMjI3WjAzMTEwLwYDVQQD EyhkN2M3ZTZkNjlhOTkxMTJkM2U3NDM4OWJjYjYyOTU4ZWM5OWNjNTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZcMie3YmxXXfmcSKvQW3Kz8Rrp0 m4YCbIGY+WVWuUxAJ83E72Z7DHvh3LDOXgXfrWyGqph9l2RvODSd4AQ2LVsk7QGv w/lzFgEFh+Nf1f0xyAI3Blvc4WfGCDsdRLHuAvJKvu1OBTmGNZz7nBVyVhK0UPBa ob3z9C4dlyhyOC/MNUwif2AnZ3KVti8DdPgXPF45UCBlXHxM0Vc8XESmx2kTe9B8 XPGG2+xJvZ2p5thPnHX0SwwC/z/yPXdx3kfzQFGF5+QkXXU2wIYhYvYcJ0pDckJW PryL7cSzHM+hrQY5jkPwpnDnRKX5qRLAtFfo45/US+sThdc9RM92XfIF1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNfH5taamREtPnQ4m8tilY7JnMVtMB8GA1UdIwQY MBaAFLujXPirbz6qKuut2eI3PewIk2JeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMt NTk3YjZlMjQ5MmFiLzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mYS9hMGUwMWEtOWJiYy00NGVlLTk4YTMtNTk3YjZlMjQ5MmFi LzEvdTZOYy1LdHZQcW9xNjYzWjRqYzk3QWlUWWw0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAf1/NuyI /xFjnmxSlvOPc7xKLz2aBsDsjGY9DPUbR+vunneGkiM7EgU7VtgaZjeOx1rWf7yy CEkHNr8Iwslb7hRYNbgYqU1iHnWV34jLHNfjW5+/trTgfJzk3oe9S2xSQVSHnbsp srlIhmzuxOHr+Ube/aqK4vsvDnJAHza1ZpZlwoCMkhAiVhwcnb4Idu8ncAhNHF28 gp6LRz2CLiPKc/kZ7PNc57pJTxJHNvD8IIP1fWqcIhDG9hxKQ5Ded0PrkrWltYbJ d327R/gmLqOZsnaC8I9SDCuRhsIJhMFEO2txXIxJxIjZTjfnU9iPhvnqf7jWaDS7 w/NzayIv0yZaPw== -----END CERTIFICATE-----Generated at Fri Aug 21 03:08:25 2026 by rpki-client