$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft File: 520NqzR6OOK4e1oiovfJ4hwYybw.mft (raw, json) Hash identifier: aY6OGIh/qQ8VxtQPx0Kq3u/pbbXW0GuuHd+O+enqAb4= Subject key identifier: E0:13:3D:7E:89:12:AD:AB:E7:F4:83:50:8C:A4:26:63:B4:09:03:29 Authority key identifier: E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC Certificate issuer: /CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Certificate serial: 01A16C48D0506EA261724CF6F4A34D48D540 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft Manifest number: 15AA Signing time: Sat 24 Oct 2026 05:01:13 +0000 Manifest this update: Sat 24 Oct 2026 05:01:13 +0000 Manifest next update: Sun 25 Oct 2026 05:01:13 +0000 Files and hashes: 1: 520NqzR6OOK4e1oiovfJ4hwYybw.crl (hash: wcDIqDeAZFVumThDBm2vgaliOqKDgqCL0eOV/sHArxA=) 2: 7EPxlfzuNdNfziGNw3Hj7EoZj1Q.roa (hash: fYUfx118C/cw672kHDWSH3DD1Ik9WuMEeaQ/qAV9tYE=) 3: 9APVRCMV0aD4aoinCZAU6dTzv6o.roa (hash: eAlTYE6nYoq2zXMMLGCxVShv5D16kuVpMGM7yMSDORo=) 4: 9EzrkfCb3685-QENXXhTIl2uZz4.roa (hash: 4o0MB77YQKRQiZHQrZxR1nkb/HsRFN1Kq0iR4K53WZA=) 5: DVIKLwP8b0UVJE_X0Zz4hLCMFmU.roa (hash: 2ROrixfhF0UtgJihhtThPaEztRX+VVHt8WTM1ZfZQ1o=) 6: FQRb71bWD6shffXHJwVxCbwHPwk.roa (hash: pGalM2d2H9Jqz6EfqZRh9cBkrVl+lAOWHYOdCpXe268=) 7: Fn3txwFOnsHfJqp3dmOvAMcvgHc.roa (hash: 0tFPd6mFP89u9IcgrQmVyEuYoDxe9S4zwwRr4qndNks=) 8: RqZv9lI-beWajs98dICrEK2DwUM.roa (hash: z0DWSEDfb+oWc/lkT9R9ehjWWb2y0A0CPcHglnAYRf8=) 9: Ud0XI3ub85_CL2l55YZW3cXrctA.roa (hash: 2gMJyy7om8/uY1IqvCz0ubvDeUV63nAu6cUom48+3U0=) 10: ao5k8aMHz2Rr-UFohnKN0Vsy0ts.roa (hash: qeXz8tDdKItxGK8qtWsvUAbM0Ooz+MmMiDN8cvBIyTQ=) 11: bbXWGNkALy-ajnXnVwsq6VcslC8.roa (hash: lOmBCerqz+GglurufDI5e+15DQVwzjxcTvAfkACkLYE=) 12: jTMEUhkl6sKPDlW6gGgXZsH4VwQ.roa (hash: bLe2Zk8IquF+7aI/fXPQxZklmLIeFhH3W5DkdYCydQA=) 13: r-NoE_XHTABnwPRM9GdFHoEeHJo.roa (hash: qsD5Rt9CKRxXFQG5JSeN7cqv7sQvsG2HbFGsWmdhdi8=) 14: rIIpXZCn7E3HgJjpCaYYUR4k6ZI.roa (hash: Vvylnj2QqF4AFfq4GCTBxANmDk4TfXB5W5GNlTLI/Qw=) 15: s9E0mrs6RE5G3diI6qJ2dNaQlCY.roa (hash: ALHEFczsxrK3P9zm6czuHQOWsz9Vxib3j6fIwRLXdsA=) 16: smuPovOHBHHaIAv32qcc0ZyhNkQ.roa (hash: HcQ/8p3eoCWjnnKfMtVzm8focRBIq46dCnVV7vdjMxQ=) 17: v94LL-qGGgahldRNvzQc-ZVS3KI.roa (hash: a3YAXYAGQiNiI/eRCe9RKvTaP1hHvgR2d27wk4bq6Cw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 04:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:6c:48:d0:50:6e:a2:61:72:4c:f6:f4:a3:4d:48:d5:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76d0dab347a38e2b87b5a22a2f7c9e21c18c9bc Validity Not Before: Oct 24 05:01:13 2026 GMT Not After : Oct 25 05:01:13 2026 GMT Subject: CN=e0133d7e8912adabe7f483508ca42663b4090329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5a:46:16:dc:11:fe:9d:13:65:de:72:65:2d: 44:af:4c:fa:17:40:23:fc:cf:6e:b2:d0:4e:77:a0: aa:5c:dd:9e:3e:14:f3:f4:bf:20:7d:fe:7e:25:4f: 30:7e:4e:bf:46:8c:58:4b:c4:fe:8c:88:03:0c:dd: c4:4e:f8:1a:9e:ae:7c:88:68:8b:61:25:15:84:26: 67:d2:9e:72:23:ab:28:2f:18:bd:b2:2e:f7:bc:93: 65:8b:6e:d2:7f:25:86:85:06:47:df:65:94:3d:62: 39:68:1e:8b:e6:4c:ef:a3:04:5b:c3:c5:8c:6e:f1: a0:a3:42:83:32:4d:bd:5a:e9:e8:fe:b2:4e:9a:17: de:78:24:4b:b9:1f:14:01:30:4e:10:d8:36:ef:08: ce:d7:bf:44:6d:ca:d0:f5:40:b0:7d:a3:8f:2a:22: db:05:b1:7d:56:80:5c:8f:d3:02:7e:ca:81:ba:57: 61:66:d5:10:a1:00:b9:7f:61:51:77:15:1a:08:fb: 07:4e:b8:57:9f:41:06:24:00:9f:87:ca:f1:51:91: 5a:39:c4:ec:be:fd:fb:d1:de:59:61:6f:4e:bf:a2: 36:ab:60:a8:96:07:fa:61:48:be:83:59:2f:ea:c6: a8:ca:35:8c:a7:79:18:e8:74:73:35:1e:8d:64:48: 52:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:13:3D:7E:89:12:AD:AB:E7:F4:83:50:8C:A4:26:63:B4:09:03:29 X509v3 Authority Key Identifier: keyid:E7:6D:0D:AB:34:7A:38:E2:B8:7B:5A:22:A2:F7:C9:E2:1C:18:C9:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/520NqzR6OOK4e1oiovfJ4hwYybw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3dbb3d-f328-4b27-95d9-bd3bfc99bda9/1/520NqzR6OOK4e1oiovfJ4hwYybw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:4c:1b:e4:6a:a9:f1:99:5c:f0:f2:ca:39:26:d9:5b:50:48: de:8e:b6:e5:0f:37:6a:19:ef:2b:ce:3b:c5:bd:53:f2:11:19: 20:d6:d9:aa:42:d8:e9:79:48:21:6a:1c:91:c3:f5:4d:ee:bf: 7e:78:6f:21:44:57:fe:af:f7:ba:d3:e2:d1:cf:90:02:7a:26: bf:cb:13:d8:28:a7:8f:cb:73:a2:a0:f9:74:47:97:00:17:2a: b0:72:61:b8:3d:62:88:7f:40:3a:7b:43:10:a7:c5:6e:23:4f: af:89:2a:84:5a:8c:03:7f:8e:08:74:72:ea:fa:47:cf:d5:8b: 4e:41:a0:8a:08:97:5b:72:5d:72:32:e7:5f:ab:b8:dd:2d:f8: 51:28:98:8a:11:ab:6b:7a:62:4c:1a:23:88:22:43:27:ac:8d: 60:21:66:fc:28:1a:1d:c3:05:61:9c:7c:b3:34:51:9a:62:b0: 44:ba:f6:18:55:cd:b8:cd:de:4f:58:b1:5e:3e:d7:93:b4:cd: 08:9c:8a:da:f9:b8:a2:d2:38:0f:08:bc:24:cf:f3:8b:09:71: 65:6a:83:f6:85:bc:8f:a4:d3:7d:72:c9:44:3a:23:a7:3c:a1: f0:72:2e:05:52:38:34:de:c3:f7:cb:ec:60:49:2d:0e:4a:26: bc:43:dc:28 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFsSNBQbqJhckz29KNNSNVAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NmQwZGFiMzQ3YTM4ZTJiODdiNWEyMmEyZjdjOWUyMWMx OGM5YmMwHhcNMjYxMDI0MDUwMTEzWhcNMjYxMDI1MDUwMTEzWjAzMTEwLwYDVQQD EyhlMDEzM2Q3ZTg5MTJhZGFiZTdmNDgzNTA4Y2E0MjY2M2I0MDkwMzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAylpGFtwR/p0TZd5yZS1Er0z6F0Aj /M9ustBOd6CqXN2ePhTz9L8gff5+JU8wfk6/RoxYS8T+jIgDDN3ETvganq58iGiL YSUVhCZn0p5yI6soLxi9si73vJNli27SfyWGhQZH32WUPWI5aB6L5kzvowRbw8WM bvGgo0KDMk29Wuno/rJOmhfeeCRLuR8UATBOENg27wjO179EbcrQ9UCwfaOPKiLb BbF9VoBcj9MCfsqBuldhZtUQoQC5f2FRdxUaCPsHTrhXn0EGJACfh8rxUZFaOcTs vv370d5ZYW9Ov6I2q2Colgf6YUi+g1kv6saoyjWMp3kY6HRzNR6NZEhSOQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOATPX6JEq2r5/SDUIykJmO0CQMpMB8GA1UdIwQY MBaAFOdtDas0ejjiuHtaIqL3yeIcGMm8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDkt YmQzYmZjOTliZGE5LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi8zZGJiM2QtZjMyOC00YjI3LTk1ZDktYmQzYmZjOTliZGE5 LzEvNTIwTnF6UjZPT0s0ZTFvaW92Zko0aHdZeWJ3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq0wb5Gqp 8Zlc8PLKOSbZW1BI3o625Q83ahnvK847xb1T8hEZINbZqkLY6XlIIWockcP1Te6/ fnhvIURX/q/3utPi0c+QAnomv8sT2Cinj8tzoqD5dEeXABcqsHJhuD1iiH9AOntD EKfFbiNPr4kqhFqMA3+OCHRy6vpHz9WLTkGgigiXW3JdcjLnX6u43S34USiYihGr a3piTBojiCJDJ6yNYCFm/CgaHcMFYZx8szRRmmKwRLr2GFXNuM3eT1ixXj7Xk7TN CJyK2vm4otI4Dwi8JM/ziwlxZWqD9oW8j6TTfXLJRDojpzyh8HIuBVI4NN7D98vs YEktDkomvEPcKA== -----END CERTIFICATE-----Generated at Sat Oct 24 11:13:15 2026 by rpki-client