$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: U1c/mmXfBQJIx68qlGQ2RLoY8O06LxdQxUWidzT5Xfk= Subject key identifier: A5:A4:05:FC:6F:B8:C1:C9:91:12:D0:98:86:AB:0D:40:BB:56:B9:43 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 01A17F61CF22FC82865D3BD6537351FC7152 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 1499 Signing time: Tue 27 Oct 2026 22:01:18 +0000 Manifest this update: Tue 27 Oct 2026 22:01:18 +0000 Manifest next update: Wed 28 Oct 2026 22:01:18 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: BKZ4AiIR4HJymEbg7yBDaPjsNEc.roa (hash: NSmqFNuVNWWHUV4DP4w7GZulXixMLjJyMk9Zl8PMqNA=) 3: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 4: IT-G9anfftKLn-JNHdB3nhqaHRg.roa (hash: 8S5tnd+3z64Mysha0HCn0KENKA3IjsNdvVfiIIaQQlM=) 5: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 6: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 7: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 8: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 9: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 10: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 11: g40nZDbHYl7qlSg77AKf4r37XCM.roa (hash: bENh9i+XtP2fEGRFJH3lV6YIPsznIq+IWHYPSo2J8bA=) 12: mQVVU0yW21pC8IYFai3gUt7H-pE.roa (hash: H5zFgqItky5UWDxQkcovYBDjwRGeK4Gj998+PN5ijik=) 13: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: nEzUeswht8cUwsUVNq5VWQx3qeYTU0ep8Ays1TaI5mA=) 14: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7f:61:cf:22:fc:82:86:5d:3b:d6:53:73:51:fc:71:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Oct 27 22:01:18 2026 GMT Not After : Oct 28 22:01:18 2026 GMT Subject: CN=a5a405fc6fb8c1c99112d09886ab0d40bb56b943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:3f:7e:30:50:5c:53:2c:ac:e5:ac:9c:be:5f: 9b:73:10:96:5b:ac:41:df:dc:32:d2:1d:aa:7f:54: f4:77:42:7a:cd:1f:12:59:9c:24:5c:df:96:19:bf: 97:8d:e4:7e:48:7f:c1:f9:9d:a1:fc:50:36:5b:4e: 5e:40:d8:c7:ea:36:91:76:54:7c:bc:a5:65:fb:fc: 9c:5c:30:ce:f7:f6:74:c8:47:9c:61:bf:a8:c9:fd: f2:8a:76:03:a1:c5:65:e9:67:b2:09:98:5a:03:61: 32:d4:3d:30:59:c2:51:4c:66:36:00:77:98:58:c2: 73:16:dd:d0:76:0d:0e:04:d1:eb:01:fc:1d:3c:74: 64:c2:1b:b1:7c:67:7b:75:2c:62:09:cd:a6:8c:7f: 8f:7c:b0:45:68:f7:eb:bd:21:59:50:62:e4:55:b4: 55:82:9c:da:4d:3f:f6:7c:57:d4:7d:7b:7b:a6:1a: c0:76:8b:e4:aa:92:5e:04:7a:2f:5d:9a:4a:b6:73: 16:c5:6e:a6:53:53:1f:e6:20:4a:d6:12:bb:73:8d: 81:ac:8d:2d:e4:0e:0e:af:78:61:8c:0b:63:d4:28: 9a:65:8f:01:d9:95:c1:9d:26:0b:7d:be:c2:cb:9e: 2c:98:93:9c:5e:51:f0:9d:8d:c7:05:84:ea:ac:f1: 7e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:A4:05:FC:6F:B8:C1:C9:91:12:D0:98:86:AB:0D:40:BB:56:B9:43 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f6:43:b5:ff:46:46:83:87:3a:75:e7:ec:fe:70:f7:c2:b7: c4:19:28:62:d1:b9:8c:3c:d9:05:7e:2a:a6:d4:5e:2b:18:9a: d6:63:81:3e:de:02:b7:85:89:93:5d:a3:43:0d:6d:dc:43:90: 26:14:61:6a:76:0d:03:8c:44:a1:75:68:5f:a3:b4:34:3b:28: 1b:64:39:ca:d8:89:08:f5:37:18:a3:15:10:0b:a2:30:a5:a4: 7e:7d:55:09:63:d1:fa:a9:9e:47:89:09:75:7e:51:bb:01:ab: 71:b6:d8:cf:7d:f5:1c:f1:f6:5d:a4:8e:97:32:bc:4a:b2:d9: 8f:ff:8a:78:23:8b:47:75:4d:50:fd:c4:12:2d:7a:ff:ee:95: c7:f2:f5:d9:44:5e:56:f5:64:2d:f0:50:cf:6b:53:5a:29:34: 9b:92:69:31:4d:68:9f:c0:b4:50:e7:11:b6:de:a5:df:6a:be: 34:22:1d:4b:e0:2e:7d:a9:13:67:75:12:7f:5a:ab:c6:a7:58: c1:11:48:8e:9c:32:96:66:52:d0:9b:1f:3a:b2:a8:44:1b:3e: ef:2a:00:97:ec:a7:e4:2c:00:ff:51:ed:cd:ef:f3:af:23:b3: c2:5e:51:f3:b5:71:83:1a:da:f4:38:26:de:ca:2d:69:2d:86: 65:3b:1f:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF/Yc8i/IKGXTvWU3NR/HFSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYxMDI3MjIwMTE4WhcNMjYxMDI4MjIwMTE4WjAzMTEwLwYDVQQD EyhhNWE0MDVmYzZmYjhjMWM5OTExMmQwOTg4NmFiMGQ0MGJiNTZiOTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtD9+MFBcUyys5aycvl+bcxCWW6xB 39wy0h2qf1T0d0J6zR8SWZwkXN+WGb+XjeR+SH/B+Z2h/FA2W05eQNjH6jaRdlR8 vKVl+/ycXDDO9/Z0yEecYb+oyf3yinYDocVl6WeyCZhaA2Ey1D0wWcJRTGY2AHeY WMJzFt3Qdg0OBNHrAfwdPHRkwhuxfGd7dSxiCc2mjH+PfLBFaPfrvSFZUGLkVbRV gpzaTT/2fFfUfXt7phrAdovkqpJeBHovXZpKtnMWxW6mU1Mf5iBK1hK7c42BrI0t 5A4Or3hhjAtj1CiaZY8B2ZXBnSYLfb7Cy54smJOcXlHwnY3HBYTqrPF+jwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKWkBfxvuMHJkRLQmIarDUC7VrlDMB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjfZDtf9G RoOHOnXn7P5w98K3xBkoYtG5jDzZBX4qptReKxia1mOBPt4Ct4WJk12jQw1t3EOQ JhRhanYNA4xEoXVoX6O0NDsoG2Q5ytiJCPU3GKMVEAuiMKWkfn1VCWPR+qmeR4kJ dX5RuwGrcbbYz331HPH2XaSOlzK8SrLZj/+KeCOLR3VNUP3EEi16/+6Vx/L12URe VvVkLfBQz2tTWik0m5JpMU1on8C0UOcRtt6l32q+NCIdS+AufakTZ3USf1qrxqdY wRFIjpwylmZS0JsfOrKoRBs+7yoAl+yn5CwA/1Htze/zryOzwl5R87Vxgxra9Dgm 3sotaS2GZTsfrg== -----END CERTIFICATE-----Generated at Wed Oct 28 04:34:37 2026 by rpki-client