$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: 35E4mO9AJsAB1CQmo8SabyHBbT0oLqaVobbuYcdqkyQ= Subject key identifier: 27:93:01:E1:26:48:01:32:DA:C5:81:88:E8:9F:3C:3E:D9:5A:CA:AF Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 01A19CFDF7CA84039DD29807780DC8D8AB44 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 14E4 Signing time: Mon 02 Nov 2026 16:00:52 +0000 Manifest this update: Mon 02 Nov 2026 16:00:52 +0000 Manifest next update: Tue 03 Nov 2026 16:00:52 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: POWijvxvybOs5KFdkBiJl2XC6x4A+Xk7jycAuGRNAxY=) 2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=) 3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=) 4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=) 5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=) 6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=) 7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=) 8: TbKjk9biFGhLJW-0EAJ-G1mE3dg.roa (hash: NXGH0uYXNrJkmlvbFICP94ZCbP2H5y85Tnuyfhnefi8=) 9: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=) 10: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=) 11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=) 12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=) 13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=) 14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=) 15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Nov 2026 16:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:9c:fd:f7:ca:84:03:9d:d2:98:07:78:0d:c8:d8:ab:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Nov 2 16:00:52 2026 GMT Not After : Nov 3 16:00:52 2026 GMT Subject: CN=279301e126480132dac58188e89f3c3ed95acaaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3b:e1:af:54:9b:5a:14:8c:a4:b7:41:91:11: 48:87:d5:44:26:01:b3:4d:e4:ac:90:4a:41:b8:52: 8c:52:69:1f:19:60:94:ec:4a:9d:e7:c7:b0:a7:5c: 77:55:3d:e4:6a:93:df:6a:49:d1:43:0d:5f:46:89: d9:33:af:cd:df:70:36:b6:65:57:04:cd:9f:59:23: 8d:8b:ed:10:10:66:73:8d:b7:a5:d4:f6:fd:71:1c: f9:7a:9a:5a:b2:73:c5:bc:b7:2b:e6:e4:a7:75:68: 6c:17:9a:74:df:75:ed:d5:a6:a5:4a:3e:a3:1a:cf: 26:28:8d:97:90:38:46:0a:17:84:7d:8a:fc:de:8d: 45:01:20:9c:80:9b:22:1e:a2:e1:3e:a9:3d:f1:80: 78:4f:fe:fb:4c:56:20:8d:69:48:6a:ff:f8:c5:a6: 54:e2:55:11:b6:fe:86:07:fb:1d:59:9b:3c:3f:46: 12:31:13:26:70:5f:6d:ed:ce:1d:3c:51:06:01:cf: 3b:64:93:a3:a4:21:6d:68:d9:71:06:2b:d7:23:9f: bb:f2:71:32:35:bc:d4:2f:3d:56:6b:98:d1:65:a8: 7f:ee:9a:4d:d1:c6:31:e1:d3:5b:aa:33:8a:43:d2: c0:9d:32:10:65:39:9d:a7:ed:2a:de:b8:c4:e1:5a: 46:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:93:01:E1:26:48:01:32:DA:C5:81:88:E8:9F:3C:3E:D9:5A:CA:AF X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:7d:cb:af:57:72:52:3b:27:e5:cc:ff:e3:cc:43:f7:7c:36: 17:78:b3:fc:5c:f1:db:6b:d8:56:fa:63:38:19:ba:5b:18:d3: ae:f8:ee:df:06:da:99:03:0e:4e:48:cc:9b:ea:b6:19:56:72: 1e:2c:4c:75:a6:8c:9a:9b:e5:97:aa:65:0a:52:73:64:48:bf: 28:7c:12:ad:b7:5f:ab:05:ad:ca:82:61:99:47:7e:d5:ae:5a: b8:31:74:f5:19:de:a8:5f:45:f4:dc:85:ee:0b:dc:9f:77:af: ff:c1:4b:6b:ce:9e:06:c9:bb:13:68:83:f9:34:25:43:d9:96: 1e:b6:f8:9f:fd:0e:a7:09:18:e3:7e:c3:ba:d9:6b:0e:ba:ba: 86:32:07:f2:0b:1d:53:18:cb:43:c6:29:97:ed:5c:c7:33:4e: a8:49:39:7a:c3:47:61:d6:5f:85:75:b4:a9:27:13:c8:42:b2: 56:80:59:c9:a0:cc:d9:dd:61:cc:e4:ff:67:b2:d1:9f:27:f0: a7:76:c4:f3:ee:00:d0:d3:f9:c7:81:48:57:66:0e:88:53:5d: 5a:b7:c4:86:26:08:74:cb:30:37:dc:88:31:a5:b7:e0:3e:d9: b1:32:30:b8:7c:1d:e5:6c:17:7a:36:cd:eb:a1:c5:2f:7e:10: e2:ab:7f:be -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGc/ffKhAOd0pgHeA3I2KtEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYxMTAyMTYwMDUyWhcNMjYxMTAzMTYwMDUyWjAzMTEwLwYDVQQD EygyNzkzMDFlMTI2NDgwMTMyZGFjNTgxODhlODlmM2MzZWQ5NWFjYWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDvhr1SbWhSMpLdBkRFIh9VEJgGz TeSskEpBuFKMUmkfGWCU7Eqd58ewp1x3VT3kapPfaknRQw1fRonZM6/N33A2tmVX BM2fWSONi+0QEGZzjbel1Pb9cRz5eppasnPFvLcr5uSndWhsF5p033Xt1aalSj6j Gs8mKI2XkDhGCheEfYr83o1FASCcgJsiHqLhPqk98YB4T/77TFYgjWlIav/4xaZU 4lURtv6GB/sdWZs8P0YSMRMmcF9t7c4dPFEGAc87ZJOjpCFtaNlxBivXI5+78nEy NbzULz1Wa5jRZah/7ppN0cYx4dNbqjOKQ9LAnTIQZTmdp+0q3rjE4VpGqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCeTAeEmSAEy2sWBiOifPD7ZWsqvMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANX3Lr1dy Ujsn5cz/48xD93w2F3iz/Fzx22vYVvpjOBm6WxjTrvju3wbamQMOTkjMm+q2GVZy HixMdaaMmpvll6plClJzZEi/KHwSrbdfqwWtyoJhmUd+1a5auDF09RneqF9F9NyF 7gvcn3ev/8FLa86eBsm7E2iD+TQlQ9mWHrb4n/0OpwkY437DutlrDrq6hjIH8gsd UxjLQ8Ypl+1cxzNOqEk5esNHYdZfhXW0qScTyEKyVoBZyaDM2d1hzOT/Z7LRnyfw p3bE8+4A0NP5x4FIV2YOiFNdWrfEhiYIdMswN9yIMaW34D7ZsTIwuHwd5WwXejbN 66HFL34Q4qt/vg== -----END CERTIFICATE-----Generated at Tue Nov 3 02:56:22 2026 by rpki-client