$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft File: RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft (raw, json) Hash identifier: 7Zd0FtOhZxUBQ2AcrHwiOCdtpuPc295ZijMzKhF1ZkY= Subject key identifier: 6F:A5:FF:1D:3C:F5:68:1A:BE:2B:F2:8F:34:23:B5:9C:3D:17:F7:0B Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33 Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533 Certificate serial: 01A178BA3E47EEEA6290B75BB65DFEAEF502 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft Manifest number: 0142 Signing time: Mon 26 Oct 2026 15:00:33 +0000 Manifest this update: Mon 26 Oct 2026 15:00:33 +0000 Manifest next update: Tue 27 Oct 2026 15:00:33 +0000 Files and hashes: 1: 27SFGjL64PRRMSLcGYBH49SrHwY.roa (hash: PITM8gWftdzoJkt0rkZ9FWqRBqnEUQ3T5vRe+zc5/CY=) 2: 5tISpF8rQEYFqX2FwQmh5rWJ0Zk.roa (hash: AczR6yQs7ci1IaX5b+iS3KJri6446eAoxlf9O/ku2LE=) 3: CFo5ABZ8MUKR3Fd6UO8--zq7M8k.roa (hash: 2+XQO3qwflJmVUasaub9xdlpRBF+UPsxhcWzlGiEL9U=) 4: CJ-zj836A3TR54KML6nA2kNlyiY.roa (hash: AuGdHKTStnhkWfUpHj8s2x6Pp9jt1yZgqVw4hJJIo3Y=) 5: HLt3ChQvLj8LY2RlhdFsx32ZjtQ.roa (hash: wKiOyGKSsl/R2H5PXAn1g9VUgp4V7yTcuvPe7XIgMUI=) 6: N1LDUBXoMuyaQ5RB_L5TdL6A_bo.roa (hash: ydFk7XHt/wPpdtN+nRxyF+IGde9jjOJbhdYJVNBXgSE=) 7: RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl (hash: gXyCRoQMnS52XDe5Qb8Ac+Z3kZZJzmvzwXM61SvLKdg=) 8: RWqR8eRXwBg3aJWIwMUB5XfKcoY.roa (hash: ZZrhZPCpVQcaNwpf6YMJogA6HgteaOnJWAKIEHcMG/I=) 9: UvkchOlf8k5gf0Jd4S3LaiUQp24.roa (hash: bOM90kiakeCMvJKkLnEePDredxuMm7f3j0ru01BV2rg=) 10: _KYE_stCSx0rJkyhe2kaYHwY1yQ.roa (hash: SVDZayo1vRR6C9CEr2Y02TySWICy6qTYmYRW1EPFXaQ=) 11: fJB8oRf1C6vKaO7myZ7LMHrSK0E.roa (hash: Z3DT4Iuv/+d3kQTawlogZW0GVTOl0W6XRptIt8v4Yuc=) 12: fTMIdoB4kQzu02mFfH9z8btZ5uM.roa (hash: 5eDUcm8uO6+nohQB/UiadkgP4q7oAy/sELIvvCPSQxA=) 13: nk9xUVbrQk03Ta5kBEtwBRsxj3o.roa (hash: y8rjtAjlPGYqktsMfNPd+YZPmUHg0mqok5iv3DPzIpQ=) 14: qfTY39j6wENhgC39URgloBvaDwc.roa (hash: MJgSYqEnjtZo7TnO5PmqwrhzDK5fq5ePybyEEHZ72Z8=) 15: v46RZaRNAYpk-MTz9439WBJeCk8.roa (hash: iuiKs0eDwH4UX4kxhQWkANGq3ZFWYOsgmkYbbfAKPYA=) 16: wsBY1hQB4VwOF7aL1jCKyn3x_1Q.roa (hash: DtUB3FEcBbo8RHf3v0MZKsrQqRBn+Ep3UIkhR2wSWSQ=) 17: xNYBtHtKlWI4iA2yM39CNxxB3YE.roa (hash: c5VvgWr2oNDztERgklFXuCsqKhPSllyvYEbuD8nPSxI=) 18: zaDnFGvlfelI_tMjoTP339vPBGw.roa (hash: 6zQB6LLudq9lrD59fSKuhQnrVhHCZxEGxEn2HPI44zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 15:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:78:ba:3e:47:ee:ea:62:90:b7:5b:b6:5d:fe:ae:f5:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533 Validity Not Before: Oct 26 15:00:33 2026 GMT Not After : Oct 27 15:00:33 2026 GMT Subject: CN=6fa5ff1d3cf5681abe2bf28f3423b59c3d17f70b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:01:d4:ed:71:dd:69:30:a8:7a:3d:29:ab:ef: a6:5e:8e:43:78:df:41:e8:a0:ac:92:25:be:4a:bb: ee:0a:38:73:1d:ba:a7:e2:8a:c0:71:a0:8a:bc:1d: ca:83:10:5b:a3:5c:81:31:d5:e1:2e:c6:39:8d:a5: 84:99:84:2d:5d:72:2b:11:c6:a1:44:39:bd:cc:31: 19:92:cd:02:03:4e:e3:ce:e5:e7:5a:9d:90:20:01: bc:32:e2:72:7b:cb:d3:0c:6e:6c:b1:c0:0e:43:c2: 92:78:4a:82:29:2f:3b:b9:16:96:35:ba:52:c1:a0: 49:52:2b:e3:73:6e:5d:ba:52:83:e5:01:7f:b7:47: 52:ce:8f:c9:3f:01:8b:38:24:d1:69:59:24:ac:73: 5b:11:74:0f:31:af:25:c5:07:02:f4:9c:13:34:c9: 69:2a:d2:51:3a:c8:f9:a8:f3:2a:9f:e7:84:1d:e2: b7:f7:7a:87:84:07:63:61:61:59:31:d8:7f:5d:d4: ea:ed:be:d4:53:54:c8:c5:19:a2:52:7e:05:72:21: 5e:fb:de:9b:89:b9:60:fa:1e:49:6f:3e:71:b0:41: 5f:87:03:d7:f6:05:4d:a8:99:27:34:11:ce:68:7f: df:91:b9:38:8f:64:48:5e:c8:0e:87:b9:3d:87:28: 0c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:A5:FF:1D:3C:F5:68:1A:BE:2B:F2:8F:34:23:B5:9C:3D:17:F7:0B X509v3 Authority Key Identifier: keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:07:c2:1b:9b:34:6e:cd:cf:b9:c5:c9:4a:86:f6:d8:36:f8: de:e0:43:7e:14:24:60:d5:92:d2:aa:f5:78:77:98:c6:7e:68: e5:c9:d8:75:a8:d8:8f:bc:b7:4f:56:88:2c:15:fb:17:dc:86: 34:3d:55:1d:25:f7:5b:e8:bb:0a:f2:70:a5:4b:fe:5f:29:13: 2c:46:c0:28:56:f4:43:46:8f:fa:a0:02:2e:44:35:54:7d:a6: f4:69:f3:0a:f6:29:42:68:af:ce:09:dd:80:68:d3:ec:ac:75: 22:0b:75:ba:03:47:d6:8b:39:63:46:2c:eb:56:78:7f:fc:99: f7:f7:3f:85:84:22:ed:f3:72:71:f5:b2:af:d1:79:f3:20:fe: 3b:fc:bd:a4:d5:37:91:82:b3:20:80:be:ea:66:ac:a8:60:bb: a4:e9:ca:34:f8:2c:05:60:1d:a5:8b:03:7e:66:53:d5:f1:b1: 1b:2b:b1:dc:7b:5d:35:18:ec:82:0e:95:bf:5c:45:f4:a2:82: 86:f5:46:a3:5a:d9:a1:79:f0:f3:3b:a3:ed:51:2d:b4:00:a2: e5:9a:14:51:05:6a:24:47:1d:8c:de:d7:0e:14:d5:da:89:14: 68:12:44:47:95:af:69:d8:21:01:80:a3:0c:d5:c4:a1:8b:da: cd:5b:2e:7d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF4uj5H7upikLdbtl3+rvUCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTkxMjA4MDljMjNiZjMwMzNlM2Y1NzM5OTUyNzZmMGM3 YTI1MzMwHhcNMjYxMDI2MTUwMDMzWhcNMjYxMDI3MTUwMDMzWjAzMTEwLwYDVQQD Eyg2ZmE1ZmYxZDNjZjU2ODFhYmUyYmYyOGYzNDIzYjU5YzNkMTdmNzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwHU7XHdaTCoej0pq++mXo5DeN9B 6KCskiW+SrvuCjhzHbqn4orAcaCKvB3KgxBbo1yBMdXhLsY5jaWEmYQtXXIrEcah RDm9zDEZks0CA07jzuXnWp2QIAG8MuJye8vTDG5sscAOQ8KSeEqCKS87uRaWNbpS waBJUivjc25dulKD5QF/t0dSzo/JPwGLOCTRaVkkrHNbEXQPMa8lxQcC9JwTNMlp KtJROsj5qPMqn+eEHeK393qHhAdjYWFZMdh/XdTq7b7UU1TIxRmiUn4FciFe+96b iblg+h5Jbz5xsEFfhwPX9gVNqJknNBHOaH/fkbk4j2RIXsgOh7k9hygMswIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG+l/x089WgavivyjzQjtZw9F/cLMB8GA1UdIwQY MBaAFERZEggJwjvzAz4/VzmVJ28MeiUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0QfCG5s0 bs3PucXJSob22Db43uBDfhQkYNWS0qr1eHeYxn5o5cnYdajYj7y3T1aILBX7F9yG ND1VHSX3W+i7CvJwpUv+XykTLEbAKFb0Q0aP+qACLkQ1VH2m9GnzCvYpQmivzgnd gGjT7Kx1Igt1ugNH1os5Y0Ys61Z4f/yZ9/c/hYQi7fNycfWyr9F58yD+O/y9pNU3 kYKzIIC+6masqGC7pOnKNPgsBWAdpYsDfmZT1fGxGyux3HtdNRjsgg6Vv1xF9KKC hvVGo1rZoXnw8zuj7VEttACi5ZoUUQVqJEcdjN7XDhTV2okUaBJER5WvadghAYCj DNXEoYvazVsufQ== -----END CERTIFICATE-----Generated at Tue Oct 27 00:14:30 2026 by rpki-client