$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft File: I0Rtp6cLznc-wrwWVarjDDwYQSw.mft (raw, json) Hash identifier: IJmbD8gVa7p+E8Ws3Awk34WVGYgRbsP/L4HuXhMp4UI= Subject key identifier: F6:F4:64:D1:B0:24:04:CC:7A:75:40:16:5F:E9:39:86:DD:76:B8:27 Authority key identifier: 23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C Certificate issuer: /CN=23446da7a70bce773ec2bc1655aae30c3c18412c Certificate serial: 01A1562EDB95B1FA2C4B0C2A794BC099B00F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft Manifest number: 1873 Signing time: Mon 19 Oct 2026 22:01:13 +0000 Manifest this update: Mon 19 Oct 2026 22:01:13 +0000 Manifest next update: Tue 20 Oct 2026 22:01:13 +0000 Files and hashes: 1: 1-Qwhdxw0hOkLXBRAcR2LmJpZ5ak.roa (hash: xIlT5OIadnOF9KgdrgeobvvXh2OpkJLV558vKGxbWc0=) 2: 2x_fMam_jbeHqNmVr72GLc6t2gY.roa (hash: XuAz6s6pmt1TvqrrTJFFmoWGyWiOO+UCpyX+VOOM4OM=) 3: BKLkIdToQetqMN6t0fILb38dSDc.roa (hash: RhVkHdE+vukqBXIHV6N+0FaehH32ohYDLGAwN+SuRTk=) 4: CupzWU4aLHwacea9s2f26JgGU7w.roa (hash: YiVW0zn+2J0x+BF2Yslb930PEXt7HMZ5DbfmBNoWQKE=) 5: I0Rtp6cLznc-wrwWVarjDDwYQSw.crl (hash: DzU/6cV/YN+XwYDKzzg0u+zV0lMDJmtYFVhkFVspXow=) 6: InZzXVL8KHJoCW3P7j1vC_LCtX0.roa (hash: UZuietxe/VlvBF04H5Qn/Q3JuczTSHQbjD8HNRbl0Y4=) 7: MYApAQS1OmdBkPveOQUGMf9YCsY.roa (hash: xnUiqZxef23Ltop5zf30mYdRAToyxWan1d3qsmoZZdE=) 8: V6V_NlUP57LahAmPSdJLWOxrfrk.roa (hash: PQq468qMgQ7iMbphbUgZdzLfF9PWviyerqDZHzWerVE=) 9: a6tV42bT2z7X2lsjs8cvX8HIAIc.roa (hash: NDbBw26iXwsVl/ElEophDI0QYBlkmtkRinFz/9BOzMw=) 10: fObJjjriSFDg4fSQTq7ENWa9-zc.roa (hash: WGLV3VjdN5mD0f589CBjcyMgLQSoTV+NVe84m46+eBc=) 11: hcsvWgXQpRuMWY3WmGaGm9cGJ4A.roa (hash: dkGLaaklnk5lHe0yhu52I503lMVuY0bbx3ehGkFXyqY=) 12: i7574yuT4RZ2_MwlIM2VKqIIK2U.roa (hash: X+/UrliSCfToScMB/8/XDGdMggPWp6ennjed9G4uk1A=) 13: qOIniIo2K3_zis3JibLadioBPRo.roa (hash: 5h4shskfhopVb9L7z02A78iAajdnh2sIBdf4Kss8RH8=) 14: vWKFpPFVl35hfIog_KoQjclWrmY.roa (hash: 7m8wK3gsN1166dBeFVQxAfE0K89nsZEcg+lnonfGv9Q=) 15: wWIoMzB39ahvaptJv9NhKUQr9Cw.roa (hash: 7GV/ae9yumSfYZH3dmuAGtWW+nlGHJx1A9VViiivwD8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 22:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:56:2e:db:95:b1:fa:2c:4b:0c:2a:79:4b:c0:99:b0:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=23446da7a70bce773ec2bc1655aae30c3c18412c Validity Not Before: Oct 19 22:01:13 2026 GMT Not After : Oct 20 22:01:13 2026 GMT Subject: CN=f6f464d1b02404cc7a7540165fe93986dd76b827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:65:56:bb:24:5d:e5:9e:22:cb:cc:d1:b2:b1: 36:49:84:0f:1b:84:31:e1:45:05:0e:84:16:be:5c: 2f:80:55:b2:5f:29:6e:52:82:bb:fc:7b:6f:62:f4: 48:ae:13:bd:88:ee:7e:82:75:f7:81:08:89:75:70: fd:22:7e:72:fb:ce:22:ea:dd:6e:83:df:1d:d2:32: 80:e1:65:88:89:0e:05:3f:33:62:b5:ce:67:ed:39: 88:25:20:54:f6:cb:b9:50:be:f7:46:38:1a:12:23: 8e:4a:bd:1d:d5:97:9e:31:9e:e2:4d:4d:4f:94:14: db:33:82:e0:63:92:41:d2:16:3f:27:c3:a0:19:85: 87:f3:c1:42:27:62:f9:a5:51:d6:e6:76:4b:5e:9f: e2:45:6a:39:03:54:a0:cc:f5:52:af:62:85:d9:11: 01:d7:36:90:91:a6:e4:0f:d1:bc:e1:0b:fd:ba:a4: f3:56:04:ee:7d:59:2b:1b:6f:f3:da:0e:22:0a:4c: 32:00:72:c3:fc:73:5a:98:24:7e:c8:19:f1:b2:ae: d6:68:51:2e:e6:fb:2c:07:dc:1d:7d:8c:54:b1:f2: f9:67:a5:9a:9d:61:81:d7:5b:bd:e5:43:fd:0d:8e: c0:25:16:c7:d8:06:3c:60:ee:c6:be:09:fe:1c:da: 8c:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:F4:64:D1:B0:24:04:CC:7A:75:40:16:5F:E9:39:86:DD:76:B8:27 X509v3 Authority Key Identifier: keyid:23:44:6D:A7:A7:0B:CE:77:3E:C2:BC:16:55:AA:E3:0C:3C:18:41:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0Rtp6cLznc-wrwWVarjDDwYQSw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/f3549f-18f7-48b0-901d-25cc9d6cfbb9/1/I0Rtp6cLznc-wrwWVarjDDwYQSw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:fd:36:8c:77:d0:c8:31:1f:e4:a2:6e:30:79:4f:0e:90:02: 40:b9:14:71:69:92:e4:b0:93:90:d5:a6:57:3c:99:87:ed:02: 57:4a:a1:87:10:69:32:39:32:55:c2:39:e2:7c:be:10:e3:1f: 57:7b:6e:80:17:c0:91:9c:3b:84:8d:b3:8f:de:b5:86:ae:26: c2:ee:18:d1:7e:e0:52:88:8d:fe:dd:b0:cf:a9:e7:8c:e8:45: 5a:1b:15:98:50:a9:02:50:c7:c9:62:cb:a4:36:1c:58:fd:c2: 6d:25:6e:3b:06:5d:9a:d9:e0:f5:93:6d:68:c9:80:f2:0e:66: c5:a2:a7:42:2b:5a:06:cc:b5:b4:b9:2b:4f:53:a9:1d:80:7a: b7:ae:f4:5d:fd:37:15:ea:67:ee:ef:bc:f1:d8:33:ba:37:9a: 70:11:7b:bd:31:02:1f:bf:f0:78:74:af:49:38:55:07:21:b0: a6:e3:43:62:dd:34:fe:f7:04:f7:dc:5d:ca:14:a7:e1:86:4c: 8a:79:68:4c:39:d6:f5:34:2c:da:26:35:45:90:d5:d3:06:4f: 0a:92:1f:53:47:08:7f:13:94:6f:e4:bb:b1:66:27:a9:97:8b: e5:41:31:5a:e8:a3:5c:6f:c3:c1:2d:9f:ca:97:02:ee:9b:05: cf:98:2d:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFWLtuVsfosSwwqeUvAmbAPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNDQ2ZGE3YTcwYmNlNzczZWMyYmMxNjU1YWFlMzBjM2Mx ODQxMmMwHhcNMjYxMDE5MjIwMTEzWhcNMjYxMDIwMjIwMTEzWjAzMTEwLwYDVQQD EyhmNmY0NjRkMWIwMjQwNGNjN2E3NTQwMTY1ZmU5Mzk4NmRkNzZiODI3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoWVWuyRd5Z4iy8zRsrE2SYQPG4Qx 4UUFDoQWvlwvgFWyXyluUoK7/HtvYvRIrhO9iO5+gnX3gQiJdXD9In5y+84i6t1u g98d0jKA4WWIiQ4FPzNitc5n7TmIJSBU9su5UL73RjgaEiOOSr0d1ZeeMZ7iTU1P lBTbM4LgY5JB0hY/J8OgGYWH88FCJ2L5pVHW5nZLXp/iRWo5A1SgzPVSr2KF2REB 1zaQkabkD9G84Qv9uqTzVgTufVkrG2/z2g4iCkwyAHLD/HNamCR+yBnxsq7WaFEu 5vssB9wdfYxUsfL5Z6WanWGB11u95UP9DY7AJRbH2AY8YO7Gvgn+HNqMAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPb0ZNGwJATMenVAFl/pOYbddrgnMB8GA1UdIwQY MBaAFCNEbaenC853PsK8FlWq4ww8GEEsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQt MjVjYzlkNmNmYmI5LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy9mMzU0OWYtMThmNy00OGIwLTkwMWQtMjVjYzlkNmNmYmI5 LzEvSTBSdHA2Y0x6bmMtd3J3V1ZhcmpERHdZUVN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO/02jHfQ yDEf5KJuMHlPDpACQLkUcWmS5LCTkNWmVzyZh+0CV0qhhxBpMjkyVcI54ny+EOMf V3tugBfAkZw7hI2zj961hq4mwu4Y0X7gUoiN/t2wz6nnjOhFWhsVmFCpAlDHyWLL pDYcWP3CbSVuOwZdmtng9ZNtaMmA8g5mxaKnQitaBsy1tLkrT1OpHYB6t670Xf03 Fepn7u+88dgzujeacBF7vTECH7/weHSvSThVByGwpuNDYt00/vcE99xdyhSn4YZM inloTDnW9TQs2iY1RZDV0wZPCpIfU0cIfxOUb+S7sWYnqZeL5UExWuijXG/DwS2f ypcC7psFz5gttA== -----END CERTIFICATE-----Generated at Tue Oct 20 07:48:08 2026 by rpki-client