$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json) Hash identifier: 3V+ezY3vqOI0Una5hzGl4/r2Bs9cNtO2dhfA8UiA1XY= Subject key identifier: 4E:E5:41:6A:35:AC:5F:0C:B7:C5:8A:25:16:FB:0D:27:29:24:80:09 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 01A15A0B6AB3133049224BDE7CA6AFA1BD78 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft Manifest number: 19D1 Signing time: Tue 20 Oct 2026 16:00:59 +0000 Manifest this update: Tue 20 Oct 2026 16:00:59 +0000 Manifest next update: Wed 21 Oct 2026 16:00:59 +0000 Files and hashes: 1: 55lTuhAI20BHIf-zeSdkeAFaMAg.roa (hash: 6WOjfM5Zbb9/cs9Lu29lst5KqtNeJQ6bLtoEOKJiPTQ=) 2: 7NA2LegCljPM-6ilz2F5cnaoBJw.roa (hash: qjOTsmyHG6MOUTIadkX/zmkZDlAkqPzHJKetzF1R3ds=) 3: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=) 4: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=) 5: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=) 6: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=) 7: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=) 8: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=) 9: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=) 10: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=) 11: OOZCU9RDZbWm90IHhggbkADAyok.roa (hash: yzkJaDkuzS/Q97fyxLhVwM/SdV10qs3BxmQUOzU77kU=) 12: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=) 13: X3TOXxPWXzlBaEZ6x5xVJV0GN2g.roa (hash: lAKtM50aILYHfyj/dnL/G2PsJlkpfMmR8vppwS3z8KU=) 14: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=) 15: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: k2xb+3G+Tv0Kgu7UWzIBQR0ELVCxuqPCcf6+sgKnPuA=) 16: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=) 17: e9owlvY-NY5qGBDhXZ7WFxeggIc.roa (hash: QGa2zFUrPTeR+OERG79pTeFCAO6qtUgwUx98rjXhrvE=) 18: jVvCjidFfK-8IL92OyEeuSlStW0.roa (hash: 95JD6YEa33c2IW5jEGSMsvaX4Vq46tjO1+Oed4maTyw=) 19: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=) 20: twRPR7YMxdedDnIoOoDSSMLLV5I.roa (hash: iG5iFiWGGZ1ctfdvgUYVkBJLEXDfn4PbykZkkKVwlz8=) 21: uPXsHfVse8rlnzUbj2UoRMWOq8g.roa (hash: SCLabx4GN4AnmWRb1f32gO5dZZyqhDCGfjhfHlPlGlM=) 22: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=) 23: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 16:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5a:0b:6a:b3:13:30:49:22:4b:de:7c:a6:af:a1:bd:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Oct 20 16:00:59 2026 GMT Not After : Oct 21 16:00:59 2026 GMT Subject: CN=4ee5416a35ac5f0cb7c58a2516fb0d2729248009 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9f:43:81:69:eb:5c:48:f3:32:38:d8:d6:89: d0:df:ab:ba:aa:56:1b:a6:83:cb:a0:77:b8:43:ee: f9:2e:d9:90:f5:14:48:d7:82:69:ac:3b:6a:f9:24: 2f:c2:29:f7:16:b9:ac:b4:07:bf:27:6d:03:3f:64: 3c:f0:b3:47:55:d5:a2:b0:54:d2:11:82:80:b6:2a: 9f:f6:7e:c2:9b:bc:9d:07:9d:e7:6e:a1:4f:4a:1a: 1a:b7:c3:fd:23:70:d8:e5:d4:75:05:04:82:56:3d: 5c:43:64:0c:84:af:e2:bc:2b:35:92:74:4f:b4:c6: a0:0e:97:67:98:0c:58:95:74:63:52:a5:f5:55:08: 0e:8c:3c:75:fa:f4:e0:68:7c:3d:51:00:5d:8a:89: 0b:68:cb:57:cd:63:ed:41:02:bf:07:a8:c9:b6:f8: e5:82:da:40:4a:08:ba:ca:ff:64:63:7f:08:48:b8: 48:e8:af:b5:74:9b:34:ab:f6:ae:1d:bf:f5:4f:60: a3:ab:12:a7:83:5f:ec:28:f9:ba:d8:aa:ef:44:d7: f2:86:c8:37:19:5e:88:28:e0:87:63:c8:5d:5d:5f: 9c:6a:97:b1:e4:9a:38:e7:93:c8:ab:00:27:e1:7b: 6f:23:18:12:85:aa:12:4f:a8:6e:d2:0d:af:84:32: 65:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E5:41:6A:35:AC:5F:0C:B7:C5:8A:25:16:FB:0D:27:29:24:80:09 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:5e:90:75:65:da:ac:b9:20:d1:7c:18:cc:78:29:11:a7:e4: 29:ce:31:e1:17:2d:8b:0c:ef:91:1b:b7:99:0c:ea:62:62:cb: 4c:3e:56:5c:15:6d:a8:81:3c:ec:a0:3a:21:70:6e:8b:06:41: aa:ab:14:f4:11:36:d2:a3:e9:2d:13:52:1e:0c:ed:72:d3:b6: e9:97:31:1e:21:0b:8e:75:1a:45:53:2c:2b:93:68:d3:39:b2: 13:ce:49:dd:50:7c:ae:6b:1d:23:46:58:4b:9f:6b:92:04:cd: 08:2a:8d:17:86:c4:79:89:b6:08:83:20:32:bd:21:e6:b7:02: e9:16:88:83:3e:5d:73:d2:d1:6e:7c:49:08:8b:3e:3e:4b:5e: 64:d5:9a:ea:f5:c5:8c:c0:2d:94:b1:55:1f:3c:2c:7c:aa:07: b7:1e:d8:9a:cc:3a:04:38:9c:e1:5d:51:02:cd:2c:15:41:2a: e8:e4:a0:6a:c5:75:12:7f:1b:ec:b9:ac:ba:68:ee:52:d9:4e: 98:5a:8d:16:de:0d:32:ca:05:21:3c:d2:27:63:1b:a9:a6:82: b6:f9:25:37:5c:9f:a9:69:11:e5:3f:f7:3a:42:66:b0:c3:88: 83:b8:46:cf:8e:8e:e6:2d:d8:e0:04:67:d6:e2:76:35:12:c1: e3:f2:63:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFaC2qzEzBJIkvefKavob14MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYxMDIwMTYwMDU5WhcNMjYxMDIxMTYwMDU5WjAzMTEwLwYDVQQD Eyg0ZWU1NDE2YTM1YWM1ZjBjYjdjNThhMjUxNmZiMGQyNzI5MjQ4MDA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApp9DgWnrXEjzMjjY1onQ36u6qlYb poPLoHe4Q+75LtmQ9RRI14JprDtq+SQvwin3FrmstAe/J20DP2Q88LNHVdWisFTS EYKAtiqf9n7Cm7ydB53nbqFPShoat8P9I3DY5dR1BQSCVj1cQ2QMhK/ivCs1knRP tMagDpdnmAxYlXRjUqX1VQgOjDx1+vTgaHw9UQBdiokLaMtXzWPtQQK/B6jJtvjl gtpASgi6yv9kY38ISLhI6K+1dJs0q/auHb/1T2CjqxKng1/sKPm62KrvRNfyhsg3 GV6IKOCHY8hdXV+capex5Jo455PIqwAn4XtvIxgShaoST6hu0g2vhDJlYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE7lQWo1rF8Mt8WKJRb7DScpJIAJMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJl6QdWXa rLkg0XwYzHgpEafkKc4x4RctiwzvkRu3mQzqYmLLTD5WXBVtqIE87KA6IXBuiwZB qqsU9BE20qPpLRNSHgztctO26ZcxHiELjnUaRVMsK5No0zmyE85J3VB8rmsdI0ZY S59rkgTNCCqNF4bEeYm2CIMgMr0h5rcC6RaIgz5dc9LRbnxJCIs+PkteZNWa6vXF jMAtlLFVHzwsfKoHtx7Ymsw6BDic4V1RAs0sFUEq6OSgasV1En8b7LmsumjuUtlO mFqNFt4NMsoFITzSJ2MbqaaCtvklN1yfqWkR5T/3OkJmsMOIg7hGz46O5i3Y4ARn 1uJ2NRLB4/JjSg== -----END CERTIFICATE-----Generated at Wed Oct 21 03:32:54 2026 by rpki-client