$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft File: cG06u7R4t07yre-bt8QzbjQRHVE.mft (raw, json) Hash identifier: XCS/BJv9Sgp2gszUWKkWKG/kzDZ8FE37tig00UJt380= Subject key identifier: 8A:DF:F5:6D:FE:0E:B1:C9:01:C2:A2:1B:75:79:7C:BD:E5:CD:7B:86 Authority key identifier: 70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 Certificate issuer: /CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Certificate serial: 01A1555344D862CCB6F6B7C4813F8ADAB371 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft Manifest number: 14AE Signing time: Mon 19 Oct 2026 18:01:22 +0000 Manifest this update: Mon 19 Oct 2026 18:01:22 +0000 Manifest next update: Tue 20 Oct 2026 18:01:22 +0000 Files and hashes: 1: 0Mybj4rFQlGdxvZ7NznWNMzZNF4.roa (hash: izLvly3jkC64Eb5EtBveae4jjwGSamPNz65JeNhANXc=) 2: 0T_njveGDBox8dRnm6ptBU24SOE.roa (hash: MTvLZVcAf3FK4lXDgQihNVIFOil0UjLczM3XYj+vPwc=) 3: 90pIRo4oGPb_c3zVAWaT7rGauh4.roa (hash: RxEmlJAzt3qSpThLmZZ1Q1w3EgvczeGl5RqcbpfL92o=) 4: BWSIfeORL3ZaF98YJdEW_lwKSoo.roa (hash: O2KdoHsDXYMUXXkiHb3Ti5/HWYkXf5itDU8BQXurMDo=) 5: EP0aKI-whMmYHwwbQG_UQybF1ro.roa (hash: GSiW2v5sajTDLwf2HGqS0tmszInx+A5GWHUr0JLZH7Q=) 6: JqXUASPPuW-ZfKTLfRfljZRf9XU.roa (hash: I5gEJMjSP0YMaRxmxOj3bGD0h9cUs6Al0Xe+ib9ew3A=) 7: Rpb6LGU-1R85HDwVKbRm4Qdf_lk.roa (hash: 5GUGE7IYv+Hqhm/lVnKa++Si4aKidEvTnTt5U6AOn2Q=) 8: YHr6sMN1EVbEwUde6FetuHcueOA.roa (hash: 0BAOQ2lWNPhsH0gX4p/TlQYVZnjFg2uh0FOWf3CJEt0=) 9: cG06u7R4t07yre-bt8QzbjQRHVE.crl (hash: rIx/khjAXMaCxLM2A5xuohM1i2y+jsZwdUjMA/8bkr8=) 10: cr0AR-w_JWFamVAtdgkvTMTy1Qo.roa (hash: eKAgKSzUAMEtrHDrT7mnQsSII8a/h3K+YCAIf+FAWy8=) 11: d50ryNf7AouleyVkV0KoPCj3Vbs.roa (hash: 8cb301Zu+uM5+wsIG5dakaifCIJcNQE2p9LiFv/55dU=) 12: gqda1RRdjHz2yyIazkooa21K5ao.roa (hash: gk7o7ms/UurBVCVNeivvLcIA/I4s2EpCjOSX/bo2p8Y=) 13: m1OT9_Oh7JS7V3R1rRviHcm-juY.roa (hash: uQvi7Pqqu7zxP6O5SMttYeiMgTQzQ+VIUvmzfarhEtw=) 14: tWXHUg2Vn7_-mrAYlefPvZyECK4.roa (hash: aukU+EuzdQtPw4KeDsQgc7I5oTwnlHLSCu9Gk47rPG4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 18:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:55:53:44:d8:62:cc:b6:f6:b7:c4:81:3f:8a:da:b3:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=706d3abbb478b74ef2adef9bb7c4336e34111d51 Validity Not Before: Oct 19 18:01:22 2026 GMT Not After : Oct 20 18:01:22 2026 GMT Subject: CN=8adff56dfe0eb1c901c2a21b75797cbde5cd7b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:04:8f:bd:b3:c2:0e:19:97:d7:3b:52:1c:9b: a8:c3:82:50:ac:6b:08:fe:cd:9e:33:97:ef:94:15: c1:46:9a:b0:87:c8:45:93:7c:01:81:38:1e:1d:f4: 32:b6:e8:bf:0d:84:fd:02:fa:58:b6:ea:d2:ec:90: 14:fa:e7:83:49:e7:ee:33:a5:cf:fc:92:de:b7:46: bb:24:ae:b4:d1:1f:d1:82:5e:04:b0:7e:49:fd:18: 66:07:4d:60:9c:45:8b:a1:67:e2:36:52:7b:fe:74: 41:43:1c:e1:9f:d8:a5:23:89:7a:ef:8f:b3:c6:a3: ff:7a:42:b3:6b:95:a9:e9:70:4b:34:f2:40:6c:39: 00:cd:ed:b2:80:0d:cf:63:87:62:1b:b9:e8:18:a8: c5:e9:7a:23:78:08:d7:1b:d3:96:ff:07:49:31:78: be:28:35:26:db:09:2f:d2:b6:4d:93:4b:ad:d5:ef: 81:79:d3:c6:52:dd:77:48:8a:8a:5e:5f:f4:97:39: ba:a2:44:0a:b3:dc:48:2a:c9:87:9f:2e:e7:f9:92: d5:01:02:e0:2e:9e:a8:62:a4:fc:a7:97:8f:dd:07: 12:72:2a:02:6b:9d:16:81:ee:bf:9b:43:d2:c1:27: 1a:d8:67:d2:30:70:fb:18:65:44:8f:db:ba:e1:d3: ee:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:DF:F5:6D:FE:0E:B1:C9:01:C2:A2:1B:75:79:7C:BD:E5:CD:7B:86 X509v3 Authority Key Identifier: keyid:70:6D:3A:BB:B4:78:B7:4E:F2:AD:EF:9B:B7:C4:33:6E:34:11:1D:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cG06u7R4t07yre-bt8QzbjQRHVE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/0c6f47-4713-4471-b08f-a4213c93f1f7/1/cG06u7R4t07yre-bt8QzbjQRHVE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:77:1d:32:39:43:e6:c3:79:10:82:3a:8e:cb:95:97:1a:2e: f5:42:9a:dc:53:00:5d:e9:5b:d5:b6:c6:82:a7:8b:07:e4:1a: 3d:d4:fb:f9:35:c0:85:dd:0e:12:46:1b:40:39:18:95:c3:89: 63:2c:ef:24:8f:1c:27:23:30:91:24:09:fa:28:e8:ef:62:96: bf:1a:c6:65:39:dd:2a:54:64:a5:de:a7:f0:ed:e3:4d:c7:74: 10:28:73:18:00:a1:08:5f:86:5e:35:ad:a2:26:3a:5f:5d:0f: 9d:5a:17:a3:8f:17:34:f8:d8:4d:15:2d:10:0b:b5:e2:a5:a9: b6:0e:8f:7f:7a:70:b9:6d:2b:68:cf:88:26:b3:ef:fb:ca:76: 32:49:e9:87:6a:7b:5d:27:3a:9b:74:d2:fe:7f:9a:d6:c8:9e: 73:1a:bf:08:f8:ed:a0:f1:5c:da:a8:28:b7:93:12:6b:a7:37: 2d:9e:67:1c:71:58:18:d9:ab:b3:a8:80:e8:c5:8a:8c:28:28: 59:02:ba:3a:42:96:8d:6b:fc:28:05:e9:ee:97:a1:9a:c5:e0: 20:9b:e7:dc:e3:f0:58:0b:b3:04:d4:00:76:50:98:9b:de:a7: be:e0:dd:0a:d4:36:10:cb:c5:b5:4f:62:ec:f2:25:7c:f5:5a: f1:e7:9e:f8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFVU0TYYsy29rfEgT+K2rNxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwNmQzYWJiYjQ3OGI3NGVmMmFkZWY5YmI3YzQzMzZlMzQx MTFkNTEwHhcNMjYxMDE5MTgwMTIyWhcNMjYxMDIwMTgwMTIyWjAzMTEwLwYDVQQD Eyg4YWRmZjU2ZGZlMGViMWM5MDFjMmEyMWI3NTc5N2NiZGU1Y2Q3Yjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArASPvbPCDhmX1ztSHJuow4JQrGsI /s2eM5fvlBXBRpqwh8hFk3wBgTgeHfQytui/DYT9AvpYturS7JAU+ueDSefuM6XP /JLet0a7JK600R/Rgl4EsH5J/RhmB01gnEWLoWfiNlJ7/nRBQxzhn9ilI4l674+z xqP/ekKza5Wp6XBLNPJAbDkAze2ygA3PY4diG7noGKjF6XojeAjXG9OW/wdJMXi+ KDUm2wkv0rZNk0ut1e+BedPGUt13SIqKXl/0lzm6okQKs9xIKsmHny7n+ZLVAQLg Lp6oYqT8p5eP3QcScioCa50Wge6/m0PSwSca2GfSMHD7GGVEj9u64dPuIQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIrf9W3+DrHJAcKiG3V5fL3lzXuGMB8GA1UdIwQY MBaAFHBtOru0eLdO8q3vm7fEM240ER1RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYt YTQyMTNjOTNmMWY3LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy8wYzZmNDctNDcxMy00NDcxLWIwOGYtYTQyMTNjOTNmMWY3 LzEvY0cwNnU3UjR0MDd5cmUtYnQ4UXpialFSSFZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyXcdMjlD 5sN5EII6jsuVlxou9UKa3FMAXelb1bbGgqeLB+QaPdT7+TXAhd0OEkYbQDkYlcOJ YyzvJI8cJyMwkSQJ+ijo72KWvxrGZTndKlRkpd6n8O3jTcd0EChzGAChCF+GXjWt oiY6X10PnVoXo48XNPjYTRUtEAu14qWptg6Pf3pwuW0raM+IJrPv+8p2Mknph2p7 XSc6m3TS/n+a1siecxq/CPjtoPFc2qgot5MSa6c3LZ5nHHFYGNmrs6iA6MWKjCgo WQK6OkKWjWv8KAXp7pehmsXgIJvn3OPwWAuzBNQAdlCYm96nvuDdCtQ2EMvFtU9i 7PIlfPVa8eee+A== -----END CERTIFICATE-----Generated at Tue Oct 20 06:32:30 2026 by rpki-client