$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft File: dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft (raw, json) Hash identifier: nusXspVGv/wnxeRW/I7aZpVpKgpLNmZFDFO8+QrUGSA= Subject key identifier: 61:5E:44:74:55:64:C9:8C:90:AE:E1:79:46:EF:98:C4:62:1B:A4:FF Authority key identifier: 77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F Certificate issuer: /CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f Certificate serial: 01A15E1ED3634727D39B41A28BA26428FC70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft Manifest number: 012F Signing time: Wed 21 Oct 2026 11:00:40 +0000 Manifest this update: Wed 21 Oct 2026 11:00:40 +0000 Manifest next update: Thu 22 Oct 2026 11:00:40 +0000 Files and hashes: 1: 03W6VIAGhvyNDCUkYDcMfOL6fUI.roa (hash: LtqyJHshXdxCIRk8umeeTouLrWS/Lb07cUMG6sTNxpw=) 2: 9Gkg-Fy1ED79o6foFQlUsqzz4Do.roa (hash: 9L/TKMTwrY2dsT+Id53LzkQVIGh6pvjnNY2nFpdva2A=) 3: 9yhBMbL32EzPTZ90RPTm0ad_9P8.roa (hash: pIiuBqDg+/+pSgcp7wJdJbnux2Rbm81/220r+M/WXqM=) 4: FyDX43spYXNo_rALXQoEHpva-_U.roa (hash: y/HZbciEjAN07/IOJ8MEymame2T5vLFs8tnOac6LlFg=) 5: Rrg2UCoYbcKZlfo-czOzmRaIv3c.roa (hash: fm7bQsAqsz6zSKtaiB4We3D1MtoTKMw/aAwTXUd69G0=) 6: UDIt0dMpDRWbAXnGFKGQO0XL3nM.roa (hash: U103k6kn1IUdxjd22EwMUJn2KmC9fuSGcAXd7ImZFNw=) 7: YDunI5FinLdkmL6kbL4sn70t1mM.roa (hash: I6AA+Ij7Ypxf1FcJt+bTsc41ghBVr1iNUkCNk4yKf5Q=) 8: c8_6fx9na7RPLaZ9nrdFxDgY4xs.roa (hash: t4zaMbAtnS1WUf26/eGpPUF7xAi1NOz7s/c1nr51Mjc=) 9: dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl (hash: yTeT/kECRQLFaydlfHxOukJnUlbuSqHvg4oo/CKd/KI=) 10: jdBlRXTUbp1vXymXz_8bg-ZTfQM.roa (hash: C/G4HU7rJ4t7tqUwqSXG7lRlEn8U9T3tp6gc8Rt2Fz0=) 11: slKxpxUkmNVndEhzM3jrW-WL5AM.roa (hash: meW2as+rSxLDtB+aCwzkCq1sWZZokr1CrQhOnNBfgg4=) 12: vW1_HCUVPJiZsXhTvnOJYpmVuBk.roa (hash: xuxWiMxXBVeK5sdjrw081xO1T2VBxkkfICVoklrLLQ4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 11:00:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5e:1e:d3:63:47:27:d3:9b:41:a2:8b:a2:64:28:fc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=771c7897c0ee3b269a67d2e1d64e3fd1c15a1d5f Validity Not Before: Oct 21 11:00:40 2026 GMT Not After : Oct 22 11:00:40 2026 GMT Subject: CN=615e44745564c98c90aee17946ef98c4621ba4ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:c8:89:15:02:9f:59:78:d8:78:eb:26:f9:94: 2a:ba:af:c1:93:fb:69:9e:98:7f:58:4c:1d:d4:e3: c1:aa:23:1b:e8:04:23:ba:a0:86:f0:d3:28:9d:6f: 86:5f:7e:d3:ae:83:25:03:33:96:e0:55:5e:59:41: cc:ee:c0:22:bc:33:ea:d7:85:7b:05:d4:60:fe:5b: 77:c8:0a:3e:9a:b3:fc:fa:ee:ad:66:06:db:a7:43: e3:04:12:0a:71:4b:bf:e1:bc:d5:ce:8a:8e:ce:c5: 9c:cb:94:b8:b5:af:aa:75:6b:df:cd:3c:2e:dc:75: 27:8a:fa:79:ed:84:81:60:88:a0:e8:a1:8b:4d:d1: 59:a2:10:81:56:5d:31:11:8c:3b:e0:83:17:eb:a1: 0a:2b:7d:ec:b9:96:60:da:24:db:b8:2c:8d:d2:67: da:da:78:b9:6d:74:aa:d5:8e:72:00:e9:86:3a:62: cd:f4:9e:9e:4f:4e:f9:f0:5a:d6:55:4f:a9:6f:46: e3:d6:72:58:f5:a5:c3:6f:59:77:e2:fb:ba:9f:66: 24:d3:ac:89:57:09:41:e9:82:34:5d:aa:8a:b9:90: 9d:e9:5c:62:11:42:1e:54:8b:57:1b:76:6e:61:d9: 2a:ef:d5:85:f8:31:5b:2b:5a:1e:c5:2c:a0:44:42: 8f:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:5E:44:74:55:64:C9:8C:90:AE:E1:79:46:EF:98:C4:62:1B:A4:FF X509v3 Authority Key Identifier: keyid:77:1C:78:97:C0:EE:3B:26:9A:67:D2:E1:D6:4E:3F:D1:C1:5A:1D:5F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/dxx4l8DuOyaaZ9Lh1k4_0cFaHV8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:fb:26:36:68:1c:02:a2:0c:f0:9f:94:79:99:53:c9:e5:64: 4d:67:da:f7:59:fb:20:96:9d:31:fc:92:2c:6f:46:b7:4d:aa: 62:d6:34:58:bf:45:30:e3:a1:33:ab:9c:82:a1:e2:05:b4:6a: d0:68:e6:e8:85:d6:48:15:e9:0a:14:8a:12:99:ad:88:73:dd: 3f:c2:5a:77:a1:d3:7c:92:f6:13:f6:98:7e:b8:ae:d7:00:17: 11:3a:ce:1c:5e:b4:8c:04:f7:8d:25:22:73:02:2d:38:bf:12: 85:c9:f5:d4:39:fb:66:17:32:32:09:96:8c:b8:8d:d5:5b:0a: 5a:3e:66:30:48:13:26:6b:ae:b2:95:3e:90:6a:75:0a:31:dd: cc:ee:be:b1:d4:57:8a:72:08:64:b5:b6:fd:5b:8e:08:c5:b9: 97:7c:b0:a8:8a:23:c3:2a:dc:7e:41:2e:85:46:ff:62:b5:f4: b4:82:d1:b7:79:8f:75:c1:d6:89:a3:82:da:01:2a:54:7a:31: 1f:a1:68:98:0b:af:33:af:03:9b:6d:b6:63:73:73:16:ad:ba: d1:e3:be:33:92:46:cb:8f:d6:7e:03:57:95:16:91:76:36:9b: fa:eb:a1:ae:8c:3d:64:ec:81:ed:74:8b:9a:d6:16:15:9a:bc: 29:8a:5a:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFeHtNjRyfTm0Gii6JkKPxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc3MWM3ODk3YzBlZTNiMjY5YTY3ZDJlMWQ2NGUzZmQxYzE1 YTFkNWYwHhcNMjYxMDIxMTEwMDQwWhcNMjYxMDIyMTEwMDQwWjAzMTEwLwYDVQQD Eyg2MTVlNDQ3NDU1NjRjOThjOTBhZWUxNzk0NmVmOThjNDYyMWJhNGZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsiJFQKfWXjYeOsm+ZQquq/Bk/tp nph/WEwd1OPBqiMb6AQjuqCG8NMonW+GX37TroMlAzOW4FVeWUHM7sAivDPq14V7 BdRg/lt3yAo+mrP8+u6tZgbbp0PjBBIKcUu/4bzVzoqOzsWcy5S4ta+qdWvfzTwu 3HUnivp57YSBYIig6KGLTdFZohCBVl0xEYw74IMX66EKK33suZZg2iTbuCyN0mfa 2ni5bXSq1Y5yAOmGOmLN9J6eT0758FrWVU+pb0bj1nJY9aXDb1l34vu6n2Yk06yJ VwlB6YI0XaqKuZCd6VxiEUIeVItXG3ZuYdkq79WF+DFbK1oexSygREKP5QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGFeRHRVZMmMkK7heUbvmMRiG6T/MB8GA1UdIwQY MBaAFHcceJfA7jsmmmfS4dZOP9HBWh1fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZHh4NGw4RHVPeWFhWjlMaDFrNF8wY0ZhSFY4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvZHh4NGw4RHVPeWFhWjlMaDFrNF8wY0ZhSFY4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvZHh4NGw4RHVPeWFhWjlMaDFrNF8wY0ZhSFY4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvsmNmgc AqIM8J+UeZlTyeVkTWfa91n7IJadMfySLG9Gt02qYtY0WL9FMOOhM6ucgqHiBbRq 0Gjm6IXWSBXpChSKEpmtiHPdP8Jad6HTfJL2E/aYfriu1wAXETrOHF60jAT3jSUi cwItOL8Shcn11Dn7ZhcyMgmWjLiN1VsKWj5mMEgTJmuuspU+kGp1CjHdzO6+sdRX inIIZLW2/VuOCMW5l3ywqIojwyrcfkEuhUb/YrX0tILRt3mPdcHWiaOC2gEqVHox H6FomAuvM68Dm222Y3NzFq260eO+M5JGy4/WfgNXlRaRdjab+uuhrow9ZOyB7XSL mtYWFZq8KYpa6g== -----END CERTIFICATE-----Generated at Wed Oct 21 15:29:35 2026 by rpki-client