$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: 2o1HZhoQPK0JEjf8Y3pAWLxIQHZ3w5J6PT4/0jppOQ8= Subject key identifier: 94:2B:41:B2:DF:70:01:03:0A:D8:39:93:B7:ED:1F:26:44:EF:94:D7 Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 01A17BBB7DE0431DF5AF2E4E9B52DB89473D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 1133 Signing time: Tue 27 Oct 2026 05:00:47 +0000 Manifest this update: Tue 27 Oct 2026 05:00:47 +0000 Manifest next update: Wed 28 Oct 2026 05:00:47 +0000 Files and hashes: 1: 2wyh_QhMgMqC_O4n1IvcnhHRGBk.roa (hash: ao/nwpiJU1qsY5iD/g3xyfwFgyAPEV6fkSVForiTS1k=) 2: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: ajZzSsKN1yte9qUjZ8h17ZmadrkcAOb7kQ9pgVQb50A=) 3: AWPFncfASof9UmgtmKs0YN8cliQ.roa (hash: zAYTVAVDS4Q8gNGe9Fxy0r6yVBNDTEzr7ZcSBy05V4Y=) 4: BttxBx4dfAf29J8yh5S2WluUv68.roa (hash: PIfAFVX85NBU4n/JYCKP96AK8QFT1DZ/mkNh53GIT7w=) 5: Cbwy7ZTHRdEOY7GRBfFj_luZf7c.roa (hash: 35gqWtEcP4/HxKKbREK7gqnsXOG4vXjbmy1ljsXsfXo=) 6: Cdey4x25Y71jAjsi-w5ror1Em9w.roa (hash: 9Nkc6pZ1LY8cZ4nIVazJu4RFkDfce5y0UNDPuC2XOUU=) 7: Fu5kT9TxojjMx5c9WVqjL4KHnHY.roa (hash: OkWCwFJEccvJXScWm+KM/QkYp8L4OehLKl/qIjl3hPk=) 8: HV2EMgnuAtaqMPLEmHXYarCVNpI.roa (hash: kJvWjQO6p4obvK17uUJOQOaQMh6VU7iH+I1+ZH63XpI=) 9: Q03PdSGrQJ1a3WGfZ-bc5I0qaws.roa (hash: 2OnqRPuaN0v+Zan9ND6ygbAA1lh/p4DcTNqdYBIoSGo=) 10: RUzsZjQOmWwABCIUkcshejkaol8.roa (hash: RBKNBE9V3LhFEz+JeieM4xs1FwZeU1f7a5C0ApeFYFE=) 11: U0sKMofxXdVOw-0XJTrnhs5_ivw.roa (hash: 2ArYsgltaFdadzwNfrDc7gLpkClQBPjzaHH3uLWf38s=) 12: dXpQm6W-fzeDoM6ANaDna4LeJJw.roa (hash: X+KL+RuBzuWO/Tf7EZrDXYxpoc28BH51yAUJezDMoh8=) 13: q6_QV7_dR_nUmUjkdnn1Ol_C4hk.roa (hash: e/CCQvEkZLvzTnUS4WnPQ1yCXPvY5eeas48ASlaEDPU=) 14: s9p2C__iZ2J7toPup5hH5iFxnWE.roa (hash: Wwc9AFxmcmbtflqnqTZJb0CV5saV+p6mA6lZ1ZeqouY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7b:bb:7d:e0:43:1d:f5:af:2e:4e:9b:52:db:89:47:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Oct 27 05:00:47 2026 GMT Not After : Oct 28 05:00:47 2026 GMT Subject: CN=942b41b2df7001030ad83993b7ed1f2644ef94d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:98:5d:29:25:61:c9:23:2c:46:42:a5:e0:5c: 26:cd:26:9b:15:f9:03:4b:d0:7b:ce:b2:c0:f2:91: d5:ab:89:7b:71:7b:6e:8d:34:c0:92:7b:d5:f6:d2: d4:56:75:06:b3:c1:1e:3a:c1:db:02:fb:97:78:21: f6:2a:f4:99:26:7d:cb:d8:e7:ec:d2:b7:4e:d4:58: f2:64:bc:b6:20:66:f5:1e:75:50:90:ff:b4:e7:48: 7c:ff:4b:f0:7d:95:d0:50:a0:30:24:22:4c:ca:b5: d7:7c:2e:2a:b2:c4:01:42:eb:da:8a:b2:bc:f3:5d: c7:39:36:b1:e3:94:da:19:20:bd:1d:40:2a:d1:c4: 1b:5e:b3:a6:6c:a9:bb:ed:9c:9c:49:ed:e3:06:5f: f0:98:c7:71:df:67:3d:bf:b1:a2:13:37:64:91:1a: 71:82:2e:48:ce:a3:29:57:c3:e0:8f:8c:96:ec:04: ee:5a:44:a7:e3:1b:d4:1c:0d:de:20:11:88:b7:86: 63:f6:d8:5e:a3:ba:e4:a0:09:9a:78:ce:85:a2:c7: b2:b9:a5:e3:a4:2a:8f:b6:1c:84:22:f1:96:d3:91: 00:9e:32:f7:5c:56:79:8b:83:a8:99:52:48:2b:58: 7e:f9:b8:35:6c:22:f9:e6:4a:25:1b:fe:c9:bb:82: fd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:2B:41:B2:DF:70:01:03:0A:D8:39:93:B7:ED:1F:26:44:EF:94:D7 X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:1b:bc:39:00:4f:3d:36:d8:d3:48:01:3f:42:f2:bb:c9:bc: 06:35:63:07:90:45:06:74:45:93:24:86:85:c4:34:f6:84:e6: 67:9f:80:ad:e6:9e:86:19:ee:92:e7:57:01:e5:17:0b:6e:61: 79:69:cc:3c:0c:32:aa:34:46:50:29:77:2b:6e:f3:2d:17:af: fb:9f:20:6e:0e:ad:0a:9a:4a:3c:4a:28:fd:ce:5f:b0:2a:47: 38:03:72:c6:46:86:72:79:65:d0:ac:c0:eb:e8:b0:6e:5e:00: 12:d5:1d:f1:59:4b:73:2c:56:62:c5:78:13:85:a2:e9:74:60: a7:3b:5f:91:46:4d:84:4b:70:91:3d:8b:d2:d1:28:fb:30:99: 9d:32:54:74:ce:dc:eb:bd:ae:02:86:4c:e8:20:26:4d:ee:03: d1:2f:c4:83:61:e2:62:76:af:41:58:e6:c1:4e:1f:f6:c2:16: 52:8a:9a:8a:c2:79:39:5d:b3:28:1f:6e:90:71:0a:78:20:aa: 71:9e:76:59:c8:64:bb:5e:9e:c6:78:d1:14:c9:50:b2:a5:25: ed:1b:16:12:3f:57:f3:ee:ab:9d:31:fd:b7:8a:c4:f6:33:86: 2d:dd:eb:6e:d1:06:5d:a9:51:a0:19:cb:e4:3b:2c:40:a8:d0: 3f:88:94:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF7u33gQx31ry5Om1LbiUc9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjYxMDI3MDUwMDQ3WhcNMjYxMDI4MDUwMDQ3WjAzMTEwLwYDVQQD Eyg5NDJiNDFiMmRmNzAwMTAzMGFkODM5OTNiN2VkMWYyNjQ0ZWY5NGQ3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJhdKSVhySMsRkKl4FwmzSabFfkD S9B7zrLA8pHVq4l7cXtujTTAknvV9tLUVnUGs8EeOsHbAvuXeCH2KvSZJn3L2Ofs 0rdO1FjyZLy2IGb1HnVQkP+050h8/0vwfZXQUKAwJCJMyrXXfC4qssQBQuvairK8 813HOTax45TaGSC9HUAq0cQbXrOmbKm77ZycSe3jBl/wmMdx32c9v7GiEzdkkRpx gi5IzqMpV8Pgj4yW7ATuWkSn4xvUHA3eIBGIt4Zj9theo7rkoAmaeM6FoseyuaXj pCqPthyEIvGW05EAnjL3XFZ5i4OomVJIK1h++bg1bCL55kolG/7Ju4L9FQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJQrQbLfcAEDCtg5k7ftHyZE75TXMB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhu8OQBP PTbY00gBP0Lyu8m8BjVjB5BFBnRFkySGhcQ09oTmZ5+AreaehhnukudXAeUXC25h eWnMPAwyqjRGUCl3K27zLRev+58gbg6tCppKPEoo/c5fsCpHOANyxkaGcnll0KzA 6+iwbl4AEtUd8VlLcyxWYsV4E4Wi6XRgpztfkUZNhEtwkT2L0tEo+zCZnTJUdM7c 672uAoZM6CAmTe4D0S/Eg2HiYnavQVjmwU4f9sIWUoqaisJ5OV2zKB9ukHEKeCCq cZ52Wchku16exnjRFMlQsqUl7RsWEj9X8+6rnTH9t4rE9jOGLd3rbtEGXalRoBnL 5DssQKjQP4iUPw== -----END CERTIFICATE-----Generated at Tue Oct 27 15:38:15 2026 by rpki-client