$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft File: E9rSS2ZH6yz6hzmJxtZtF060tYY.mft (raw, json) Hash identifier: kAX4cyZeUq4Q6XPl5R/wStn520T3Hv62rIGFI9q5c3s= Subject key identifier: 54:51:01:4A:98:0D:16:37:1A:91:21:81:EB:7C:DB:11:3C:3A:0B:86 Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86 Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586 Certificate serial: 01A180E25E220E129AD4B84F27665791E5C4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft Manifest number: 024A Signing time: Wed 28 Oct 2026 05:01:21 +0000 Manifest this update: Wed 28 Oct 2026 05:01:21 +0000 Manifest next update: Thu 29 Oct 2026 05:01:21 +0000 Files and hashes: 1: 5FYGYJ3CTJgz_RO6RtjrvdukztM.roa (hash: WXX9l7hN5GLWTcdL5pzYOVjuzZXZGjSqNLVxArCt+5I=) 2: E9rSS2ZH6yz6hzmJxtZtF060tYY.crl (hash: cmTtwMmZgtOy5pymijhkcvIc4cWs9XneMN43KcIxync=) 3: EU6S0HJNgtU92lCj2E5oAPOEdLs.roa (hash: 1lpHBr2sLsew7tFbnn94rLgLk3IsikjEq2tOn5QLKjw=) 4: MDPAodA0zvA2NWT7ER8dOVR7L88.roa (hash: mJmiRwrgZ5I3NJ+cWSYWfQPR/ysaLHDjUSeXrv0sX/Y=) 5: Qr5qE2EeMQkBy4I0MKCxcpMYmeM.roa (hash: RxWJb3HtMuuduyuTqV0pj6pfd7z399ArrKooXX89gEk=) 6: TOpSp8N8inyCCRSUbFq7bgDiwZI.roa (hash: FJio1I2qAIA9DwKgU1NmquliJzX0e/Kc95cX9EOp7Z4=) 7: hOGDR0EybYX5uiEIH4dx1wBVH0I.roa (hash: YqwjG2i8QtY5ZfAttTtEJOybBG61FVR5wpzHYZpRL/g=) 8: iSf997NNJbBFrB2Dk5mtSCF3id0.roa (hash: dPnzagf+OCQ9AR2sHjTmpyUsCaO3AH672nyGNXGUzjQ=) 9: lBW5YHPb8dUMIQp7Ni-iMJP_E4Y.roa (hash: cbZo3D7fpp0X2deua8SfRD7Y1+8SplMIfDE6x9KtmDE=) 10: nN1d5gRxaC1NUa0ANS_c2GlfNjo.roa (hash: zr2jt+oFWWXFMtHZP/JLLBKI9OUsDRICVpqyfAKlfc8=) 11: pdMhOaLeRonp7wCiwxqXQZvCAZI.roa (hash: RRrhsf4B191wjXJbfTsj+p0cJwZkT97ZpqaBwHuPBfg=) 12: q9AZ9P7QUfekPrQysKLIfDnMJbU.roa (hash: LLX9K9xCwxCQlj+HJY24QlDZarm7oVsZ3lkpY8WxkSM=) 13: uNi1GWE-vm98aOz8PbUTScKWUd0.roa (hash: 2DDJ/sYmsUqQUvarD2q6Qibfp+tAmVVdlr8pKbLjGSg=) 14: yRZVehU6pPF-e8bf4h76KS5NUpg.roa (hash: kz7zsud3YYXglVH2w964aIAQdIKUpEdRIscf5oZrTlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 05:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:80:e2:5e:22:0e:12:9a:d4:b8:4f:27:66:57:91:e5:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586 Validity Not Before: Oct 28 05:01:21 2026 GMT Not After : Oct 29 05:01:21 2026 GMT Subject: CN=5451014a980d16371a912181eb7cdb113c3a0b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5a:07:e0:48:d7:ed:f4:48:26:60:6b:96:6c: 25:2a:fc:1b:31:b7:90:d1:6a:cd:00:fa:1c:d2:fb: cb:ca:8a:41:bf:ca:01:57:f7:03:29:f0:d0:c5:68: 90:5d:24:ce:d0:5d:6b:35:0f:91:27:f9:6d:f7:48: 54:53:2e:61:5b:8e:4a:2f:a2:0a:ea:d6:dc:23:a0: 3f:c1:eb:5f:71:37:23:ba:08:ed:17:a8:4a:89:d3: b5:98:db:e4:5e:35:e5:b8:a6:ef:24:3d:4f:e8:b2: 4c:1d:e3:08:69:2e:ec:11:4b:1a:c7:1b:18:c2:48: 5f:f1:aa:16:98:34:89:0d:e3:76:b2:df:ad:a2:e4: 8d:7d:f8:e1:a9:7c:97:3a:69:1a:ca:97:68:ef:bc: 22:2b:78:7a:87:31:1f:74:3f:7e:b4:11:7f:9a:d1: 7b:76:61:53:e1:8a:bd:bf:b9:ec:d5:f5:2c:5e:8b: a1:d2:e8:1f:d8:8c:fc:98:1d:c7:2b:42:8a:c1:96: 0d:ca:60:f4:d3:bc:6b:1c:4e:d8:02:3a:4f:09:4b: 28:cf:51:34:8d:6b:d1:c4:ce:bc:45:6b:95:03:68: 2f:c6:fc:83:5c:27:56:41:6f:9a:df:d5:b9:1e:4c: 25:fe:5b:0d:45:54:3b:ab:93:2c:35:8f:48:8d:6a: a7:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:51:01:4A:98:0D:16:37:1A:91:21:81:EB:7C:DB:11:3C:3A:0B:86 X509v3 Authority Key Identifier: keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e5:07:fe:9d:d3:3a:59:d4:db:aa:25:6e:a5:72:50:9f:85: cd:f9:12:39:91:bc:52:57:73:7f:57:3d:98:ed:27:cf:7e:7a: 4a:55:1f:ce:9b:be:ad:22:8a:8a:18:b3:b7:40:07:c3:8c:b2: 08:82:b1:84:d8:e3:90:93:15:7c:c6:99:3c:06:3b:f4:d9:18: 00:58:82:7d:73:4e:1c:1f:db:c1:f2:ab:87:2b:0a:77:2b:45: 80:ea:69:45:e2:4d:2d:d8:32:fe:50:b1:32:9e:17:9a:8c:8e: ee:36:9e:5c:09:f9:d4:02:62:08:e6:39:3f:63:3d:e5:48:03: f3:d6:8d:5c:28:b3:a8:18:52:93:29:ec:e5:b5:2c:54:32:e9: e5:fd:83:e6:73:e8:7e:e6:b0:f3:3f:f8:bb:66:3d:8d:dc:36: 0a:3a:fb:e5:e2:b6:9d:40:9e:4b:4e:18:ea:6b:00:23:92:b9: 35:1a:cb:67:83:8a:6f:60:e1:fc:b2:3b:49:7d:b8:ea:0d:ef: 9e:21:bf:ed:5d:7c:11:55:d9:59:9c:d7:85:8a:dd:f1:c8:09: 62:68:3f:c4:ad:16:b6:60:a5:48:60:df:93:9f:e4:42:fd:59: f7:25:80:94:56:a2:c4:08:a3:e9:99:da:fa:dd:36:26:e6:a6: 44:f2:ec:61 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGA4l4iDhKa1LhPJ2ZXkeXEMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZGFkMjRiNjY0N2ViMmNmYTg3Mzk4OWM2ZDY2ZDE3NGVi NGI1ODYwHhcNMjYxMDI4MDUwMTIxWhcNMjYxMDI5MDUwMTIxWjAzMTEwLwYDVQQD Eyg1NDUxMDE0YTk4MGQxNjM3MWE5MTIxODFlYjdjZGIxMTNjM2EwYjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1oH4EjX7fRIJmBrlmwlKvwbMbeQ 0WrNAPoc0vvLyopBv8oBV/cDKfDQxWiQXSTO0F1rNQ+RJ/lt90hUUy5hW45KL6IK 6tbcI6A/wetfcTcjugjtF6hKidO1mNvkXjXluKbvJD1P6LJMHeMIaS7sEUsaxxsY wkhf8aoWmDSJDeN2st+touSNffjhqXyXOmkaypdo77wiK3h6hzEfdD9+tBF/mtF7 dmFT4Yq9v7ns1fUsXouh0ugf2Iz8mB3HK0KKwZYNymD007xrHE7YAjpPCUsoz1E0 jWvRxM68RWuVA2gvxvyDXCdWQW+a39W5Hkwl/lsNRVQ7q5MsNY9IjWqnfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFRRAUqYDRY3GpEhget82xE8OguGMB8GA1UdIwQY MBaAFBPa0ktmR+ss+oc5icbWbRdOtLWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMt MWFhNmZlNDA2YTU4LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMtMWFhNmZlNDA2YTU4 LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOUH/p3T OlnU26olbqVyUJ+FzfkSOZG8Uldzf1c9mO0nz356SlUfzpu+rSKKihizt0AHw4yy CIKxhNjjkJMVfMaZPAY79NkYAFiCfXNOHB/bwfKrhysKdytFgOppReJNLdgy/lCx Mp4XmoyO7jaeXAn51AJiCOY5P2M95UgD89aNXCizqBhSkyns5bUsVDLp5f2D5nPo fuaw8z/4u2Y9jdw2Cjr75eK2nUCeS04Y6msAI5K5NRrLZ4OKb2Dh/LI7SX246g3v niG/7V18EVXZWZzXhYrd8cgJYmg/xK0WtmClSGDfk5/kQv1Z9yWAlFaixAij6Zna +t02JuamRPLsYQ== -----END CERTIFICATE-----Generated at Wed Oct 28 14:34:28 2026 by rpki-client