$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft File: 0he0cshBwdaFUKJPGTbSnMbCj2o.mft (raw, json) Hash identifier: 2j4C+t6DpSbfjnJZ4Q1G+Pd7YDyW+9SHG1fmat9Av08= Subject key identifier: 39:9B:78:C2:D6:8B:51:12:A1:7C:20:E5:A9:2E:A8:B4:5C:F7:02:77 Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Certificate serial: 01A1754B568AB0F186DEA11625189C97A19E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft Manifest number: 1B65 Signing time: Sun 25 Oct 2026 23:00:33 +0000 Manifest this update: Sun 25 Oct 2026 23:00:33 +0000 Manifest next update: Mon 26 Oct 2026 23:00:33 +0000 Files and hashes: 1: 0he0cshBwdaFUKJPGTbSnMbCj2o.crl (hash: 01+t4MC997nwM6Lb51a4zOhzrs0VaoDcWA56vN9F4bI=) 2: 0iUac0rgXXVeEnzgpmlncnP6J7A.roa (hash: pJm/09sBcpwkBBNhMGKgvxY4DgQfAaVJE+58JbVydFs=) 3: 0kVXTn66Mtlf76A6nH6OjV0ZAAg.roa (hash: hsCct6Bm9GJGzPIr8YO6/TTqqk2WwbfoXzf25mYX8LM=) 4: 0pDTo0pK-SMCTvHVR2ZvVFXP1n0.roa (hash: 0CuBOCMBUHwefSKC6rJ7TVbTe9+CIYz6zckDDaoI2+0=) 5: 0uMxw0si97T8YlWYIJYxugGgZmY.roa (hash: wPw5NhAIeOfbu7J12i+BnkyVC1+Fh5jMSso4AuiwRQw=) 6: 3geV6AQmnNE3--gs3xHupJZtVFw.roa (hash: sNT96XO64aXnjNnHk7Dhs9S+Zq3PRzmgEqOTblaXNls=) 7: 4zRSOXGcMPUBw4LqLq1hTMnBjD4.roa (hash: ds1GzGRk8zHZrKe7fQIg55y7rMi/q3VJGCHKUXPIksM=) 8: 5oJe3NgYCHZzI_8duCSrlh7Oels.roa (hash: aqfo7mdVNrHB+M6dowHgwIfcUuoyLjguEJ+822pHW/o=) 9: 6Ak1AgtTDmA1U2eZgVepjCNUuTk.roa (hash: 3DXmAuUNmkvABzc/lFpmAfB4jeIAMkPtZrwmxzGH7Ho=) 10: 6r4pRjuoYdc7x18_dB54Wore8SE.roa (hash: qEmH/rqx/kli2inXqR8O2njpqnVjvW/Xl9v7ffOPyYs=) 11: 9t-jmSES2Q3IojJbCwlN6006UGs.roa (hash: YQi1CApMMFddBHxZKrqbOI7bEV+5VzN2/VlTY2/zM2U=) 12: AceZ4ztMUcivJ_xyIQMtsPiEJ1o.roa (hash: t7OKP7yRyZbDYbA9pwMd+wM9Kk3yWygSaa0Xg3XD4EU=) 13: CEmMiPUzJv8ra3rhxc7TeX483p4.roa (hash: n6myg+0GCjckHUIb/SW7z/7LWJpqQywanjkUoR/K+nM=) 14: ESthSZtxPiTKHLF_RbKMrDbOe-Q.roa (hash: dIbh8TfwS7S2uYBff8Ic7aOyQ8MQBSDNQTSA81/8m50=) 15: F-HaW_xvZre_0uYFdAKqHD7Xf04.roa (hash: qFin9llDtLA+WnW1llLaR3VwXh5S7sUwXGcgGcJWszs=) 16: F5RZYJk-5VMxs0EMgIcqj1TaI9s.roa (hash: uzDB2dl0AkdDkTc/vHCDi1fsal/DPTgfPRRQCsLYWcM=) 17: G39nMRFlOgx0uzYl4UL3EQXfT3g.roa (hash: Q/LCuIjLRBmlSClFChl6nexkZzkyeI3jhCJFJWlP4E8=) 18: HKMxKsX10GUPJzo_jhhQV7u5Ihs.roa (hash: DFjq7lNI6Yd1N1gW4xnOFUz4tDBSGwod1RBPK2rC/V8=) 19: IQVeBT9K0YNFY4Ka5sf1aBJpr-A.roa (hash: 9Ggm4hjT3iI5+rIEGghJJv6NR/jwkhK0QjRLFWx7uvA=) 20: Nge12cx3-rmdpOzAYO1Z3ywrG1g.roa (hash: OXOx6e9ueji1qy3RcI1OgwIcnaUEfUTAxHsXQUob3wg=) 21: NhizW-ek-7aBlPA-k4gKD6nEmiM.roa (hash: RyGmgOgA3HoLOtCbkKTtGrQGGeDOxSawDRY04RL9fa8=) 22: Sz8lUlwp2Rw_e_O5bIinLYBtbDY.roa (hash: F3yScYj/FLGcvxBW6+hv9GizuArl2qKPP/OXb60RNhc=) 23: TiIIkM24OMjRaqV6ybZpIUVQ66Y.roa (hash: LTFWWkc5YA349zEeIQtWPsYJfmBWjIktxqh9j5fLaV8=) 24: TuQaZEtm0Cv9nZn9DPQMJ-cWjng.roa (hash: NfGQV0w2NrKuCDBYh8BTGcuaN+vS+BkQbBEzbEPcWN0=) 25: U8rAFRHUTCCeFS0o_q6-NxA38PI.roa (hash: 5JIclCt6zLru81U89z+ta1UW2nK3O+vE8QaUk7gij3o=) 26: XNdh_7iXFteUhdTSauAzw8Uzsic.roa (hash: Is7nAY4phsaI02dTDHxcL61wtBa88W43wtk4lrRcslk=) 27: bSi9XbHbnsgk9Rn6KkRkfqPLDcs.roa (hash: KB/fl6WMyAzhQEzboDVdhsKXiELfb3XrAtV6aiw8SbY=) 28: blomw02wGyTrJLzu6UYK2TZqpNo.roa (hash: mtVy/xrFi3IoiIKirk7sDvLbI1ptAVGYFzybXJ7+jhM=) 29: kTBqn1AXF810Aup86JvGCWPm7_g.roa (hash: cBtmgGsVCDv8D8PtE9jbpomYSfhNUXT2/T3zZ8+6zYY=) 30: lHWoX5jAJuLVN2VNAVfem0Cv6lI.roa (hash: w4LQYAlFsdEuBvJSJMls0bnXVF3zFsJEDmmNiiM8xt8=) 31: lZHttcoOJn14Hz_IeffOozmfqpU.roa (hash: d0QBosdCVcF++UQrFXemVV8MKw1oUiL4VnuYs8bVMRM=) 32: qbU5qx8h-KkwU_vVYSP4LMd8i8I.roa (hash: RwOUvbFFfjuDTqYAdK3ZMRhTqad7P5kop2zd7cXTDtg=) 33: r8K_aYEH4yQBoFIfHs8TuNjfWTs.roa (hash: 7f8KKkVXMXppXKOni8U2Lgw3TNTx/F0QplvAHOQbXss=) 34: sx4DXqOaWYrVqL4vwLEPB0KvXvw.roa (hash: Bv2hEXT7mBTQKEaFM2E3Aa3ZklZIDA/kTRytrL3j4+I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 23:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:75:4b:56:8a:b0:f1:86:de:a1:16:25:18:9c:97:a1:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a Validity Not Before: Oct 25 23:00:33 2026 GMT Not After : Oct 26 23:00:33 2026 GMT Subject: CN=399b78c2d68b5112a17c20e5a92ea8b45cf70277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:22:00:c7:0d:e8:3c:d1:e9:de:32:25:83:f4: fc:41:57:c4:43:91:5c:43:8c:90:90:ac:50:8b:29: 00:b5:6d:07:a2:cf:03:f1:b6:6c:9d:9b:2a:8d:50: bd:b0:31:67:b2:82:e3:6a:cb:41:3f:6c:90:1b:1d: f8:6a:f2:7f:19:86:4c:18:fe:6b:33:14:6a:b9:e3: 0a:74:e6:cb:f8:3a:00:c3:53:6b:ff:82:b1:bb:ab: 47:fc:1c:c5:9d:60:e8:15:18:00:69:f7:d6:8e:fc: 29:95:28:0e:cf:34:cd:48:17:77:6c:89:76:01:ac: c9:bb:08:01:ae:36:50:bc:16:9e:0b:83:d3:7e:0a: 8e:bd:a5:37:79:5d:30:ed:5a:f9:61:8d:bf:4f:eb: 69:c3:a3:5c:25:39:6a:e3:46:76:d5:28:9a:87:88: 72:4e:f6:79:9d:3f:67:a7:53:cc:6a:6b:a4:7b:f7: e1:44:7f:12:46:7d:2e:f1:20:d5:68:df:9b:bc:fa: 65:22:05:67:fb:bd:b6:16:26:ff:4e:e9:74:bb:28: d4:29:ff:3f:2c:68:2b:24:f1:a1:af:75:c5:bf:14: b6:e1:dd:21:17:c2:40:c8:5d:c7:9a:0e:64:fa:bb: 7c:ce:85:c8:6d:b0:c5:7d:00:cc:01:52:0d:11:51: d5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:9B:78:C2:D6:8B:51:12:A1:7C:20:E5:A9:2E:A8:B4:5C:F7:02:77 X509v3 Authority Key Identifier: keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b8:1a:bd:63:09:a7:05:5d:7b:81:86:ce:ef:74:14:4f:e3: 70:b6:6d:7f:ac:1b:bc:a8:f9:e8:d9:88:20:89:0f:b3:ef:92: 83:ad:70:c1:fc:ca:c0:53:b0:75:06:e1:a5:e1:52:ba:a3:a2: 09:44:d9:44:d9:24:5c:ea:6f:1f:be:63:04:07:cf:6a:fa:34: db:04:cc:7d:74:e8:a7:5f:9d:80:55:28:eb:cf:5d:30:74:a9: 48:08:c1:cd:6d:28:37:96:b1:9b:6f:ab:0b:9f:7c:99:e3:cf: 08:7a:ca:95:40:39:6d:43:ef:2c:19:c4:d3:aa:7d:78:6b:34: 31:6f:66:bf:db:67:44:c7:d2:d9:df:f4:ee:95:ee:d4:e8:5b: e7:a9:58:74:56:ef:e7:17:e0:ab:6d:3a:56:89:60:65:39:5e: ca:36:ff:7f:38:c9:01:cc:57:46:55:fc:bb:9b:87:25:8e:0a: b7:18:50:77:7b:f1:4e:92:e2:60:d1:3c:a5:25:ba:01:cd:f8: bf:59:b0:74:fa:7b:6d:0d:06:93:f8:5a:e6:ee:1a:a2:b8:56: 16:fc:74:aa:e1:0e:6e:df:4d:d5:7d:1c:66:37:46:10:9a:1b: e1:24:68:36:d8:e5:4d:0b:4e:66:4e:65:a5:1e:4b:38:a2:9d: 88:dc:ad:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF1S1aKsPGG3qEWJRicl6GeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQyMTdiNDcyYzg0MWMxZDY4NTUwYTI0ZjE5MzZkMjljYzZj MjhmNmEwHhcNMjYxMDI1MjMwMDMzWhcNMjYxMDI2MjMwMDMzWjAzMTEwLwYDVQQD EygzOTliNzhjMmQ2OGI1MTEyYTE3YzIwZTVhOTJlYThiNDVjZjcwMjc3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSIAxw3oPNHp3jIlg/T8QVfEQ5Fc Q4yQkKxQiykAtW0Hos8D8bZsnZsqjVC9sDFnsoLjastBP2yQGx34avJ/GYZMGP5r MxRqueMKdObL+DoAw1Nr/4Kxu6tH/BzFnWDoFRgAaffWjvwplSgOzzTNSBd3bIl2 AazJuwgBrjZQvBaeC4PTfgqOvaU3eV0w7Vr5YY2/T+tpw6NcJTlq40Z21Siah4hy TvZ5nT9np1PMamuke/fhRH8SRn0u8SDVaN+bvPplIgVn+722Fib/Tul0uyjUKf8/ LGgrJPGhr3XFvxS24d0hF8JAyF3Hmg5k+rt8zoXIbbDFfQDMAVINEVHVOwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDmbeMLWi1ESoXwg5akuqLRc9wJ3MB8GA1UdIwQY MBaAFNIXtHLIQcHWhVCiTxk20pzGwo9qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGIt YjM4ZTI2NzdiM2RjLzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xMC8yOTBlNDQtYjQ3OS00NmNmLWFiNGItYjM4ZTI2NzdiM2Rj LzEvMGhlMGNzaEJ3ZGFGVUtKUEdUYlNuTWJDajJvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLgavWMJ pwVde4GGzu90FE/jcLZtf6wbvKj56NmIIIkPs++Sg61wwfzKwFOwdQbhpeFSuqOi CUTZRNkkXOpvH75jBAfPavo02wTMfXTop1+dgFUo689dMHSpSAjBzW0oN5axm2+r C598mePPCHrKlUA5bUPvLBnE06p9eGs0MW9mv9tnRMfS2d/07pXu1Ohb56lYdFbv 5xfgq206VolgZTleyjb/fzjJAcxXRlX8u5uHJY4KtxhQd3vxTpLiYNE8pSW6Ac34 v1mwdPp7bQ0Gk/ha5u4aorhWFvx0quEObt9N1X0cZjdGEJob4SRoNtjlTQtOZk5l pR5LOKKdiNytqw== -----END CERTIFICATE-----Generated at Mon Oct 26 08:29:08 2026 by rpki-client