$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: qvPdcWRimL9ofF6kfNxdYDT/9t+C1yDEwFElGpq5mGI= Subject key identifier: 8E:A8:A7:C5:C0:6E:AB:91:EF:7A:60:3B:6E:04:F1:64:98:B4:E6:37 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 01A18074222124EA97056C45A7DCAA8CE74A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 100A Signing time: Wed 28 Oct 2026 03:00:56 +0000 Manifest this update: Wed 28 Oct 2026 03:00:56 +0000 Manifest next update: Thu 29 Oct 2026 03:00:56 +0000 Files and hashes: 1: 1raBdrG8cJ9Bp5UTf1-3ySXpvNU.roa (hash: nidyHf42+8qviczWax8TG8WbQgA/HNtQCPEG+F+WBIY=) 2: 2kDI2fX-vOvB11NNeAS3cg-93eM.asa (hash: NA7gOR6dP2dN+8of3Z/jNBI4ucvB9u9QIPByWzroYZo=) 3: 4p-Cm-GajEDg95U2oK6uzfsp0JU.asa (hash: 5kxjukz9UrNDQRzs1WDtvD2HHIl/VN2fV1l1vptM11w=) 4: D20r0Dc3ziO-pvHNC0RCH6WWn4M.asa (hash: iaKS5DFhrhjGhN9Po/Gl1SfI1i51StPCSZ9Lx4T3V/o=) 5: JLWdtgjMTs_4Sq7DTqKgddlwfrY.asa (hash: 9mBXiLiJ86zw/4udWl2MUcosM1kylDDeUDtsF/0LHfI=) 6: KeXwRGdfZ0moU2iD3Q2mbtR6C3k.asa (hash: kKAEUwnnTtlt/PROwq+dzQgzZQgqzq3CPnTsKxDqyks=) 7: L2QCsrjPe2KM3zZLG_j-necXdRQ.asa (hash: WdEBpYb6JsNA+UMdvTX09oNiIH0VyRdO15C/0tlTHTA=) 8: OGZW3EGUH5W_Sl4Rah9ArDm_EJo.asa (hash: q8G/683GpwIgrnSyD7lVID7X1jS34HiXZGHtfK+B8v4=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: bqKa0YRsYxH7tFUT4rHgcN42asw.roa (hash: 8oWhUO/dKOps3lszSUNTka8Z4cLC6TKDR/CwR798z8A=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: p5zNzQPaIB94IBWFj0Evjw09b6Y.asa (hash: eOPidDTFtzDIvGAErv5iz3BORzDmQalbdnPuHerit6s=) 13: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: BhMkIG3OOpQaSgftIqyK0ZFVKyv3JZkIS7IdS9ddf2s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 03:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:80:74:22:21:24:ea:97:05:6c:45:a7:dc:aa:8c:e7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Oct 28 03:00:56 2026 GMT Not After : Oct 29 03:00:56 2026 GMT Subject: CN=8ea8a7c5c06eab91ef7a603b6e04f16498b4e637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:71:3a:fd:7e:87:28:db:42:ad:31:43:cb:3e: 7e:9c:27:bd:f3:3c:27:ca:6d:0d:59:d9:d5:a2:2d: c2:83:09:b9:ea:e8:63:d8:29:43:ef:34:7d:d3:4d: 75:05:43:1e:91:2d:b6:aa:38:88:d5:d8:52:34:30: 95:10:a0:9e:0b:54:b2:95:46:77:85:8c:13:90:95: db:1b:85:81:59:e5:32:e6:ce:62:1e:95:ca:51:58: bd:b4:d3:2c:44:2a:a7:64:bb:22:bf:aa:b7:52:3f: 5e:ee:04:83:11:eb:2b:52:a4:38:8f:e2:ff:88:b0: 77:48:8b:fc:05:f4:ad:8b:d1:57:ad:ec:ba:2f:3a: 30:96:cc:10:e0:c8:fa:68:c1:1a:ae:de:5c:3a:04: ce:f5:94:41:24:b5:79:88:72:cd:83:46:76:55:6b: a5:de:9b:25:46:34:bc:24:1d:ee:0c:d2:0f:c0:ad: 59:e6:bf:aa:6c:b0:6d:33:79:e6:98:53:0d:f9:b1: 24:97:c5:b8:b1:ba:10:21:7c:24:ec:f7:23:c8:0b: 40:99:22:f7:a9:d7:36:f9:3e:23:5a:bb:bd:0f:e9: 75:a3:b9:71:b9:01:de:f7:bb:f7:a2:94:0b:67:ec: 83:69:b8:da:09:bc:c5:f7:cd:0b:b5:da:e8:17:12: c3:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A8:A7:C5:C0:6E:AB:91:EF:7A:60:3B:6E:04:F1:64:98:B4:E6:37 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:08:a2:fd:89:08:19:39:b7:c1:ea:14:9e:cc:7d:6d:d1:55: e0:47:e2:6e:52:07:c2:23:b6:a1:c0:f4:e8:3c:84:2e:16:81: 52:df:36:cc:14:fe:e3:31:23:e3:ad:3e:6d:ae:a1:b6:78:51: b0:65:68:cf:53:10:ca:df:6a:43:28:2f:87:8a:07:d2:a1:d7: af:83:a3:28:18:a6:62:a0:c2:a3:f3:45:c7:8d:3c:2c:43:24: d1:fd:3f:ca:6a:15:cc:1d:49:13:de:1e:fc:e2:8d:ad:98:2b: b2:fc:46:28:c6:b2:39:60:a6:a4:f1:e2:af:00:e1:f3:0e:74: e8:1c:78:59:db:97:99:56:eb:59:ed:f6:4c:78:fc:4c:b4:8d: 3a:3f:1a:82:81:d8:3d:64:9c:c9:6a:81:da:cf:ac:ea:e3:07: 85:70:bc:6c:48:d9:36:02:50:cd:6a:6c:ee:d3:92:1c:51:5e: fc:60:7f:55:1d:9f:61:17:e6:cc:c1:14:cf:7d:e5:d5:6a:c5: 91:ce:71:4a:36:c3:77:e9:0a:f6:ec:3e:90:9b:14:54:60:4b: 4a:6e:7f:7c:2b:05:d9:0a:5c:7a:2b:b3:04:21:11:57:ae:06: cc:54:93:f6:3e:9b:22:9f:7c:fd:40:a7:3e:b2:60:56:8a:59: 32:44:8f:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGAdCIhJOqXBWxFp9yqjOdKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYxMDI4MDMwMDU2WhcNMjYxMDI5MDMwMDU2WjAzMTEwLwYDVQQD Eyg4ZWE4YTdjNWMwNmVhYjkxZWY3YTYwM2I2ZTA0ZjE2NDk4YjRlNjM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXE6/X6HKNtCrTFDyz5+nCe98zwn ym0NWdnVoi3Cgwm56uhj2ClD7zR90011BUMekS22qjiI1dhSNDCVEKCeC1SylUZ3 hYwTkJXbG4WBWeUy5s5iHpXKUVi9tNMsRCqnZLsiv6q3Uj9e7gSDEesrUqQ4j+L/ iLB3SIv8BfSti9FXrey6LzowlswQ4Mj6aMEart5cOgTO9ZRBJLV5iHLNg0Z2VWul 3pslRjS8JB3uDNIPwK1Z5r+qbLBtM3nmmFMN+bEkl8W4sboQIXwk7PcjyAtAmSL3 qdc2+T4jWru9D+l1o7lxuQHe97v3opQLZ+yDabjaCbzF980LtdroFxLDKwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI6op8XAbquR73pgO24E8WSYtOY3MB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADgii/YkI GTm3weoUnsx9bdFV4EfiblIHwiO2ocD06DyELhaBUt82zBT+4zEj460+ba6htnhR sGVoz1MQyt9qQygvh4oH0qHXr4OjKBimYqDCo/NFx408LEMk0f0/ymoVzB1JE94e /OKNrZgrsvxGKMayOWCmpPHirwDh8w506Bx4WduXmVbrWe32THj8TLSNOj8agoHY PWScyWqB2s+s6uMHhXC8bEjZNgJQzWps7tOSHFFe/GB/VR2fYRfmzMEUz33l1WrF kc5xSjbDd+kK9uw+kJsUVGBLSm5/fCsF2QpceiuzBCERV64GzFST9j6bIp98/UCn PrJgVopZMkSP7Q== -----END CERTIFICATE-----Generated at Wed Oct 28 11:12:32 2026 by rpki-client