$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: CzsR7/8f2wwHchnVMmhMj2N/QqzOSRXy3vff/xeHUxw= Subject key identifier: 6B:BD:12:D7:7E:8B:7B:48:85:8B:87:AA:DF:B4:E0:1E:EB:BE:6B:A3 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 01A17E85A9BCCF72799729DA65022BCD3BB9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 1009 Signing time: Tue 27 Oct 2026 18:00:51 +0000 Manifest this update: Tue 27 Oct 2026 18:00:51 +0000 Manifest next update: Wed 28 Oct 2026 18:00:51 +0000 Files and hashes: 1: 1raBdrG8cJ9Bp5UTf1-3ySXpvNU.roa (hash: nidyHf42+8qviczWax8TG8WbQgA/HNtQCPEG+F+WBIY=) 2: 2kDI2fX-vOvB11NNeAS3cg-93eM.asa (hash: NA7gOR6dP2dN+8of3Z/jNBI4ucvB9u9QIPByWzroYZo=) 3: 4p-Cm-GajEDg95U2oK6uzfsp0JU.asa (hash: 5kxjukz9UrNDQRzs1WDtvD2HHIl/VN2fV1l1vptM11w=) 4: D20r0Dc3ziO-pvHNC0RCH6WWn4M.asa (hash: iaKS5DFhrhjGhN9Po/Gl1SfI1i51StPCSZ9Lx4T3V/o=) 5: JLWdtgjMTs_4Sq7DTqKgddlwfrY.asa (hash: 9mBXiLiJ86zw/4udWl2MUcosM1kylDDeUDtsF/0LHfI=) 6: KeXwRGdfZ0moU2iD3Q2mbtR6C3k.asa (hash: kKAEUwnnTtlt/PROwq+dzQgzZQgqzq3CPnTsKxDqyks=) 7: L2QCsrjPe2KM3zZLG_j-necXdRQ.asa (hash: WdEBpYb6JsNA+UMdvTX09oNiIH0VyRdO15C/0tlTHTA=) 8: OGZW3EGUH5W_Sl4Rah9ArDm_EJo.asa (hash: q8G/683GpwIgrnSyD7lVID7X1jS34HiXZGHtfK+B8v4=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: bqKa0YRsYxH7tFUT4rHgcN42asw.roa (hash: 8oWhUO/dKOps3lszSUNTka8Z4cLC6TKDR/CwR798z8A=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: p5zNzQPaIB94IBWFj0Evjw09b6Y.asa (hash: eOPidDTFtzDIvGAErv5iz3BORzDmQalbdnPuHerit6s=) 13: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: IBTG/LCieyh4Wsi6qs4/82IosTZhXpttMPJln4n8p/c=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7e:85:a9:bc:cf:72:79:97:29:da:65:02:2b:cd:3b:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Oct 27 18:00:51 2026 GMT Not After : Oct 28 18:00:51 2026 GMT Subject: CN=6bbd12d77e8b7b48858b87aadfb4e01eebbe6ba3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:b2:18:eb:bd:2d:d8:0b:97:40:1c:67:33:d8: ed:3e:f4:14:d8:09:0b:55:f6:f3:bd:ea:90:b7:77: 40:e8:e6:c5:21:67:bf:96:16:7f:87:ee:c5:0f:6c: 7b:30:bc:23:43:14:42:f2:34:47:e4:25:fd:60:26: a8:8b:4c:a6:45:3d:03:e0:3f:23:09:98:06:fa:aa: a4:e7:33:df:bd:4c:a3:28:9f:9b:e2:81:74:59:27: b7:54:02:18:f5:b8:ed:fb:de:79:c2:53:18:e0:0a: a1:82:5f:62:29:fc:64:c4:24:28:b2:c5:65:01:97: 4f:65:43:98:31:59:95:d3:bd:bf:77:60:8a:bf:c9: 35:04:61:e1:ba:66:41:ba:30:54:ab:c6:31:4b:71: 1b:f8:00:8c:4f:35:00:c6:5f:e0:70:a7:1e:f4:31: ec:49:5b:4c:d8:77:2c:2e:c3:21:5c:7b:26:6e:f2: a7:36:53:c2:34:57:a1:fa:56:b4:5a:04:ad:21:a8: 2e:17:24:bf:55:40:ce:d8:23:c4:55:35:43:62:03: ac:03:0d:1c:4e:41:66:29:8d:bd:8b:dd:2f:f7:b4: bf:e5:ab:b8:f4:1b:03:86:24:08:df:7a:a8:92:a5: ec:80:0f:f5:cd:d3:b5:16:a8:69:e4:93:bf:e7:20: d0:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:BD:12:D7:7E:8B:7B:48:85:8B:87:AA:DF:B4:E0:1E:EB:BE:6B:A3 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:32:81:a4:df:b2:f9:6c:49:c0:db:5e:81:b4:b7:43:fe:0e: 2c:ed:9b:fc:78:79:39:36:b4:bd:a9:aa:00:0a:72:b0:d4:f4: 42:b4:1c:d5:ef:2a:9a:0c:81:af:ec:8c:e7:6a:d7:1a:73:35: 40:a4:54:77:5c:c4:f4:62:24:03:a9:f4:b6:03:cc:52:50:8b: 3c:1d:7c:fa:e2:97:8c:38:32:50:1d:8d:1f:c6:b5:25:be:38: 98:dc:0f:95:a1:4f:b9:70:62:e2:65:fd:86:ee:ec:ac:48:36: 6c:2b:89:34:1d:e1:3e:2c:21:7f:c0:fe:02:79:ae:1b:07:9c: fb:82:5b:92:67:07:05:c3:23:6a:0e:60:96:4b:e6:0a:3b:f7: d6:4e:a8:ba:00:6f:5f:bd:01:01:db:e7:22:99:9f:7d:f0:65: 1d:d2:56:c7:ca:4c:8d:40:12:ef:2e:14:fe:3c:bc:83:d4:e5: 6c:bf:d6:53:67:1b:f7:93:fb:8c:5d:be:15:76:46:1c:bb:a0: 2b:2a:66:7c:81:92:e7:de:90:70:c9:31:d9:8c:e0:cf:f0:77: f5:45:0d:a9:58:48:a2:3e:72:9c:9a:27:4b:00:c6:17:35:56: 97:cc:87:07:44:8f:26:f9:d4:a3:c7:95:cc:a1:1c:37:48:be: 16:87:65:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF+ham8z3J5lynaZQIrzTu5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYxMDI3MTgwMDUxWhcNMjYxMDI4MTgwMDUxWjAzMTEwLwYDVQQD Eyg2YmJkMTJkNzdlOGI3YjQ4ODU4Yjg3YWFkZmI0ZTAxZWViYmU2YmEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rIY670t2AuXQBxnM9jtPvQU2AkL VfbzveqQt3dA6ObFIWe/lhZ/h+7FD2x7MLwjQxRC8jRH5CX9YCaoi0ymRT0D4D8j CZgG+qqk5zPfvUyjKJ+b4oF0WSe3VAIY9bjt+955wlMY4Aqhgl9iKfxkxCQossVl AZdPZUOYMVmV072/d2CKv8k1BGHhumZBujBUq8YxS3Eb+ACMTzUAxl/gcKce9DHs SVtM2HcsLsMhXHsmbvKnNlPCNFeh+la0WgStIaguFyS/VUDO2CPEVTVDYgOsAw0c TkFmKY29i90v97S/5au49BsDhiQI33qokqXsgA/1zdO1Fqhp5JO/5yDQcwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGu9Etd+i3tIhYuHqt+04B7rvmujMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfDKBpN+y +WxJwNtegbS3Q/4OLO2b/Hh5OTa0vamqAApysNT0QrQc1e8qmgyBr+yM52rXGnM1 QKRUd1zE9GIkA6n0tgPMUlCLPB18+uKXjDgyUB2NH8a1Jb44mNwPlaFPuXBi4mX9 hu7srEg2bCuJNB3hPiwhf8D+AnmuGwec+4JbkmcHBcMjag5glkvmCjv31k6ougBv X70BAdvnIpmfffBlHdJWx8pMjUAS7y4U/jy8g9TlbL/WU2cb95P7jF2+FXZGHLug KypmfIGS596QcMkx2Yzgz/B39UUNqVhIoj5ynJonSwDGFzVWl8yHB0SPJvnUo8eV zKEcN0i+FodlCQ== -----END CERTIFICATE-----Generated at Tue Oct 27 22:28:36 2026 by rpki-client