$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft File: nLJc5VDk2b2gW9XUXItro3Qwu7o.mft (raw, json) Hash identifier: K9GhIfMfVi41bXZYtiKufY2Y+9iWtg+kWOSYGNkOnRk= Subject key identifier: 97:A4:54:4F:D1:15:64:81:FF:46:21:24:54:7E:0C:0A:5C:D5:55:B4 Authority key identifier: 9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA Certificate issuer: /CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Certificate serial: 01A15AB05C1FCF8A647E7BBA5D648AD5F92C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft Manifest number: 1486 Signing time: Tue 20 Oct 2026 19:01:09 +0000 Manifest this update: Tue 20 Oct 2026 19:01:09 +0000 Manifest next update: Wed 21 Oct 2026 19:01:09 +0000 Files and hashes: 1: 1--BuZyc8pfUknFLYM1EBmYwu6nU.roa (hash: 6/GGnKLWn2sKe6t/HhOwHdOausfdgo+RbydGiLl+VUk=) 2: BKZ4AiIR4HJymEbg7yBDaPjsNEc.roa (hash: NSmqFNuVNWWHUV4DP4w7GZulXixMLjJyMk9Zl8PMqNA=) 3: Djsb-tt06vdh7fkqMQ3DXKQtdVE.roa (hash: fqMaFewMjMXjswAVyWzc5KzbWxefYa2oujdx4uH40os=) 4: IT-G9anfftKLn-JNHdB3nhqaHRg.roa (hash: 8S5tnd+3z64Mysha0HCn0KENKA3IjsNdvVfiIIaQQlM=) 5: PZnALoDCAWJBI9eYz4SNxUoZOOs.roa (hash: 15DZ7RnFiqyhEqhOqrkABIkR4Jel8ZLFxAtclJ7BscQ=) 6: Roi0L6TONhoO2Xay8kEl3tVdsc4.roa (hash: TvUzCHljtw9aINHESnF5FhD3ZN9T35i4G2lF2oHHd/A=) 7: U1N8-iNwkeJymD2O-1obezvdIiM.roa (hash: JSBadpvOxMyOs/dR0CYYtI0LVBoM6UjPBTEu8Sb4Vo0=) 8: WOBi4BxgINR_iF8MxA0w62_6gWo.roa (hash: 8p/uI1r4rMS3ChV0YoZH+RFqruMjs1x5KpjndTl0aEQ=) 9: ZHNIPk525HnjpaYJdapYFSEJVlE.roa (hash: iCSZbMokESyNsRANISRHlixFVv5VMk/yKpUyaMS7uho=) 10: b1Xcvdr0537m5Ydq7PIENSWNEQA.roa (hash: UtNAL68MQwD+OvCeoykWhXfz3iF5lMPl80yAqoU7pZw=) 11: g40nZDbHYl7qlSg77AKf4r37XCM.roa (hash: bENh9i+XtP2fEGRFJH3lV6YIPsznIq+IWHYPSo2J8bA=) 12: mQVVU0yW21pC8IYFai3gUt7H-pE.roa (hash: H5zFgqItky5UWDxQkcovYBDjwRGeK4Gj998+PN5ijik=) 13: nLJc5VDk2b2gW9XUXItro3Qwu7o.crl (hash: xAinmcYSMYEMCZT8qXQqqL4Uyi2jFfiqP2I/g50mGJc=) 14: tmzaGFlroy_1NqYkHp7mzrsXTLw.roa (hash: KHXFD8wG4tOX5o9eUHM14RmExFg0+YY9MfOrc+p7C24=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 17:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5a:b0:5c:1f:cf:8a:64:7e:7b:ba:5d:64:8a:d5:f9:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9cb25ce550e4d9bda05bd5d45c8b6ba37430bbba Validity Not Before: Oct 20 19:01:09 2026 GMT Not After : Oct 21 19:01:09 2026 GMT Subject: CN=97a4544fd1156481ff462124547e0c0a5cd555b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:74:b8:1c:0b:fa:b6:8f:bc:63:21:9b:5e:40: e5:df:61:ba:16:30:ed:21:85:7e:e7:97:83:c5:e8: d9:92:91:20:6b:97:87:3f:1f:1c:33:d1:82:f6:04: 1f:f9:00:66:8c:84:ef:a6:7e:4d:0a:10:d4:59:34: 24:f1:8d:1f:c2:e9:f9:be:05:ec:fe:0a:3b:40:45: 51:ab:56:b2:f9:0d:18:e8:54:b4:dd:31:fe:b5:98: 8f:4d:0d:9b:27:89:fb:fb:9c:81:be:d7:64:0e:58: 58:51:48:7e:08:b0:c3:b8:60:8d:db:8d:74:97:83: cb:a4:04:fc:24:53:8d:d0:29:65:61:42:b6:23:f8: 7f:01:11:1e:b2:e3:a0:82:2c:67:8b:06:65:0f:d8: ff:52:c1:34:b7:c2:eb:95:9b:04:8f:18:28:ad:f8: 8a:b0:82:46:e5:91:08:c0:4e:2b:c7:69:a8:ac:a6: 15:00:e7:ee:6a:7e:24:6e:32:3b:f8:68:28:db:c8: f6:c9:c9:60:e5:62:2b:f9:e8:5e:97:5b:99:3a:55: 0e:eb:d8:e1:4c:0c:dd:1f:93:d7:8e:09:91:70:5a: 1f:b1:ac:56:39:f2:09:55:21:f5:77:d9:49:29:3d: db:9d:6f:1f:f1:2d:cb:56:4b:52:4f:62:18:77:86: b4:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:A4:54:4F:D1:15:64:81:FF:46:21:24:54:7E:0C:0A:5C:D5:55:B4 X509v3 Authority Key Identifier: keyid:9C:B2:5C:E5:50:E4:D9:BD:A0:5B:D5:D4:5C:8B:6B:A3:74:30:BB:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLJc5VDk2b2gW9XUXItro3Qwu7o.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4f336b-4a79-4425-9556-be45f0d2abbb/1/nLJc5VDk2b2gW9XUXItro3Qwu7o.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:7c:76:7b:08:1f:11:6c:ad:da:36:53:8c:8a:34:b7:66:86: af:45:03:e1:8e:79:08:ba:64:e1:43:e7:31:8f:88:c2:59:51: 00:a1:d5:56:ff:52:14:8d:3f:8b:e6:2e:6a:38:f6:70:bc:73: 5b:4b:c4:69:0c:87:e1:aa:cf:7c:ff:a5:a1:0c:16:12:5d:d3: e9:4b:06:33:21:ea:9c:4f:5b:e4:62:f6:b2:b0:4b:0e:77:1e: c9:9d:18:cf:5e:27:99:35:65:f7:56:9c:9a:c4:73:24:35:f7: f4:1a:d2:51:30:0f:c6:f6:b5:28:48:f5:ae:e9:9a:08:ed:6a: e8:e9:e9:28:33:9b:e9:61:c1:8c:0b:6c:44:d0:e7:7c:c0:ce: 21:e9:4a:23:ca:87:25:c5:e5:9f:84:2a:46:ec:c9:87:b8:16: 6d:43:c8:37:ed:b3:d5:79:11:d5:fc:23:f4:c9:69:13:29:98: 75:6e:59:64:47:6b:d3:84:20:ac:db:0c:39:1a:c0:4b:c8:df: ba:32:59:52:11:58:c7:ba:0c:1b:0e:31:e8:32:1f:a7:5e:44: c4:5d:7d:31:8c:7b:88:1b:52:cb:a5:ce:28:94:12:93:f1:a6: cf:a1:4e:d3:8d:8a:b1:0a:43:a8:66:07:3b:e9:d2:ec:2a:96: 7b:38:89:39 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFasFwfz4pkfnu6XWSK1fksMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDljYjI1Y2U1NTBlNGQ5YmRhMDViZDVkNDVjOGI2YmEzNzQz MGJiYmEwHhcNMjYxMDIwMTkwMTA5WhcNMjYxMDIxMTkwMTA5WjAzMTEwLwYDVQQD Eyg5N2E0NTQ0ZmQxMTU2NDgxZmY0NjIxMjQ1NDdlMGMwYTVjZDU1NWI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnS4HAv6to+8YyGbXkDl32G6FjDt IYV+55eDxejZkpEga5eHPx8cM9GC9gQf+QBmjITvpn5NChDUWTQk8Y0fwun5vgXs /go7QEVRq1ay+Q0Y6FS03TH+tZiPTQ2bJ4n7+5yBvtdkDlhYUUh+CLDDuGCN2410 l4PLpAT8JFON0CllYUK2I/h/AREesuOggixniwZlD9j/UsE0t8LrlZsEjxgorfiK sIJG5ZEIwE4rx2morKYVAOfuan4kbjI7+Ggo28j2yclg5WIr+ehel1uZOlUO69jh TAzdH5PXjgmRcFofsaxWOfIJVSH1d9lJKT3bnW8f8S3LVktST2IYd4a00wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJekVE/RFWSB/0YhJFR+DApc1VW0MB8GA1UdIwQY MBaAFJyyXOVQ5Nm9oFvV1FyLa6N0MLu6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYt YmU0NWYwZDJhYmJiLzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYS80ZjMzNmItNGE3OS00NDI1LTk1NTYtYmU0NWYwZDJhYmJi LzEvbkxKYzVWRGsyYjJnVzlYVVhJdHJvM1F3dTdvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO3x2ewgf EWyt2jZTjIo0t2aGr0UD4Y55CLpk4UPnMY+IwllRAKHVVv9SFI0/i+Yuajj2cLxz W0vEaQyH4arPfP+loQwWEl3T6UsGMyHqnE9b5GL2srBLDnceyZ0Yz14nmTVl91ac msRzJDX39BrSUTAPxva1KEj1rumaCO1q6OnpKDOb6WHBjAtsRNDnfMDOIelKI8qH JcXln4QqRuzJh7gWbUPIN+2z1XkR1fwj9MlpEymYdW5ZZEdr04QgrNsMORrAS8jf ujJZUhFYx7oMGw4x6DIfp15ExF19MYx7iBtSy6XOKJQSk/Gmz6FO042KsQpDqGYH O+nS7CqWeziJOQ== -----END CERTIFICATE-----Generated at Wed Oct 21 04:37:21 2026 by rpki-client