$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft File: _E0Gl4lpqL2rbWNZBi13geA0Sco.mft (raw, json) Hash identifier: Q2Rj9F8pYtTGYQF8Ttsk6dsdlarhjJEPIIEPc7bcyZo= Subject key identifier: 28:A0:79:A0:01:DF:05:E7:09:B7:2E:4F:A4:B7:37:D8:F8:73:93:02 Authority key identifier: FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA Certificate issuer: /CN=fc4d06978969a8bdab6d6359062d7781e03449ca Certificate serial: 01A19B7DBDA25BE9879543A75BFE9971B1FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft Manifest number: 1AEF Signing time: Mon 02 Nov 2026 09:01:11 +0000 Manifest this update: Mon 02 Nov 2026 09:01:11 +0000 Manifest next update: Tue 03 Nov 2026 09:01:11 +0000 Files and hashes: 1: 47j10L2FA0h0SXWX0_tR6wJ7Q0o.roa (hash: 7u5kHtfhaCssp4lrIEgNlB6JTB2fBx54wnUP6zs21K4=) 2: 7iV8Im81eBthIsfk2nHn7mrcL0I.roa (hash: DMePp37AdPaqIdkG+BXAwHKQ/GhPpo+29tJyj4JJmcA=) 3: 9L3U50vXnrZHvDkXweg9rCkbhrY.roa (hash: Y2oEmMQ+H+sFspRu0+it/tWlZrUGUN5NZppwSwZgOH4=) 4: AdKsvqaXiePPmCvq4AXis3AzPUE.roa (hash: mDooRsVJYcbpnCTMKMMlLqlbhhCwSBdmXTbtG5YkI+c=) 5: GQHGzy31Y1UPpJ6RA2opHrfR_lw.asa (hash: MRpibHtTwPHhX0RMT2EhPOPMcjncVJE99qXqWcHjWrI=) 6: _E0Gl4lpqL2rbWNZBi13geA0Sco.crl (hash: lqHFuEexHnZzVt+7FnILx2DpwN7Sp0+tu9vXFzvtrCo=) 7: ejT2O82rAZ_iuHzk2T-2HoOL_ac.roa (hash: ia9NgZrL/DdllfSMu50SQNusjrApTyAFAcYBy1z+uwU=) 8: fpfJfS_0BfVlwGpnzcKEFoZJphs.roa (hash: 2jUL3U2b9HcRGTwEQDd4xTGEfKZgzgW50XHsjSJkMpM=) 9: n8JXJeOOoOd0ZB8psyxJVOa3bs0.roa (hash: 2oRtWGrNewLpxhVsijupAz+Nq9JEWrlYaXgCA/HOxYE=) 10: vsBaA-DAjB_pb-CXPiGUcKQM0Vo.roa (hash: 8fTcamSpnyKmu51ZjoDnGRELER/PxBhqwN2tDlXJQV0=) 11: zl9a2F2XfJaNTOt8qhBiHTQEm7I.roa (hash: VZiQjj4p8R2MxeseRwU4vGaPWJyrD8qmEk6zhfGY7qs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Nov 2026 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:9b:7d:bd:a2:5b:e9:87:95:43:a7:5b:fe:99:71:b1:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=fc4d06978969a8bdab6d6359062d7781e03449ca Validity Not Before: Nov 2 09:01:11 2026 GMT Not After : Nov 3 09:01:11 2026 GMT Subject: CN=28a079a001df05e709b72e4fa4b737d8f8739302 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:80:aa:fb:95:d4:af:c0:1e:b3:dd:7d:8b:65: 67:66:0e:6a:c0:d5:14:75:3a:50:af:ae:1f:81:c3: 8c:1a:ea:f9:04:8f:40:a3:72:a7:47:f2:81:d4:b7: bc:a7:9a:c7:4e:e1:f7:bb:88:44:53:76:2a:e3:40: 33:67:ce:17:7b:28:d5:88:52:31:a3:06:19:84:f6: 7a:04:2e:89:de:4b:56:55:be:18:ac:8c:b9:b0:6b: c6:ac:54:8a:c5:f1:4a:1e:0d:0e:19:49:ae:98:0e: 93:6a:5f:21:b2:f8:95:1e:3f:8e:ee:95:a4:87:62: a8:af:ac:2f:70:8b:77:a6:1b:60:a1:83:ff:b3:d8: 95:70:c9:fc:a9:f3:af:9e:40:28:c5:f1:2e:83:9b: 04:e3:45:75:20:c0:96:fc:03:98:d5:67:40:3c:6e: e9:17:8e:4a:b6:6c:f9:b7:3b:cc:61:8d:57:0d:99: f0:bb:59:d5:a9:c9:26:b1:60:74:be:ef:35:c6:40: ad:24:37:30:46:37:54:d0:08:ea:ec:1b:f7:a8:e0: 52:3a:dd:f2:35:64:f0:3a:b8:38:2d:de:33:a8:ff: 34:58:2e:67:93:bb:e7:bd:13:f6:60:31:db:cf:7c: 27:df:b4:67:33:93:03:19:90:57:84:24:1e:32:2b: 1d:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:A0:79:A0:01:DF:05:E7:09:B7:2E:4F:A4:B7:37:D8:F8:73:93:02 X509v3 Authority Key Identifier: keyid:FC:4D:06:97:89:69:A8:BD:AB:6D:63:59:06:2D:77:81:E0:34:49:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_E0Gl4lpqL2rbWNZBi13geA0Sco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/082c31-f4ef-4acb-90f1-da03bf7a2ec2/1/_E0Gl4lpqL2rbWNZBi13geA0Sco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:c4:f5:8c:dd:b3:6c:bc:c3:f4:46:9a:09:51:5c:6f:3d:e5: 04:c8:6d:9d:75:99:1c:19:4f:32:7e:57:0f:56:a8:a4:49:a5: 32:1f:cf:ee:b1:7c:72:1b:1e:22:c1:47:65:a6:00:6c:fa:58: 8d:5f:55:72:1a:9a:3a:91:1c:1a:c2:a8:82:ae:65:4d:eb:09: e3:61:da:a0:27:ba:35:25:a1:29:27:ad:96:58:76:cb:bd:4e: c8:26:0f:20:8c:c3:72:91:58:9f:dd:f9:a6:ff:a9:99:70:46: b4:ee:c6:74:2f:29:ce:9b:8b:99:1b:8a:85:83:8b:89:47:a9: 85:af:71:30:19:bb:1f:a8:67:dd:da:3f:62:f6:ec:c9:3d:21: 65:03:0c:18:f1:b9:a6:9e:99:6e:90:71:b9:3f:16:f0:b6:21: 70:e5:fd:36:8d:b0:2d:2d:6b:ee:88:71:75:a4:7e:22:2f:02: 02:0c:ea:7a:3a:0f:ad:cf:2f:4b:86:5a:64:9c:95:ce:3e:e2: 66:9f:68:1e:f3:62:3d:0f:e4:ba:7d:e9:f6:59:39:82:fb:f8: be:bd:15:20:b8:27:f7:8c:db:89:42:a2:14:d5:0d:a6:4d:54: dc:77:02:99:a6:9d:fb:75:0c:10:4f:8d:6a:a1:ae:37:bb:b9: ba:06:5b:2f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGbfb2iW+mHlUOnW/6ZcbH7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZjNGQwNjk3ODk2OWE4YmRhYjZkNjM1OTA2MmQ3NzgxZTAz NDQ5Y2EwHhcNMjYxMTAyMDkwMTExWhcNMjYxMTAzMDkwMTExWjAzMTEwLwYDVQQD EygyOGEwNzlhMDAxZGYwNWU3MDliNzJlNGZhNGI3MzdkOGY4NzM5MzAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsICq+5XUr8Aes919i2VnZg5qwNUU dTpQr64fgcOMGur5BI9Ao3KnR/KB1Le8p5rHTuH3u4hEU3Yq40AzZ84XeyjViFIx owYZhPZ6BC6J3ktWVb4YrIy5sGvGrFSKxfFKHg0OGUmumA6Tal8hsviVHj+O7pWk h2Kor6wvcIt3phtgoYP/s9iVcMn8qfOvnkAoxfEug5sE40V1IMCW/AOY1WdAPG7p F45Ktmz5tzvMYY1XDZnwu1nVqckmsWB0vu81xkCtJDcwRjdU0Ajq7Bv3qOBSOt3y NWTwOrg4Ld4zqP80WC5nk7vnvRP2YDHbz3wn37RnM5MDGZBXhCQeMisdSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCigeaAB3wXnCbcuT6S3N9j4c5MCMB8GA1UdIwQY MBaAFPxNBpeJaai9q21jWQYtd4HgNEnKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wODJjMzEtZjRlZi00YWNiLTkwZjEt ZGEwM2JmN2EyZWMyLzEvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC8wODJjMzEtZjRlZi00YWNiLTkwZjEtZGEwM2JmN2EyZWMy LzEvX0UwR2w0bHBxTDJyYldOWkJpMTNnZUEwU2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsT1jN2z bLzD9EaaCVFcbz3lBMhtnXWZHBlPMn5XD1aopEmlMh/P7rF8chseIsFHZaYAbPpY jV9VchqaOpEcGsKogq5lTesJ42HaoCe6NSWhKSetllh2y71OyCYPIIzDcpFYn935 pv+pmXBGtO7GdC8pzpuLmRuKhYOLiUepha9xMBm7H6hn3do/YvbsyT0hZQMMGPG5 pp6ZbpBxuT8W8LYhcOX9No2wLS1r7ohxdaR+Ii8CAgzqejoPrc8vS4ZaZJyVzj7i Zp9oHvNiPQ/kun3p9lk5gvv4vr0VILgn94zbiUKiFNUNpk1U3HcCmaad+3UMEE+N aqGuN7u5ugZbLw== -----END CERTIFICATE-----Generated at Mon Nov 2 12:41:13 2026 by rpki-client