$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft File: IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft (raw, json) Hash identifier: C0z+AzvmBSzmrHCi5rCZDIZHFjcqkRCDwsaJEoEJ4AU= Subject key identifier: C4:A2:60:54:59:0D:0F:0A:BF:7D:38:D9:A8:A8:0B:34:07:44:43:35 Authority key identifier: 22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 Certificate issuer: /CN=22a44566764ebb511683cb6228fa91997b559379 Certificate serial: 01A179963F186A1A57129402AEA39D3E8A54 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft Manifest number: 1AC1 Signing time: Mon 26 Oct 2026 19:00:52 +0000 Manifest this update: Mon 26 Oct 2026 19:00:52 +0000 Manifest next update: Tue 27 Oct 2026 19:00:52 +0000 Files and hashes: 1: 8HNqyROtCPcfRiv1Sx49M6ONZYg.roa (hash: zFpstxzrvOg/IGEksLOhRDjWqdDtkzz+78pgZXkJ73Y=) 2: AIs-v4MTJP3X4O8YQJnAripw4vs.roa (hash: kHs1izlvzimCPZa6IfF/iyB6cbHIdll4P1d4fiptxlM=) 3: IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl (hash: b4le+UNiC+2RhIy3ZJvlBajo0yoDL2bn1/XeyebwMfc=) 4: ODJrKCxhZJXL46-GyJpCGE1A_QM.roa (hash: +3sffUArpiGjIESwpid7XyaHYYYvbrxKYnkoG38bS64=) 5: SX9U68Arj-_uoekiWex6QgdNbwQ.roa (hash: joN8VUGdRybF07eLYHwoTuABQ2kur7JqOJpxlpvlHks=) 6: WjbQcTlDKpaAfqXkZDDiOvmh4dY.roa (hash: BUe0stMaaOWFp6WiIn+aiGaAl/vpI8FjtrNGbrBCxE0=) 7: gEhVWWVbCAuop-zcWZ0zv4pjLxE.roa (hash: xokrZ815d4gYLrLWpgPe6s/SM+gm8TEbsLKu7jgKc28=) 8: gGeNvgahudXxUPNz9yBFk3kYHS4.roa (hash: 8c8Cgq9i3zCtWdYo/SCuVm2tnZ6RLv62A6IykYPbs7Y=) 9: jLaFsD-7kv57uS82Ky9IjH2qI7s.roa (hash: GKSCCv4N+IaXAABFBigYWinS7vfCaNGsxXry11fPlQE=) 10: lyIOq6TA50RExwMG01O0x9KQ_K8.roa (hash: upG12PbzyM39hFjrEWs8ykSga/yXg/EqgsBSnOyEtfg=) 11: y1YWxB7Fy5s5YzamhDItkot32uM.roa (hash: 8TggUtk0Rbk0S6hBWI88A8FYg1Cv2yGjFHoHN2htAJQ=) 12: z9CW8ENT4ms8qSgnRvUL6_vDjPY.roa (hash: lH3Kl/j3Y/mCc0yq2REHce8PieFSAQY5Zjhu7gCcN4o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:79:96:3f:18:6a:1a:57:12:94:02:ae:a3:9d:3e:8a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=22a44566764ebb511683cb6228fa91997b559379 Validity Not Before: Oct 26 19:00:52 2026 GMT Not After : Oct 27 19:00:52 2026 GMT Subject: CN=c4a26054590d0f0abf7d38d9a8a80b3407444335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8b:ca:ea:74:aa:b6:99:3a:d9:63:eb:29:43: 87:9a:6e:9c:04:dc:52:44:55:ad:a9:69:25:ac:4a: 35:d1:67:66:c8:f8:0e:77:fb:bd:d2:db:e9:3e:4d: e2:71:7e:39:50:f7:29:72:aa:ad:a1:f3:dd:20:7e: 58:3c:68:bb:46:07:42:32:1a:ed:67:eb:b0:05:4b: 27:b7:71:6e:9d:c8:d3:4f:a8:9c:71:29:85:e2:d6: c3:5f:8d:a7:52:b8:92:c8:bb:4f:96:d3:0a:b3:03: 98:2f:d0:8c:d7:c8:67:91:54:1f:6c:f2:42:05:a0: 39:89:20:4f:8a:a2:bc:00:41:ea:cc:06:84:53:79: 3e:6b:4f:ec:8e:5a:8a:58:78:23:ce:8a:44:b5:53: cd:82:a1:bb:50:8e:34:af:53:23:3d:58:88:25:c8: e5:51:9b:9d:95:24:91:75:74:23:8b:83:64:55:5e: 9d:c7:2b:63:d3:a3:99:5f:7f:97:14:bd:3c:17:0a: 34:ab:24:1c:08:08:1e:61:7e:0d:14:f5:df:8f:71: 60:5e:a7:0d:6d:b9:ce:fe:04:57:59:4d:69:48:8d: 6e:e3:1b:ac:d3:15:a8:85:5e:2f:dc:54:47:b2:e0: e0:ae:2e:47:45:c6:ed:00:84:8e:52:d0:20:2d:be: 65:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:A2:60:54:59:0D:0F:0A:BF:7D:38:D9:A8:A8:0B:34:07:44:43:35 X509v3 Authority Key Identifier: keyid:22:A4:45:66:76:4E:BB:51:16:83:CB:62:28:FA:91:99:7B:55:93:79 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IqRFZnZOu1EWg8tiKPqRmXtVk3k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6b3dda-7368-4d19-b603-16b80aa28dd6/1/IqRFZnZOu1EWg8tiKPqRmXtVk3k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:88:0f:6d:d9:49:f9:7b:bb:2d:a2:d0:19:bd:ca:ad:20:64: ba:aa:78:bd:f5:61:59:71:8c:ac:44:7c:ba:fb:6e:e4:37:df: 29:2d:aa:37:7d:a0:7d:77:1a:ad:fb:01:b1:91:fd:ee:a2:5f: bc:62:99:dc:94:4b:12:45:33:5e:35:4b:41:26:c9:69:57:0e: a7:1a:32:20:c6:8d:fd:12:a8:d0:16:c3:1c:9a:33:fa:25:ab: 72:1f:32:c3:f1:bf:d2:db:9d:c2:5f:71:43:46:f8:fe:80:9b: e4:59:16:9a:93:1c:ff:e2:87:cd:cf:a3:17:87:d7:65:69:2b: 81:5e:9c:5c:92:9f:a8:7c:06:e0:eb:d6:f1:28:2a:11:7d:73: b4:ad:30:cc:98:e2:11:a1:32:04:bc:ef:d2:3c:19:6e:e3:10: 39:39:07:5a:35:52:4e:39:b7:13:7c:23:22:c2:e5:61:9a:80: 6c:cf:7b:b2:ee:79:31:18:b1:b5:15:f7:a3:8e:81:3b:9f:ec: 43:fd:44:c4:eb:e7:a1:55:24:34:43:bc:66:f8:44:89:60:55: 42:86:a5:2f:a2:b8:80:68:fd:45:76:c8:8d:03:b5:c4:2c:4c: 53:6c:b9:73:61:e6:2a:e8:50:d5:7e:e3:d5:b2:4b:c0:e9:3a: d2:cc:27:76 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF5lj8YahpXEpQCrqOdPopUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIyYTQ0NTY2NzY0ZWJiNTExNjgzY2I2MjI4ZmE5MTk5N2I1 NTkzNzkwHhcNMjYxMDI2MTkwMDUyWhcNMjYxMDI3MTkwMDUyWjAzMTEwLwYDVQQD EyhjNGEyNjA1NDU5MGQwZjBhYmY3ZDM4ZDlhOGE4MGIzNDA3NDQ0MzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4vK6nSqtpk62WPrKUOHmm6cBNxS RFWtqWklrEo10WdmyPgOd/u90tvpPk3icX45UPcpcqqtofPdIH5YPGi7RgdCMhrt Z+uwBUsnt3FuncjTT6iccSmF4tbDX42nUriSyLtPltMKswOYL9CM18hnkVQfbPJC BaA5iSBPiqK8AEHqzAaEU3k+a0/sjlqKWHgjzopEtVPNgqG7UI40r1MjPViIJcjl UZudlSSRdXQji4NkVV6dxytj06OZX3+XFL08Fwo0qyQcCAgeYX4NFPXfj3FgXqcN bbnO/gRXWU1pSI1u4xus0xWohV4v3FRHsuDgri5HRcbtAISOUtAgLb5lcQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMSiYFRZDQ8Kv3042aioCzQHREM1MB8GA1UdIwQY MBaAFCKkRWZ2TrtRFoPLYij6kZl7VZN5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMt MTZiODBhYTI4ZGQ2LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMS82YjNkZGEtNzM2OC00ZDE5LWI2MDMtMTZiODBhYTI4ZGQ2 LzEvSXFSRlpuWk91MUVXZzh0aUtQcVJtWHRWazNrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMYgPbdlJ +Xu7LaLQGb3KrSBkuqp4vfVhWXGMrER8uvtu5DffKS2qN32gfXcarfsBsZH97qJf vGKZ3JRLEkUzXjVLQSbJaVcOpxoyIMaN/RKo0BbDHJoz+iWrch8yw/G/0tudwl9x Q0b4/oCb5FkWmpMc/+KHzc+jF4fXZWkrgV6cXJKfqHwG4OvW8SgqEX1ztK0wzJji EaEyBLzv0jwZbuMQOTkHWjVSTjm3E3wjIsLlYZqAbM97su55MRixtRX3o46BO5/s Q/1ExOvnoVUkNEO8ZvhEiWBVQoalL6K4gGj9RXbIjQO1xCxMU2y5c2HmKuhQ1X7j 1bJLwOk60swndg== -----END CERTIFICATE-----Generated at Tue Oct 27 00:10:00 2026 by rpki-client