$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft File: l59cqMM_E0w8FX1IucKuTpG2ML8.mft (raw, json) Hash identifier: W6R0RHAcqAH2oxVTNYht143+nSGyLnR53UQU33J3dEM= Subject key identifier: A7:8D:D4:48:23:FA:12:BD:D2:71:BE:A8:83:D0:73:2E:87:E0:39:D6 Authority key identifier: 97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF Certificate issuer: /CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Certificate serial: 01A182D0FED10ECBEBAF332B71D2ED1DEA26 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft Manifest number: 18C4 Signing time: Wed 28 Oct 2026 14:01:37 +0000 Manifest this update: Wed 28 Oct 2026 14:01:37 +0000 Manifest next update: Thu 29 Oct 2026 14:01:37 +0000 Files and hashes: 1: 1-TPBZaPgwzpcoaeoNGcACcpRq9w.roa (hash: WRnBW6LaoaDyzWLmINt+9j7JPTxMQsEWQyTKmC15wRY=) 2: 2DVYJPCuOw7VG2htfdUNo_7kInE.asa (hash: LbgnkRdoQKLKe2iLxngixqfur+lgcj/sW3CZzzMeq2s=) 3: 7awGjvnOLuwHkizQWxmHuCLrtgg.asa (hash: jqxpdDzSYJL8J3lEotC6QolKhYdmA+CZjUvOtdm8fnc=) 4: 8MsLByo1h3OaBnfebYLNr5wUi7s.asa (hash: h8QJVB/q5RH0fYSkRlU6osV1v40WFA8xPDLPZUIF8W0=) 5: 8mjr1R6ZAxArqKrEVDuBknfRZCo.asa (hash: FyvDAOsK5ouRGQZfWInC0JEkh1RQHwIIfD9INW6d7FI=) 6: CQHinzbv6o94wyhsd8omqmTillg.roa (hash: YzWIhoEeIcHtjYrxUYU4G48aFXp4bwAmAKzACW84/QY=) 7: Ec_R_gx9uuWxENMcCsXqUjmf9FA.asa (hash: nSaTw/6ML8HPaeks9+U68v5/iYEKqqf/eJmppOSw45Y=) 8: HBV4KMTbTlGAl9QeIl0o9qHJ3JE.asa (hash: DH9DU6Hcd9jUW1bMh4Wxl6jSVLHN13SF+Z2URPs6X9w=) 9: JY8nDcX1pyy9gv3UYeCVu3Ts2a8.asa (hash: okNoGeT6tcWHbtS0EjoQ1qLQX683zgYAC3N15VDPgf4=) 10: LSXBvQHAo4zp0AtEmHoZVaivySk.roa (hash: swGFJmkZXioEtzQNNaxMbmAyGUjZpt6rG9u3Y6aW9mU=) 11: aWgyqnhlZS7MDekMFATvg7m1Chg.roa (hash: Ub6D7zkQHeFmXTT59TkJEXuDooqt1BaCbrMKmH7VmuU=) 12: bKMnasx78X1SjuZ69VG_6DO0hLE.asa (hash: Qq7T6I3DGZbcJ7ZwLKkK8uk9JE+JhLf5qJxgDpORjto=) 13: bsQYUbE6sDO4AlcYz2-reJ-1Oss.roa (hash: 5lfSQqmrli6qWcknzZ2NClTLbfidYTYGVF+eKK5IJEE=) 14: iLg25mvcmTCHH_OGEh2P98itdpY.roa (hash: wugv3jB//b2uxYYJseGcTrUZ2QkeB7l7mdgdccrFlEw=) 15: l59cqMM_E0w8FX1IucKuTpG2ML8.crl (hash: pJ8QAhMJAGuHWmtCeWVIBBUKWT2vXE7hXW08jRfwZB0=) 16: lHq_gkGtJ7xPqAkhU9yuoqNCPTo.roa (hash: WdmuUrCIkBJHssHI2YPcgaS2VqSm8pQ//F+3L49VElw=) 17: lybU2-0lBoLkM6-OoilLNM4B_nM.roa (hash: l6togunOdeRBEWqxla5wbVF9WAZmGR3kHUt6QPrFu9w=) 18: ty1ff7-sDyLx4nDkaEvA6OsoOtQ.roa (hash: jgvaKJ/trlHrZqFZbc1zXXkzbtQm22Rj/n2MqvbIbWk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 13:58:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:82:d0:fe:d1:0e:cb:eb:af:33:2b:71:d2:ed:1d:ea:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=979f5ca8c33f134c3c157d48b9c2ae4e91b630bf Validity Not Before: Oct 28 14:01:37 2026 GMT Not After : Oct 29 14:01:37 2026 GMT Subject: CN=a78dd44823fa12bdd271bea883d0732e87e039d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:01:39:7f:aa:e5:7e:48:df:1f:64:bf:92:30: 94:12:3f:a3:d7:d7:bf:1a:6f:e8:1b:91:b4:3b:48: 9a:77:b9:0f:ae:25:63:16:c0:d6:6e:d0:c5:6e:12: 02:66:5e:83:96:05:0b:1e:9e:ba:9e:a8:26:d6:fb: 05:0b:20:f8:f4:68:28:f9:43:85:06:34:a3:fc:04: 0d:4f:9e:5c:eb:93:dc:3c:07:da:28:be:44:c8:9c: a4:f4:9b:15:7d:08:2c:72:92:bc:c1:9d:49:14:82: f0:aa:d1:32:61:b5:39:6b:78:5d:d7:c5:95:be:85: 7d:fe:70:d7:b0:a0:6c:87:4b:b1:70:89:11:81:d8: 1e:de:06:7f:d5:04:ef:b1:7a:d4:ce:96:47:23:9d: f5:af:81:c4:77:a1:c6:99:26:f4:fd:db:6c:8f:f3: d2:f3:25:9e:a5:5c:67:f3:0e:1c:22:b0:14:25:91: 00:e4:87:87:00:cf:e5:35:6a:35:75:31:74:ee:9d: c1:d5:95:01:e2:f3:16:b2:7f:c4:10:9a:a7:05:f5: 8b:91:83:79:a2:6b:a7:5a:36:4b:1a:c9:cc:77:43: a9:bb:9a:e1:e8:ec:61:d2:21:0f:47:ab:d2:f7:f8: 23:66:fb:4d:a2:fc:91:cf:2b:db:63:3b:b6:05:6e: 3c:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:8D:D4:48:23:FA:12:BD:D2:71:BE:A8:83:D0:73:2E:87:E0:39:D6 X509v3 Authority Key Identifier: keyid:97:9F:5C:A8:C3:3F:13:4C:3C:15:7D:48:B9:C2:AE:4E:91:B6:30:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l59cqMM_E0w8FX1IucKuTpG2ML8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/23/f65610-59f6-4ad6-a9d8-1470ac364dd2/1/l59cqMM_E0w8FX1IucKuTpG2ML8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b0:22:e1:95:7c:6e:6d:84:98:b7:9f:75:97:5f:08:0d:55: 9a:ff:fc:69:08:1d:94:85:8b:0f:8f:42:50:d5:12:17:d6:d3: ee:ad:5c:68:50:d3:e3:25:38:69:7f:03:57:cc:47:bb:2e:80: 1a:e0:64:1d:0c:f9:0a:c3:d0:ac:4b:9c:88:cf:b6:bf:5a:b9: 00:e9:d4:e8:36:74:d2:cf:a3:ac:d3:3a:4d:cd:c5:1c:13:3b: 3e:85:b8:05:84:30:96:3e:0f:e6:a1:f5:83:f6:6a:c3:7b:fa: 61:13:bc:94:59:5b:ea:0a:4c:e6:15:68:42:c8:c3:6a:0f:ec: 8d:ff:a6:9c:1e:4b:b5:e5:e9:8d:f0:09:eb:40:28:e4:d8:f4: 81:01:51:62:c7:52:f0:ef:ba:27:80:89:57:d0:4a:19:e9:d9: ff:f8:b7:5e:d9:17:f2:b1:71:32:90:34:6e:36:91:1e:6f:c4: 01:45:6a:15:c3:20:d6:01:b5:30:d1:6b:ca:0a:84:aa:60:26: 20:ec:46:d1:ba:a8:92:ca:37:6a:d1:38:74:88:fe:82:e4:fc: 65:e3:e5:b8:72:4d:37:bf:47:77:60:46:c4:18:aa:2f:dd:5d: 91:bf:22:18:65:f3:32:32:ec:93:62:dc:e4:8c:04:3e:68:05: a3:2b:50:a6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGC0P7RDsvrrzMrcdLtHeomMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk3OWY1Y2E4YzMzZjEzNGMzYzE1N2Q0OGI5YzJhZTRlOTFi NjMwYmYwHhcNMjYxMDI4MTQwMTM3WhcNMjYxMDI5MTQwMTM3WjAzMTEwLwYDVQQD EyhhNzhkZDQ0ODIzZmExMmJkZDI3MWJlYTg4M2QwNzMyZTg3ZTAzOWQ2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQE5f6rlfkjfH2S/kjCUEj+j19e/ Gm/oG5G0O0iad7kPriVjFsDWbtDFbhICZl6DlgULHp66nqgm1vsFCyD49Ggo+UOF BjSj/AQNT55c65PcPAfaKL5EyJyk9JsVfQgscpK8wZ1JFILwqtEyYbU5a3hd18WV voV9/nDXsKBsh0uxcIkRgdge3gZ/1QTvsXrUzpZHI531r4HEd6HGmSb0/dtsj/PS 8yWepVxn8w4cIrAUJZEA5IeHAM/lNWo1dTF07p3B1ZUB4vMWsn/EEJqnBfWLkYN5 omunWjZLGsnMd0Opu5rh6Oxh0iEPR6vS9/gjZvtNovyRzyvbYzu2BW48HwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKeN1Egj+hK90nG+qIPQcy6H4DnWMB8GA1UdIwQY MBaAFJefXKjDPxNMPBV9SLnCrk6RtjC/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgt MTQ3MGFjMzY0ZGQyLzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yMy9mNjU2MTAtNTlmNi00YWQ2LWE5ZDgtMTQ3MGFjMzY0ZGQy LzEvbDU5Y3FNTV9FMHc4RlgxSXVjS3VUcEcyTUw4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrAi4ZV8 bm2EmLefdZdfCA1Vmv/8aQgdlIWLD49CUNUSF9bT7q1caFDT4yU4aX8DV8xHuy6A GuBkHQz5CsPQrEuciM+2v1q5AOnU6DZ00s+jrNM6Tc3FHBM7PoW4BYQwlj4P5qH1 g/Zqw3v6YRO8lFlb6gpM5hVoQsjDag/sjf+mnB5LteXpjfAJ60Ao5Nj0gQFRYsdS 8O+6J4CJV9BKGenZ//i3XtkX8rFxMpA0bjaRHm/EAUVqFcMg1gG1MNFrygqEqmAm IOxG0bqokso3atE4dIj+guT8ZePluHJNN79Hd2BGxBiqL91dkb8iGGXzMjLsk2Lc 5IwEPmgFoytQpg== -----END CERTIFICATE-----Generated at Wed Oct 28 16:31:56 2026 by rpki-client