$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft File: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft (raw, json) Hash identifier: ojA6F81DTBVMLtInk/7Kh1lUrnLZhkhbQBeMN/jKiX4= Subject key identifier: E1:8B:C1:82:9F:B9:60:B9:A5:B2:E9:BB:F3:1D:A2:84:B1:40:49:FD Authority key identifier: E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 Certificate issuer: /CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Certificate serial: 01A17BBAFC8233B61177FAABFD54CBBCB6FB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft Manifest number: 1B32 Signing time: Tue 27 Oct 2026 05:00:14 +0000 Manifest this update: Tue 27 Oct 2026 05:00:14 +0000 Manifest next update: Wed 28 Oct 2026 05:00:14 +0000 Files and hashes: 1: 4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl (hash: hM0RPV7Yc8NZs+faD6gfHwXrOT59cH1Rl9+7Vwel3rs=) 2: 6GUIWwZxGI0_11LUAF2nyD6ApTM.asa (hash: o9hRLFlhcdetNherJ5nziP+ejI2p5Hk/AOSB3fzCgR8=) 3: CyXEon0EjqXOHr8IeWjEVFpMffs.roa (hash: 61FTseLqfGHD+d4UC74A9kaSSpCsOAMcXitG3hvPp+Y=) 4: Ig9qMonvPevKOVrWH3fodFx_dR0.roa (hash: 2HfiQoAgdrxTZNqc0uXRZmMC99rWcay1ikzZnt8ejRw=) 5: JMUe3al0pklathcu47XaPUqkjyY.roa (hash: WrIFwPH2vXkQmPfNJ4EO/lLH8xEpJfsA80i818mNAGc=) 6: MtgYxwbBOtLba6Wx-C4vNDgRBQ8.roa (hash: 0p22EPcUlrbZ/XQd/L2Yz+06mVzq0rpNkXwnhd7vOv8=) 7: QPupw3rP2f5Jivi4SxaBbGE6eqM.roa (hash: KP++DGfsZGB7GL9ySK3Y6Xgm2FRgB01XieKkXEEpykk=) 8: lIx0KubEd0NAwKbnWvfavDgfMLw.roa (hash: Z1acY8ho4rEFuqnBBBvS7eEzd1qsRchpuvE7DncwSZE=) 9: ql3vqr1zYIaiPZLR54AHsL7ukAE.roa (hash: NYzCia9uixmAZoiKyWTL4nuIIf69H+HSXVKOLeUMj5c=) 10: yIoTvJJYIR2DNvrmk-NbH6cPask.roa (hash: oUH0ut41s6oEH273QOq+dzXsq0k279TftL1vgV4Jygw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 03:05:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7b:ba:fc:82:33:b6:11:77:fa:ab:fd:54:cb:bc:b6:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e10d5c29a3439703d89b5abf03a75d861771bef4 Validity Not Before: Oct 27 05:00:14 2026 GMT Not After : Oct 28 05:00:14 2026 GMT Subject: CN=e18bc1829fb960b9a5b2e9bbf31da284b14049fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:42:6c:ab:0b:be:81:a8:ad:cf:37:39:54:ce: f9:dc:05:3a:77:8a:c7:fd:8f:ef:c0:2b:90:f7:2c: 62:7b:14:56:46:05:a6:5f:07:98:ef:08:39:fb:bb: 07:85:87:c9:55:b6:94:d5:34:43:09:c9:05:27:01: 74:a4:5b:b7:4d:38:eb:22:b6:3d:55:37:92:a5:9b: 91:d9:8f:18:f5:e7:73:d3:f6:69:24:95:ce:1b:97: e0:d4:92:3e:a0:0a:56:60:65:9f:2d:11:6a:ed:7b: f3:6a:20:6d:ad:a1:3c:05:cf:b4:30:b5:bc:ec:48: 95:6f:47:eb:b8:65:fc:d0:ab:c2:f9:56:ad:13:9c: 31:16:c3:67:c2:18:a9:6a:73:93:a3:07:46:b8:88: 1e:88:20:e7:b3:38:87:e1:06:ba:b1:1a:62:e2:54: 62:b4:c9:68:d9:60:c1:3c:ec:81:8f:a6:f7:66:71: 6c:40:05:72:2a:e9:80:b4:29:05:71:8b:81:a6:b5: 57:0c:c4:15:2c:87:1d:2a:d3:df:47:13:fb:b4:70: 04:a8:e9:66:80:21:61:f2:63:12:fe:06:ed:b7:a9: c6:7a:3e:63:73:3b:d8:9e:f7:98:1d:40:eb:12:5a: 09:1a:c7:56:99:8b:56:9b:8f:61:3d:4a:2f:e6:af: 36:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:8B:C1:82:9F:B9:60:B9:A5:B2:E9:BB:F3:1D:A2:84:B1:40:49:FD X509v3 Authority Key Identifier: keyid:E1:0D:5C:29:A3:43:97:03:D8:9B:5A:BF:03:A7:5D:86:17:71:BE:F4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/3edb47-fd6e-4c59-a7ab-e42a58064a63/1/4Q1cKaNDlwPYm1q_A6ddhhdxvvQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:c9:57:52:99:ed:0a:9f:45:6e:78:f7:39:cc:7e:43:66:2f: 70:8b:6e:89:62:31:2f:f5:12:f9:59:46:e5:43:ef:c3:00:a4: 2b:92:35:e0:33:2e:99:0f:c9:9f:60:8c:20:8b:bc:e7:01:0e: 68:53:88:46:c5:61:b2:ff:48:42:da:0f:ef:e0:fd:6d:9e:6b: 40:ee:81:01:87:d3:38:76:b4:17:20:f9:9a:34:fd:36:37:39: f3:7c:ec:b4:03:52:59:30:6b:31:3c:f8:ed:8d:6e:1d:4f:a6: f8:ad:93:28:29:46:7a:70:ff:d1:de:60:54:48:c0:8d:e1:f8: 05:5d:69:6f:ca:4a:6d:51:c1:94:76:7f:88:af:83:57:2e:38: 27:fe:b1:06:7f:12:89:02:0f:1a:a8:33:5d:85:30:43:2f:1b: 78:c9:05:89:c9:29:4a:6e:a9:de:17:77:72:ce:0c:09:19:e9: 7b:98:9c:1b:9d:42:d3:5f:06:46:3e:96:65:0b:74:af:1f:70: a6:8a:b9:ba:ca:5b:d8:2e:5c:4b:1b:a0:05:e4:46:1d:2a:64: ba:ed:dd:ed:00:74:ed:59:2b:ab:02:ce:9f:ea:f7:6f:4d:5f: 8c:c4:cf:79:2a:c7:3f:f4:07:6c:3d:a7:68:5f:c8:f3:26:64: e3:96:d7:42 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF7uvyCM7YRd/qr/VTLvLb7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGUxMGQ1YzI5YTM0Mzk3MDNkODliNWFiZjAzYTc1ZDg2MTc3 MWJlZjQwHhcNMjYxMDI3MDUwMDE0WhcNMjYxMDI4MDUwMDE0WjAzMTEwLwYDVQQD EyhlMThiYzE4MjlmYjk2MGI5YTViMmU5YmJmMzFkYTI4NGIxNDA0OWZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2EJsqwu+gaitzzc5VM753AU6d4rH /Y/vwCuQ9yxiexRWRgWmXweY7wg5+7sHhYfJVbaU1TRDCckFJwF0pFu3TTjrIrY9 VTeSpZuR2Y8Y9edz0/ZpJJXOG5fg1JI+oApWYGWfLRFq7XvzaiBtraE8Bc+0MLW8 7EiVb0fruGX80KvC+VatE5wxFsNnwhipanOTowdGuIgeiCDnsziH4Qa6sRpi4lRi tMlo2WDBPOyBj6b3ZnFsQAVyKumAtCkFcYuBprVXDMQVLIcdKtPfRxP7tHAEqOlm gCFh8mMS/gbtt6nGej5jczvYnveYHUDrEloJGsdWmYtWm49hPUov5q82cQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOGLwYKfuWC5pbLpu/MdooSxQEn9MB8GA1UdIwQY MBaAFOENXCmjQ5cD2JtavwOnXYYXcb70MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWIt ZTQyYTU4MDY0YTYzLzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC8zZWRiNDctZmQ2ZS00YzU5LWE3YWItZTQyYTU4MDY0YTYz LzEvNFExY0thTkRsd1BZbTFxX0E2ZGRoaGR4dnZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARclXUpnt Cp9Fbnj3Ocx+Q2YvcItuiWIxL/US+VlG5UPvwwCkK5I14DMumQ/Jn2CMIIu85wEO aFOIRsVhsv9IQtoP7+D9bZ5rQO6BAYfTOHa0FyD5mjT9Njc583zstANSWTBrMTz4 7Y1uHU+m+K2TKClGenD/0d5gVEjAjeH4BV1pb8pKbVHBlHZ/iK+DVy44J/6xBn8S iQIPGqgzXYUwQy8beMkFickpSm6p3hd3cs4MCRnpe5icG51C018GRj6WZQt0rx9w poq5uspb2C5cSxugBeRGHSpkuu3d7QB07VkrqwLOn+r3b01fjMTPeSrHP/QHbD2n aF/I8yZk45bXQg== -----END CERTIFICATE-----Generated at Tue Oct 27 09:22:19 2026 by rpki-client