$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: dv2Z+OTSYUTLRfGkKu3CcinHW4qt3GVaBOesIU4ljtk= Subject key identifier: 85:1B:7E:A2:9B:6D:9C:84:8C:9D:02:6E:C9:2F:33:1F:D3:B4:E0:33 Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 01A17E17C0DF36135FB603B30FB6B7C046FE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 14D4 Signing time: Tue 27 Oct 2026 16:00:47 +0000 Manifest this update: Tue 27 Oct 2026 16:00:47 +0000 Manifest next update: Wed 28 Oct 2026 16:00:47 +0000 Files and hashes: 1: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: OPaVGehruJWAQ4vKDnL6ozJqiZZ3j2I7KbyD4Mq6bw8=) 2: 7jf8I0eBdO6b1-zkApo8w-11x1A.roa (hash: TAvMnNu0WnFxQxz9XL8UPta+cg+ATM89elfXvIUl798=) 3: BLTLVOtXSHYCVOoxyeo_0IvC-JY.roa (hash: NYaQAuEgTk5rfLHUlgc+7BWUhoUqRHnvCyLgXnpHIrs=) 4: JCYdzJTMcHHvvNsrGsRbncy3QwM.roa (hash: +DWRjinwclN/RO9c2/UhMsI9n5ugj19x09Oj5LQrJ7g=) 5: LVzm6PScS-DUr1dRA7Al1IZOWMU.roa (hash: XX+xZLdfHxaIHsXWoOFRjP0yYXn9msAV6LYRZEB20lo=) 6: Naq_nl1pE5uhLvd9ifQny82LIis.roa (hash: OYltBhd5Cp/g4vCxZqMX6TRvztkTMT5cyE/NCsPsb/s=) 7: RAlCx5dBkXErr4GLU_5m2X54NZU.roa (hash: ObC2XXv43nkDqryZk3TpQdoXImX/CEh8RrHJ0Kt/ht4=) 8: TbKjk9biFGhLJW-0EAJ-G1mE3dg.roa (hash: NXGH0uYXNrJkmlvbFICP94ZCbP2H5y85Tnuyfhnefi8=) 9: WRpDDqEVnBPTCAUWhvtGHnRTNpE.roa (hash: w26uNtXV7/rSV+FlLM4bjKvRX0N4Aqz+ftFHbrZVRBs=) 10: d2sssZgiWQxoiwpeGhpD4-ZdyBc.roa (hash: eiBlGU6Gm1VLOcjq2l2JBGaaGY93PAF3cSre6J4TW8k=) 11: nkciQnEuEjOQTOgeL1hdYkyj4wg.roa (hash: BWV+AnPSsesbRoWnrQx/NY6wOXo+WFzBX3YuFsngh7M=) 12: prwVIWLchRMQh4wLMP_5AL-rJeY.roa (hash: pBy/6NiY8dt/IGcrx7wYr9+LEFZ5rOBd3e190L4AGRc=) 13: qFCJx5kPHVIDEJbLb768fD6gip4.roa (hash: CJnw0mwbH5wAlci3rG6FQARWz8se15SlPgqgPC5AzgM=) 14: ydtp6Ra8yv13dJRlj5U4vEpL5aQ.roa (hash: JitW8Hw4fE5VESE5RyEswxbTMms7e/IC9YGFZn0te0w=) 15: zgNSYrgLKBjJKEAyj0UQCw39lwk.roa (hash: A2YWYKZi8ufFfaCpWTZIhU0UIlJwdT93/7iunuMFhi4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7e:17:c0:df:36:13:5f:b6:03:b3:0f:b6:b7:c0:46:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Oct 27 16:00:47 2026 GMT Not After : Oct 28 16:00:47 2026 GMT Subject: CN=851b7ea29b6d9c848c9d026ec92f331fd3b4e033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:9c:7b:f4:d5:a9:f7:30:92:66:db:ea:f8:76: 2a:1c:c7:cd:6e:fc:7e:dd:e7:cf:fe:d8:c0:8a:17: 3e:ff:50:ea:a9:42:2f:09:7a:65:99:5f:56:39:6c: b5:1e:92:2e:ce:45:6f:5c:fc:23:4f:a1:ee:f8:7e: ec:8e:84:67:47:1c:c6:84:42:06:5b:87:ca:13:d5: 09:97:8e:6f:42:da:e1:fe:64:27:f5:10:d1:d3:7f: 00:2c:2e:59:5c:59:8e:87:e1:18:41:ff:9d:ec:9d: b8:ca:5f:91:87:f3:d2:3d:6e:91:1d:fe:24:aa:d6: b9:01:ee:7f:40:95:30:4a:e9:18:ce:77:14:78:04: da:e2:6a:4b:2a:21:46:8b:e4:69:10:77:a6:b2:67: 46:a6:d7:3c:47:ca:21:82:44:01:ca:0c:f3:ae:98: 58:b4:2d:51:7a:86:98:68:5b:a0:3f:4a:ef:54:27: 1e:1c:32:8c:f5:01:91:6c:96:7a:47:53:ce:09:89: dd:62:00:e4:ce:80:4f:99:11:62:91:04:8c:14:54: 87:8c:0a:57:52:46:b0:70:07:f9:88:e9:32:a2:2a: e7:8f:92:c2:78:b9:ac:20:86:19:90:51:1b:05:25: 31:2a:ca:58:0d:3a:51:c8:dd:46:0d:55:b4:0b:82: 59:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:1B:7E:A2:9B:6D:9C:84:8C:9D:02:6E:C9:2F:33:1F:D3:B4:E0:33 X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:61:40:ad:81:38:76:59:29:0f:75:4e:42:fc:e5:69:58:49: b8:fc:78:91:d2:ff:52:f2:28:ad:ec:94:68:ba:79:f8:d9:2e: ae:79:4b:3d:9b:01:ae:fe:d3:07:4e:f5:cb:a5:f7:f4:6d:c9: c4:95:fa:06:2a:d9:81:92:08:30:10:1d:4c:27:64:75:e7:3d: 60:47:c9:e2:23:ed:02:14:32:ad:2c:69:fd:43:19:92:35:81: aa:42:61:f5:c3:0c:4f:23:06:69:9a:fd:50:4f:4e:be:fc:59: af:d3:16:e7:47:07:19:6f:74:c3:62:be:4c:d9:1f:40:0a:6c: e9:b0:9c:3f:c8:76:fb:41:91:70:e4:95:f6:c5:0f:e3:fd:2c: 5a:63:79:6d:49:e1:5e:55:66:a0:84:a4:28:24:7f:d7:7d:8d: e3:97:2e:77:4f:c2:ad:0e:59:5f:cc:60:0b:94:60:cf:00:ff: 0a:14:54:9c:37:bf:bc:50:8d:e2:25:cf:2e:6c:ab:86:51:42: c0:3c:e8:18:c8:22:8e:c5:fc:c2:d6:72:3c:38:34:14:6d:47: 2b:49:54:8f:f5:e7:b7:e4:be:1b:21:41:86:6e:f9:95:e0:75: 63:a9:6a:ac:cd:20:5c:c6:04:76:e5:88:22:d2:f5:31:6a:5b: a1:dd:a0:5e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF+F8DfNhNftgOzD7a3wEb+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjYxMDI3MTYwMDQ3WhcNMjYxMDI4MTYwMDQ3WjAzMTEwLwYDVQQD Eyg4NTFiN2VhMjliNmQ5Yzg0OGM5ZDAyNmVjOTJmMzMxZmQzYjRlMDMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Zx79NWp9zCSZtvq+HYqHMfNbvx+ 3efP/tjAihc+/1DqqUIvCXplmV9WOWy1HpIuzkVvXPwjT6Hu+H7sjoRnRxzGhEIG W4fKE9UJl45vQtrh/mQn9RDR038ALC5ZXFmOh+EYQf+d7J24yl+Rh/PSPW6RHf4k qta5Ae5/QJUwSukYzncUeATa4mpLKiFGi+RpEHemsmdGptc8R8ohgkQBygzzrphY tC1ReoaYaFugP0rvVCceHDKM9QGRbJZ6R1POCYndYgDkzoBPmRFikQSMFFSHjApX UkawcAf5iOkyoirnj5LCeLmsIIYZkFEbBSUxKspYDTpRyN1GDVW0C4JZLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIUbfqKbbZyEjJ0CbskvMx/TtOAzMB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAmFArYE4 dlkpD3VOQvzlaVhJuPx4kdL/UvIoreyUaLp5+NkurnlLPZsBrv7TB071y6X39G3J xJX6BirZgZIIMBAdTCdkdec9YEfJ4iPtAhQyrSxp/UMZkjWBqkJh9cMMTyMGaZr9 UE9OvvxZr9MW50cHGW90w2K+TNkfQAps6bCcP8h2+0GRcOSV9sUP4/0sWmN5bUnh XlVmoISkKCR/132N45cud0/CrQ5ZX8xgC5RgzwD/ChRUnDe/vFCN4iXPLmyrhlFC wDzoGMgijsX8wtZyPDg0FG1HK0lUj/Xnt+S+GyFBhm75leB1Y6lqrM0gXMYEduWI ItL1MWpbod2gXg== -----END CERTIFICATE-----Generated at Tue Oct 27 23:02:14 2026 by rpki-client