$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft File: ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft (raw, json) Hash identifier: ACbd+hXk5zw/MQ09Ux+MH+GCnFSyVHI3rP1K8LXMoFE= Subject key identifier: 1F:E3:63:40:E9:16:1B:A8:59:98:D7:3C:0B:9B:40:C1:FD:BE:F5:A6 Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Certificate serial: 01A178B9FDA2E43BEAE1288EF5D41D2A6A4B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft Manifest number: 0B11 Signing time: Mon 26 Oct 2026 15:00:17 +0000 Manifest this update: Mon 26 Oct 2026 15:00:17 +0000 Manifest next update: Tue 27 Oct 2026 15:00:17 +0000 Files and hashes: 1: 42iMMMRyCj6t5Gb7iHxpdxdIZnw.roa (hash: oV05xJ3ianPj2d2p5u2rAJjPxzr+kZmbQ6SGxfEYdL0=) 2: 9skBFy-gVmDl-nkjxXAKgHcli-I.roa (hash: 7gSJ6zN5NW6BGUihBJnVoBFmgqEGP4fmTIDMGINspMU=) 3: ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl (hash: Fvnxpts77dKijAMwx35AMXAwg7w1gRCMgeCTDYxgr34=) 4: CYN-6kj2u9HIpYoQ3hmgvSsB35k.roa (hash: uoS5teZaIQEfymaaNdwi0VIQaDXV2jMrircb9XoayTE=) 5: Cn2XHyeB81WqaZSjg7QBfwHD8CU.roa (hash: +H1tXQmNkJ0PpJOqloukby4uXtryrpKFGs7NDZGKF+U=) 6: Eh1zKu3hD9M9mfNTxR_zbWN_UoY.roa (hash: LmM/Lacelv6UENbWxP7rIgedmTwgXdIq3BTIdVtbP+c=) 7: IzioJZxghFwgMTnVeVHHpMj-swI.roa (hash: wRkEhmwjz0Z3CuNMqban/3il9wF+W+3UoPcrnrnPUQI=) 8: RHYHLfX7MZwqTOjtai1Px4dZdUk.roa (hash: 9gqUDjHutLNZlP+IlfjuYLEG7YjcoaY1UFU3hwr+l/I=) 9: U0T21bHsT2j1MueUQfzfVxTuFZQ.roa (hash: 8mdLmQ605wsI8HkkExAKeuL0NcxSn5gGLXOqg42+2n8=) 10: XrhTyd43MHncGJTMciHpODy7294.roa (hash: yVW52UUrwkYiOF8JUIP6W3uIzWKuFx7yMBbNqolCFRo=) 11: ZTRYP_xNQ-xHfjwU3V1iHE8I5Sk.roa (hash: 82wNZlZVa9PTuuaZD0iq9g3BjS5GghQ+K3v6FuHGgcA=) 12: fd8bJA8DM-0zr8RLGfMJuFRYj1U.roa (hash: AOSETmD6hQ/zex92QpyDr+KfP3AtnIbAXfSo/7qIWOQ=) 13: gsmGiuBcv0H2dNMyzqGYlvMZgB8.roa (hash: YAjRepSXiV21hnlqtzGBka5AQsC2Q/c9dyI4/lADp+0=) 14: qfDAGHDDZhbG_VUXj0goKE-xsTE.roa (hash: 00PBxTZATabx2MDk9b4T2x5pqNTy64WZzmYqaLHUFhk=) 15: qp8bK0_zELwwRnea3kYnPZuv5kU.roa (hash: KKFbcXLRieVJeInE5UEIj+fyTeLEa9fncQ29NqsfdFw=) 16: u5dp8n3I7jflzjFJbZJ5BPdSfSg.roa (hash: SdwZS8EmIER4C5RBFO+zi0xPjMT8sLGC4SKpUhZ0ViQ=) 17: xuhDpHE2bnYdJOoJ6yInvIa6YrE.roa (hash: ohBVT4HyJLZk/hzU7rkg4mhr642F6fJ3Kl5PbeKWAPM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 15:00:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:78:b9:fd:a2:e4:3b:ea:e1:28:8e:f5:d4:1d:2a:6a:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566 Validity Not Before: Oct 26 15:00:17 2026 GMT Not After : Oct 27 15:00:17 2026 GMT Subject: CN=1fe36340e9161ba85998d73c0b9b40c1fdbef5a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:af:4d:44:57:4a:50:52:54:c7:a6:e8:83:ed: 2b:af:8d:58:a5:07:2f:83:8e:3d:6a:8e:37:58:48: 53:38:fe:1a:b7:98:13:c1:9e:96:64:69:f4:f0:ea: b7:bd:a2:5a:ca:13:78:47:ba:aa:41:c4:ff:25:89: 3e:9b:2b:fa:a9:5c:ee:a5:97:d0:01:e9:9d:6b:14: af:47:67:eb:08:95:d1:87:0e:d6:63:85:9b:bb:c3: 45:ff:36:9f:37:1c:d7:34:c8:0b:0b:c1:1a:86:d3: 96:6a:94:18:13:a6:e8:bc:a0:44:82:05:28:c6:dd: 3b:2f:c5:62:86:be:d2:8f:d9:e2:9e:d5:07:df:b3: 2c:e4:ba:da:38:d3:c1:ac:fd:a9:6e:12:0a:c8:d5: b7:f2:bf:41:b8:c0:46:e3:28:ce:bd:ef:2a:68:09: 8c:53:8d:57:00:23:7c:bc:23:44:7a:c8:9d:5e:67: 9a:38:26:4f:00:d7:4f:15:0f:d6:31:0b:63:c4:85: 58:a6:aa:f7:f5:e6:6f:6b:1b:04:1c:5f:5a:19:ef: b3:f8:59:e1:2d:eb:89:49:8d:e6:ee:92:9d:47:b3: ee:3f:da:1e:74:90:92:c1:37:c2:db:a2:86:ea:b7: 75:de:f2:87:f6:5d:d3:b1:26:81:8f:8e:3d:53:ad: 1e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:E3:63:40:E9:16:1B:A8:59:98:D7:3C:0B:9B:40:C1:FD:BE:F5:A6 X509v3 Authority Key Identifier: keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:18:67:0e:f0:4f:56:c3:2e:87:a6:45:8e:c7:8c:60:f9:b1: c7:2e:3a:45:c4:53:31:06:04:2b:36:8a:a6:59:25:5c:18:63: 82:70:cc:0d:6f:a3:63:85:89:28:bb:7e:7a:19:5a:3c:a0:c0: 2d:03:b1:29:34:76:8d:fa:49:86:ae:03:76:da:d1:72:c4:75: 0a:0b:b3:0c:52:88:26:36:cd:d1:f9:44:30:b2:83:3d:18:02: be:5b:0e:8c:f5:a7:ed:12:25:16:f2:b0:73:c6:f4:96:ab:e6: a2:53:51:70:b4:5d:87:c2:95:ce:a4:1b:ba:41:4b:e9:b7:11: bb:26:71:c5:e8:a6:96:5a:12:32:8f:ad:ad:59:a2:e0:61:5f: 43:aa:0f:4a:a2:bf:e4:37:9f:67:27:fe:46:5b:1a:49:2b:d2: a4:8f:0d:0c:61:f6:ee:8a:6a:19:2d:32:e3:98:ac:c2:0b:eb: 0f:2a:90:c2:d1:ca:8c:21:2f:ae:1b:6c:69:49:3d:28:06:0f: c7:19:6f:bd:34:86:18:23:fa:a8:22:32:23:a7:d2:32:a8:5e: 94:7d:16:95:de:72:11:b3:ad:3a:99:53:87:0d:bf:91:61:ef: e2:49:74:2d:40:2a:94:c2:1f:b9:06:66:9b:f3:37:fe:6f:7a: 67:7b:3b:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF4uf2i5Dvq4SiO9dQdKmpLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwMjY0N2M4MDFmYjU4ZmNmYWFjMTM1YmI0OGY1ZTYxZmVh N2U1NjYwHhcNMjYxMDI2MTUwMDE3WhcNMjYxMDI3MTUwMDE3WjAzMTEwLwYDVQQD EygxZmUzNjM0MGU5MTYxYmE4NTk5OGQ3M2MwYjliNDBjMWZkYmVmNWE2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk69NRFdKUFJUx6bog+0rr41YpQcv g449ao43WEhTOP4at5gTwZ6WZGn08Oq3vaJayhN4R7qqQcT/JYk+myv6qVzupZfQ AemdaxSvR2frCJXRhw7WY4Wbu8NF/zafNxzXNMgLC8EahtOWapQYE6bovKBEggUo xt07L8Vihr7Sj9nintUH37Ms5LraONPBrP2pbhIKyNW38r9BuMBG4yjOve8qaAmM U41XACN8vCNEesidXmeaOCZPANdPFQ/WMQtjxIVYpqr39eZvaxsEHF9aGe+z+Fnh LeuJSY3m7pKdR7PuP9oedJCSwTfC26KG6rd13vKH9l3TsSaBj449U60eYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB/jY0DpFhuoWZjXPAubQMH9vvWmMB8GA1UdIwQY MBaAFAAmR8gB+1j8+qwTW7SPXmH+p+VmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODIt OTRlZmJmNWNlY2Q0LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9jZmMwNmYtODJiZS00OWZiLWJjODItOTRlZmJmNWNlY2Q0 LzEvQUNaSHlBSDdXUHo2ckJOYnRJOWVZZjZuNVdZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBhnDvBP VsMuh6ZFjseMYPmxxy46RcRTMQYEKzaKplklXBhjgnDMDW+jY4WJKLt+ehlaPKDA LQOxKTR2jfpJhq4DdtrRcsR1CguzDFKIJjbN0flEMLKDPRgCvlsOjPWn7RIlFvKw c8b0lqvmolNRcLRdh8KVzqQbukFL6bcRuyZxxeimlloSMo+trVmi4GFfQ6oPSqK/ 5DefZyf+RlsaSSvSpI8NDGH27opqGS0y45iswgvrDyqQwtHKjCEvrhtsaUk9KAYP xxlvvTSGGCP6qCIyI6fSMqhelH0Wld5yEbOtOplThw2/kWHv4kl0LUAqlMIfuQZm m/M3/m96Z3s7EA== -----END CERTIFICATE-----Generated at Mon Oct 26 22:56:40 2026 by rpki-client