$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft File: aNoQi85PtWVWJGsxVyb19jRYXvE.mft (raw, json) Hash identifier: eqLQUOKAoYHP198+Psv0NWODBx4HYFeMbwJmTyIghGw= Subject key identifier: 35:78:3B:5B:F4:11:45:66:E6:91:42:97:68:0E:0F:42:F3:C7:5B:7B Authority key identifier: 68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1 Certificate issuer: /CN=68da108bce4fb56556246b315726f5f634585ef1 Certificate serial: 01A17582437E0EA9A090E43A555F3D38A0F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft Manifest number: 013B Signing time: Mon 26 Oct 2026 00:00:33 +0000 Manifest this update: Mon 26 Oct 2026 00:00:33 +0000 Manifest next update: Tue 27 Oct 2026 00:00:33 +0000 Files and hashes: 1: 3g5N4ACt53RDfqdl2Qm2kLw7iuM.roa (hash: JfcuHdPpD93vUy2ajbM4MDyRl9hTtYlGFm++NhJ4v9Q=) 2: 4rKV389CcVb18TkAtAQohjFpet4.roa (hash: bshrb45TXCLz1UeSJOO4z6EZmV9tqPYGJlGzReterCU=) 3: EU5pDQStNaoFQyco-4amRP1_FgA.roa (hash: hTHdQn7G2Zgz/0VPSb7q82WZIakSz6CsJwivy9Eitjw=) 4: HdF1Etsw4pdlSu1K8vrei4yVmKw.roa (hash: uoyjLiPTlTI461zU8sJL8PSon9F9MLbPvGcIZXxD+zQ=) 5: K8y0v8xbRIAHJNfQb92ZFS9zmkM.roa (hash: +Jvt7K7C2npld470zp55mSeL6prCT70kckBsxVr1DQU=) 6: LYy3q2HCwTVaEOOy8i76zpWQDQQ.roa (hash: 3gssksK0WKZ1ji7D3njPjIYsZOKLwjh79PXg9K+4kD8=) 7: V7Gy_xsnTYpW1R8jKT-H-yvfeY0.roa (hash: t4KBOdzw1W/nTMlVzOh3vHraukfR4inEsZhCZK2WaVE=) 8: Y6vuMNkzIPJWRuJg5TuMbsi1FcM.roa (hash: 3aMZ5jo10sNTG4r9ibdunWoGNfpF0gSMyVHFFSZbv+I=) 9: aNoQi85PtWVWJGsxVyb19jRYXvE.crl (hash: Yh0EF2I9NeS5V1vrRMJgNsOtYX7iVY7IKlLlMxyhrFI=) 10: foSOnmt17u33gfnRPRG4pNSpMq0.roa (hash: k4fSYwEDaC1MgqKDcu6ALBH1gOuaBBhjlNg8kfhU3RQ=) 11: ib5YzLoYXKZK-R3OCwLsvHBhnXY.roa (hash: IT/E+lCIfVXMpHU9raxW9uwfjlZ+Cij+nDKpT3TnewQ=) 12: oe-pRqcbnH3vKHurAZrBu43iDHo.roa (hash: /UnsYCcH9zJIeaXYRWlLI3q/VXRUYL/1eKK/V/miCRM=) 13: tW89lp5YxoMGwhuGz5wy8-1b7tA.roa (hash: 3iDgHelXEotGhsC69Iuc1srSTIuH+BgeoUU2gRFP8bQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 17:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:75:82:43:7e:0e:a9:a0:90:e4:3a:55:5f:3d:38:a0:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=68da108bce4fb56556246b315726f5f634585ef1 Validity Not Before: Oct 26 00:00:33 2026 GMT Not After : Oct 27 00:00:33 2026 GMT Subject: CN=35783b5bf4114566e6914297680e0f42f3c75b7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b3:c8:b9:86:a7:ac:8b:5f:3f:b1:b9:89:a7: a5:0e:6a:3c:43:45:c1:e0:54:a5:5d:e6:a7:c8:77: a6:12:1c:15:15:2a:81:cb:98:ae:a6:63:cf:17:9a: f2:52:0a:30:df:35:cd:ad:d6:d4:d7:c1:74:d0:1e: 7d:83:8b:08:39:28:1e:01:37:e0:a4:2a:42:ef:87: 1e:88:1e:78:b1:ec:b4:7a:b3:6f:99:7e:fa:0c:fc: 76:de:71:ea:2f:60:9b:e4:f3:fd:ca:85:d7:f8:3f: 81:35:aa:6b:06:ff:53:24:21:a9:fb:e6:6a:b0:f8: f3:5d:d5:c1:3e:79:0c:a2:19:f9:0e:06:d8:24:e8: 8f:67:9f:8c:fe:3a:80:98:08:dc:6e:44:7c:cd:b7: cd:f4:c7:34:7c:eb:df:46:28:97:49:2e:15:58:58: 45:f3:c6:72:9a:59:be:59:80:e5:a1:28:47:97:e2: b8:42:0e:f3:e9:53:38:b3:a6:98:38:99:4a:11:6d: 3c:da:63:01:f7:74:1e:c1:7c:a9:dd:90:7d:1e:3e: d4:80:11:31:07:29:f2:54:d5:7a:54:95:a3:c1:4d: f4:e9:4a:7f:93:be:21:c3:05:54:33:40:d2:cb:61: e7:45:5c:aa:fe:eb:0c:94:4f:fb:40:ef:cf:1f:4c: 1b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:78:3B:5B:F4:11:45:66:E6:91:42:97:68:0E:0F:42:F3:C7:5B:7B X509v3 Authority Key Identifier: keyid:68:DA:10:8B:CE:4F:B5:65:56:24:6B:31:57:26:F5:F6:34:58:5E:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNoQi85PtWVWJGsxVyb19jRYXvE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/28/29e9bc-b190-409e-86b0-eec5d50efa94/1/aNoQi85PtWVWJGsxVyb19jRYXvE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:78:8a:73:4c:1b:bc:97:74:d4:51:f6:0b:5c:de:69:dd:0f: b5:64:0a:47:58:05:36:be:bb:33:b8:db:0d:6d:a6:27:7a:a2: af:d4:b4:cd:d0:05:ed:89:0a:bc:fc:55:e1:58:68:47:95:cf: c8:4d:ac:15:fb:e3:14:36:25:2e:94:dd:75:02:7b:08:9f:c8: 20:f1:41:eb:0f:1b:4f:a7:36:be:57:03:09:a3:0f:7e:60:37: 2f:58:ee:50:bb:6a:cf:67:65:2c:99:1f:aa:fc:79:1b:1c:2e: 55:20:f7:f9:6d:fc:a1:8d:38:1e:ee:6c:30:49:62:86:e4:b8: 05:d4:e9:11:56:f7:54:ff:ae:fd:e0:9c:a7:07:f1:8a:d7:a3: 40:a1:04:b3:29:ae:0b:e1:bb:c4:59:1d:7e:49:0f:01:e9:56: e7:bb:66:d0:0e:e4:33:fe:9c:ed:1b:44:d1:48:8e:9b:8a:ce: 04:b5:50:12:e0:3a:9d:a6:62:3e:c5:bf:42:fc:27:8c:21:e1: 0a:de:30:88:d8:c1:73:e4:af:db:83:f8:c8:30:a2:b9:4b:76: 03:44:8b:6d:5f:db:c0:51:94:a9:d1:ba:54:de:b3:a1:2d:72: 56:c3:d7:6c:8a:24:26:5c:bb:36:5b:8a:f8:cb:53:ca:5e:52: ec:9e:e2:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF1gkN+DqmgkOQ6VV89OKD2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDY4ZGExMDhiY2U0ZmI1NjU1NjI0NmIzMTU3MjZmNWY2MzQ1 ODVlZjEwHhcNMjYxMDI2MDAwMDMzWhcNMjYxMDI3MDAwMDMzWjAzMTEwLwYDVQQD EygzNTc4M2I1YmY0MTE0NTY2ZTY5MTQyOTc2ODBlMGY0MmYzYzc1YjdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobPIuYanrItfP7G5iaelDmo8Q0XB 4FSlXeanyHemEhwVFSqBy5iupmPPF5ryUgow3zXNrdbU18F00B59g4sIOSgeATfg pCpC74ceiB54sey0erNvmX76DPx23nHqL2Cb5PP9yoXX+D+BNaprBv9TJCGp++Zq sPjzXdXBPnkMohn5DgbYJOiPZ5+M/jqAmAjcbkR8zbfN9Mc0fOvfRiiXSS4VWFhF 88Zymlm+WYDloShHl+K4Qg7z6VM4s6aYOJlKEW082mMB93QewXyp3ZB9Hj7UgBEx BynyVNV6VJWjwU306Up/k74hwwVUM0DSy2HnRVyq/usMlE/7QO/PH0wb4wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDV4O1v0EUVm5pFCl2gOD0Lzx1t7MB8GA1UdIwQY MBaAFGjaEIvOT7VlViRrMVcm9fY0WF7xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAt ZWVjNWQ1MGVmYTk0LzEvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yOC8yOWU5YmMtYjE5MC00MDllLTg2YjAtZWVjNWQ1MGVmYTk0 LzEvYU5vUWk4NVB0V1ZXSkdzeFZ5YjE5alJZWHZFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3iKc0wb vJd01FH2C1zead0PtWQKR1gFNr67M7jbDW2mJ3qir9S0zdAF7YkKvPxV4VhoR5XP yE2sFfvjFDYlLpTddQJ7CJ/IIPFB6w8bT6c2vlcDCaMPfmA3L1juULtqz2dlLJkf qvx5GxwuVSD3+W38oY04Hu5sMElihuS4BdTpEVb3VP+u/eCcpwfxitejQKEEsymu C+G7xFkdfkkPAelW57tm0A7kM/6c7RtE0UiOm4rOBLVQEuA6naZiPsW/QvwnjCHh Ct4wiNjBc+Sv24P4yDCiuUt2A0SLbV/bwFGUqdG6VN6zoS1yVsPXbIokJly7NluK +MtTyl5S7J7i5A== -----END CERTIFICATE-----Generated at Mon Oct 26 02:26:50 2026 by rpki-client