$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft File: tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft (raw, json) Hash identifier: eLaNZZFpEvLqubkUzg1BayINOHqUgLYJbkcJh+KyVhI= Subject key identifier: 89:75:82:E4:59:16:53:8D:84:C6:53:93:D4:F3:3D:4E:84:77:C2:61 Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Certificate serial: 01A175826C53E52070F0891DF981143B85BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft Manifest number: 1ACF Signing time: Mon 26 Oct 2026 00:00:44 +0000 Manifest this update: Mon 26 Oct 2026 00:00:44 +0000 Manifest next update: Tue 27 Oct 2026 00:00:44 +0000 Files and hashes: 1: 1-gK4FaKQ6vCAd3HD5KMC9zT6LvU.roa (hash: D6YtWc2enJG4JcbTf9d9A2vAeRzN30+OR3FCjqsua4Q=) 2: 7gdlonHkctidA_Jgo0e1sPluTfw.roa (hash: L7iWiH+YVCR3BgQWnot+ADKst5Rvum0Fp/JtCnJ65RY=) 3: DQ1yVesejJpDnZvd2JLWH_7gAEU.roa (hash: iuHd9st9MGEOE3UuhPG4vRJ6eBtZs6iPypxGkfqTQSM=) 4: JlpCz-c9i9-Z_17K8F7XjOHLpJ4.roa (hash: MTi7TKa3n0d3E8E52eS58cc9MxnhlLc9ovB9GkQrKSk=) 5: MCv_Njd7Kt1jfUDJcMfP2Ew9zGA.roa (hash: 8slM4ZyNMUTgbPryNd+oyqvRv0X2KMYBpAbZ2g9V2+s=) 6: Pxzwfsnla9WCGgA_5yVN5NBVL14.roa (hash: dRusvivPw89AhWLw883YVx7O+/W5uw+jCzc5VJhBOks=) 7: dnlzr7T-KrzC8dTpRdaUUBCb42k.roa (hash: FlF41xrTHYEZQDWnwHhEl5bQr7qiicPhhj7kefuMDlI=) 8: h3NO-bNRnKL0h-LwaiCjswg7_nY.roa (hash: nge/dAbyC8BEKmPsWUQCbHBH18ANQj9ceVjvT5f7JS4=) 9: le7g6AeqMWo8tC4Pm6_9GuPpA9Y.roa (hash: M3GaptBPUtevgfpamZx3KC2EjkI+htg/GGtdiA7/WxU=) 10: o2KmTBSx7YAGDylX3itL6SdPUZE.roa (hash: lugrh1NUXlse4UYLEWT+hm10hbsF+hFuCCQ7+JOgu7c=) 11: tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl (hash: IvtPJ6gg4d8rJnPp6Ig3Ef898ExkmXhtAkGIDVZ/cME=) 12: v9V5UdS7W7gv8Mt6_7V1IzHZAiM.roa (hash: oqxmALkOA6EG36s93nwvrqkYRgI5R7v2/8FaBvM3TLU=) 13: zMhciCUgU6J6shiNhaiwocMfw14.roa (hash: c8SQXIzHCbyAhdC6MEvd2MwYwyUckczcTmVUE35TvUQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 23:31:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:75:82:6c:53:e5:20:70:f0:89:1d:f9:81:14:3b:85:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5 Validity Not Before: Oct 26 00:00:44 2026 GMT Not After : Oct 27 00:00:44 2026 GMT Subject: CN=897582e45916538d84c65393d4f33d4e8477c261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c2:ad:5a:8d:ff:c5:6a:fb:a2:d6:0b:a0:b9: 13:43:d8:ae:8f:32:dc:ab:98:5a:2e:00:6b:76:31: a0:1c:0f:f7:bf:29:cf:a2:9b:3c:61:99:c4:52:6e: 51:4f:51:17:9d:b9:2d:08:3b:97:26:b0:f6:7e:33: b7:8c:bb:dc:18:5a:3d:d8:9a:77:cb:93:71:c1:fb: 3d:61:bf:32:b1:5c:a6:7d:1e:d8:b9:be:1e:ef:c9: c0:f3:18:9b:d1:36:f6:61:d0:d8:c2:35:80:06:02: e1:e8:03:20:fc:19:f6:35:f0:0c:04:a7:55:90:c7: 20:8a:56:38:3b:15:d0:d4:b0:d2:45:75:bf:0a:8f: f1:4a:16:1c:67:9b:45:04:d9:e6:7c:bf:ba:78:f3: 25:1d:5e:48:0e:b5:3c:4d:0f:85:3f:08:07:77:c2: 20:a1:ed:ba:b0:aa:0b:86:de:de:b7:4b:96:4f:eb: 53:1e:35:a3:9f:af:ef:77:e1:a0:bf:43:a9:8d:80: 69:21:4e:0f:94:d3:9f:be:67:56:41:cf:06:51:4a: 5a:a7:26:97:8b:27:66:50:0e:9b:a5:00:00:0f:a9: e3:3a:62:f9:3b:4c:8b:08:af:e9:8a:d6:f6:5a:03: 69:d7:de:e9:2d:f9:c7:4e:78:e4:d5:1e:6d:2b:98: 65:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:75:82:E4:59:16:53:8D:84:C6:53:93:D4:F3:3D:4E:84:77:C2:61 X509v3 Authority Key Identifier: keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:be:b3:8f:b2:65:14:e3:30:35:34:86:b4:47:49:8d:6d:56: 50:8b:39:92:7a:16:14:d4:12:41:9e:2b:b0:10:ba:57:f2:13: 73:b8:d0:c5:da:5c:18:f1:f4:df:b8:f0:9b:97:a9:e3:9b:f6: e3:da:95:1a:92:db:6e:72:11:60:cc:20:cf:88:9f:81:c6:d4: 84:ba:dd:be:b8:9a:04:a2:69:a6:30:82:2c:76:0b:e6:23:1f: 71:27:63:03:76:3f:6c:f0:2d:7c:99:d2:79:ae:d9:73:9e:28: 09:2d:f4:ea:45:8a:7b:fd:e9:08:81:3c:b7:7e:26:18:8d:84: 32:df:43:58:f0:63:4f:7b:99:42:11:3e:72:dc:bd:dc:6b:7a: 99:3c:33:e6:eb:1d:38:4c:e9:ce:63:08:9e:27:01:87:83:2f: f4:c0:69:a1:be:56:27:61:6c:56:d3:9b:5b:d9:0f:35:a1:72: 94:c1:d7:b7:d4:b1:33:4f:c1:69:10:0f:16:01:54:9c:81:4d: 74:db:3b:95:9e:38:40:ba:20:06:c1:b9:94:b6:ab:a0:14:41: c8:0f:bc:0e:7d:20:c6:2a:a1:63:55:8d:6b:2a:b3:ca:1b:a3: a3:25:1d:3f:71:64:b1:c4:ff:f7:09:2a:4e:ed:34:7c:25:25: d3:37:57:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF1gmxT5SBw8Ikd+YEUO4W/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI2YzE2N2RmYTk4ODJiMmFhOGY4NDU5NWY1OGE5N2MzMDVj YTQzYzUwHhcNMjYxMDI2MDAwMDQ0WhcNMjYxMDI3MDAwMDQ0WjAzMTEwLwYDVQQD Eyg4OTc1ODJlNDU5MTY1MzhkODRjNjUzOTNkNGYzM2Q0ZTg0NzdjMjYxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcKtWo3/xWr7otYLoLkTQ9iujzLc q5haLgBrdjGgHA/3vynPops8YZnEUm5RT1EXnbktCDuXJrD2fjO3jLvcGFo92Jp3 y5Nxwfs9Yb8ysVymfR7Yub4e78nA8xib0Tb2YdDYwjWABgLh6AMg/Bn2NfAMBKdV kMcgilY4OxXQ1LDSRXW/Co/xShYcZ5tFBNnmfL+6ePMlHV5IDrU8TQ+FPwgHd8Ig oe26sKoLht7et0uWT+tTHjWjn6/vd+Ggv0OpjYBpIU4PlNOfvmdWQc8GUUpapyaX iydmUA6bpQAAD6njOmL5O0yLCK/pitb2WgNp197pLfnHTnjk1R5tK5hlPwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIl1guRZFlONhMZTk9TzPU6Ed8JhMB8GA1UdIwQY MBaAFLbBZ9+piCsqqPhFlfWKl8MFykPFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUt YWNmYzNkMmMyNTIyLzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYy83M2JlZWItNmEwNS00Y2NhLTg2YmUtYWNmYzNkMmMyNTIy LzEvdHNGbjM2bUlLeXFvLUVXVjlZcVh3d1hLUThVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADL6zj7Jl FOMwNTSGtEdJjW1WUIs5knoWFNQSQZ4rsBC6V/ITc7jQxdpcGPH037jwm5ep45v2 49qVGpLbbnIRYMwgz4ifgcbUhLrdvriaBKJppjCCLHYL5iMfcSdjA3Y/bPAtfJnS ea7Zc54oCS306kWKe/3pCIE8t34mGI2EMt9DWPBjT3uZQhE+cty93Gt6mTwz5usd OEzpzmMInicBh4Mv9MBpob5WJ2FsVtObW9kPNaFylMHXt9SxM0/BaRAPFgFUnIFN dNs7lZ44QLogBsG5lLaroBRByA+8Dn0gxiqhY1WNayqzyhujoyUdP3FkscT/9wkq Tu00fCUl0zdXwA== -----END CERTIFICATE-----Generated at Mon Oct 26 06:01:06 2026 by rpki-client