$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft File: fDw50YmeaZv1F3QY7jgUie3_Q4A.mft (raw, json) Hash identifier: hnwAt83nJEHiEQGtyD1RJn0uUKZIdoAPqINfed5ms94= Subject key identifier: 47:32:E4:D5:B3:1D:62:4C:E6:79:E7:8B:0B:A3:A3:84:0E:B5:10:80 Authority key identifier: 7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80 Certificate issuer: /CN=7c3c39d1899e699bf5177418ee381489edff4380 Certificate serial: 01A17DAA35296488319AF9E5D5F76BD50D3F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft Manifest number: 1AEC Signing time: Tue 27 Oct 2026 14:01:09 +0000 Manifest this update: Tue 27 Oct 2026 14:01:09 +0000 Manifest next update: Wed 28 Oct 2026 14:01:09 +0000 Files and hashes: 1: 5SEARh8FCEo871iB7G34fI2Kpe4.roa (hash: m8tzPmTHhc1WTCJBLsi032NvSAtwSGzKJid4Omy7Mh4=) 2: BBgeRSvbUJdniHYX4zOgCcL8ACY.roa (hash: PLe5zqvpsl1axyHkG+6mNC+e0kIU1k+pLvAFxSmrAmU=) 3: GINhKUhmBtKk0TkbBRxpcNSu6zI.roa (hash: AfFS2Kk3dLWfENSQf5EMy1ayLLvaFvbW7wW4mzMrY2c=) 4: GcjqtR6eaVf9zI7HkXKSnJA3w6w.roa (hash: A4MXiuxUupC9OPHA/5SoE0YyMSrNretsQcoN/Jow0+w=) 5: UxGBNLJORbA-dUtSWizJlzSR79A.roa (hash: iSbtbOdc4793QhhKCfmSFXrRr7lnZaOwHAQy1vMKWow=) 6: VI1RqKQ9FUKeH02MRHEork21o40.roa (hash: wdOOodFBuGweEJw4KzRpikC1wFqxQBn+ps1AczyBeZ8=) 7: Yu1zmysTEBKjL5YYLMMg4Z_eWEA.roa (hash: KRT9o5BiHue3+B57E9epeCM9JN4yPOhoqN4HYF+hLEU=) 8: fDw50YmeaZv1F3QY7jgUie3_Q4A.crl (hash: yixekrj7tw7Wgdi2SbHXM4E/6WoE+owhvZ1uVCE6FmQ=) 9: gxHDLsArjTiXKEpHJWMyRpUv3cY.roa (hash: dCObsibTUgKigew1g86RJZOg/QuYkH7A+/+pCpHO7nk=) 10: nuyOFFadfRrO-PHC8XAHyHRujfs.roa (hash: /f8gp/JEgFhNhBZOt0Zfqqd/+VO8Z7hxkEAexMPxwQE=) 11: u1nf-Thyw228svKtPSH3GG9Q0kM.roa (hash: zfCV7njN88258Q8HEPbW3g+KPAWnYoYtUU7LB/pH0+w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7d:aa:35:29:64:88:31:9a:f9:e5:d5:f7:6b:d5:0d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3c39d1899e699bf5177418ee381489edff4380 Validity Not Before: Oct 27 14:01:09 2026 GMT Not After : Oct 28 14:01:09 2026 GMT Subject: CN=4732e4d5b31d624ce679e78b0ba3a3840eb51080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:67:d5:6b:6f:d0:88:1d:66:e5:06:f3:7c:d3: 2d:c0:72:2b:cc:43:3e:eb:e7:83:e5:aa:76:8e:a4: c8:84:8b:9b:4f:bf:44:ec:8d:99:07:c4:6c:42:a3: 4d:d7:ca:3b:50:ce:7d:ac:16:8d:95:5d:a2:bb:b9: 7e:00:97:a8:3b:f5:5d:fe:0b:fc:93:6d:46:02:99: 15:00:e1:9b:92:51:fc:a6:28:be:60:b7:d4:68:73: 9c:1c:04:06:04:18:11:53:49:a5:8e:f4:b3:8f:77: 0e:b6:86:69:14:c6:4f:68:18:37:27:9f:d2:86:ff: 0e:a3:a7:1a:74:57:08:48:e7:d6:f6:a7:82:64:c2: 27:35:cc:a3:a2:8e:c0:cf:95:2a:91:09:67:9d:52: 36:c9:ab:81:cd:65:aa:15:9d:5f:06:bb:fd:a6:92: e1:61:3b:b3:42:e9:50:42:6c:0e:3f:81:21:02:d4: e8:5f:8a:89:b3:72:a9:9c:3f:d0:22:56:61:f4:32: 5b:eb:44:3a:a9:96:11:34:01:7b:f1:f5:0f:4b:96: af:d7:16:a4:b6:df:82:20:cf:f1:95:da:3f:7a:e7: f1:7f:27:6a:20:6d:0d:62:f6:50:2b:5b:20:af:0a: ed:70:42:d0:7f:9c:a7:a9:49:f8:1a:b6:97:f8:30: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:32:E4:D5:B3:1D:62:4C:E6:79:E7:8B:0B:A3:A3:84:0E:B5:10:80 X509v3 Authority Key Identifier: keyid:7C:3C:39:D1:89:9E:69:9B:F5:17:74:18:EE:38:14:89:ED:FF:43:80 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fDw50YmeaZv1F3QY7jgUie3_Q4A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c800c9-51b5-4589-9260-063fcdd3a057/1/fDw50YmeaZv1F3QY7jgUie3_Q4A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:56:61:4e:e4:4f:c2:c3:6a:f0:c8:ae:e0:83:18:3a:ca:b3: a0:2d:a7:1c:e7:1d:06:80:84:62:49:ae:6b:2e:f5:b4:1b:07: a6:d2:5b:6e:96:bb:e5:93:be:d0:1f:c4:26:cf:53:e5:8c:33: 22:ce:bc:e8:03:5f:2b:95:cb:22:7e:f8:64:c2:cf:c9:14:11: a4:4e:7a:0e:36:c4:11:a6:ed:34:eb:ab:21:94:3a:93:24:20: 29:47:32:1e:ad:b5:ac:fa:ff:2a:47:9a:93:9d:2b:1a:2a:91: 4c:64:27:6f:05:c7:1f:26:6e:31:8f:68:dc:6d:45:a6:c4:77: d1:ff:16:65:89:3e:ab:19:e8:19:0f:6d:fb:9c:8b:80:14:9a: 8d:2c:31:71:d8:69:83:05:00:c7:eb:4c:36:04:2b:cd:4d:f4: 43:a9:c2:8f:9e:62:b3:d7:6c:0f:b1:49:1b:03:be:a7:36:6c: 45:8d:07:b8:6a:ee:e6:26:63:24:2b:81:80:2b:30:62:6d:6c: a4:f7:07:4e:f5:2b:88:e5:01:31:d9:be:6a:8c:ff:62:76:5e: 62:0d:b6:90:de:e2:ea:fd:65:11:17:ec:be:0b:76:c3:01:8a: 17:7f:ca:06:19:ec:d1:63:99:ee:8b:1b:70:d2:e3:8b:ac:9b: 6e:fd:25:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF9qjUpZIgxmvnl1fdr1Q0/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2MzOWQxODk5ZTY5OWJmNTE3NzQxOGVlMzgxNDg5ZWRm ZjQzODAwHhcNMjYxMDI3MTQwMTA5WhcNMjYxMDI4MTQwMTA5WjAzMTEwLwYDVQQD Eyg0NzMyZTRkNWIzMWQ2MjRjZTY3OWU3OGIwYmEzYTM4NDBlYjUxMDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnmfVa2/QiB1m5QbzfNMtwHIrzEM+ 6+eD5ap2jqTIhIubT79E7I2ZB8RsQqNN18o7UM59rBaNlV2iu7l+AJeoO/Vd/gv8 k21GApkVAOGbklH8pii+YLfUaHOcHAQGBBgRU0mljvSzj3cOtoZpFMZPaBg3J5/S hv8Oo6cadFcISOfW9qeCZMInNcyjoo7Az5UqkQlnnVI2yauBzWWqFZ1fBrv9ppLh YTuzQulQQmwOP4EhAtToX4qJs3KpnD/QIlZh9DJb60Q6qZYRNAF78fUPS5av1xak tt+CIM/xldo/eufxfydqIG0NYvZQK1sgrwrtcELQf5ynqUn4GraX+DDwrwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEcy5NWzHWJM5nnniwujo4QOtRCAMB8GA1UdIwQY MBaAFHw8OdGJnmmb9Rd0GO44FInt/0OAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAt MDYzZmNkZDNhMDU3LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNi9jODAwYzktNTFiNS00NTg5LTkyNjAtMDYzZmNkZDNhMDU3 LzEvZkR3NTBZbWVhWnYxRjNRWTdqZ1VpZTNfUTRBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOFZhTuRP wsNq8Miu4IMYOsqzoC2nHOcdBoCEYkmuay71tBsHptJbbpa75ZO+0B/EJs9T5Ywz Is686ANfK5XLIn74ZMLPyRQRpE56DjbEEabtNOurIZQ6kyQgKUcyHq21rPr/Kkea k50rGiqRTGQnbwXHHyZuMY9o3G1FpsR30f8WZYk+qxnoGQ9t+5yLgBSajSwxcdhp gwUAx+tMNgQrzU30Q6nCj55is9dsD7FJGwO+pzZsRY0HuGru5iZjJCuBgCswYm1s pPcHTvUriOUBMdm+aoz/YnZeYg22kN7i6v1lERfsvgt2wwGKF3/KBhns0WOZ7osb cNLji6ybbv0lZQ== -----END CERTIFICATE-----Generated at Tue Oct 27 20:48:34 2026 by rpki-client