$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft File: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft (raw, json) Hash identifier: rexKSP5JZKVeDvcVwbgaS3Yh6pxVmiZPFSRonznW9vE= Subject key identifier: 39:DD:19:8C:45:AD:33:78:A9:4C:E3:42:A7:B1:37:22:3D:89:E1:E6 Authority key identifier: 7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 Certificate issuer: /CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Certificate serial: 01A17401DBDE09F07BF188959309EE23BA83 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft Manifest number: 1AD6 Signing time: Sun 25 Oct 2026 17:00:41 +0000 Manifest this update: Sun 25 Oct 2026 17:00:41 +0000 Manifest next update: Mon 26 Oct 2026 17:00:41 +0000 Files and hashes: 1: 5bw3FxzpBWgCUPFGor6BeS_x13E.roa (hash: vbv6Fyo711z5Y6WllYiF1+hQCuBRfjBj2SnqOdmQ/Ko=) 2: KClfXxgk0wRzsCWY2cBjE-9OUBw.roa (hash: mZTkzVHUlv75y3/sF2jX1yQ3NF8yk3kbKCgMEXnClVc=) 3: OPUmPq2MCSSLajil_N8xjasEED0.roa (hash: 3ErCgLhuftk7qbnRHyFbXfh2aIHoI6pTjwOjuX9ybbI=) 4: PVZJLc9tODZFqXK-cJmdd7K-baM.roa (hash: nv2FNyj3NvI+l9/bwumlpSj6KXBZJHOiEr8IoIDWWBs=) 5: RD2bQy42cJtcLUpPd6bwEgSdC5g.roa (hash: EXR+FPHGsONaMy04ozJgDUBq2GB63B3p6cERU165gBY=) 6: RTtrcIMD_1Pooh2hybtppswd0Cs.roa (hash: gHzBppcBQRTrZFKZdzTeaIz8G3KIuJKhpm0DEQdKM5o=) 7: ZCwACbeLHY5EcAcLa6xI6rDBVJ8.roa (hash: 3HGI+6qeROUPLoU4ORnifqLKfR+6cyux8LhHwuDQCzI=) 8: fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl (hash: 2FSz+5nbkjMC6WRAhvwYXEhkonPuvyDwqGFrU7wtmdY=) 9: iSU9e5IrccHCBZ1QAcoO2Ix2J78.asa (hash: Xmy3joGzE7DOFCUoxtKq+8sQb3nS9R29UjEKhSZ9+oA=) 10: jwL6ZedQy9jrx6zRLmC34t2VuNI.roa (hash: JjbOSGoIoxnMnWQdAupasyiznFb2Rz/tCe7dz0MfJkM=) 11: taRmnaIWL0Lvnk8-ztV91eCLqRU.roa (hash: Duq2TEYTpeDcixHF5tGgiY61uowG5KKhAb2ieJRR8c4=) 12: vf8ebLLhP7oS8TkuOsSj2_WdgLk.roa (hash: HHDiRi1+BOUzXevtTy1X6aaBtWS9/5nRjSa9y3Tpifg=) 13: wUgkHiQ86rCh1plfV-1fhX-AaMg.roa (hash: 86ia7TUjUS+IoQf3wQbTT6jWw8UWMBIHEfrKwtfOipM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 15:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:74:01:db:de:09:f0:7b:f1:88:95:93:09:ee:23:ba:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d04c25c2f8b47e5daf52d1c4c5a50999dd0a0a9 Validity Not Before: Oct 25 17:00:41 2026 GMT Not After : Oct 26 17:00:41 2026 GMT Subject: CN=39dd198c45ad3378a94ce342a7b137223d89e1e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:85:a4:a4:25:f3:f6:9e:bc:60:ed:6b:fd:21: 4e:32:e3:0b:ea:25:d3:51:2a:b2:4e:5a:f0:4e:93: a6:f6:59:2a:fd:48:9c:6b:90:5a:87:e5:8a:f3:eb: 5e:ff:ab:ba:8f:7f:f9:ab:61:14:ae:0c:65:64:46: d3:c2:11:21:66:84:15:3a:74:d3:e2:27:f6:a8:64: 52:6d:0b:03:94:73:2b:d1:72:54:86:ab:c3:60:1b: c4:d7:b3:4d:44:65:b2:a5:f7:0c:dd:6d:f2:e6:49: 50:ca:1d:8f:fe:f2:60:35:85:06:62:c2:74:b7:93: 26:8b:6d:45:5d:5f:6a:d9:78:fc:1d:f6:4c:7a:3c: 51:0b:de:cb:e1:fd:58:b5:8d:3c:4c:77:d0:4d:c1: 38:d8:9a:8d:2e:ea:71:33:b7:96:04:a3:85:6a:46: 6e:d3:74:59:74:16:44:af:ce:be:33:26:22:1c:0a: 24:5e:c9:81:a7:1e:47:22:88:88:fe:2e:70:f0:90: 65:89:b3:1e:8a:12:fd:d1:3f:6b:a5:fd:5e:cb:7e: b3:71:db:a3:74:c2:b9:78:b4:6c:51:e1:0d:a7:73: ad:f6:00:6f:f6:45:71:42:e1:3d:8e:fe:3e:eb:13: 77:f9:b0:e8:43:22:27:7a:d7:f6:9f:31:38:5a:ee: 61:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:DD:19:8C:45:AD:33:78:A9:4C:E3:42:A7:B1:37:22:3D:89:E1:E6 X509v3 Authority Key Identifier: keyid:7D:04:C2:5C:2F:8B:47:E5:DA:F5:2D:1C:4C:5A:50:99:9D:D0:A0:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/971cc4-54d5-4c28-a1c3-e63e94cba09f/1/fQTCXC-LR-Xa9S0cTFpQmZ3QoKk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:24:20:f4:5c:63:62:c3:54:97:bb:e7:10:4c:b6:b1:81:5c: e8:aa:de:b6:8f:59:d5:3c:d7:c7:db:0e:a3:8c:13:0a:c7:bd: 96:c8:f6:a0:70:f7:ff:82:8f:21:ec:08:cf:cd:0e:4c:d1:42: 4f:df:48:ac:a5:a1:db:c3:1d:e4:d6:e0:4d:0c:b2:85:62:13: be:53:03:fb:cf:c8:96:ff:8c:a4:b3:85:c5:26:eb:49:a5:ae: a0:c9:6f:8d:68:4f:d7:4a:6a:9f:6d:1d:d2:76:8a:d8:3a:17: 01:87:44:ae:4a:e5:4d:35:73:ab:e6:ca:63:83:09:22:52:6b: e3:89:f3:62:f8:21:3e:0d:0e:48:84:ba:67:c3:cc:e6:94:87: 4f:43:b0:c9:83:fa:6e:7c:c1:f2:8a:a6:a4:61:6c:38:32:bc: 8a:39:5e:fd:ec:82:87:3b:24:a8:3e:b1:9a:24:2c:aa:f0:2f: 08:e8:db:9d:9b:bf:75:8d:3b:2c:68:5f:79:c3:ae:52:a0:2b: b4:fd:f5:3d:a1:6d:3e:0e:af:0c:51:be:0d:53:06:cf:b5:08: 41:91:82:b3:8f:91:ea:25:47:0d:27:c0:df:fe:9b:a3:5d:01: bf:f5:6c:13:98:7f:30:99:d5:2f:0a:17:57:4f:a0:ce:e3:6b: 68:8d:08:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF0AdveCfB78YiVkwnuI7qDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMDRjMjVjMmY4YjQ3ZTVkYWY1MmQxYzRjNWE1MDk5OWRk MGEwYTkwHhcNMjYxMDI1MTcwMDQxWhcNMjYxMDI2MTcwMDQxWjAzMTEwLwYDVQQD EygzOWRkMTk4YzQ1YWQzMzc4YTk0Y2UzNDJhN2IxMzcyMjNkODllMWU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIWkpCXz9p68YO1r/SFOMuML6iXT USqyTlrwTpOm9lkq/Uica5Bah+WK8+te/6u6j3/5q2EUrgxlZEbTwhEhZoQVOnTT 4if2qGRSbQsDlHMr0XJUhqvDYBvE17NNRGWypfcM3W3y5klQyh2P/vJgNYUGYsJ0 t5Mmi21FXV9q2Xj8HfZMejxRC97L4f1YtY08THfQTcE42JqNLupxM7eWBKOFakZu 03RZdBZEr86+MyYiHAokXsmBpx5HIoiI/i5w8JBlibMeihL90T9rpf1ey36zcduj dMK5eLRsUeENp3Ot9gBv9kVxQuE9jv4+6xN3+bDoQyInetf2nzE4Wu5hwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDndGYxFrTN4qUzjQqexNyI9ieHmMB8GA1UdIwQY MBaAFH0Ewlwvi0fl2vUtHExaUJmd0KCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMt ZTYzZTk0Y2JhMDlmLzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC85NzFjYzQtNTRkNS00YzI4LWExYzMtZTYzZTk0Y2JhMDlm LzEvZlFUQ1hDLUxSLVhhOVMwY1RGcFFtWjNRb0trLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbyQg9Fxj YsNUl7vnEEy2sYFc6Kreto9Z1TzXx9sOo4wTCse9lsj2oHD3/4KPIewIz80OTNFC T99IrKWh28Md5NbgTQyyhWITvlMD+8/Ilv+MpLOFxSbrSaWuoMlvjWhP10pqn20d 0naK2DoXAYdErkrlTTVzq+bKY4MJIlJr44nzYvghPg0OSIS6Z8PM5pSHT0OwyYP6 bnzB8oqmpGFsODK8ijle/eyChzskqD6xmiQsqvAvCOjbnZu/dY07LGhfecOuUqAr tP31PaFtPg6vDFG+DVMGz7UIQZGCs4+R6iVHDSfA3/6bo10Bv/VsE5h/MJnVLwoX V0+gzuNraI0I9w== -----END CERTIFICATE-----Generated at Mon Oct 26 01:43:11 2026 by rpki-client