$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft File: 6E011NZFnvXzVT6jEODGW7Ow8Nk.mft (raw, json) Hash identifier: VDGHYMPWiqSEIc2yc8PcGPZobXFU0NDfSkDX9dUhY+k= Subject key identifier: 35:46:7C:0A:81:05:6C:20:D0:86:77:70:04:80:5B:3D:89:A1:A6:4D Authority key identifier: E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9 Certificate issuer: /CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9 Certificate serial: 01A1065C7D409DE6D0165218FDE799893220 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft Manifest number: 71 Signing time: Sun 04 Oct 2026 10:01:26 +0000 Manifest this update: Sun 04 Oct 2026 10:01:26 +0000 Manifest next update: Mon 05 Oct 2026 10:01:26 +0000 Files and hashes: 1: 1-Who4Q2rbn_kVj6d4jBuo7EyZXU.roa (hash: 3bpn972VO9RQE0TN3kp3eT7lQ5xZddl/U+JX8A0NWEo=) 2: 1eat7kVhwI0NF9zmp-ZLW6D-Q6s.roa (hash: At/ZGdd0XmXuG3jDN8HqWqYTXTdIe4QBW/whXsaVYX4=) 3: 2kdzmxuCafuUiO69QodWAP3jjNo.roa (hash: n+PmPuSrz+Vmqyv/TxJNc5zJxBUqdGdTO/p9uF5xXVM=) 4: 6E011NZFnvXzVT6jEODGW7Ow8Nk.crl (hash: uFE/Ljg1U6+6qctNKg3VQjnlk15e97UV9dJpu+XPgqg=) 5: 9AW6r27TH1EAMHjd_YZSU0oU4EI.roa (hash: sFiHnzyiCe1Zzs5hkDs9Dt0DaEXmrCEsdbf1l81uvzo=) 6: CLu-hJp8E1jp1UI5mxQRTW3Ttr8.roa (hash: SqhKPPUpmk1ZIvkYjxjSqQ87oLQ+aw2o3t/ut561QO0=) 7: G-_Sqy3lQmPxRPqItphx0crOfIk.roa (hash: 2upf05uV6e8ge5OYIGT5DhgfAMj4o3LUXR0Q4EoSv5g=) 8: PRNXIa7pj3l7k4vmptuAPjSfNEk.roa (hash: v1ISA4M6DJZF27TSGP+2L6jr0B1RUIZS3K9ipuR9h1M=) 9: Y98J5H8dP6uynLQgUuV7Sd4ksx8.roa (hash: n8Cvg8mAyn8pit8Uif+5s8ZG43rBWsDPc3DD9USosKg=) 10: Z0G4TePi6FBtP8vtCIIR8H00K4Y.roa (hash: kplNUBm4sPbginB6id3hM1OVc3rYHCy2XoSdCzh5S6o=) 11: _G7x70z_crq_YPgENZrLk-BlWME.roa (hash: 7QvtG+FvFNtlBc1zH5bSkEYY7paSz2Wp3FjS4c29EY0=) 12: wcntyMnez7nlTAtvjv24DhOdK_Q.roa (hash: 6FfBlpmDYKCNFY0GBitPAgQhzWgSPgHRpjHlTxJ1p7Q=) 13: xretZ-0tku4dEDuuPBjp5hipxR4.roa (hash: h8xf705U/94jYJickJO/2iQyU/3UKOcIpRfpNQ5uKf0=) 14: zjvEKiChMvD69qRICfCkNpQv40Y.roa (hash: Js60cDM4uBQGib4vfYjqpe94HFR3sPFzxFsC8qGgWnA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 05:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:06:5c:7d:40:9d:e6:d0:16:52:18:fd:e7:99:89:32:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e84d35d4d6459ef5f3553ea310e0c65bb3b0f0d9 Validity Not Before: Oct 4 10:01:26 2026 GMT Not After : Oct 5 10:01:26 2026 GMT Subject: CN=35467c0a81056c20d086777004805b3d89a1a64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:c2:3a:13:e1:52:28:95:25:7c:d2:38:78:08: bc:c3:3a:b1:b3:8c:5c:ac:a5:cf:f4:0b:21:1f:43: 81:7d:67:08:20:a6:0a:12:9d:e8:46:df:83:45:b0: c8:0f:c1:b1:3e:26:42:8d:4e:22:09:c3:21:96:a1: 99:7b:00:2a:d8:9d:91:e1:96:8f:51:66:f9:a2:7e: 8d:87:11:bb:18:32:70:87:81:bc:e2:d7:73:8a:31: 9a:44:9f:15:68:fe:3d:35:f9:ad:dc:e2:4e:88:40: 68:88:74:99:3a:5f:d5:a6:30:ab:d3:54:8b:e8:7e: 76:3d:07:fc:8c:b2:93:14:23:2f:f0:2c:7e:35:a8: 9e:af:2d:1b:00:47:79:4e:00:6c:39:99:9a:67:ad: bc:aa:dd:3c:fe:79:44:4a:f5:f9:a6:fd:6f:de:88: c4:89:31:8c:a7:ea:1d:6a:fd:4a:1f:fd:dc:ab:2a: 9c:87:47:9a:d9:d3:19:fd:de:00:ef:a0:9a:f0:63: 96:75:78:41:9a:0a:8a:dc:06:e9:68:18:38:d9:a5: 87:65:82:33:52:2a:68:2a:ee:92:6f:39:d6:d7:6d: 7f:01:32:b9:6b:2f:12:a4:c8:44:e4:43:21:2d:f0: b1:d8:19:85:52:8c:1c:8c:7e:18:95:c2:a2:37:6b: 9b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:46:7C:0A:81:05:6C:20:D0:86:77:70:04:80:5B:3D:89:A1:A6:4D X509v3 Authority Key Identifier: keyid:E8:4D:35:D4:D6:45:9E:F5:F3:55:3E:A3:10:E0:C6:5B:B3:B0:F0:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6E011NZFnvXzVT6jEODGW7Ow8Nk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/39/ec3f8c-dc7a-40d2-8f44-a524838776bd/1/6E011NZFnvXzVT6jEODGW7Ow8Nk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:ea:20:ce:11:c3:84:94:05:0e:19:73:30:93:81:d1:1b:46: 4d:aa:5b:0d:df:b5:bc:3c:bf:15:ee:7c:55:e8:0c:cb:e4:5d: 94:0a:50:06:19:27:31:c5:98:3c:70:11:2a:14:38:28:83:de: 1b:a0:bc:15:5a:d5:38:c1:5b:82:25:06:80:6f:cf:58:2b:a8: 86:7e:ff:4c:9c:05:3e:99:a0:88:2f:3e:32:42:5a:44:7e:d9: 6a:53:d1:55:e8:51:5c:dc:81:6b:c5:f7:14:dc:c9:4b:8e:6e: 9c:6e:79:70:5f:9a:a4:86:87:bb:ee:6a:6d:57:7b:7b:86:d5: ed:9b:34:09:b4:fa:83:d5:b5:ca:47:98:fb:93:35:df:5e:13: c2:d9:0e:46:7c:a1:67:da:a0:55:1b:9b:90:f6:19:62:2a:af: 69:5d:ef:92:d6:ba:62:c8:74:e8:ab:22:aa:9f:7a:b0:d0:77: 3e:e0:34:c1:b1:73:72:11:9d:2b:2e:ed:d1:ca:ac:69:4e:3b: 74:80:b0:33:24:98:fc:07:cd:53:aa:a9:6e:96:cc:f9:51:05: de:45:7f:a3:ba:a1:de:16:e5:2b:7b:8b:55:e6:98:cb:50:51: e9:b2:c6:8d:9d:97:d2:2b:52:b7:30:83:4c:59:f4:98:b3:66: da:48:0b:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEGXH1AnebQFlIY/eeZiTIgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NGQzNWQ0ZDY0NTllZjVmMzU1M2VhMzEwZTBjNjViYjNi MGYwZDkwHhcNMjYxMDA0MTAwMTI2WhcNMjYxMDA1MTAwMTI2WjAzMTEwLwYDVQQD EygzNTQ2N2MwYTgxMDU2YzIwZDA4Njc3NzAwNDgwNWIzZDg5YTFhNjRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlsI6E+FSKJUlfNI4eAi8wzqxs4xc rKXP9AshH0OBfWcIIKYKEp3oRt+DRbDID8GxPiZCjU4iCcMhlqGZewAq2J2R4ZaP UWb5on6NhxG7GDJwh4G84tdzijGaRJ8VaP49Nfmt3OJOiEBoiHSZOl/VpjCr01SL 6H52PQf8jLKTFCMv8Cx+Naiery0bAEd5TgBsOZmaZ628qt08/nlESvX5pv1v3ojE iTGMp+odav1KH/3cqyqch0ea2dMZ/d4A76Ca8GOWdXhBmgqK3AbpaBg42aWHZYIz UipoKu6SbznW121/ATK5ay8SpMhE5EMhLfCx2BmFUowcjH4YlcKiN2ubNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDVGfAqBBWwg0IZ3cASAWz2JoaZNMB8GA1UdIwQY MBaAFOhNNdTWRZ7181U+oxDgxluzsPDZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkUwMTFOWkZudlh6VlQ2akVPREdXN093OE5rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOS9lYzNmOGMtZGM3YS00MGQyLThmNDQt YTUyNDgzODc3NmJkLzEvNkUwMTFOWkZudlh6VlQ2akVPREdXN093OE5rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOS9lYzNmOGMtZGM3YS00MGQyLThmNDQtYTUyNDgzODc3NmJk LzEvNkUwMTFOWkZudlh6VlQ2akVPREdXN093OE5rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT+ogzhHD hJQFDhlzMJOB0RtGTapbDd+1vDy/Fe58VegMy+RdlApQBhknMcWYPHARKhQ4KIPe G6C8FVrVOMFbgiUGgG/PWCuohn7/TJwFPpmgiC8+MkJaRH7ZalPRVehRXNyBa8X3 FNzJS45unG55cF+apIaHu+5qbVd7e4bV7Zs0CbT6g9W1ykeY+5M1314TwtkORnyh Z9qgVRubkPYZYiqvaV3vkta6Ysh06Ksiqp96sNB3PuA0wbFzchGdKy7t0cqsaU47 dICwMySY/AfNU6qpbpbM+VEF3kV/o7qh3hblK3uLVeaYy1BR6bLGjZ2X0itStzCD TFn0mLNm2kgL/g== -----END CERTIFICATE-----Generated at Sun Oct 4 13:36:43 2026 by rpki-client