$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft File: dOPDNpcglLGowT1BgWhX0Zejquk.mft (raw, json) Hash identifier: 1ePlGdkUhahz+gtQ4SxLA02UpLz3jOpX4b6dGy1SIlA= Subject key identifier: A5:18:CB:44:82:DC:53:03:F3:DE:7B:60:EA:83:6C:0B:46:FA:81:91 Authority key identifier: 74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 Certificate issuer: /CN=74e3c336972094b1a8c13d41816857d197a3aae9 Certificate serial: 01A175F00A70A317DBFA15781D0FF7CF4808 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft Manifest number: 17E8 Signing time: Mon 26 Oct 2026 02:00:27 +0000 Manifest this update: Mon 26 Oct 2026 02:00:27 +0000 Manifest next update: Tue 27 Oct 2026 02:00:27 +0000 Files and hashes: 1: 3GqxL9BgsfVA5m2ZDkR-ZLLIX9A.roa (hash: Pri0BDp61F1x6W2ZNNi8m6bCY1kGNmKIt3J8iAi4+nI=) 2: 65FnmspDUVJ9_6QxvLd4l0NA4FE.roa (hash: lgYYkTyMefTXhDS2aNN91oiVE93MHjvbMsoRpFVLAkk=) 3: 6USIsr77ojsfaUkK7p_9yPX50RE.roa (hash: bxePdusDHlOz01oH/vysD1HExvewxm7Ub84+S8jsj6E=) 4: Bh0VhXCtnVTu6NYuZ4a0xAtyxnA.roa (hash: HBYP5wsCK4dtPnx1EHAW2IQhQMnr5dUB/nJJqTK+1C4=) 5: EnU8KLDk0MRS40FVtDjms_Soitw.roa (hash: rcy33n4rwkCj0xCW3i6XJv7RosymyzbT1+UqsgkLw0Q=) 6: Fe1_O6lqpZ4wU51PSyJRl5pRxgs.roa (hash: 3NI8C19YgNRWzyzmt0xuFsZNQ7eEnAdbBiag8O0XRuA=) 7: LcVUnzg476sY0cRj19anqQVr9co.roa (hash: CgyZ8RxzuluDb45z3tYn/fize5wHrZwU9v+utbAlRwk=) 8: QtjndSCGblrfab-ioVOroaNfPN4.roa (hash: 4OpyhaYwVmjq3TRkCJRrHAwNHbosmRoeTn4+UUJfDU8=) 9: dOPDNpcglLGowT1BgWhX0Zejquk.crl (hash: T10ItbUEYIFadIWxFEYrj6ybB5XRjMdRm/ACXJQ2KLw=) 10: kFKOxKY8VUTuxTf-yKfjHz8Wd2Y.roa (hash: riEmPQV4v2zfq30QZ7AZjXHbnN49xJeD9nNq0fiSPhg=) 11: lC8mVQtZgzYCvFwXFlGkBqCpw84.roa (hash: SarrKRsARvJpAVux4A8mAEIosBVax08KS/WsVU5r/mE=) 12: ooTDK5wBI-XJq8zfv_YSdFU-vlo.roa (hash: xJD4AS2qcydvJ4nIFIToFd7KJeX/bcKOS0Cq1Ky05fE=) 13: sOU9sf_TLtLowD_NZ2t2Nk3oMWk.roa (hash: A6LA4etDI922EmA77PSJlPQnzxugY9xfCjTlpLtEMx0=) 14: usyF6cqpiTZ36Hi-zUV3iBaL6mI.roa (hash: MwwYW4a1c7XEGwwS8SXJYUUEBBLKVu6KJRZWVoJlLQo=) 15: v4wBo_Qz0X5zJTIwb0QZQ9GFZms.roa (hash: IlvU1dySJCzAWqUq3ax3NvMIRPVQQDJqs9utM98mnVw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:75:f0:0a:70:a3:17:db:fa:15:78:1d:0f:f7:cf:48:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=74e3c336972094b1a8c13d41816857d197a3aae9 Validity Not Before: Oct 26 02:00:27 2026 GMT Not After : Oct 27 02:00:27 2026 GMT Subject: CN=a518cb4482dc5303f3de7b60ea836c0b46fa8191 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0e:f3:3b:5c:12:42:b3:1b:8b:d8:d4:27:8c: 02:83:cb:0d:99:b9:63:34:4e:4a:6d:29:77:18:82: 07:9b:fa:2b:77:23:b5:49:e2:90:03:c9:04:9a:e3: 1f:1f:07:e5:53:80:c8:b9:64:d8:b2:0e:75:73:84: 7d:37:57:67:02:78:a8:49:93:e6:2e:a6:71:5e:77: 74:e2:dd:97:12:e8:0f:ed:82:78:72:23:fa:31:46: fc:fa:17:7b:13:d3:ce:88:af:05:8f:fb:86:6c:84: e6:d5:46:d2:76:b3:68:48:c2:59:c1:bd:16:2a:b5: 38:f4:db:75:7d:0f:6d:8a:a1:a1:e9:63:5b:ba:2e: bc:0c:c0:19:b4:26:52:82:1a:25:e8:0a:3a:46:41: b1:1f:c1:d2:0f:c6:37:de:6e:59:21:62:13:53:e4: cf:26:1e:3c:0d:60:c0:96:0b:60:19:a4:0f:72:53: 83:ad:70:13:f3:74:f3:21:b8:a3:e4:86:b9:3e:87: e0:f2:be:d0:c4:25:dd:57:ec:2a:51:26:80:46:58: 74:6e:8d:e7:e7:5e:c2:5f:c9:08:67:af:36:d1:2b: a3:80:c3:d0:75:b8:7c:06:b2:b8:f9:f8:a1:96:f3: 2d:bc:3c:0f:35:1c:0e:8c:4a:83:ca:01:36:a1:24: eb:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:18:CB:44:82:DC:53:03:F3:DE:7B:60:EA:83:6C:0B:46:FA:81:91 X509v3 Authority Key Identifier: keyid:74:E3:C3:36:97:20:94:B1:A8:C1:3D:41:81:68:57:D1:97:A3:AA:E9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dOPDNpcglLGowT1BgWhX0Zejquk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/18c498-2171-4e1c-8d80-a6c49eb28287/1/dOPDNpcglLGowT1BgWhX0Zejquk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:f2:63:24:08:ab:86:3b:c3:e2:ba:12:3f:af:3a:1c:11:0a: 29:af:f3:14:63:d7:2a:70:95:35:7a:d5:c2:9e:8e:c9:ff:14: d4:ac:cb:c7:c0:87:87:59:81:5f:77:3d:c6:42:e1:16:0a:76: ad:6c:3a:84:dc:16:63:6f:59:e1:c1:2b:34:ed:98:99:b0:8e: f3:22:b5:38:1a:93:08:4f:6b:5e:c2:76:90:a3:f3:4e:3a:df: 31:bc:40:18:db:3f:8b:76:3e:6b:37:4a:9b:80:61:1c:5f:b8: b6:3b:ff:b4:7b:5b:49:8f:82:a7:3b:4b:6f:ff:19:53:2b:ea: c9:b1:cc:6c:ff:7a:50:53:fc:e1:cd:9b:97:32:0f:9c:1b:d6: d5:ba:38:79:b1:9b:61:fd:be:39:83:30:8f:a1:ca:7e:86:d8: b6:4a:76:9a:45:5d:85:9b:6c:5a:98:d7:e0:c4:a3:69:d3:41: 22:4c:ed:22:f4:8b:7b:1a:e5:2f:c0:c7:dd:be:ed:27:8c:32: c6:c9:1c:ce:0a:fd:83:df:f3:50:cb:0c:bd:da:d8:0b:ce:70: 23:35:6e:53:1c:47:5e:7d:0d:5f:2f:f2:5e:9e:07:ad:68:0b: ac:45:a6:d9:ad:ed:b0:bd:a5:f5:c2:1d:d5:6c:63:c2:82:00: ea:6e:66:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF18Apwoxfb+hV4HQ/3z0gIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0ZTNjMzM2OTcyMDk0YjFhOGMxM2Q0MTgxNjg1N2QxOTdh M2FhZTkwHhcNMjYxMDI2MDIwMDI3WhcNMjYxMDI3MDIwMDI3WjAzMTEwLwYDVQQD EyhhNTE4Y2I0NDgyZGM1MzAzZjNkZTdiNjBlYTgzNmMwYjQ2ZmE4MTkxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArA7zO1wSQrMbi9jUJ4wCg8sNmblj NE5KbSl3GIIHm/ordyO1SeKQA8kEmuMfHwflU4DIuWTYsg51c4R9N1dnAnioSZPm LqZxXnd04t2XEugP7YJ4ciP6MUb8+hd7E9POiK8Fj/uGbITm1UbSdrNoSMJZwb0W KrU49Nt1fQ9tiqGh6WNbui68DMAZtCZSghol6Ao6RkGxH8HSD8Y33m5ZIWITU+TP Jh48DWDAlgtgGaQPclODrXAT83TzIbij5Ia5Pofg8r7QxCXdV+wqUSaARlh0bo3n 517CX8kIZ6820SujgMPQdbh8BrK4+fihlvMtvDwPNRwOjEqDygE2oSTruwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKUYy0SC3FMD8957YOqDbAtG+oGRMB8GA1UdIwQY MBaAFHTjwzaXIJSxqME9QYFoV9GXo6rpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAt YTZjNDllYjI4Mjg3LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zZi8xOGM0OTgtMjE3MS00ZTFjLThkODAtYTZjNDllYjI4Mjg3 LzEvZE9QRE5wY2dsTEdvd1QxQmdXaFgwWmVqcXVrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1PJjJAir hjvD4roSP686HBEKKa/zFGPXKnCVNXrVwp6Oyf8U1KzLx8CHh1mBX3c9xkLhFgp2 rWw6hNwWY29Z4cErNO2YmbCO8yK1OBqTCE9rXsJ2kKPzTjrfMbxAGNs/i3Y+azdK m4BhHF+4tjv/tHtbSY+CpztLb/8ZUyvqybHMbP96UFP84c2blzIPnBvW1bo4ebGb Yf2+OYMwj6HKfobYtkp2mkVdhZtsWpjX4MSjadNBIkztIvSLexrlL8DH3b7tJ4wy xskczgr9g9/zUMsMvdrYC85wIzVuUxxHXn0NXy/yXp4HrWgLrEWm2a3tsL2l9cId 1WxjwoIA6m5m4w== -----END CERTIFICATE-----Generated at Mon Oct 26 11:40:55 2026 by rpki-client