$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json) Hash identifier: TTDad1zumdd8nxAAJmwmxvpU9JHQvbBWL/jf92Dsp/U= Subject key identifier: 32:09:C9:90:68:B1:1B:2E:67:79:D8:AB:DF:E8:5F:CC:B0:A4:29:CA Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 01A1927A3080680C919539082B5762025D45 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft Manifest number: 1AD8 Signing time: Sat 31 Oct 2026 15:00:43 +0000 Manifest this update: Sat 31 Oct 2026 15:00:43 +0000 Manifest next update: Sun 01 Nov 2026 15:00:43 +0000 Files and hashes: 1: 1pNjMggR1gYBaftihFMx8w1rMhE.roa (hash: PULZtkL3C3zDaM8kMCwf21Yb0UEXTXjrHY8fh/1iHFc=) 2: BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa (hash: HBZO37pz26No65orIL67yFB8MvBngZCIHxDCzlTkjJc=) 3: C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa (hash: hyN/ftVawg2QF6kkYn1VlnFyi9JVIm7PN5l5sJloEAU=) 4: CiXCz7OWck5adEg6z95YRceHxmU.roa (hash: EasCRjc+VBWg+tlVvV7czSSDbpGCqgxTM2n5TXY0Ipc=) 5: Sug4vWSNyHdKWqfR473yYmyLdbA.roa (hash: fFBg2JXVgrhME2wCNd7RaCIs1pYUVhgUjrsuVrTCtEE=) 6: Uqxv6RJDJys9akW4OeqacWtytrA.roa (hash: RSQidgq4mEPgxtmCFTLFsYGLsEkeze9gOf1NNbRSvgc=) 7: Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa (hash: DTSBhlEZWBIgKWeFJQfKtS9sYqKdFbuY0AXldEHxAZ4=) 8: eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa (hash: X2Eq1j8xxP8127RbRQQH82ZQaRO794u+GIRwZ/G/1eM=) 9: mK3OtIQBuc5E_Igw6gzRMSv2d3c.roa (hash: DMwAvTUmsGM0zrMHUTJobXjFU2+cLUzH4tvhaMwkiwc=) 10: nUVyELULlyE5fyAdMqySIUcD1Kg.roa (hash: 7IAppAs9x9RzUF7a3+rIPbPjrq3AFXyVcrF/g7C0QPU=) 11: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: zsTvAfqTz1HkwQinSB2h2uw+BB8LxNRc/QC8ObTbKHw=) 12: taXjOwEPFjUj9cMa7Gq70xb_Xw8.roa (hash: amO1PgtWxEDUcYd/ZIcEzv+wLt54N13hJwoq+TKEsJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Nov 2026 15:00:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:92:7a:30:80:68:0c:91:95:39:08:2b:57:62:02:5d:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Oct 31 15:00:43 2026 GMT Not After : Nov 1 15:00:43 2026 GMT Subject: CN=3209c99068b11b2e6779d8abdfe85fccb0a429ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:7b:7c:ae:a2:0a:07:56:ee:e3:4c:6b:77: 20:e0:87:2d:47:34:fa:4b:80:c0:81:4e:1c:ab:8c: 26:b2:07:7f:45:c0:73:72:f1:0a:14:2b:f2:11:e5: 1e:22:0e:10:6b:b2:09:98:e1:e8:5b:0f:e1:e6:f9: 91:76:6a:80:38:2a:6e:26:2f:6a:e3:48:69:6e:44: 02:de:b2:38:4a:88:b9:84:6f:2f:6c:40:37:a5:5f: 55:63:7a:90:0e:13:7b:a8:65:8d:12:10:10:c9:c3: 1d:d3:7b:2d:89:4f:81:11:d4:58:79:f5:8d:d9:37: d8:40:70:eb:32:9d:5a:00:55:bc:24:dc:7c:a8:3f: 6c:ba:0b:51:1f:66:42:4e:d2:f3:23:44:ef:89:b5: bd:81:e4:93:f1:d8:ef:2d:6a:71:d1:c1:a2:f6:b2: ee:61:5b:c9:d3:40:30:41:e7:d1:7f:53:70:98:29: 6c:c5:1b:10:dd:d5:64:a3:b2:77:87:d0:e6:89:23: 43:67:ac:71:d4:c9:da:54:7d:c1:41:9f:8e:01:6f: 6e:90:ae:87:ae:8d:73:4b:c3:08:b6:73:34:ea:4c: 94:a1:24:19:5b:9e:aa:d6:db:14:cb:b2:8f:e6:6f: 2a:c4:fd:c3:4d:83:14:f3:41:dc:2d:6f:da:3e:a5: cf:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:09:C9:90:68:B1:1B:2E:67:79:D8:AB:DF:E8:5F:CC:B0:A4:29:CA X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a0:e6:22:e1:4c:d6:02:26:f0:49:2f:41:46:1c:23:41:86: f1:cb:42:35:4e:ac:97:a4:e1:f4:97:7c:af:4b:c4:c4:3d:3c: 18:8d:4e:82:a0:40:e0:d0:39:15:38:0a:0f:d4:15:12:67:66: 72:b8:fe:14:7a:f6:90:8a:1e:f7:10:da:ce:73:fb:ed:35:0a: 35:8e:e3:05:30:1a:5e:31:5e:c7:76:8f:a6:f4:76:c6:34:d9: 68:d7:ef:c2:65:4d:83:f1:32:7c:06:ec:b7:a8:50:b0:69:16: 21:9c:d8:30:70:f4:bb:3b:33:62:e6:c0:7a:b3:b6:6e:c1:e9: 04:48:e7:70:6b:42:73:66:25:0f:a2:56:e9:84:17:86:d4:eb: ef:9e:5e:00:4d:1d:ec:56:51:d0:1a:67:ec:6c:23:89:65:3f: c3:03:24:fd:86:e1:61:c0:fc:0a:65:ea:67:bd:5b:e0:43:ec: a2:72:b4:08:67:ec:44:e0:36:0a:b5:09:da:f8:be:64:1c:5d: 9d:28:37:cd:2b:92:b9:2c:a7:62:34:5e:c2:cb:ce:5e:63:9d: 4b:ea:5a:d2:66:a4:29:5f:7d:f9:73:35:3d:c9:d9:be:60:43: 91:6c:1b:ab:10:5f:65:81:93:2d:68:0e:7a:98:27:04:ae:fa: 2f:0b:8a:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGSejCAaAyRlTkIK1diAl1FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjYxMDMxMTUwMDQzWhcNMjYxMTAxMTUwMDQzWjAzMTEwLwYDVQQD EygzMjA5Yzk5MDY4YjExYjJlNjc3OWQ4YWJkZmU4NWZjY2IwYTQyOWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvd7fK6iCgdW7uNMa3cg4IctRzT6 S4DAgU4cq4wmsgd/RcBzcvEKFCvyEeUeIg4Qa7IJmOHoWw/h5vmRdmqAOCpuJi9q 40hpbkQC3rI4Soi5hG8vbEA3pV9VY3qQDhN7qGWNEhAQycMd03stiU+BEdRYefWN 2TfYQHDrMp1aAFW8JNx8qD9sugtRH2ZCTtLzI0TvibW9geST8djvLWpx0cGi9rLu YVvJ00AwQefRf1NwmClsxRsQ3dVko7J3h9DmiSNDZ6xx1MnaVH3BQZ+OAW9ukK6H ro1zS8MItnM06kyUoSQZW56q1tsUy7KP5m8qxP3DTYMU80HcLW/aPqXPqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIJyZBosRsuZ3nYq9/oX8ywpCnKMB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZKDmIuFM 1gIm8EkvQUYcI0GG8ctCNU6sl6Th9Jd8r0vExD08GI1OgqBA4NA5FTgKD9QVEmdm crj+FHr2kIoe9xDaznP77TUKNY7jBTAaXjFex3aPpvR2xjTZaNfvwmVNg/EyfAbs t6hQsGkWIZzYMHD0uzszYubAerO2bsHpBEjncGtCc2YlD6JW6YQXhtTr755eAE0d 7FZR0Bpn7GwjiWU/wwMk/YbhYcD8CmXqZ71b4EPsonK0CGfsROA2CrUJ2vi+ZBxd nSg3zSuSuSynYjRewsvOXmOdS+pa0makKV99+XM1PcnZvmBDkWwbqxBfZYGTLWgO epgnBK76LwuKLA== -----END CERTIFICATE-----Generated at Sat Oct 31 22:50:26 2026 by rpki-client