$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft File: p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft (raw, json) Hash identifier: c+N2Xx+Y0AdO8xaIVre0irUgUjtzF55R/N3gXccp8jQ= Subject key identifier: 37:63:C2:60:64:B1:25:54:BA:BC:E4:B1:7D:30:82:91:3F:89:26:49 Authority key identifier: A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 Certificate issuer: /CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Certificate serial: 01A19468969558DC24FC54E983B932CF2019 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft Manifest number: 1AD9 Signing time: Sun 01 Nov 2026 00:00:44 +0000 Manifest this update: Sun 01 Nov 2026 00:00:44 +0000 Manifest next update: Mon 02 Nov 2026 00:00:44 +0000 Files and hashes: 1: 1pNjMggR1gYBaftihFMx8w1rMhE.roa (hash: PULZtkL3C3zDaM8kMCwf21Yb0UEXTXjrHY8fh/1iHFc=) 2: BH6ERj2EK1Gwrfo5u9qhco6CgYM.roa (hash: HBZO37pz26No65orIL67yFB8MvBngZCIHxDCzlTkjJc=) 3: C-hiHL_GzbD5a_s8Sar_hmP-Vyw.roa (hash: hyN/ftVawg2QF6kkYn1VlnFyi9JVIm7PN5l5sJloEAU=) 4: CiXCz7OWck5adEg6z95YRceHxmU.roa (hash: EasCRjc+VBWg+tlVvV7czSSDbpGCqgxTM2n5TXY0Ipc=) 5: Sug4vWSNyHdKWqfR473yYmyLdbA.roa (hash: fFBg2JXVgrhME2wCNd7RaCIs1pYUVhgUjrsuVrTCtEE=) 6: Uqxv6RJDJys9akW4OeqacWtytrA.roa (hash: RSQidgq4mEPgxtmCFTLFsYGLsEkeze9gOf1NNbRSvgc=) 7: Wc1vP6_SY_r3YRWRNCEYvgmMIEU.roa (hash: DTSBhlEZWBIgKWeFJQfKtS9sYqKdFbuY0AXldEHxAZ4=) 8: eo5H4o3ZZ3iXbDapo6cBEE7NS6M.roa (hash: X2Eq1j8xxP8127RbRQQH82ZQaRO794u+GIRwZ/G/1eM=) 9: mK3OtIQBuc5E_Igw6gzRMSv2d3c.roa (hash: DMwAvTUmsGM0zrMHUTJobXjFU2+cLUzH4tvhaMwkiwc=) 10: nUVyELULlyE5fyAdMqySIUcD1Kg.roa (hash: 7IAppAs9x9RzUF7a3+rIPbPjrq3AFXyVcrF/g7C0QPU=) 11: p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl (hash: TBf7hSSVTrGRuPjrrFC0QrJwrzza7BMykFy7ER6F2d0=) 12: taXjOwEPFjUj9cMa7Gq70xb_Xw8.roa (hash: amO1PgtWxEDUcYd/ZIcEzv+wLt54N13hJwoq+TKEsJ0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Nov 2026 23:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:94:68:96:95:58:dc:24:fc:54:e9:83:b9:32:cf:20:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7d78de0234e6f99701592f536e45f5f5594eec3 Validity Not Before: Nov 1 00:00:44 2026 GMT Not After : Nov 2 00:00:44 2026 GMT Subject: CN=3763c26064b12554babce4b17d3082913f892649 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:73:fc:37:7d:31:08:e2:5b:ff:33:49:36:06: 21:b3:be:fa:13:7f:26:a1:97:90:ff:4a:2e:c6:e3: 78:e7:68:93:19:53:ec:7a:c7:f0:05:88:74:4a:b7: 14:4a:40:b2:d3:cc:c0:55:39:60:1e:a4:5d:2b:3b: 80:b5:c1:cd:0c:8f:a2:cc:0c:d3:9e:e4:3d:c0:04: 5b:a3:53:9b:0e:7b:74:75:19:d3:b8:a3:f1:67:cb: ed:32:39:82:0b:6f:d4:f8:20:23:a5:a6:41:f9:d8: 26:8a:d2:73:51:a8:16:91:4b:29:a5:5b:a4:c3:3b: b6:56:09:bd:64:23:4e:aa:de:07:e1:83:dd:89:e4: 37:8e:84:ef:2b:a7:0f:fe:61:19:8a:ca:75:64:93: 2a:0a:65:4d:6a:9e:41:e2:96:24:5e:e9:b5:3d:f6: 50:a7:74:18:9c:3d:df:2e:4f:4b:1a:5d:0b:7c:06: 44:62:45:41:e9:59:71:c7:43:ef:d3:18:f1:3b:5a: 1c:4c:48:5c:51:b2:47:e0:e8:87:48:36:ac:a6:4f: 81:e2:e1:fa:34:b3:6c:48:55:50:8f:fe:47:b4:ba: f4:cc:fd:b7:0d:47:6e:27:b7:bd:ec:51:78:7c:8e: 9d:18:0e:04:b8:e4:2b:26:86:c7:30:eb:cb:95:ca: f3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:63:C2:60:64:B1:25:54:BA:BC:E4:B1:7D:30:82:91:3F:89:26:49 X509v3 Authority Key Identifier: keyid:A7:D7:8D:E0:23:4E:6F:99:70:15:92:F5:36:E4:5F:5F:55:94:EE:C3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p9eN4CNOb5lwFZL1NuRfX1WU7sM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/43/31aaba-ac7e-489f-877c-28d5b607a47f/1/p9eN4CNOb5lwFZL1NuRfX1WU7sM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:88:df:02:ab:b3:46:a0:77:65:e3:6d:43:c5:a1:bf:04:4e: ec:6e:8c:ff:d1:14:6c:9b:80:79:66:51:99:e4:06:7f:a9:87: 31:f5:13:9c:30:69:9c:d5:aa:5b:17:7f:0e:7e:e2:8c:0a:1e: 5a:f6:6d:de:1a:73:30:5b:ea:f9:0c:d8:38:c6:b2:82:f2:45: 6e:10:1a:61:f8:4f:e8:0e:80:d5:b4:5f:f4:8f:33:42:73:cd: d4:9e:03:a5:c4:34:d0:e6:df:d7:24:df:ab:61:ac:74:fc:de: e1:69:bc:15:67:67:2a:31:30:63:e5:d6:74:12:f5:13:eb:70: 15:fc:a6:cd:85:cd:cc:44:b0:15:4d:32:bc:88:c5:1e:00:26: c8:a3:4d:0b:cb:07:c9:c5:9f:56:33:c9:32:a9:00:82:d2:46: 22:cb:96:2d:a5:ee:2b:08:cd:40:eb:80:66:82:62:25:a0:ab: b7:21:24:d0:c6:5b:8b:42:82:62:5e:01:8c:c4:e9:1c:61:fe: 4f:22:6f:28:9c:f4:a4:16:86:1b:3e:6e:11:b3:ff:c7:33:73: 70:63:07:14:10:60:3c:5d:92:b2:19:40:4f:e7:1d:9b:d9:bf: b3:b5:00:3f:54:8f:a3:8f:90:94:f6:bb:3e:37:4a:3d:f9:c7: 02:82:71:c5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGUaJaVWNwk/FTpg7kyzyAZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3ZDc4ZGUwMjM0ZTZmOTk3MDE1OTJmNTM2ZTQ1ZjVmNTU5 NGVlYzMwHhcNMjYxMTAxMDAwMDQ0WhcNMjYxMTAyMDAwMDQ0WjAzMTEwLwYDVQQD EygzNzYzYzI2MDY0YjEyNTU0YmFiY2U0YjE3ZDMwODI5MTNmODkyNjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHP8N30xCOJb/zNJNgYhs776E38m oZeQ/0ouxuN452iTGVPsesfwBYh0SrcUSkCy08zAVTlgHqRdKzuAtcHNDI+izAzT nuQ9wARbo1ObDnt0dRnTuKPxZ8vtMjmCC2/U+CAjpaZB+dgmitJzUagWkUsppVuk wzu2Vgm9ZCNOqt4H4YPdieQ3joTvK6cP/mEZisp1ZJMqCmVNap5B4pYkXum1PfZQ p3QYnD3fLk9LGl0LfAZEYkVB6Vlxx0Pv0xjxO1ocTEhcUbJH4OiHSDaspk+B4uH6 NLNsSFVQj/5HtLr0zP23DUduJ7e97FF4fI6dGA4EuOQrJobHMOvLlcrzlwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdjwmBksSVUurzksX0wgpE/iSZJMB8GA1UdIwQY MBaAFKfXjeAjTm+ZcBWS9TbkX19VlO7DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2Mt MjhkNWI2MDdhNDdmLzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80My8zMWFhYmEtYWM3ZS00ODlmLTg3N2MtMjhkNWI2MDdhNDdm LzEvcDllTjRDTk9iNWx3RlpMMU51UmZYMVdVN3NNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYjfAquz RqB3ZeNtQ8WhvwRO7G6M/9EUbJuAeWZRmeQGf6mHMfUTnDBpnNWqWxd/Dn7ijAoe WvZt3hpzMFvq+QzYOMaygvJFbhAaYfhP6A6A1bRf9I8zQnPN1J4DpcQ00Obf1yTf q2GsdPze4Wm8FWdnKjEwY+XWdBL1E+twFfymzYXNzESwFU0yvIjFHgAmyKNNC8sH ycWfVjPJMqkAgtJGIsuWLaXuKwjNQOuAZoJiJaCrtyEk0MZbi0KCYl4BjMTpHGH+ TyJvKJz0pBaGGz5uEbP/xzNzcGMHFBBgPF2SshlAT+cdm9m/s7UAP1SPo4+QlPa7 PjdKPfnHAoJxxQ== -----END CERTIFICATE-----Generated at Sun Nov 1 08:35:29 2026 by rpki-client