$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft File: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft (raw, json) Hash identifier: Ob77+q0zh5qL9wOoHoxN4SD+zd0GFxJtczm68dNg/hM= Subject key identifier: 8B:02:50:B6:98:53:22:18:90:A2:7E:B7:20:D0:19:13:60:BA:B5:56 Authority key identifier: EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 Certificate issuer: /CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Certificate serial: 01A19D34B38C914D56C9D5F2A343FA55BDAC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft Manifest number: 1B03 Signing time: Mon 02 Nov 2026 17:00:38 +0000 Manifest this update: Mon 02 Nov 2026 17:00:38 +0000 Manifest next update: Tue 03 Nov 2026 17:00:38 +0000 Files and hashes: 1: 29odbuprtCj7WPL5-_schDbHgm8.roa (hash: XIIoYS6NjJtTvrEkYnxIIAAx80iEEjwxP71SPrAr+8o=) 2: 7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl (hash: m0tVzeNevkbwkftqp4ErykTBm/pbuh02jhaUgXr67Gw=) 3: C49vSVt4dfdT17Z5kZxdlV_lY_Y.roa (hash: 6HfpvHUMJisoBNoMG7lySqZtsVK9Z40fSQ9YGkMMFF0=) 4: CYTlKlzSJSqB3jTzZOH673qv2os.roa (hash: nMYpBRNUUmqx48+xTuVDjH9QkSUeA9v7hDY4KWKCBCQ=) 5: DIVTK05T8Vdhwjp7g0z7MnF1TQQ.roa (hash: 6vlsDL0j8NnBvb9Ab/QGUCQui9hFjQ/teVqIFOEkwLQ=) 6: ENla5OgKBu9uunWqxWQAfu7kwx0.roa (hash: Fbmqrk8r0alDCgWyzCOzHqp7tHL/3UqhpNT6d1lPtlY=) 7: IamjYw1vikCzZIhDeU8H0NMAjHs.roa (hash: M+kmsNXkFSxnu0j1QJUyRMfdThsPZBpSXk2/kSsLWUY=) 8: Iyt7Ob_snKf1ZPop-eeEldXM0fQ.roa (hash: 9XeUKSaM919H72Lo2RzCdmjP30DLuCdA4txuvCcKAVk=) 9: Q5HfXdIQnusnCwKJeNtcbaxYKRw.roa (hash: cgDqaBa5oL7jHKKM1uUVRVvnMYGroeNLDuSFwDAGhy8=) 10: Xqk8Uz-n6K8gn3JGWZDD2ygTwPs.asa (hash: ciV3WQr4P4tvz14Lw1wTS5h/d3hEB2JhoVNcPSmkw+I=) 11: Zqcb5O8rFX9zl4QnpgFxwAPkSnw.roa (hash: PxO9Gffmo66KLSDjItc0OadV8hhOTt+St3p6W/DJEgM=) 12: _izOulmhuUBG3FatKk1kjhEzI5I.roa (hash: D2Y24n1qrh+NyvYt/hta8znqPyvAoiiYcPgWq6TG2zI=) 13: bnpbPX_ctt0kqkwx6ukV-j4WTGM.roa (hash: 730AnutRLa9Haz+ZMN+qGZx6PYPOqH6zu3NH8XC/47k=) 14: gTyFz4o7qq-mz7kkyhI4YQAE3F8.roa (hash: ql1a+n9u4sT8twi+Ey5tWWvsl/zO/3fN4L8B2DWoXrk=) 15: h2mTI89G79vzZdTXcNgpiY_bSuE.roa (hash: qa2BzNyouPFY7/V6+HRcQ7umJPtaaWKwpg9jeFVJFSE=) 16: hhAxTUm-YLDfu5gnVbj74LIg_xE.roa (hash: 5lrRMZNGyqCPeI3ughaZF3pVN6T3OxbFiijuNyO2VPw=) 17: hnvqiTRhzx1k1I5Yz-RLdIbMdZo.roa (hash: AKpiyiynsGZBYcwDRapdMlbndDnrttHO5UZeZsvk6ck=) 18: j8JXlUTEd1j_9VoERc0ZtsXM8O8.roa (hash: A11q2a+vMmn2Uc3d6mAqUut0tGh3JvhOP0a9hwmGjMs=) 19: lru0bK1pFWTdlNh3tSeVRy2RxB4.roa (hash: D3uDWSg2oVhHneIgFjvyT24SUbp4OtxjQr0JkAH/IGY=) 20: x9kxYUUdYs3Vc1XQvx9EJnJhrDs.roa (hash: Xjj2UlUQT0tIyuN4wzeBBIdle7HnaFZ9oWTYHnJPnD4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 03 Nov 2026 14:59:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:9d:34:b3:8c:91:4d:56:c9:d5:f2:a3:43:fa:55:bd:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ec6b42021886d8eedbae90d9e6ab1de533c50d20 Validity Not Before: Nov 2 17:00:38 2026 GMT Not After : Nov 3 17:00:38 2026 GMT Subject: CN=8b0250b69853221890a27eb720d0191360bab556 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:67:7d:9a:eb:1e:46:f3:3f:4f:77:6d:4f:33: d8:97:7f:72:c9:0f:cb:f9:5c:32:57:35:5c:d4:dd: f4:f0:c2:a3:3f:13:3b:b6:99:29:f1:c8:12:96:27: 36:a2:f0:25:fe:ac:89:91:ea:c3:3e:57:96:dd:ed: 30:d9:93:fa:ae:15:c5:ed:7f:f8:cd:e5:86:b9:8c: b6:92:13:36:5e:78:aa:ee:7f:dd:a4:4d:ad:3d:1a: cd:0a:89:9e:40:58:29:11:15:66:ca:73:b4:55:1f: e0:68:72:1c:87:6e:f2:8e:28:21:7d:a6:c4:b9:17: da:b8:4a:38:c1:76:ed:e8:1f:1c:a7:38:bb:d0:53: 41:d2:80:ae:62:1d:c6:b1:77:ec:a9:1e:7b:eb:19: 78:29:c0:4c:34:71:0f:62:b5:38:4c:71:83:55:31: 0c:6b:54:3d:e3:7a:5a:19:2b:ba:8e:d7:95:a4:73: f0:fa:fa:6d:37:3c:44:02:f4:3a:a9:0e:09:3f:cf: ec:c7:d4:53:8b:a7:0d:80:7f:42:b2:94:f6:b2:f6: 96:67:01:ea:56:04:bd:2e:17:f3:db:16:89:20:d9: 21:36:74:40:e0:28:ca:4a:73:27:3e:09:b7:4b:da: 7e:07:d6:e7:b8:ce:2f:ff:67:aa:fc:48:5f:71:da: 67:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:02:50:B6:98:53:22:18:90:A2:7E:B7:20:D0:19:13:60:BA:B5:56 X509v3 Authority Key Identifier: keyid:EC:6B:42:02:18:86:D8:EE:DB:AE:90:D9:E6:AB:1D:E5:33:C5:0D:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7GtCAhiG2O7brpDZ5qsd5TPFDSA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/26c3e1-6486-4e09-99a4-a6873b374e26/1/7GtCAhiG2O7brpDZ5qsd5TPFDSA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:f4:2e:d0:c5:ca:9c:b3:a1:3e:df:0d:f7:14:d0:13:18:d9: f8:0f:4f:4e:a2:8c:3e:91:2b:e4:0f:4d:7e:5d:4c:a9:ad:00: d6:b8:60:7a:58:9a:e0:21:c9:47:2c:99:f4:bc:89:d3:3c:6d: 91:a4:44:24:7b:4c:73:8a:9c:89:14:4b:bf:4c:b6:b6:05:ec: 15:79:3a:a2:4a:dd:e1:e0:fa:ca:e5:13:22:b0:66:c3:ac:f2: da:9f:c5:36:0f:28:25:23:04:46:ab:a7:4d:4f:30:b1:30:6f: b3:84:82:f9:c5:f2:51:b8:4e:87:03:78:fe:00:c3:48:b4:24: 01:2c:81:95:7f:c3:39:ad:34:19:4b:94:40:4c:7c:8e:99:23: 3a:88:10:18:0c:6d:ad:ad:44:53:b2:be:ae:6d:3c:f4:f5:3f: fc:41:71:79:6d:9c:67:0a:b8:f5:01:5e:e4:62:fe:83:cc:2e: 9e:c8:b0:b4:c1:f5:8f:7a:6b:51:79:26:72:c6:54:92:6c:31: 77:34:aa:dc:57:d3:51:df:c8:3c:da:a3:1e:30:29:ff:55:da: 75:81:fe:b1:77:78:15:20:cf:01:4b:67:9d:8b:43:52:e1:2a: bb:b6:2e:dc:5d:b7:d3:8b:c0:b4:a8:da:e2:67:d8:96:3d:99: 67:6b:55:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGdNLOMkU1WydXyo0P6Vb2sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVjNmI0MjAyMTg4NmQ4ZWVkYmFlOTBkOWU2YWIxZGU1MzNj NTBkMjAwHhcNMjYxMTAyMTcwMDM4WhcNMjYxMTAzMTcwMDM4WjAzMTEwLwYDVQQD Eyg4YjAyNTBiNjk4NTMyMjE4OTBhMjdlYjcyMGQwMTkxMzYwYmFiNTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Wd9museRvM/T3dtTzPYl39yyQ/L +VwyVzVc1N308MKjPxM7tpkp8cgSlic2ovAl/qyJkerDPleW3e0w2ZP6rhXF7X/4 zeWGuYy2khM2Xniq7n/dpE2tPRrNComeQFgpERVmynO0VR/gaHIch27yjighfabE uRfauEo4wXbt6B8cpzi70FNB0oCuYh3GsXfsqR576xl4KcBMNHEPYrU4THGDVTEM a1Q943paGSu6jteVpHPw+vptNzxEAvQ6qQ4JP8/sx9RTi6cNgH9CspT2svaWZwHq VgS9Lhfz2xaJINkhNnRA4CjKSnMnPgm3S9p+B9bnuM4v/2eq/EhfcdpnbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIsCULaYUyIYkKJ+tyDQGRNgurVWMB8GA1UdIwQY MBaAFOxrQgIYhtju266Q2earHeUzxQ0gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQt YTY4NzNiMzc0ZTI2LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Yy8yNmMzZTEtNjQ4Ni00ZTA5LTk5YTQtYTY4NzNiMzc0ZTI2 LzEvN0d0Q0FoaUcyTzdicnBEWjVxc2Q1VFBGRFNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoPQu0MXK nLOhPt8N9xTQExjZ+A9PTqKMPpEr5A9Nfl1Mqa0A1rhgelia4CHJRyyZ9LyJ0zxt kaREJHtMc4qciRRLv0y2tgXsFXk6okrd4eD6yuUTIrBmw6zy2p/FNg8oJSMERqun TU8wsTBvs4SC+cXyUbhOhwN4/gDDSLQkASyBlX/DOa00GUuUQEx8jpkjOogQGAxt ra1EU7K+rm089PU//EFxeW2cZwq49QFe5GL+g8wunsiwtMH1j3prUXkmcsZUkmwx dzSq3FfTUd/IPNqjHjAp/1XadYH+sXd4FSDPAUtnnYtDUuEqu7Yu3F2304vAtKja 4mfYlj2ZZ2tVVg== -----END CERTIFICATE-----Generated at Mon Nov 2 22:29:37 2026 by rpki-client