$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft File: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft (raw, json) Hash identifier: Fw1wfkPUOkXZUEKv7qoa8HGgYpuQnw66YIFBBNzWpGQ= Subject key identifier: C3:89:D7:DB:74:CB:A2:DE:FC:CC:64:AD:3B:38:81:19:3C:D2:47:2B Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a Certificate serial: 01A178F14176D32E3130F43C7A4DD5A48013 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft Manifest number: 1ACB Signing time: Mon 26 Oct 2026 16:00:39 +0000 Manifest this update: Mon 26 Oct 2026 16:00:39 +0000 Manifest next update: Tue 27 Oct 2026 16:00:39 +0000 Files and hashes: 1: 1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl (hash: sg6Xjh+tIZJtpJWyB93vTRQcmPRqM5JvGjh26aE6tNQ=) 2: 2pZ-2FjfKp_AUPJehyyyCmO33Hc.roa (hash: KSo6Uo4KGXQ+gy+hLjBUZoC/tbnGR8dO325Q6LPyilM=) 3: 4vyc44IoKKHchhCxJ7O1jQ8abqA.roa (hash: UQ4dJ25AUyuNJbd4tfu6FjtMtU5Pbfq3SkU6dc+KnyM=) 4: CvuWIkRHjp5wftfGLU8vOGYCRbc.roa (hash: gj4Tk/zdN+anVbu8mIUIWBYC8RgYdvQOlOOsAUK8Sdk=) 5: IRAfjWAlERnsxDrkVza8YXCUxl4.roa (hash: Ubtt3PSH8NxJ1HHW0Bmr9YJAFmecuPEr+JdwoJmMyLs=) 6: JJfaJkgSEBalqFcc3d6GPKEq5c0.roa (hash: FuHxoLmlLp5uuetTQ7lUzLqCBx0iP3lbv/wcUM9OYTE=) 7: Q_rrlmseqjc9c8mfs_9rzyd3284.roa (hash: GSzKRbWz/hHkNfc9qit79if8AoJkjbgwLaFILxum/nA=) 8: lfsA-CiV23r-qpL7I-OyuqCLA7E.roa (hash: IDCu8RiLCmmGO2wQI4VtUyw3k0YFKxR4jBPe/VBgfYc=) 9: nkzcn1sgGDpbfyqNM00anSE1XXM.roa (hash: /+3MitTOfIJS1gt2shgI9n07vci+NIdPgsMA89TtpO0=) 10: qgc2BHITW3F3Fb1Nu0nXShoQLoM.roa (hash: CQpVzp5lW1S/T6Fu+MruSBubNMRYvg+fyjfJdrmJ720=) 11: qu1WOvTSGJhb9qCrwaoo2MELsDg.roa (hash: sMcBLOOPq2yXaLqHdTpicJZ4I/4D7ujzTrP/m9dXVgg=) 12: uFIM9ORi0Ow0-T4N33qTox0ZbXc.roa (hash: xCkv3YPUvKqN5W2m/5NSb93BBA0dlEC1kEuar7tM8jo=) 13: vJzboGw4HmYyQSuIhf_kLLJ5mF0.roa (hash: LnBImqH9fDlrcbItpIt0qbjCXavrpNmtk6RTIorgw8g=) 14: wYZK_Wy3MKznm7YhZ7I4uynw0us.roa (hash: WAKcd6xIHnq5uvyKJ3Z0qcpHOOGNGSZAHs44HwFAzKA=) 15: yB3ntVub05F4F9i1cWLaKANNBso.roa (hash: zdKl/J+2C305Q7rX/8wtABN6OkAsZKkNZDLRLh5HUdk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:78:f1:41:76:d3:2e:31:30:f4:3c:7a:4d:d5:a4:80:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a Validity Not Before: Oct 26 16:00:39 2026 GMT Not After : Oct 27 16:00:39 2026 GMT Subject: CN=c389d7db74cba2defccc64ad3b3881193cd2472b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:38:3d:03:06:37:9b:9a:3c:34:65:18:db:0e: 25:1f:bd:31:11:09:ab:51:76:d8:7b:c1:22:00:1a: 75:8c:bb:30:31:71:47:50:6b:2a:18:8e:88:6a:9b: 73:21:a5:06:eb:93:1d:f9:b8:4e:93:c4:8e:7e:8f: 1a:2e:f7:e7:b6:5e:1e:42:8c:36:f6:cd:5a:7c:90: 41:9f:fe:95:b1:a4:dc:bf:ae:70:1d:06:73:68:bf: 5f:1b:92:55:bd:0c:90:0e:28:ac:6d:0c:c0:9d:22: 39:96:63:84:d7:e0:40:8e:a4:b6:c0:5c:71:2d:27: 5c:fb:bd:31:b8:b7:67:6c:c4:7e:95:5d:4b:dc:b2: 45:f0:65:30:81:a2:1d:0c:a9:c2:92:4e:ff:15:4b: 4b:2f:07:59:f7:aa:13:63:90:de:69:7f:ca:4c:74: a0:ba:2c:bd:ab:8b:27:3f:2a:4e:4a:dc:f8:b4:90: 0f:e7:2b:51:a7:b8:8c:cb:c4:12:9d:11:27:5f:d4: 38:a0:11:7e:93:e6:9a:c4:14:f3:e2:4e:ec:46:55: 4e:ec:53:73:58:7f:c9:f2:50:0e:ab:ed:d9:5d:d0: b5:5f:cd:8f:ac:e6:50:28:9c:92:5c:17:4b:15:dd: 94:4a:fa:3d:a9:7d:63:ac:07:64:ae:c7:3f:08:66: ff:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:89:D7:DB:74:CB:A2:DE:FC:CC:64:AD:3B:38:81:19:3C:D2:47:2B X509v3 Authority Key Identifier: keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:50:5c:43:d9:81:be:ae:91:cd:7f:21:f2:2d:f8:91:06:82: 5b:1a:0f:55:c1:60:42:b9:2e:da:c2:08:0b:03:d3:5c:bb:2c: 32:a5:3c:0d:5a:47:9e:fc:15:2c:4d:bf:90:a4:f6:e6:cd:98: ce:09:8e:92:94:e4:f2:0f:2e:ea:ef:d7:b4:f3:fe:06:89:d4: 5b:e6:03:58:91:96:d1:0c:26:de:b2:1a:94:65:ec:f5:ce:a6: b0:2e:9e:3b:21:0e:04:ba:11:01:b2:2d:ab:4b:43:e3:61:6f: 83:a3:aa:94:30:5c:9c:93:e2:5c:77:1c:57:4d:c9:1b:e0:d0: 4a:d7:da:9c:cb:fd:e7:43:fa:7c:7e:7a:64:35:95:9b:f4:22: d7:af:18:50:bb:69:d6:53:ba:09:19:ba:56:a5:e1:a6:a2:39: b9:1d:99:e6:80:18:eb:a4:b9:0f:05:2e:30:db:bf:33:66:e6: 58:c5:4a:0e:ed:a9:74:ab:80:f9:90:e0:ef:11:2d:85:19:c2: 29:03:76:f2:de:57:5d:11:dc:01:28:59:da:94:6b:6d:7a:d8: 73:c7:c6:af:c0:6b:c6:92:7c:da:d6:49:cb:7b:3a:2c:4b:af: 37:41:18:03:fd:cc:88:58:ff:c1:0e:31:46:7b:60:ec:09:02: cc:bf:d7:be -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgISAaF48UF20y4xMPQ8ek3VpIATMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY4MjU1NGE4NTZhNDIyYjA2MWFlNjRjNTc3NjMwZjkxZDQw OGNkNGEwHhcNMjYxMDI2MTYwMDM5WhcNMjYxMDI3MTYwMDM5WjAzMTEwLwYDVQQD EyhjMzg5ZDdkYjc0Y2JhMmRlZmNjYzY0YWQzYjM4ODExOTNjZDI0NzJiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjg9AwY3m5o8NGUY2w4lH70xEQmr UXbYe8EiABp1jLswMXFHUGsqGI6IaptzIaUG65Md+bhOk8SOfo8aLvfntl4eQow2 9s1afJBBn/6VsaTcv65wHQZzaL9fG5JVvQyQDiisbQzAnSI5lmOE1+BAjqS2wFxx LSdc+70xuLdnbMR+lV1L3LJF8GUwgaIdDKnCkk7/FUtLLwdZ96oTY5DeaX/KTHSg uiy9q4snPypOStz4tJAP5ytRp7iMy8QSnREnX9Q4oBF+k+aaxBTz4k7sRlVO7FNz WH/J8lAOq+3ZXdC1X82PrOZQKJySXBdLFd2USvo9qX1jrAdkrsc/CGb/hwIDAQAB o4ICJTCCAiEwHQYDVR0OBBYEFMOJ19t0y6Le/MxkrTs4gRk80kcrMB8GA1UdIwQY MBaAFPglVKhWpCKwYa5kxXdjD5HUCM1KMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMS1DVlVxRmFrSXJCaHJtVEZkMk1Qa2RRSXpVby5jZXIw gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGYvOTQzN2EyLTA3ZTYtNGU2YS1hYTNm LTk2NWQ2ZDYwM2JmYS8xLzEtQ1ZVcUZha0lyQmhybVRGZDJNUGtkUUl6VW8ubWZ0 MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np dG9yeS9ERUZBVUxULzRmLzk0MzdhMi0wN2U2LTRlNmEtYWEzZi05NjVkNmQ2MDNi ZmEvMS8xLUNWVXFGYWtJckJocm1URmQyTVBrZFFJelVvLmNybDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVBc Q9mBvq6RzX8h8i34kQaCWxoPVcFgQrku2sIICwPTXLssMqU8DVpHnvwVLE2/kKT2 5s2YzgmOkpTk8g8u6u/XtPP+BonUW+YDWJGW0Qwm3rIalGXs9c6msC6eOyEOBLoR AbItq0tD42Fvg6OqlDBcnJPiXHccV03JG+DQStfanMv950P6fH56ZDWVm/Qi168Y ULtp1lO6CRm6VqXhpqI5uR2Z5oAY66S5DwUuMNu/M2bmWMVKDu2pdKuA+ZDg7xEt hRnCKQN28t5XXRHcAShZ2pRrbXrYc8fGr8BrxpJ82tZJy3s6LEuvN0EYA/3MiFj/ wQ4xRntg7AkCzL/Xvg== -----END CERTIFICATE-----Generated at Mon Oct 26 21:15:20 2026 by rpki-client