$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft File: rHzDNPUdK2604n1tVrm84-hVYMw.mft (raw, json) Hash identifier: bpdFKjbeRRsUr97mCp2j4/2xSLktrrLXLVf/oBZJi+c= Subject key identifier: 56:0E:14:C0:49:C2:AA:FC:FF:BA:AD:41:50:B6:78:A7:FB:81:55:9A Authority key identifier: AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC Certificate issuer: /CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Certificate serial: 01A1174F3DF06A8F80F9680CC52CDDBAF669 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft Manifest number: 1AA5 Signing time: Wed 07 Oct 2026 17:00:31 +0000 Manifest this update: Wed 07 Oct 2026 17:00:31 +0000 Manifest next update: Thu 08 Oct 2026 17:00:31 +0000 Files and hashes: 1: 1-QuFrP2FCGdb0e2Ii_z6LaU8br8.roa (hash: rbKcnlSwgT9Djc5Fqvy3u9yC2cYZiJQ7dfTu75ri+mI=) 2: Kn1XIiFvEGGy9jGV0znKGyVVN88.roa (hash: S6dp6R29PAVMF1jsj22PyQ1rploMZXbrpKsVzrPCS0A=) 3: LVf00OwBfRzfAd6G6KBKwIxU48Q.roa (hash: Xvect/bo+Wr+aXHUQYsyRoqwRvv8UXPXPU1oErWXh0o=) 4: c0--gsBa0iR2Bq4yXoW3wsT1ZQU.roa (hash: N/tir1ikaaQzeua5SN0NNzW44/svT02GC4QfKmsuXFg=) 5: i_sg361hESOO6WvkWK2Qx1qnr_o.roa (hash: grkv5sxl6QC67Xl6GRfRbX76QTIOE0y5InqEToBe4KU=) 6: jDLgcLSuJX7PNQqFfW9rGKaqs0I.roa (hash: gYuzALxJxQy3dIl1B+tjxYOVPb7F/ttrTik4SzmNvpo=) 7: nP4kyr3JdbGjZpVgHpw36qMxTPQ.roa (hash: QxXL80gZjutBzTVwYv0W0HB8GqSHL6xx5f7Es0Ckqj8=) 8: rHzDNPUdK2604n1tVrm84-hVYMw.crl (hash: thY/uShxGgJnyzr1qUAZROnOWhsFEvbZRbR+yJkgiDE=) 9: uX2HFPa-1T3UMzqcLHxJG1wYem0.roa (hash: mt3IsY/c70SVPfG6w+VGWzHhy8025Nd/iJv2s56ORTs=) 10: xkw2dJ1kdWsWVrDQa7ecIv1ZfEE.roa (hash: TlO1SGSzKaGyjfYONLThtWXquMMxH3GzgJNd8bMLo1Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 13:17:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:17:4f:3d:f0:6a:8f:80:f9:68:0c:c5:2c:dd:ba:f6:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac7cc334f51d2b6eb4e27d6d56b9bce3e85560cc Validity Not Before: Oct 7 17:00:31 2026 GMT Not After : Oct 8 17:00:31 2026 GMT Subject: CN=560e14c049c2aafcffbaad4150b678a7fb81559a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:45:46:84:90:70:30:d0:87:8c:cc:46:b1:8c: ee:d0:16:23:98:b8:f9:80:c1:b8:d0:12:76:40:f0: 8d:52:df:74:74:5d:d4:02:05:a1:f5:a5:7a:23:98: 47:e9:e2:d3:d7:aa:18:03:ac:1c:16:31:bf:c9:9c: 70:56:ef:0c:49:84:55:ea:dc:1a:f5:47:5d:2b:8e: 4b:f1:6e:6f:92:a6:92:2d:8a:b4:d4:9a:1a:af:e3: 66:b9:9b:23:3a:df:81:5b:15:9b:66:c7:8d:36:92: 1c:66:4b:ae:7b:6a:73:e8:1e:ca:28:82:b4:7b:cc: 5e:ac:31:bf:a9:91:3e:4a:01:45:7a:97:50:9f:46: 71:a9:40:bc:51:09:f4:77:ab:70:28:28:e5:82:98: 24:a9:87:bf:1f:c0:55:b0:65:ea:01:4c:56:75:1b: 74:d1:63:c8:eb:e6:9d:1c:88:b8:a0:98:95:15:3c: ab:ba:11:b7:ce:f9:cb:ff:ff:4b:2d:42:c1:4e:80: 21:50:0b:6e:c2:6b:de:40:f5:ed:9c:ba:4e:25:0e: 66:95:1f:d1:a9:34:08:3c:34:35:f9:54:03:5f:47: 62:40:de:c8:fe:b4:16:74:c0:e4:6e:8c:f0:87:1e: a0:3f:d6:90:5b:87:59:99:31:dd:43:9c:47:7b:40: d5:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:0E:14:C0:49:C2:AA:FC:FF:BA:AD:41:50:B6:78:A7:FB:81:55:9A X509v3 Authority Key Identifier: keyid:AC:7C:C3:34:F5:1D:2B:6E:B4:E2:7D:6D:56:B9:BC:E3:E8:55:60:CC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHzDNPUdK2604n1tVrm84-hVYMw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/55/dd55e8-febd-49d0-a5a7-1cf15b2ba7be/1/rHzDNPUdK2604n1tVrm84-hVYMw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:0a:fc:a2:9c:b8:2c:fd:dd:1b:c3:bf:cb:95:8a:fc:67:c9: c3:3d:1d:ea:83:91:5f:3d:cc:a4:ab:01:d4:ce:1b:62:99:35: 17:f8:13:65:8a:02:a1:5c:61:ab:4c:35:84:35:c4:44:2c:cc: 02:ea:5d:6e:05:12:36:d9:e0:c2:8c:d5:ea:2b:24:e6:14:a7: d7:08:db:03:3a:f3:39:a1:ce:c0:44:2b:56:ed:3a:99:a1:06: d7:40:e3:c9:af:0a:1d:a5:3a:08:40:60:ac:fb:5b:18:ff:32: a7:1d:af:e2:df:f7:82:05:52:2c:6f:c2:52:cf:36:2c:db:1a: f9:41:32:a3:db:49:fd:5c:9e:2a:ff:d8:97:e1:d1:84:c8:03: 19:83:97:20:aa:db:08:da:8d:37:b9:1e:ff:a2:24:e7:80:4e: f6:a0:94:20:bb:b5:5a:76:25:58:44:db:e5:06:a0:f3:4a:41: ca:e3:b3:70:80:9c:fc:95:cb:96:33:3d:5a:9e:e4:9e:71:cd: aa:51:b2:3a:48:ea:78:df:6f:2c:fc:37:b5:11:61:5b:13:62: a9:82:8a:62:90:a8:e3:46:19:90:4e:32:84:6f:81:9d:a3:10: e2:10:a8:48:ef:a5:52:26:d4:7b:14:b7:5a:04:9d:66:95:bf: 34:4f:fe:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEXTz3wao+A+WgMxSzduvZpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFjN2NjMzM0ZjUxZDJiNmViNGUyN2Q2ZDU2YjliY2UzZTg1 NTYwY2MwHhcNMjYxMDA3MTcwMDMxWhcNMjYxMDA4MTcwMDMxWjAzMTEwLwYDVQQD Eyg1NjBlMTRjMDQ5YzJhYWZjZmZiYWFkNDE1MGI2NzhhN2ZiODE1NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEVGhJBwMNCHjMxGsYzu0BYjmLj5 gMG40BJ2QPCNUt90dF3UAgWh9aV6I5hH6eLT16oYA6wcFjG/yZxwVu8MSYRV6twa 9UddK45L8W5vkqaSLYq01Joar+NmuZsjOt+BWxWbZseNNpIcZkuue2pz6B7KKIK0 e8xerDG/qZE+SgFFepdQn0ZxqUC8UQn0d6twKCjlgpgkqYe/H8BVsGXqAUxWdRt0 0WPI6+adHIi4oJiVFTyruhG3zvnL//9LLULBToAhUAtuwmveQPXtnLpOJQ5mlR/R qTQIPDQ1+VQDX0diQN7I/rQWdMDkbozwhx6gP9aQW4dZmTHdQ5xHe0DVpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFYOFMBJwqr8/7qtQVC2eKf7gVWaMB8GA1UdIwQY MBaAFKx8wzT1HStutOJ9bVa5vOPoVWDMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTct MWNmMTViMmJhN2JlLzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81NS9kZDU1ZTgtZmViZC00OWQwLWE1YTctMWNmMTViMmJhN2Jl LzEvckh6RE5QVWRLMjYwNG4xdFZybTg0LWhWWU13LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAewr8opy4 LP3dG8O/y5WK/GfJwz0d6oORXz3MpKsB1M4bYpk1F/gTZYoCoVxhq0w1hDXERCzM AupdbgUSNtngwozV6isk5hSn1wjbAzrzOaHOwEQrVu06maEG10Djya8KHaU6CEBg rPtbGP8ypx2v4t/3ggVSLG/CUs82LNsa+UEyo9tJ/VyeKv/Yl+HRhMgDGYOXIKrb CNqNN7ke/6Ik54BO9qCUILu1WnYlWETb5Qag80pByuOzcICc/JXLljM9Wp7knnHN qlGyOkjqeN9vLPw3tRFhWxNiqYKKYpCo40YZkE4yhG+BnaMQ4hCoSO+lUibUexS3 WgSdZpW/NE/+ng== -----END CERTIFICATE-----Generated at Wed Oct 7 23:01:44 2026 by rpki-client