$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft File: q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft (raw, json) Hash identifier: iciuogT2UaiSFAdsr7n/wb7/6/pcVdDrUTDUEzxfASk= Subject key identifier: C5:F1:2D:5A:8F:21:1F:17:80:90:66:4B:67:E5:C8:6D:3B:37:C4:80 Authority key identifier: AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 Certificate issuer: /CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Certificate serial: 01A1769556A2CC7590B5CD8666E35D78861E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft Manifest number: 17D2 Signing time: Mon 26 Oct 2026 05:01:00 +0000 Manifest this update: Mon 26 Oct 2026 05:01:00 +0000 Manifest next update: Tue 27 Oct 2026 05:01:00 +0000 Files and hashes: 1: 0PWfBn0oGldVFHP5tIF47j3zzAs.roa (hash: 0sM6Ze3gvOmQYlCu1oomU3dkg7xN6YhbGGDnKDWKSSQ=) 2: 2_JDrlEf39vL8qmUM9CaRXwOr04.roa (hash: /7e65G97+6p4mluseOQELP9OxF86iI75OQ+5Z/TQzmA=) 3: 5d874HtQy3_g6Lh42ATS1BQL16o.roa (hash: FFJNypVbDwx5p1OtRayAO1/xI3zEji2XKy7Oj/jRza0=) 4: 6NzUbUPfmG_2OYaxE5u0iljd-HM.roa (hash: GEVpwDXH3AnmmmYcwcQLhZ1oJzowlyvgSDom4fjBpAM=) 5: BVx20OvNIr_bjMiJlAuvJK99SH4.roa (hash: DO6SxTL8ZIDZlJLjGOfKoMzyvMaVazIOTTdETJq4hxI=) 6: DyhSqV4302w_Jd8C_oWX0mObDDc.roa (hash: XVB5wgNU/o6hHZ2aTWsuDvd3gUhS28oEwkGfS/KVZ7w=) 7: H9Xbs19Dof8eiG5lJjAhQV9WdWI.roa (hash: iXBhXfrYk+sqUaa89rfM9pApaz51gWzZlcef+RPdmsg=) 8: MSewK7b92JObaKeUrbrsAb5fWQk.roa (hash: sWACoQHb5c7UneFSMmjv5A00HKxYwU6xUqQ/8qlbIPE=) 9: NqUE_7vgG-i019hpuas3mtpVIf4.roa (hash: X2ZRbDZD/jel7nDnPIG6pqjl2LVgOhthOTW0hTf7CyA=) 10: ZBRiJj4yKjp6xE7hgkNq4cQdPLQ.roa (hash: 6GJHppVcWVXgDv6JkXYDCys38/Oyzd7ZRUn3j/wIDXU=) 11: eKfYhAdXZm4QBxrRp-Jb19IhjKA.roa (hash: IW6hoy0lnAYpEm6NvMoOrfkrhinHm5CYNAqE2SF2Y3g=) 12: ogeLgfFMk0tfTmUZf9Mc6hQMOKk.roa (hash: 6KJzsBOmWkWNjIPw+pN6XcIjmWVNJnyQyPCTB+CKohg=) 13: q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl (hash: oAs3OIt0cuO5/LHY1iTsMsfJltD5CGayFVXdVzjGHiA=) 14: qaltJRhtOumKjVHwnWVUetcuLl8.roa (hash: BGZRfPeZLiJVX41F+zt+HW9khnF21BsLuwIzvIKpNck=) 15: slCMC5MetlL-UdrbcYVL6ivEaR8.roa (hash: L9bTvLMwoTmbYW/wx8YfNg5L/r3pNdrG0c8bxsu4UcE=) 16: tFL9wVh4WkSXocKu5wD0zL_9_m8.roa (hash: 6EEVwO12s7jfNRlLHqcR0cD6u3HIV2GLT5UfsJtR9iA=) 17: wGOi-hc1qunRv3mfhlCNuwgWq88.roa (hash: VEFeNu27Mw/MaO7I2TqKbQuNe8tJIgFySJ8plRBHBzM=) 18: zLZn5fjIxGUIeLJs3xz-C3OdAK8.roa (hash: RzZEQ/gzmc0sHqoihLaxMsPQLNBKCTKE0KmCQNShYdw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:76:95:56:a2:cc:75:90:b5:cd:86:66:e3:5d:78:86:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ab8c6c58b607ff23ae7175a61682c75480f1e214 Validity Not Before: Oct 26 05:01:00 2026 GMT Not After : Oct 27 05:01:00 2026 GMT Subject: CN=c5f12d5a8f211f178090664b67e5c86d3b37c480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:bb:7d:18:e3:0e:b4:bf:7c:2e:cb:53:e8:5f: 78:a6:92:3a:cd:a1:e6:4c:98:fc:dc:fc:fd:34:87: 33:8a:5a:24:22:66:7c:69:75:d9:80:8c:1c:49:a9: 5f:ee:53:8c:60:aa:64:bd:97:9a:f8:1c:ab:9f:3b: 20:cb:84:87:7e:ec:84:15:3c:7a:83:db:a4:88:e4: 87:39:e8:42:77:54:0f:58:05:f5:64:ed:54:71:2c: 96:f0:2c:61:17:d0:ee:b3:d1:33:16:7d:d2:7a:96: 07:62:ae:8f:83:94:e2:f1:88:d9:07:0a:1d:cf:ab: 11:88:4d:7e:25:8e:3a:27:e0:40:5d:e6:f1:07:fa: aa:d7:63:33:2f:9c:27:b8:5c:65:b2:1f:d5:cf:2e: 6b:81:e9:4d:4e:24:80:3c:3d:b8:af:d2:9f:48:6e: f6:60:5d:00:2d:b9:03:a2:94:79:22:60:71:ef:0c: 34:35:10:4c:f8:50:0b:20:a8:db:27:3d:8b:3e:07: 7f:72:b9:7e:df:88:86:91:26:0b:19:9b:5a:dc:d4: 06:3d:01:c2:38:48:96:65:7e:a9:6c:27:fe:b5:54: c0:83:03:f9:16:a4:1d:8b:6f:95:d9:ca:88:88:53: 5c:b8:8c:f4:ab:74:27:3f:20:48:0b:ac:96:80:24: 7b:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F1:2D:5A:8F:21:1F:17:80:90:66:4B:67:E5:C8:6D:3B:37:C4:80 X509v3 Authority Key Identifier: keyid:AB:8C:6C:58:B6:07:FF:23:AE:71:75:A6:16:82:C7:54:80:F1:E2:14 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q4xsWLYH_yOucXWmFoLHVIDx4hQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/56/efb8ee-c5c4-4467-a0cc-88a3c41faee2/1/q4xsWLYH_yOucXWmFoLHVIDx4hQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:0f:75:12:c4:3f:ed:f6:90:cf:e7:79:21:b7:ce:46:e5:9c: c8:64:a8:1d:fd:14:58:bf:c6:80:bd:56:2c:c9:2c:56:f1:0c: a3:16:57:7e:3c:1e:f1:c6:86:cd:8b:4d:62:cf:b0:0a:4b:80: cc:05:92:e7:60:79:7e:80:56:ce:b7:24:53:77:2a:39:fe:89: 39:03:7b:b0:e7:d7:48:2d:27:78:b6:dc:c8:4e:c3:50:9f:e7: cd:f7:e4:f5:5a:49:65:ad:15:d9:b7:2c:ce:6f:84:50:b8:46: 61:c9:c1:39:28:00:03:b3:1f:c1:19:17:55:9d:17:45:9a:f1: 9b:0d:04:ba:f0:26:2b:57:f7:1a:13:7b:07:cb:45:c0:1d:62: 3a:2e:34:65:3d:ad:c2:f7:76:18:07:b1:48:ac:aa:60:b3:f1: 8a:a7:16:d5:a3:10:e1:2e:3d:5c:82:8a:54:c8:25:42:5a:85: 1b:de:4e:17:b0:33:c4:ef:5d:46:ad:5d:52:10:0d:c7:0f:e8: d2:1c:be:53:17:37:d4:37:f8:40:cf:77:0a:87:d6:3e:5b:3f: 08:f9:d7:93:a0:76:19:36:e4:d4:cc:e3:77:15:05:3d:25:dc: a7:0f:8e:ff:83:cc:80:3c:aa:8d:91:d4:92:9f:bb:08:33:a3: a2:1f:f6:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF2lVaizHWQtc2GZuNdeIYeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFiOGM2YzU4YjYwN2ZmMjNhZTcxNzVhNjE2ODJjNzU0ODBm MWUyMTQwHhcNMjYxMDI2MDUwMTAwWhcNMjYxMDI3MDUwMTAwWjAzMTEwLwYDVQQD EyhjNWYxMmQ1YThmMjExZjE3ODA5MDY2NGI2N2U1Yzg2ZDNiMzdjNDgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrt9GOMOtL98LstT6F94ppI6zaHm TJj83Pz9NIczilokImZ8aXXZgIwcSalf7lOMYKpkvZea+Byrnzsgy4SHfuyEFTx6 g9ukiOSHOehCd1QPWAX1ZO1UcSyW8CxhF9Dus9EzFn3SepYHYq6Pg5Ti8YjZBwod z6sRiE1+JY46J+BAXebxB/qq12MzL5wnuFxlsh/Vzy5rgelNTiSAPD24r9KfSG72 YF0ALbkDopR5ImBx7ww0NRBM+FALIKjbJz2LPgd/crl+34iGkSYLGZta3NQGPQHC OEiWZX6pbCf+tVTAgwP5FqQdi2+V2cqIiFNcuIz0q3QnPyBIC6yWgCR7WwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMXxLVqPIR8XgJBmS2flyG07N8SAMB8GA1UdIwQY MBaAFKuMbFi2B/8jrnF1phaCx1SA8eIUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2Mt ODhhM2M0MWZhZWUyLzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ni9lZmI4ZWUtYzVjNC00NDY3LWEwY2MtODhhM2M0MWZhZWUy LzEvcTR4c1dMWUhfeU91Y1hXbUZvTEhWSUR4NGhRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcQ91EsQ/ 7faQz+d5IbfORuWcyGSoHf0UWL/GgL1WLMksVvEMoxZXfjwe8caGzYtNYs+wCkuA zAWS52B5foBWzrckU3cqOf6JOQN7sOfXSC0neLbcyE7DUJ/nzffk9VpJZa0V2bcs zm+EULhGYcnBOSgAA7MfwRkXVZ0XRZrxmw0EuvAmK1f3GhN7B8tFwB1iOi40ZT2t wvd2GAexSKyqYLPxiqcW1aMQ4S49XIKKVMglQlqFG95OF7AzxO9dRq1dUhANxw/o 0hy+Uxc31Df4QM93CofWPls/CPnXk6B2GTbk1MzjdxUFPSXcpw+O/4PMgDyqjZHU kp+7CDOjoh/2GQ== -----END CERTIFICATE-----Generated at Mon Oct 26 11:13:21 2026 by rpki-client