$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft File: s9XsFRbubcGdHlw5mMt-emRvcVo.mft (raw, json) Hash identifier: dZ8+P7qGKOVAwz3iD67aIHdXlYEnDxqYWLE+O/FMEVU= Subject key identifier: FD:4E:B1:D5:94:4C:D3:34:DB:1E:13:6B:4E:98:AE:26:DA:8C:29:44 Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Certificate serial: 01A14FBF099F3CB4576D97B836110F5F22D6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft Manifest number: 1ACA Signing time: Sun 18 Oct 2026 16:01:22 +0000 Manifest this update: Sun 18 Oct 2026 16:01:22 +0000 Manifest next update: Mon 19 Oct 2026 16:01:22 +0000 Files and hashes: 1: 2b8ZwVq_mjczOCytV3AyHOIxQIc.roa (hash: tt5DqAanKGArO0UxY768cJIb05kbBNt+jtmYkkG2iA4=) 2: 4Em1zLDNhErKpeOQsW4q5AzcEVQ.roa (hash: FhFw00ipa0mGK9r5LYLVgU8LDCSf4yXWR2ahLt8/jwI=) 3: AwAU8gs8fU3gFqKDz4PCsZQEqtc.roa (hash: BUeOYJmjvQ1mCy94/Q1gSsWU8/AF4n9bOeuiE3Hs1ps=) 4: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (hash: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=) 5: UssRL_azfcBW0-ZAXO28l_WRTQ8.roa (hash: Q1CPH56Bt7FCDBhQza5YAQW6lKSo+XxyyUkTKJFqTBQ=) 6: g7z6s3RS4iJok2SbmbjvS5hhDIk.roa (hash: EB+Pv+x+gfqzIAkMVUxH34RkYOXZdJjswqSg7W4U5eg=) 7: h2q8wo4cN2FI5p7fbNyfArb0N5U.roa (hash: ZE7NveXjyhHrc7UtFRvYPH07tGrEeSQLkyeJi55qqYE=) 8: lUTVi-_PDzyWzw8K-fsuosZWRiI.roa (hash: OmUNgtrNFRnsn2wonPhEVO1CJuTfc6rf60NoEOm1QYw=) 9: s9XsFRbubcGdHlw5mMt-emRvcVo.crl (hash: yWZ8caf64DFPjgchnofHUQfGD+aT9uDJzXvVEyrqBrw=) 10: wa9zMyfDDEuwe9jHEEf5XR0rY1U.roa (hash: w6cKFExTNVukVfdOoaJCYRMUgY7AI2mb+j8X2JfaAr8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 19 Oct 2026 16:01:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:4f:bf:09:9f:3c:b4:57:6d:97:b8:36:11:0f:5f:22:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a Validity Not Before: Oct 18 16:01:22 2026 GMT Not After : Oct 19 16:01:22 2026 GMT Subject: CN=fd4eb1d5944cd334db1e136b4e98ae26da8c2944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:13:1b:eb:6c:ec:a1:a8:e3:64:7b:dc:48:15: ca:a6:46:d0:47:38:2e:20:d3:d0:0c:96:0c:6b:77: 09:24:5d:5a:f1:00:8b:d4:39:9c:ff:4d:e1:db:9c: 32:10:51:61:ac:31:8f:8f:ad:16:55:1e:c8:8b:2c: af:b5:4e:52:dc:58:7b:c7:d0:55:54:77:30:5e:30: 5d:02:b3:c3:bf:da:48:f9:d4:2d:b7:f4:0b:82:b9: c5:33:04:db:11:a3:e0:4f:d0:27:20:ca:0a:6d:bc: 7b:4e:95:29:cf:bc:ae:53:74:21:f8:75:34:93:da: bb:6a:b2:a5:1d:cd:a3:0b:70:0b:60:db:a2:a6:49: 20:0e:3d:50:66:59:c0:1b:9e:65:49:9e:15:b2:e9: 2e:0f:13:8a:1c:74:bc:5f:ec:30:71:f7:56:7b:9d: 14:76:db:2f:c3:29:7b:d4:ce:7f:3e:0d:2b:67:e7: a6:ed:c8:60:3a:1a:5e:5a:3d:17:e8:1b:7d:fa:49: 33:a0:8c:ea:ba:aa:a0:02:16:3c:b1:10:ac:4d:b1: 1a:90:c8:b4:68:90:28:e8:ee:ce:06:0b:38:c8:78: 32:77:56:49:54:68:ad:38:9d:7d:63:4d:71:c1:84: 1e:8e:30:de:84:fd:d4:87:7c:65:dd:a3:6f:69:09: eb:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4E:B1:D5:94:4C:D3:34:DB:1E:13:6B:4E:98:AE:26:DA:8C:29:44 X509v3 Authority Key Identifier: keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:79:de:5f:45:b4:8a:ab:15:17:20:6a:13:46:49:51:28:66: d3:29:6d:d0:75:01:77:2b:8b:4c:72:07:f6:30:54:73:9a:78: 33:da:c7:85:fb:6a:37:39:06:8a:02:66:0b:8b:9c:cb:43:44: e5:0c:e7:36:14:af:cd:7c:65:d0:c7:6f:af:99:f8:91:5d:9e: 93:7e:4c:17:73:da:0c:c6:0c:65:a6:a4:f7:1a:a9:a8:30:f0: 60:7d:f7:44:4b:f2:88:19:d1:b5:67:33:53:a8:aa:8c:cb:48: 71:e9:ec:27:0a:15:4c:a1:3e:04:8a:6f:51:92:0b:fb:ee:9f: 18:28:f6:80:d8:a2:76:3f:cf:c9:1e:40:63:a3:43:24:3f:d4: 5e:a4:55:6c:fa:32:20:ac:12:5b:b5:05:ca:a5:99:4b:aa:77: 79:8b:e9:62:09:42:cd:f1:4d:e8:07:07:de:93:d4:65:86:10: a2:5c:5a:21:13:b1:ba:f1:9d:d3:a9:be:b8:f7:30:dc:9c:fb: d6:c3:90:6c:d2:04:a9:98:3f:e0:6a:3a:24:a4:90:5c:49:7d: eb:4b:ce:31:82:4c:58:b1:19:ee:b0:20:b5:13:e5:d5:bc:db: 74:98:2a:c0:39:b9:40:7a:80:02:2a:cc:70:c8:4e:38:a7:dd: 21:bc:e3:9e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFPvwmfPLRXbZe4NhEPXyLWMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzZDVlYzE1MTZlZTZkYzE5ZDFlNWMzOTk4Y2I3ZTdhNjQ2 ZjcxNWEwHhcNMjYxMDE4MTYwMTIyWhcNMjYxMDE5MTYwMTIyWjAzMTEwLwYDVQQD EyhmZDRlYjFkNTk0NGNkMzM0ZGIxZTEzNmI0ZTk4YWUyNmRhOGMyOTQ0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5RMb62zsoajjZHvcSBXKpkbQRzgu INPQDJYMa3cJJF1a8QCL1Dmc/03h25wyEFFhrDGPj60WVR7IiyyvtU5S3Fh7x9BV VHcwXjBdArPDv9pI+dQtt/QLgrnFMwTbEaPgT9AnIMoKbbx7TpUpz7yuU3Qh+HU0 k9q7arKlHc2jC3ALYNuipkkgDj1QZlnAG55lSZ4VsukuDxOKHHS8X+wwcfdWe50U dtsvwyl71M5/Pg0rZ+em7chgOhpeWj0X6Bt9+kkzoIzquqqgAhY8sRCsTbEakMi0 aJAo6O7OBgs4yHgyd1ZJVGitOJ19Y01xwYQejjDehP3Uh3xl3aNvaQnrNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1OsdWUTNM02x4Ta06YribajClEMB8GA1UdIwQY MBaAFLPV7BUW7m3BnR5cOZjLfnpkb3FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEt NmMzMDVhNmRiYWI5LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81OS8zYWQ3Y2MtM2MwOC00YjcyLTg3MGEtNmMzMDVhNmRiYWI5 LzEvczlYc0ZSYnViY0dkSGx3NW1NdC1lbVJ2Y1ZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAynneX0W0 iqsVFyBqE0ZJUShm0ylt0HUBdyuLTHIH9jBUc5p4M9rHhftqNzkGigJmC4ucy0NE 5QznNhSvzXxl0Mdvr5n4kV2ek35MF3PaDMYMZaak9xqpqDDwYH33REvyiBnRtWcz U6iqjMtIcensJwoVTKE+BIpvUZIL++6fGCj2gNiidj/PyR5AY6NDJD/UXqRVbPoy IKwSW7UFyqWZS6p3eYvpYglCzfFN6AcH3pPUZYYQolxaIROxuvGd06m+uPcw3Jz7 1sOQbNIEqZg/4Go6JKSQXEl960vOMYJMWLEZ7rAgtRPl1bzbdJgqwDm5QHqAAirM cMhOOKfdIbzjng== -----END CERTIFICATE-----Generated at Mon Oct 19 01:42:25 2026 by rpki-client