$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft File: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft (raw, json) Hash identifier: 2uaOTPnhkcGaLkfUcwzLGezoB7TAsuoYj6hunknJ2X8= Subject key identifier: 8F:67:E7:67:AF:C8:FC:95:5D:A8:EB:2B:7E:52:28:86:9A:16:73:8A Authority key identifier: C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 Certificate issuer: /CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Certificate serial: 01A18186FBBCEB776AB1E1CA31B5956019E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft Manifest number: 1AD7 Signing time: Wed 28 Oct 2026 08:01:09 +0000 Manifest this update: Wed 28 Oct 2026 08:01:09 +0000 Manifest next update: Thu 29 Oct 2026 08:01:09 +0000 Files and hashes: 1: 3Wnyz1QTSGCfnbdCaxBn0wvUFQE.roa (hash: 2t4MdegjvS7rP/iU7Hj7aColKHs5vThbvVnxW3FHn4E=) 2: 7Me5WXJix6bhmJacUAumrmlySgk.roa (hash: YrS81rUpK2c6Zib9l6JvC9RAlucS71SZij2OkYz09Wc=) 3: E_JIFXCdpHTYansz7Uag7XJbSgA.roa (hash: vrXsyINww9wzdu3W3f7WUvYM3ATh6Z+TuuA6xY/MZdM=) 4: ItZWQRkmls0VdU1nZishuLkd2eA.roa (hash: MAZ2gdn6yEjn53jWafviOI61qsnSQITSXZRf/tbFFMA=) 5: Rf1IRr7ln3MYijmbQD8SHel_MDs.roa (hash: +BoNoFKi0FqndtLU0znTacn8SBNepPAZnhdtF4/C/xc=) 6: b05E_Vve2D3HEly9RuClmeKIrnc.roa (hash: jAiLiRN3aJpdKIHHJepD10dCfO/MTNxTxutiEjOu3JM=) 7: hRvNf4cAxilQC-NZ8WqkxMmFzZw.roa (hash: aS2aTaLKTapOqcPpZtmi37UtMDJpwWKs703ZEIp9zRU=) 8: liK1oYSYzTAoS7kAatnii2Wzx_E.roa (hash: gb2CbqJOVrEPYPGiLKPKwSB2WKz26ugg+uzkt83v7JE=) 9: sr7WacAmmZWiXvAsDGzYF2vtdAU.roa (hash: w9eNa2MvhIGo2u1BISjxj71+HEaSC/goxWqp1PF6zLU=) 10: xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl (hash: g1UxCePBO33HjWxifKZlh6dIuaZmeBHVAPkxRikwH3k=) 11: yKCwLoLYr4to8y_tjFrrqdWwVsQ.roa (hash: wl1a5WN26eiUPfwL0yoU1hXDc4NKdb5+Xq7z2fG84WA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:81:86:fb:bc:eb:77:6a:b1:e1:ca:31:b5:95:60:19:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c45c683cb1eb9c0f49b967e3bd9b8b84cf099bb8 Validity Not Before: Oct 28 08:01:09 2026 GMT Not After : Oct 29 08:01:09 2026 GMT Subject: CN=8f67e767afc8fc955da8eb2b7e5228869a16738a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:31:bb:89:96:16:32:1e:21:7f:60:af:d1:8e: 72:ab:21:d5:56:fb:8d:9f:3c:28:95:59:cc:8e:53: bf:3c:1e:94:d1:6c:6d:9e:71:64:90:a3:36:9b:24: a2:f2:3f:ed:b2:e5:d7:04:0a:06:b5:e4:81:27:86: 92:0a:c0:75:f7:35:25:2f:8f:7b:c5:b0:2d:ad:3d: f6:27:b5:b7:27:18:77:6b:50:c6:f8:4b:24:cf:c5: b7:ef:05:2c:3d:10:17:11:e9:74:27:65:86:9b:e0: ec:c1:b1:27:8e:66:11:1a:97:a6:93:cd:00:99:2d: c3:76:d1:7e:90:49:1f:cb:8a:f0:83:83:5c:8c:f5: da:a6:95:51:9d:2b:6c:4c:60:e3:ef:c9:89:7d:aa: b5:6a:33:79:2d:9f:b0:b4:a0:41:5a:a5:a9:21:87: aa:06:b5:3e:2a:75:2f:eb:2c:fc:8b:f4:e6:17:07: 88:83:3c:72:77:a1:da:ef:42:00:19:b6:3c:66:4c: b7:e3:df:28:64:a6:50:50:bf:ff:28:13:65:b0:c4: 0d:f3:3a:03:91:ee:47:66:de:e0:99:23:8f:a7:b3: b8:a0:04:db:f8:62:15:94:bf:93:27:63:e6:65:92: 22:d6:24:3d:4f:f0:de:f4:80:05:a1:99:f3:82:75: 36:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:67:E7:67:AF:C8:FC:95:5D:A8:EB:2B:7E:52:28:86:9A:16:73:8A X509v3 Authority Key Identifier: keyid:C4:5C:68:3C:B1:EB:9C:0F:49:B9:67:E3:BD:9B:8B:84:CF:09:9B:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/60/439a10-60c4-4c28-91bf-88d2df10d15b/1/xFxoPLHrnA9JuWfjvZuLhM8Jm7g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:43:16:33:3d:f9:47:10:4f:6a:9f:68:ed:27:7a:2c:2e:42: 9e:2e:f2:aa:59:af:50:e3:da:09:e4:1a:87:0f:19:9f:08:f7: b7:75:ac:4e:cd:17:37:0f:1d:bf:fd:5f:fa:1e:07:30:cf:c5: 13:66:1e:e1:b5:9c:2e:9b:44:33:f3:63:87:51:85:c3:69:35: 5f:70:49:85:3b:f9:e7:27:fe:1d:7e:b0:75:5b:82:59:4f:a1: 43:50:4b:7d:6d:c7:e3:37:7e:2e:a7:b4:9a:df:d3:d5:0c:f2: 1a:c0:fb:ee:e0:3d:c0:bf:be:bf:fa:e4:b8:ff:2b:2e:3f:21: 39:2b:9b:5a:c7:a4:fc:eb:ba:e4:ed:e2:26:84:ff:44:8e:92: 2b:d0:1b:c1:d5:60:3e:e8:8d:22:e3:93:3a:31:d5:fa:21:d6: 77:75:b1:d0:a7:e2:0e:d3:3c:56:b1:16:91:6a:78:4f:1d:f3: 0d:c4:b9:ec:f3:cc:23:85:7f:0b:df:96:4d:cb:81:7f:08:8a: e3:df:81:a8:69:82:53:27:18:4d:c0:98:45:fc:6d:0d:59:94: c8:07:f5:65:74:50:d6:72:8b:8f:af:91:ad:cd:a8:1c:76:9c: e5:21:fa:06:80:85:d9:ee:6b:c8:bc:92:df:a8:be:dd:ae:c5: a4:e4:b8:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGBhvu863dqseHKMbWVYBnlMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGM0NWM2ODNjYjFlYjljMGY0OWI5NjdlM2JkOWI4Yjg0Y2Yw OTliYjgwHhcNMjYxMDI4MDgwMTA5WhcNMjYxMDI5MDgwMTA5WjAzMTEwLwYDVQQD Eyg4ZjY3ZTc2N2FmYzhmYzk1NWRhOGViMmI3ZTUyMjg4NjlhMTY3MzhhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjG7iZYWMh4hf2Cv0Y5yqyHVVvuN nzwolVnMjlO/PB6U0WxtnnFkkKM2mySi8j/tsuXXBAoGteSBJ4aSCsB19zUlL497 xbAtrT32J7W3Jxh3a1DG+Eskz8W37wUsPRAXEel0J2WGm+DswbEnjmYRGpemk80A mS3DdtF+kEkfy4rwg4NcjPXappVRnStsTGDj78mJfaq1ajN5LZ+wtKBBWqWpIYeq BrU+KnUv6yz8i/TmFweIgzxyd6Ha70IAGbY8Zky3498oZKZQUL//KBNlsMQN8zoD ke5HZt7gmSOPp7O4oATb+GIVlL+TJ2PmZZIi1iQ9T/De9IAFoZnzgnU2kwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFI9n52evyPyVXajrK35SKIaaFnOKMB8GA1UdIwQY MBaAFMRcaDyx65wPSbln472bi4TPCZu4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYt ODhkMmRmMTBkMTViLzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MC80MzlhMTAtNjBjNC00YzI4LTkxYmYtODhkMmRmMTBkMTVi LzEveEZ4b1BMSHJuQTlKdVdmanZadUxoTThKbTdnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0MWMz35 RxBPap9o7Sd6LC5Cni7yqlmvUOPaCeQahw8Znwj3t3WsTs0XNw8dv/1f+h4HMM/F E2Ye4bWcLptEM/Njh1GFw2k1X3BJhTv55yf+HX6wdVuCWU+hQ1BLfW3H4zd+Lqe0 mt/T1QzyGsD77uA9wL++v/rkuP8rLj8hOSubWsek/Ou65O3iJoT/RI6SK9AbwdVg PuiNIuOTOjHV+iHWd3Wx0KfiDtM8VrEWkWp4Tx3zDcS57PPMI4V/C9+WTcuBfwiK 49+BqGmCUycYTcCYRfxtDVmUyAf1ZXRQ1nKLj6+Rrc2oHHac5SH6BoCF2e5ryLyS 36i+3a7FpOS4/g== -----END CERTIFICATE-----Generated at Wed Oct 28 11:23:15 2026 by rpki-client