$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft File: bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft (raw, json) Hash identifier: Wr+mBVW2x3dU6QR1K3+q/dTHB8massfPixK0vDUnGIs= Subject key identifier: B9:13:56:3F:88:1E:67:CF:81:6A:FC:08:12:A0:40:C1:4F:1E:80:4F Authority key identifier: 6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 Certificate issuer: /CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Certificate serial: 01A168D950DE0FBD23CEC944C105CBA3A787 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft Manifest number: 12C3 Signing time: Fri 23 Oct 2026 13:00:34 +0000 Manifest this update: Fri 23 Oct 2026 13:00:34 +0000 Manifest next update: Sat 24 Oct 2026 13:00:34 +0000 Files and hashes: 1: 0fPiuwb4X2weC-gKDNJaEbSPHqw.roa (hash: S57h9JaZkZt0GA+n+fixlPL0kJI1rFB4fls5bIvI/yg=) 2: 9CV2ccBp-wqUL_fP6QBnKryYIpM.roa (hash: EVfvSX2FaZ2DaE0/qfbpH/rDdeen/hkG4N8QfWHeB08=) 3: JKGW4gg3OI-zymSfSwtWhhEO1-c.roa (hash: Hj2gZmYvtr1JqmPfTXMpYrbuy1yiPpWa6zihMnTrs60=) 4: NJlkPEbvZj17oZnTPoUJnz4aYHU.roa (hash: 1OOkVDVrLB0wggxypUryE2P0Q8in33IuC2Ho6AYkBaQ=) 5: OiGHdHjDagoWQKaQO3HU1k4kpCk.roa (hash: ncY1ht+Hk47ecphOn2OCGatMTSfBF/c3Xm8aYEEJupM=) 6: bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl (hash: bjgsJCxO9aQ6L/owoxalZoEaegLkm5Rj1gEqKZdq2LA=) 7: mwnslxanlyapMrSdoQ959onOJDo.roa (hash: 5V4ABzOc/BOKT+0CLM0NPcH5YpVerld75dduR0xdwO8=) 8: vVhNtVNsCVeIUDedNR2pXiMXJ9I.roa (hash: Vxc5nIGp5qmqYCBfvRkwh/ne6MswcuhCDYcPNLnJgwM=) 9: vZOfCIg9L8SEJQT_PB29EUcqp1o.roa (hash: D6jkKtX92Ek141r9wDvoefr0ADP2trBgJ4ZfnvX2MDA=) 10: yIi_9pn2RiEfjk2wP_JBX7exLC8.roa (hash: g2McMZYpikW6RC/p1orB3778Rd6w3UuRKA7o0A9GRfE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 24 Oct 2026 11:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:68:d9:50:de:0f:bd:23:ce:c9:44:c1:05:cb:a3:a7:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6c3250a5c1bdab74b1bd23c01c54a8d70b6def20 Validity Not Before: Oct 23 13:00:34 2026 GMT Not After : Oct 24 13:00:34 2026 GMT Subject: CN=b913563f881e67cf816afc0812a040c14f1e804f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ab:7b:89:0f:43:09:95:0d:fe:56:f4:d4:af: 50:bc:f7:ef:8c:fb:ea:11:3d:1c:4e:80:07:14:9d: 9b:48:23:3c:52:18:f5:df:5b:45:66:6c:14:3c:f4: b6:84:68:18:98:f1:f8:5e:03:f2:63:05:44:24:da: ec:b1:ca:81:91:d7:be:6d:c6:a9:fb:3b:b4:e8:89: a4:47:6b:08:e5:09:ce:29:94:54:c7:00:84:5e:c3: d0:8e:d3:9e:e6:ec:c3:3a:55:d7:9e:f3:49:8f:8a: 32:5c:ec:8d:0a:3f:62:ae:6a:2d:88:cd:2b:a3:21: cc:c8:22:b7:c1:ef:b5:2c:12:10:23:1b:27:14:fa: 33:c1:d2:37:9e:8b:0e:22:7a:61:ad:91:5a:6d:7e: 25:13:bb:45:71:5d:2b:7f:63:6c:f2:40:f5:55:30: c8:1b:55:6d:5a:a6:10:59:37:ef:7f:93:45:70:84: 4f:bf:74:95:ef:e2:1c:f7:f8:b1:28:ff:f9:34:62: 86:44:06:d3:a2:cf:6d:7a:57:ca:ca:4b:8a:6f:79: f7:0a:95:1e:47:48:dc:da:09:91:b4:6d:a7:e0:e3: ef:74:cf:fb:8a:24:0e:73:ae:8f:b8:63:c3:2e:2e: 2b:cc:67:5f:13:ae:38:5d:e6:a5:94:af:10:c4:61: f6:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:13:56:3F:88:1E:67:CF:81:6A:FC:08:12:A0:40:C1:4F:1E:80:4F X509v3 Authority Key Identifier: keyid:6C:32:50:A5:C1:BD:AB:74:B1:BD:23:C0:1C:54:A8:D7:0B:6D:EF:20 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDJQpcG9q3SxvSPAHFSo1wtt7yA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/724c97-f149-446f-bbf1-2544683aa125/1/bDJQpcG9q3SxvSPAHFSo1wtt7yA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:1e:d3:de:79:14:92:08:d9:cd:83:bf:b5:30:b4:5d:65:16: d9:57:bf:f6:4c:df:ce:ee:8b:e4:66:6d:ff:ca:dc:1b:92:e1: 77:2a:00:35:33:f9:d2:2f:87:a0:a5:eb:c6:a9:79:91:22:72: c4:21:15:5e:1f:57:51:71:5c:1b:c6:99:e1:84:44:8c:f1:f6: 6b:49:d4:a9:88:e1:b9:22:a8:c9:df:f1:03:3c:1f:7b:9a:9f: 87:9c:56:9b:a3:ee:85:9b:11:01:c7:41:da:90:59:05:eb:e8: cf:15:ac:9f:c3:04:db:a5:8b:e5:9a:7e:04:4f:78:a4:5c:b2: e8:50:b3:a9:cd:90:30:a2:1f:ff:6b:97:cb:0c:31:7c:5c:86: 47:76:8d:90:46:ee:10:e5:59:38:fe:b3:14:53:2c:67:b1:07: 48:f7:af:46:1b:0f:1e:47:72:86:82:d7:72:06:03:0e:16:16: 12:ba:98:9f:14:23:6e:de:29:da:05:a7:b3:ed:45:08:97:2d: 54:94:aa:14:e9:24:83:3e:83:49:21:25:52:b5:a5:0d:45:b9: 6e:a4:d0:7f:9c:66:19:05:fe:1b:ba:11:10:61:39:e3:8d:05: 8c:96:fd:7f:9a:bd:0d:26:50:16:a4:79:ff:c9:da:3b:24:49: 72:41:f9:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFo2VDeD70jzslEwQXLo6eHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjMzI1MGE1YzFiZGFiNzRiMWJkMjNjMDFjNTRhOGQ3MGI2 ZGVmMjAwHhcNMjYxMDIzMTMwMDM0WhcNMjYxMDI0MTMwMDM0WjAzMTEwLwYDVQQD EyhiOTEzNTYzZjg4MWU2N2NmODE2YWZjMDgxMmEwNDBjMTRmMWU4MDRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqt7iQ9DCZUN/lb01K9QvPfvjPvq ET0cToAHFJ2bSCM8Uhj131tFZmwUPPS2hGgYmPH4XgPyYwVEJNrsscqBkde+bcap +zu06ImkR2sI5QnOKZRUxwCEXsPQjtOe5uzDOlXXnvNJj4oyXOyNCj9irmotiM0r oyHMyCK3we+1LBIQIxsnFPozwdI3nosOInphrZFabX4lE7tFcV0rf2Ns8kD1VTDI G1VtWqYQWTfvf5NFcIRPv3SV7+Ic9/ixKP/5NGKGRAbTos9telfKykuKb3n3CpUe R0jc2gmRtG2n4OPvdM/7iiQOc66PuGPDLi4rzGdfE644XeallK8QxGH2YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLkTVj+IHmfPgWr8CBKgQMFPHoBPMB8GA1UdIwQY MBaAFGwyUKXBvat0sb0jwBxUqNcLbe8gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEt MjU0NDY4M2FhMTI1LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS83MjRjOTctZjE0OS00NDZmLWJiZjEtMjU0NDY4M2FhMTI1 LzEvYkRKUXBjRzlxM1N4dlNQQUhGU28xd3R0N3lBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJx7T3nkU kgjZzYO/tTC0XWUW2Ve/9kzfzu6L5GZt/8rcG5LhdyoANTP50i+HoKXrxql5kSJy xCEVXh9XUXFcG8aZ4YREjPH2a0nUqYjhuSKoyd/xAzwfe5qfh5xWm6PuhZsRAcdB 2pBZBevozxWsn8ME26WL5Zp+BE94pFyy6FCzqc2QMKIf/2uXywwxfFyGR3aNkEbu EOVZOP6zFFMsZ7EHSPevRhsPHkdyhoLXcgYDDhYWErqYnxQjbt4p2gWns+1FCJct VJSqFOkkgz6DSSElUrWlDUW5bqTQf5xmGQX+G7oREGE5440FjJb9f5q9DSZQFqR5 /8naOyRJckH5HQ== -----END CERTIFICATE-----Generated at Fri Oct 23 20:26:46 2026 by rpki-client