$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: X0j2e4h7ptjTfFDubhFbpa7oSLKWA/6D1x7ehnJ0fgs= Subject key identifier: A0:A4:CB:8E:58:F2:27:30:E1:B3:8E:56:09:48:1D:FA:6B:53:11:F6 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 01A1103B8D02E262FA857FB6B89EEE50BFEE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 1AA6 Signing time: Tue 06 Oct 2026 08:01:40 +0000 Manifest this update: Tue 06 Oct 2026 08:01:40 +0000 Manifest next update: Wed 07 Oct 2026 08:01:40 +0000 Files and hashes: 1: 9Z9moOZMdjY1r0zisn1yG40T_Cs.roa (hash: 4qv97AavysG7gQ9zDpXhKGyy5MypOYdpddszCCL6JGA=) 2: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: tN+5G2NrOdcN3H8F+j4d0UBuh8Ni1QQnhuK7zOVgltw=) 3: GNjPKxixkcQlInXuEMN64INqg7U.roa (hash: uBUzDZtMXDo9MHMuc5AmdM0QZsLzdtsUdcLzN4QCg6I=) 4: M4VIxAsjnWUbH6wj5hZONC0aLhc.roa (hash: gupzBjiIjp4MhIgh1kYK1O3xRS4nwuhoT78Vii8+xOk=) 5: M4YwzZnQpTpEIjJJQTa20n-PbwA.roa (hash: X4daXjz6hYdjbJNKtkZTJmDcLRTv0QGjJCHi4DW4ijk=) 6: OKbKbtfbhqmIaTZwCyUi7VGbgqQ.roa (hash: ECSlBJqqVPIJ5kMulrMoMWXmuRXynI0Ykrvegui4DOM=) 7: f6D9aJ7BAJHcZz_OdJPNz7AwmHg.roa (hash: EgTfusTv2nkLjwq0TfPSW/EGFdZmepXuwghsp1RK2Ig=) 8: fF_JColRqe6k3b-dBUqfmSs3itY.roa (hash: QBb4ezm0BlO8dOz2Yfe88q5rYV5TSLEjJ01d5h6AZcw=) 9: hJODD-xae4GPfgCvm7u_1biBHW8.roa (hash: bwel4sYC9ovxgVCjU95RSPer2KsFebCbfOZutFD0aHE=) 10: iPnTc91ebSMaofS6kDoPi4bQbv0.roa (hash: ciyDlM9rMaewWpDyGPla/vLzi7InCFea7o3EX2VoNsQ=) 11: s7oo8h_lGdHA5B183SrGieJU08Y.roa (hash: jWktarjEvs1eZ/T6K2gwxO8ZGGgdn9UvYfnH2e8sE8Q=) 12: uJw0ADc8Jn_tUrRAslqVcsOv5r4.roa (hash: tvo4GlgyFEqW+8NWX03vTaovLhf5PDKLye47pitknWs=) 13: z6SO2tJUlnIrONOK_zqkp4ZdPp0.roa (hash: lo78lRvLy8MXZasgpvKxTb4n7+P6rOCdlzO/gLJeg+E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 08:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:10:3b:8d:02:e2:62:fa:85:7f:b6:b8:9e:ee:50:bf:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Oct 6 08:01:40 2026 GMT Not After : Oct 7 08:01:40 2026 GMT Subject: CN=a0a4cb8e58f22730e1b38e5609481dfa6b5311f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f4:5c:65:4b:8f:f5:ed:ef:85:8d:ad:32:c5: 21:3e:cb:0d:31:54:08:c9:29:f6:1a:18:92:e8:3a: c8:fa:ac:7b:39:6c:4d:43:7e:31:fe:70:77:a7:73: b2:f3:3a:01:44:d8:2a:10:9a:48:8c:12:39:a1:6b: 78:91:7a:f9:d7:7a:23:3f:c3:a4:f6:3c:7a:db:9f: 7b:a5:19:38:e8:28:5b:80:8a:d8:d4:0b:81:e8:75: c6:e2:3d:e8:ee:34:e3:63:3b:05:4b:65:6d:1f:fe: 15:ba:fb:02:f0:ff:d1:22:55:88:3d:2b:72:4e:12: 2f:37:84:78:0e:3d:68:f6:17:5c:1b:74:51:58:64: 04:2f:01:c5:6d:d2:c7:49:d8:67:29:91:5c:cf:e7: 56:a1:c5:6f:83:fa:d1:5a:71:d6:c7:83:a5:e5:56: ff:1c:b0:0c:47:37:9f:2b:7a:6f:5e:37:d9:0c:be: 40:eb:f4:53:5e:7a:43:62:56:e4:9d:bc:a4:b5:e4: 34:4d:18:0e:0d:85:f5:4e:67:12:19:50:49:33:05: 5a:1f:ea:e9:2a:b7:7e:78:7c:30:fa:47:9a:b1:94: 77:e0:c1:b4:e7:f0:17:d2:28:16:a0:60:2c:7b:21: 02:88:a3:c5:c6:c1:3d:2a:0b:da:b5:af:31:16:f9: c4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A4:CB:8E:58:F2:27:30:E1:B3:8E:56:09:48:1D:FA:6B:53:11:F6 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:06:8f:0b:58:0f:58:85:a4:ca:da:90:86:b6:09:ae:2b:b5: 14:d8:4e:e1:74:8b:1e:14:14:49:56:5f:3f:4e:3f:9c:94:76: fc:a4:4f:d4:ba:51:1a:bf:e4:a1:16:79:ad:86:21:74:37:09: f4:09:8c:c6:25:cb:dd:7d:b5:79:6c:1c:33:8a:c1:ac:d5:09: cb:2d:c0:1d:17:1f:83:dd:32:1e:b1:5c:96:21:6d:3c:55:84: 3b:09:8a:80:a9:57:53:0d:47:b9:fd:7d:c7:66:a9:39:25:f4: 86:06:b0:fe:75:a9:d0:19:1d:18:62:2b:c6:56:9b:6d:09:a7: 65:78:15:70:38:57:ba:08:ba:de:d7:33:7d:76:5d:4b:c3:87: 31:35:e3:af:f7:da:19:6a:73:1c:51:93:2a:b0:1f:59:63:93: c7:e5:6d:1e:bf:56:d8:0f:b5:95:4f:0c:b5:87:4f:47:b7:4b: 13:8d:fa:fc:63:c0:30:4a:86:aa:dd:73:1a:95:2a:6f:20:f6: 73:d7:27:fa:27:de:ee:a5:67:bc:51:f9:5a:9d:b1:8c:bb:a8: 7a:1f:9d:01:55:fb:32:b2:da:ea:55:3c:10:dd:2d:5f:6b:f5: ec:53:18:23:7e:15:11:3f:8b:b0:c2:fa:ef:fa:a5:da:ea:63: e3:cc:ed:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEQO40C4mL6hX+2uJ7uUL/uMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjYxMDA2MDgwMTQwWhcNMjYxMDA3MDgwMTQwWjAzMTEwLwYDVQQD EyhhMGE0Y2I4ZTU4ZjIyNzMwZTFiMzhlNTYwOTQ4MWRmYTZiNTMxMWY2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/RcZUuP9e3vhY2tMsUhPssNMVQI ySn2GhiS6DrI+qx7OWxNQ34x/nB3p3Oy8zoBRNgqEJpIjBI5oWt4kXr513ojP8Ok 9jx62597pRk46ChbgIrY1AuB6HXG4j3o7jTjYzsFS2VtH/4VuvsC8P/RIlWIPSty ThIvN4R4Dj1o9hdcG3RRWGQELwHFbdLHSdhnKZFcz+dWocVvg/rRWnHWx4Ol5Vb/ HLAMRzefK3pvXjfZDL5A6/RTXnpDYlbknbykteQ0TRgODYX1TmcSGVBJMwVaH+rp Krd+eHww+keasZR34MG05/AX0igWoGAseyECiKPFxsE9Kgvata8xFvnERQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKCky45Y8icw4bOOVglIHfprUxH2MB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbAaPC1gP WIWkytqQhrYJriu1FNhO4XSLHhQUSVZfP04/nJR2/KRP1LpRGr/koRZ5rYYhdDcJ 9AmMxiXL3X21eWwcM4rBrNUJyy3AHRcfg90yHrFcliFtPFWEOwmKgKlXUw1Huf19 x2apOSX0hgaw/nWp0BkdGGIrxlabbQmnZXgVcDhXugi63tczfXZdS8OHMTXjr/fa GWpzHFGTKrAfWWOTx+VtHr9W2A+1lU8MtYdPR7dLE436/GPAMEqGqt1zGpUqbyD2 c9cn+ife7qVnvFH5Wp2xjLuoeh+dAVX7MrLa6lU8EN0tX2v17FMYI34VET+LsML6 7/ql2upj48zt0g== -----END CERTIFICATE-----Generated at Tue Oct 6 19:55:00 2026 by rpki-client