$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft File: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft (raw, json) Hash identifier: ai8BFcJCYpBxkow0Z90sPhH0prZB5H2pgcUzNn7VlvU= Subject key identifier: 47:B1:A6:29:DF:CE:5A:1D:E3:F6:91:D9:5A:32:34:01:6C:C5:24:F5 Authority key identifier: 5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 Certificate issuer: /CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Certificate serial: 01A17A04C1D266D5B4B17464F0F07C0ECC70 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft Manifest number: 1BEC Signing time: Mon 26 Oct 2026 21:01:34 +0000 Manifest this update: Mon 26 Oct 2026 21:01:34 +0000 Manifest next update: Tue 27 Oct 2026 21:01:34 +0000 Files and hashes: 1: 209LRc36fwwaooG93ZeC5gy1UlI.roa (hash: +31HKgDaFf6ohmz1C+Gt1Gm1LmNeUNqVhwrGkJQK7M8=) 2: 38F3RhCLEsplC_HqN7PLuMebFpk.roa (hash: 6eU7O6bTo+2h8a0CcTBhs9xpRuFRC3NSIJyb5rSHg6Q=) 3: 3D06yHKsQUT2InNv-XYHYJNizhE.roa (hash: zLhnPwPaGX9vwv1QODripvvpDNjoIcslM2JNSKiHBGk=) 4: 6qpiCml-pX5lqW7GJPxkWzV-tfE.roa (hash: 1nonVA7UmTQNKF9oF+gcOnGfYBqyjkprOt68rdCUHlU=) 5: CC4p6J18x44OqpJ0Vsqhy72m6Tg.roa (hash: D0AkvGqvJcSeNCKrZrX6Ol+lOOi31FLHD7gwA2ojdmc=) 6: KYlPg3qMQtEhdbWBzRWbH8xKeLU.roa (hash: aR1sZ1iqqgB9p67Odma26bUhuQaf2KBGaopoPF1pdc8=) 7: W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl (hash: uVs6sUuuxVjLFOOTvYgcVCtChMkRIf54c7Hrez2MtRg=) 8: a83HWrg-gm9J-fFeKvhIGb_9S94.roa (hash: 7tyP+V2kqb4zIzwdt4KQm1MNZgFnJhNfaOUQGqGaGfA=) 9: amgcdNKE5tv8cGii42ckAYiCH7M.roa (hash: JER9hBTtwxkDbdt6FDk1qkYipiZ//Jc0pr2hGz53NTo=) 10: b7tYvWtmxqSdeX16HlFKijgebWc.roa (hash: 7//ZRCR3KNzxGECtHa821/vKHZVZwBc7g5ue/ETQAiQ=) 11: mcnbsGgom3nQNmEDy6cdmP7Xnu8.roa (hash: OD/pABDaq2M9ctb18nBvVzCkNT8JS1u+DVfD1NqwFng=) 12: pa0maz8RzdAqPBYglEiUl6FWmh0.roa (hash: bOE0FSBYTEFSINx3pLoAdJvRYXXPgXPd0w77jq5s09o=) 13: qjmdpX5jD9vB-s6Mhrq5teyUBO8.roa (hash: +vj4vYEOu88zIELmJIae2JN1gbCkuZGrztMiGi720QE=) 14: rmbNOlT11Y0vmokiNgeLI05NKhI.roa (hash: BuA3h42+P1TM5X/zoS1KTDulUo41R66I7Fn4rVqrUqs=) 15: uxhT_9GpVyKzcM31mqhkX8X0o3c.roa (hash: B5T22Nmp0cpzAUumBR5CV4XqeuskYmmn5flUFliVMWM=) 16: xA8Gv9nGuQXZRKWCamE0Lq2gIig.roa (hash: Xvo8QlxQ8XgQ+PkvF5xwzMwO5hiYx9iQ03ZAoehmKDA=) 17: zNwjbISK5avijA3i46y9IHGbFLY.roa (hash: WSiODWfBhlqFMMi3wYTLpfHI3pUjnJ5tu+k2ZH3CI4w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 20:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7a:04:c1:d2:66:d5:b4:b1:74:64:f0:f0:7c:0e:cc:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5b698c4b612afee2cbb1cdd509e4f0246fbb80e1 Validity Not Before: Oct 26 21:01:34 2026 GMT Not After : Oct 27 21:01:34 2026 GMT Subject: CN=47b1a629dfce5a1de3f691d95a3234016cc524f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:90:81:b6:54:0b:33:68:35:b5:ad:56:4e:81: 8e:94:17:8a:14:67:2c:76:8e:6c:d0:15:25:43:21: ee:f8:7c:e5:e8:65:0c:c0:8a:37:1f:46:86:ab:ab: 4c:49:df:b6:d4:04:74:64:9e:00:99:be:77:18:d6: 1c:1a:0c:88:e7:cf:b2:4e:61:9b:95:9f:46:6a:51: 8f:67:ba:42:66:51:f7:46:29:d2:2c:a7:1e:1f:7b: 05:f6:19:bc:1f:c5:a0:3e:b5:43:15:a5:18:ab:19: b6:4a:93:38:ae:f8:72:c9:8d:8a:f0:16:f1:09:2a: 05:65:18:16:23:ae:3e:67:43:75:71:46:73:f8:d3: 53:b3:25:a3:9b:59:3a:e7:e9:7c:66:dd:3d:5e:d4: a4:23:f6:f5:53:a9:3f:2a:56:50:1a:b6:c6:2b:9c: b6:13:eb:0f:96:1f:3c:27:67:46:7d:e7:e4:20:b2: a1:e5:7d:ff:ea:e2:26:94:eb:da:34:db:27:b2:c7: 2d:b5:bd:61:d9:2f:6d:55:f7:4d:c5:b7:9d:a4:52: a4:44:89:52:42:f0:e6:7b:9d:9f:bd:ba:86:79:d3: bc:ba:4a:1a:30:22:11:4b:e1:de:5a:83:64:eb:f8: f5:e6:b3:2d:dd:68:5b:b7:ce:06:80:86:ed:a8:8c: 4e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:B1:A6:29:DF:CE:5A:1D:E3:F6:91:D9:5A:32:34:01:6C:C5:24:F5 X509v3 Authority Key Identifier: keyid:5B:69:8C:4B:61:2A:FE:E2:CB:B1:CD:D5:09:E4:F0:24:6F:BB:80:E1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/c16f55-b44d-40c3-9dac-cc2fafe3a8b4/1/W2mMS2Eq_uLLsc3VCeTwJG-7gOE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:d9:16:45:cb:02:e5:5e:77:36:62:ef:7a:37:a0:57:aa:af: cf:00:82:c3:9e:64:60:be:16:f8:9a:09:d2:a3:d1:da:e1:d7: 86:3e:85:b4:c9:9f:77:a1:1e:57:cb:65:07:7d:5a:3f:8b:df: 29:63:11:1c:da:93:39:fa:4c:7d:b3:78:93:b1:ee:00:1f:a9: 57:15:fe:d9:14:b9:82:5d:23:24:2d:9d:63:7e:7b:55:6c:36: 46:6a:4c:40:91:b1:d3:81:7b:ac:83:e1:3b:2c:57:11:4c:79: c8:3e:dc:e4:53:e0:87:ab:4f:b1:cb:c4:e1:d6:e1:42:0b:66: 09:a4:31:3f:b8:4b:df:46:2a:03:50:1f:e2:a8:43:11:65:13: ca:d2:42:e8:2d:74:58:e5:3b:a8:80:a7:e8:d2:2b:70:fa:9b: fe:59:b1:3b:89:3e:b3:97:e8:1e:9b:44:b8:4f:fd:fa:7b:c5: 68:29:94:a6:50:10:9e:1b:e6:81:44:51:31:a3:3d:ab:85:c1: e0:2e:e9:cc:74:f7:cb:f4:a2:00:51:d8:6c:ab:a0:f0:b1:d9: 78:d1:e0:80:9e:af:36:1c:dc:0a:e8:8a:19:73:ac:c0:c5:d5: 93:3f:1e:f5:33:9f:34:67:5e:57:87:da:5a:42:13:f8:94:7a: ab:64:52:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF6BMHSZtW0sXRk8PB8DsxwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDViNjk4YzRiNjEyYWZlZTJjYmIxY2RkNTA5ZTRmMDI0NmZi YjgwZTEwHhcNMjYxMDI2MjEwMTM0WhcNMjYxMDI3MjEwMTM0WjAzMTEwLwYDVQQD Eyg0N2IxYTYyOWRmY2U1YTFkZTNmNjkxZDk1YTMyMzQwMTZjYzUyNGY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA35CBtlQLM2g1ta1WToGOlBeKFGcs do5s0BUlQyHu+Hzl6GUMwIo3H0aGq6tMSd+21AR0ZJ4Amb53GNYcGgyI58+yTmGb lZ9GalGPZ7pCZlH3RinSLKceH3sF9hm8H8WgPrVDFaUYqxm2SpM4rvhyyY2K8Bbx CSoFZRgWI64+Z0N1cUZz+NNTsyWjm1k65+l8Zt09XtSkI/b1U6k/KlZQGrbGK5y2 E+sPlh88J2dGfefkILKh5X3/6uImlOvaNNsnsscttb1h2S9tVfdNxbedpFKkRIlS QvDme52fvbqGedO8ukoaMCIRS+HeWoNk6/j15rMt3Whbt84GgIbtqIxOAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEexpinfzlod4/aR2VoyNAFsxST1MB8GA1UdIwQY MBaAFFtpjEthKv7iy7HN1Qnk8CRvu4DhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMt Y2MyZmFmZTNhOGI0LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS9jMTZmNTUtYjQ0ZC00MGMzLTlkYWMtY2MyZmFmZTNhOGI0 LzEvVzJtTVMyRXFfdUxMc2MzVkNlVHdKRy03Z09FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdtkWRcsC 5V53NmLvejegV6qvzwCCw55kYL4W+JoJ0qPR2uHXhj6FtMmfd6EeV8tlB31aP4vf KWMRHNqTOfpMfbN4k7HuAB+pVxX+2RS5gl0jJC2dY357VWw2RmpMQJGx04F7rIPh OyxXEUx5yD7c5FPgh6tPscvE4dbhQgtmCaQxP7hL30YqA1Af4qhDEWUTytJC6C10 WOU7qICn6NIrcPqb/lmxO4k+s5foHptEuE/9+nvFaCmUplAQnhvmgURRMaM9q4XB 4C7pzHT3y/SiAFHYbKug8LHZeNHggJ6vNhzcCuiKGXOswMXVkz8e9TOfNGdeV4fa WkIT+JR6q2RSrA== -----END CERTIFICATE-----Generated at Tue Oct 27 05:13:43 2026 by rpki-client