$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft File: J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft (raw, json) Hash identifier: huDjTOkhVGCliEuKPWvmNw3mD95GFSWb6YULAujYKeM= Subject key identifier: 37:53:9E:D2:FC:A1:E0:2F:79:3E:92:19:6A:C1:63:EB:2B:5A:21:71 Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Certificate serial: 01A17F98BA17894256C4979C27DA394BAEBE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft Manifest number: 102C Signing time: Tue 27 Oct 2026 23:01:17 +0000 Manifest this update: Tue 27 Oct 2026 23:01:17 +0000 Manifest next update: Wed 28 Oct 2026 23:01:17 +0000 Files and hashes: 1: 7EiGgv_PLQW2d4Edr9dWf_kCqpc.roa (hash: /WvQoZTPvdG9JZjEBmJMaPyhm0vi99vpSiZBnghONsc=) 2: GVQM2fhWiAA1vaxgASrTGcM3NXg.roa (hash: qmify2cyOKHa4dPo1mFD43WN2hWzTZnDzaDfO9d6xj0=) 3: J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl (hash: cwFsXOAg40aQHp2fq3y3LjZsv19LmOdA/XKRwXJhFhA=) 4: MPe538bYpU8guVH5-86a4aQXXWo.roa (hash: r21A8jzF/GtpSrRHEgbvnBNm4NeKTp/0Wc3vPf+aR0s=) 5: MuaQsZpK85YLuwzSbgYhrnef72s.roa (hash: bdvuUkwflnueXXPnGyW7DncDokUJqOrDxizqAK6rLFQ=) 6: WRGpi7HwRnNDY3PI2oGKfGXaKgI.roa (hash: LFMATL8ZKYUpfJmXC93H6TmCx5lCUajaaJNv71P4C9w=) 7: _jP7HoE6xSVGQtiue_1k6La3slE.roa (hash: lNbPgbdDGD01z1JbLvmrn22+TQAyCpvm6Vuj52vD43Q=) 8: c_so8ZAo99s903KgX6q1bd_ayQY.roa (hash: qk06hv+tknoEnl/WncFnILZI0t8DHr6k+PuJJrOlT6s=) 9: l-al53GTn2U3_oux5KceKXfKkVM.roa (hash: VwmHIGN92Mm8C6FgCJrZ5LFSIkTya2qnm7OsmBE8eyE=) 10: nI8D-AwVuUhZS_gQCeDbQORZ77k.roa (hash: zi3GVIgGpTx+NCwINdJlKP5OnWevf0ir3DqN9LIx3e8=) 11: q7vMD6mIfzpLb7CF7yl-IRDHtCE.roa (hash: TesuII4qavrPBYGW0VDnkRRfFDra+Oiy77Suqk2EfWk=) 12: tWGRv_hyhjidgeuLulUyTvlUkno.roa (hash: NcCoTVI9n6Tvs7iCSV8u+GLSUpE0fTg++nuaEsIMvIs=) 13: zsjg_uNpmMmffhFlupWb75dFOf8.roa (hash: HE/uSl70PUzAoBt7ot8n4K8Er2xcIutkfXUuzgDxPFM=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7f:98:ba:17:89:42:56:c4:97:9c:27:da:39:4b:ae:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9 Validity Not Before: Oct 27 23:01:17 2026 GMT Not After : Oct 28 23:01:17 2026 GMT Subject: CN=37539ed2fca1e02f793e92196ac163eb2b5a2171 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:0b:54:73:1d:e4:55:3c:4d:b5:a0:53:dd:71: c5:22:df:8e:4f:ae:cc:83:6b:2d:8e:45:33:f0:4f: b6:27:ae:78:99:4f:cd:c4:ed:60:b2:84:10:8e:c6: 90:31:82:5b:47:36:70:6b:91:bc:af:d0:cc:96:ef: a8:64:36:bb:40:63:5c:5e:61:b7:bc:fc:ce:93:2f: a2:f7:bf:72:24:3d:40:2c:c6:e6:e8:47:b1:b1:32: 90:fe:0a:9b:e6:6f:23:a9:4d:4f:a3:57:c0:51:b1: ba:57:bb:85:3d:d4:76:29:58:6f:ed:f8:0a:8a:55: 9b:36:a7:e8:9e:26:dc:33:5b:f9:38:5a:96:5b:84: f3:36:74:18:2c:2c:5f:eb:3c:3e:58:d2:4d:f4:11: 0e:72:37:4d:95:54:94:7b:89:0c:35:e1:e3:aa:c3: bd:ae:6e:6f:b7:f4:68:a0:d0:a6:ab:79:ba:71:9b: 90:d5:40:a5:38:7d:11:24:57:20:91:24:c8:de:a3: 08:8d:20:22:70:ef:90:f7:f5:0c:ef:38:60:0b:dd: 82:03:22:32:b7:f3:dd:79:23:dd:8a:41:c1:fa:6f: 8f:47:91:33:a8:db:14:a9:3b:70:02:17:4a:f4:01: 05:43:8f:ec:fd:c8:ae:e2:1c:bc:44:0f:71:45:05: bd:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:53:9E:D2:FC:A1:E0:2F:79:3E:92:19:6A:C1:63:EB:2B:5A:21:71 X509v3 Authority Key Identifier: keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:74:04:15:20:01:11:10:e1:be:8b:a4:f8:48:47:8c:53:31: 8c:51:7f:aa:e6:7f:a6:de:d6:90:89:67:8e:da:5e:d2:33:5a: 6e:e4:60:16:0f:d8:73:4d:c6:86:be:c3:64:c9:a6:86:89:fd: 07:af:78:14:a2:a8:13:03:db:0f:fb:39:c1:1a:5a:53:3e:a7: 1a:b8:61:19:fe:8a:cb:9a:d6:1d:bb:23:ac:a8:a1:e6:63:ca: 77:af:cb:ec:50:a8:f5:77:7c:7c:fe:fa:ad:bc:e7:e6:af:7c: 5c:ec:b9:e4:57:af:f5:af:ac:71:43:8d:c4:c9:56:5d:9e:8e: 6d:ec:79:b0:42:35:ee:04:e8:45:ef:f4:b1:ea:0b:51:7d:17: 55:39:c6:97:01:9c:e5:21:57:3c:16:8c:90:6b:d8:ed:63:1c: 7b:de:4a:58:df:c7:ce:19:44:ba:fe:5a:69:7a:bc:18:3c:b4: 6a:1e:d4:4f:ef:9b:a1:91:c9:5e:98:d1:ef:f3:4b:15:ac:7c: 44:a8:80:3a:4a:27:f6:b3:b9:2d:7e:71:30:dc:fd:69:0f:35: f4:6b:64:4d:3f:4d:89:7b:41:d9:27:1a:5f:7d:58:0f:6b:d6: 46:b9:71:91:15:43:4b:9f:c1:49:fd:de:a6:93:c5:c1:dc:aa: 08:96:94:17 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF/mLoXiUJWxJecJ9o5S66+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI3YzhiNDI3YzMxMzU5OGE5MmU4ZDhlYzYwZTI5NTBkYTM5 ZmMyYzkwHhcNMjYxMDI3MjMwMTE3WhcNMjYxMDI4MjMwMTE3WjAzMTEwLwYDVQQD EygzNzUzOWVkMmZjYTFlMDJmNzkzZTkyMTk2YWMxNjNlYjJiNWEyMTcxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wtUcx3kVTxNtaBT3XHFIt+OT67M g2stjkUz8E+2J654mU/NxO1gsoQQjsaQMYJbRzZwa5G8r9DMlu+oZDa7QGNcXmG3 vPzOky+i979yJD1ALMbm6EexsTKQ/gqb5m8jqU1Po1fAUbG6V7uFPdR2KVhv7fgK ilWbNqfonibcM1v5OFqWW4TzNnQYLCxf6zw+WNJN9BEOcjdNlVSUe4kMNeHjqsO9 rm5vt/RooNCmq3m6cZuQ1UClOH0RJFcgkSTI3qMIjSAicO+Q9/UM7zhgC92CAyIy t/PdeSPdikHB+m+PR5EzqNsUqTtwAhdK9AEFQ4/s/ciu4hy8RA9xRQW9wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDdTntL8oeAveT6SGWrBY+srWiFxMB8GA1UdIwQY MBaAFCfItCfDE1mKkujY7GDilQ2jn8LJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzct MWM2ZWU0NGUxMWFkLzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZS9hN2NkYmYtZGE4ZS00ZDQzLWJkYzctMWM2ZWU0NGUxMWFk LzEvSjhpMEo4TVRXWXFTNk5qc1lPS1ZEYU9md3NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR3QEFSAB ERDhvouk+EhHjFMxjFF/quZ/pt7WkIlnjtpe0jNabuRgFg/Yc03Ghr7DZMmmhon9 B694FKKoEwPbD/s5wRpaUz6nGrhhGf6Ky5rWHbsjrKih5mPKd6/L7FCo9Xd8fP76 rbzn5q98XOy55Fev9a+scUONxMlWXZ6Obex5sEI17gToRe/0seoLUX0XVTnGlwGc 5SFXPBaMkGvY7WMce95KWN/HzhlEuv5aaXq8GDy0ah7UT++boZHJXpjR7/NLFax8 RKiAOkon9rO5LX5xMNz9aQ819GtkTT9NiXtB2ScaX31YD2vWRrlxkRVDS5/BSf3e ppPFwdyqCJaUFw== -----END CERTIFICATE-----Generated at Wed Oct 28 07:21:36 2026 by rpki-client