$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft File: nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft (raw, json) Hash identifier: rXRkwpPY81LZS56SYWGEdvJMTCE6BBJ9zG9Ci0AZq4w= Subject key identifier: 2C:60:61:C2:04:7C:A3:C6:3A:82:1E:7E:F3:54:2C:0A:2E:D6:3D:EB Authority key identifier: 9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 Certificate issuer: /CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Certificate serial: 01A14ACF977683391B52678AC28BA66BA06E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft Manifest number: 1AB1 Signing time: Sat 17 Oct 2026 17:01:21 +0000 Manifest this update: Sat 17 Oct 2026 17:01:21 +0000 Manifest next update: Sun 18 Oct 2026 17:01:21 +0000 Files and hashes: 1: 1ms-U7GStIQWyhBvk39Pmz4mWvA.roa (hash: lEZsZW9Tv4rbrMsSytyM2px+I6/78sknyWxeRiHKwJM=) 2: 465Kcfdz-gCkfuGZh8doO_u-oWc.roa (hash: +omro3YFQE2sJ1eByZhKP6jW3x+UZ2ptJKtI+7UVFM8=) 3: FudhY_GW4msTOukhgnBFXzVYoiM.roa (hash: 7UgC+06y5UTQvkQ9UgPJMOjARzvFFXEio5n7Jvg4z+k=) 4: HK6BNNsWSLGubaZl3upPyutswvU.roa (hash: WzFjY3CdZWeDvACOL+XKBEMBzEj0lVc25php/SCslcU=) 5: IBvfpHlo0nhBmzHxQLjSRpI2BSY.roa (hash: DAVNHApbGflPu1pSl2KrRTguzWmq2zUGW0dSw+3gnZ8=) 6: LTfWXRthcASup-DyG7vEDraK0EY.roa (hash: whp6f+y/ya/1LAvlaxCVtUimjkVrV3wXO989ASjx2UI=) 7: PUPZ5PDa_TnnNK5CKrAamkbA9qg.roa (hash: mlGNam5OVbUbnfHBcyzvj7iTYMgBLkQF8bhZoX4e0R8=) 8: XZ_A9oOFh615-GWf-jG9mLRl_BA.roa (hash: IjFd4KfJkkTKhVMOqjReLPHCLFxiAiN7OyTxurp0L6k=) 9: cqQ13TfAA2f3o1iYd5u_zHjR1og.roa (hash: PPVmtCcOrF5jhwXK7aADjsl4uaCgfyEm1Gbo+31zhCo=) 10: kCm_uKpWKjhNUczVOAQvBZ4TtMQ.roa (hash: S9J7ulFMDCXhT6uUyj2J+Qhp8QQOqTeuNdKWWsuYDSA=) 11: nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl (hash: LqCi/WAW16WKXD91vJcX2vZoC+7pKRYDRSNpDYzgZ2M=) 12: rEIw8icF5JeHNJs8hiRgw1rRnR0.roa (hash: ZktjBhuI012cqumaMif+o0oMdONZdwewIFYAJ7bf8FQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 14:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:4a:cf:97:76:83:39:1b:52:67:8a:c2:8b:a6:6b:a0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d5de490ff874e9689cecf726cbb4e2f51f6c731 Validity Not Before: Oct 17 17:01:21 2026 GMT Not After : Oct 18 17:01:21 2026 GMT Subject: CN=2c6061c2047ca3c63a821e7ef3542c0a2ed63deb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:ac:b6:82:0d:06:af:53:67:63:5f:41:08:43: 4b:a8:00:b5:fa:db:f1:f5:6d:3e:4c:33:19:0f:ea: 3d:94:0f:f1:be:26:22:e3:c0:6b:f2:bb:83:76:31: 15:a4:25:1d:13:c0:de:20:ef:20:78:ea:00:49:57: d3:a8:c2:d7:e1:8e:09:25:de:c2:96:6b:21:b0:3d: 82:44:b2:69:14:cc:7e:4f:74:b0:90:39:05:7a:bd: 8b:06:1f:6c:e4:97:be:ac:a7:e9:b8:0a:77:38:9d: d3:12:e7:82:b3:2c:46:21:65:d2:9f:d5:52:1b:27: e6:97:72:7b:b5:ac:ec:ae:12:f7:6d:2c:4f:0b:b9: 75:a3:ba:16:dc:60:8f:e6:68:43:b8:7a:be:23:7e: 53:70:76:1e:ca:b9:2b:d9:e2:09:91:86:91:9b:ae: eb:0d:1f:80:02:de:b9:fd:e3:0a:aa:a0:e8:bf:46: 4c:2e:34:51:8b:d2:83:57:2d:a2:ed:76:b4:61:88: 62:c2:7e:a1:f6:09:bc:a6:88:d3:af:8c:70:1c:ce: 84:14:eb:43:ba:68:2b:12:bd:b1:fa:4b:9e:40:ae: cb:f3:d4:9b:a7:0f:0b:6c:a1:1a:61:eb:e6:26:1d: 2d:75:66:0d:08:f1:de:84:5c:f8:08:af:c5:42:72: 16:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:60:61:C2:04:7C:A3:C6:3A:82:1E:7E:F3:54:2C:0A:2E:D6:3D:EB X509v3 Authority Key Identifier: keyid:9D:5D:E4:90:FF:87:4E:96:89:CE:CF:72:6C:BB:4E:2F:51:F6:C7:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV3kkP-HTpaJzs9ybLtOL1H2xzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/70/745bdb-104b-49c7-99d5-cec33ba1bdf5/1/nV3kkP-HTpaJzs9ybLtOL1H2xzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:d0:47:34:dd:2c:76:0a:b5:4e:65:d2:d9:32:b0:24:d1:9a: 30:3f:ab:b7:76:a9:24:9f:f5:03:34:f3:c4:c7:90:6e:64:28: d8:eb:e2:06:ac:9e:92:e4:6f:fe:50:43:3e:e5:25:43:ea:ea: 87:49:12:e4:dd:5d:96:d2:b5:ec:4d:80:52:aa:6a:33:bb:5e: a3:f2:41:f1:95:30:e7:28:78:79:76:20:88:83:f8:ec:8e:6a: e9:98:98:6b:7f:3d:69:ee:f3:58:f0:e2:ad:45:bf:5b:21:29: b2:a6:59:8d:47:02:5b:86:33:4d:18:0e:27:a4:e9:b0:bb:39: 14:00:2a:4c:3b:dd:ca:fe:cf:3b:70:41:f4:b6:74:0e:62:65: a9:d9:f1:ee:e4:81:39:f9:5d:21:a6:04:ea:3f:9a:62:18:7c: 01:b4:a9:6b:21:e0:ab:3b:20:d7:5b:6d:8d:63:f2:f5:f7:75: b9:47:38:69:ba:92:f3:2a:83:d3:e2:39:d9:bc:49:4f:33:38: f4:93:ad:18:3c:df:5c:a8:48:35:20:cd:c9:35:67:6a:22:84: 19:dd:03:d5:28:f5:8f:2b:f7:13:92:18:d8:cb:3b:f2:b3:fe: 1a:bf:94:91:e0:ca:d4:1c:78:cc:f5:c8:ef:3d:b7:51:5e:61: 7f:36:6e:99 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFKz5d2gzkbUmeKwouma6BuMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkNWRlNDkwZmY4NzRlOTY4OWNlY2Y3MjZjYmI0ZTJmNTFm NmM3MzEwHhcNMjYxMDE3MTcwMTIxWhcNMjYxMDE4MTcwMTIxWjAzMTEwLwYDVQQD EygyYzYwNjFjMjA0N2NhM2M2M2E4MjFlN2VmMzU0MmMwYTJlZDYzZGViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6y2gg0Gr1NnY19BCENLqAC1+tvx 9W0+TDMZD+o9lA/xviYi48Br8ruDdjEVpCUdE8DeIO8geOoASVfTqMLX4Y4JJd7C lmshsD2CRLJpFMx+T3SwkDkFer2LBh9s5Je+rKfpuAp3OJ3TEueCsyxGIWXSn9VS Gyfml3J7tazsrhL3bSxPC7l1o7oW3GCP5mhDuHq+I35TcHYeyrkr2eIJkYaRm67r DR+AAt65/eMKqqDov0ZMLjRRi9KDVy2i7Xa0YYhiwn6h9gm8pojTr4xwHM6EFOtD umgrEr2x+kueQK7L89Sbpw8LbKEaYevmJh0tdWYNCPHehFz4CK/FQnIWewIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCxgYcIEfKPGOoIefvNULAou1j3rMB8GA1UdIwQY MBaAFJ1d5JD/h06Wic7Pcmy7Ti9R9scxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUt Y2VjMzNiYTFiZGY1LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83MC83NDViZGItMTA0Yi00OWM3LTk5ZDUtY2VjMzNiYTFiZGY1 LzEvblYza2tQLUhUcGFKenM5eWJMdE9MMUgyeHpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk9BHNN0s dgq1TmXS2TKwJNGaMD+rt3apJJ/1AzTzxMeQbmQo2OviBqyekuRv/lBDPuUlQ+rq h0kS5N1dltK17E2AUqpqM7teo/JB8ZUw5yh4eXYgiIP47I5q6ZiYa389ae7zWPDi rUW/WyEpsqZZjUcCW4YzTRgOJ6TpsLs5FAAqTDvdyv7PO3BB9LZ0DmJlqdnx7uSB OfldIaYE6j+aYhh8AbSpayHgqzsg11ttjWPy9fd1uUc4abqS8yqD0+I52bxJTzM4 9JOtGDzfXKhINSDNyTVnaiKEGd0D1Sj1jyv3E5IY2Ms78rP+Gr+UkeDK1Bx4zPXI 7z23UV5hfzZumQ== -----END CERTIFICATE-----Generated at Sat Oct 17 23:48:58 2026 by rpki-client