$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: VqkAyW0wV7Xs5i+GR+FuNGLOS0qtVXaKI/xNxLVBZUY= Subject key identifier: FD:28:42:AA:F1:32:11:81:D8:63:CF:4B:78:6F:28:9A:C1:59:EF:7F Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 01A177DE7BF77D3CC15B0D5E4A6F4E624595 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 1CF2 Signing time: Mon 26 Oct 2026 11:00:31 +0000 Manifest this update: Mon 26 Oct 2026 11:00:31 +0000 Manifest next update: Tue 27 Oct 2026 11:00:31 +0000 Files and hashes: 1: J_Rao8XwSdeJowVZJOukzjb5984.roa (hash: yc7C55kPwJyA/Z9JdP2AgmYSU/kuUpvqz2WUy55f12A=) 2: SGYSs8BTlkfCu-Mq3c6XcBYmxhg.roa (hash: lAsFW8ZjyvpQlvWQfvhdK/v8mMhfPLZ6fVUS2ot7BuI=) 3: V-mUpSZLDydk2DSY5s9VcnYeUI4.roa (hash: 91j4T4VAzj5InT4KbsUzEPF4E8w3CfNTL4LdqNeJf38=) 4: XQN2PVO2BIAMkSThT7E-pns5qnM.roa (hash: Y7XQgYH+9nwgMwtIh2gFs5Ndo5hynElaRlQj0CaAZEk=) 5: a6Erf_tnT8pMndq3WnrW7H4B990.roa (hash: 9x4c63CxJ5UoigQePJxkpntm40rkErQOAY2jQ4vUfMc=) 6: bsp6BDSIWkrxR6u3xicw9RBKbtM.roa (hash: KBNbBNVVMKDz24iMEiDHeH6Ud37u/sKie2hM0HuZtdo=) 7: h9g_PYMZuLeSljFMXLDLfTUsqxc.roa (hash: dttrOUO+v4KY515NCQvb1Vqt92zL71t/i+3OWHk84Zc=) 8: knLrELnamRbYKI_hmZ4VPtqQHec.roa (hash: KpZhnOp+uvDR1vqjA12HnP6hCAQUJOuMRCA2L33u3s8=) 9: nSsMIk4gWxbIeigyP816DLKTC4A.roa (hash: ZUWSLLXlJsJEXgJ0xzJruxVtWPFtV5scS2gIX9A4Cdg=) 10: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: HY9BurCMmqZk/SdYNQU/fAAxyxWhVDTvgHC0r5jM96o=) 11: u7w1cEYTaI2DzzWQmZyLzaqM5sY.roa (hash: wFc0fj1o5uFkbtmZ4aVopMpmQGltmvAuiMNJULyr7/Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:77:de:7b:f7:7d:3c:c1:5b:0d:5e:4a:6f:4e:62:45:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Oct 26 11:00:31 2026 GMT Not After : Oct 27 11:00:31 2026 GMT Subject: CN=fd2842aaf1321181d863cf4b786f289ac159ef7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d9:04:78:30:47:58:a8:d9:0b:ca:b0:10:bc: 5d:44:ef:f2:6c:5e:2c:19:df:41:1a:63:7a:98:b9: 7c:12:b7:47:10:ad:2e:89:25:4f:20:0a:2c:9a:26: 37:e5:71:48:82:3f:1d:10:6e:54:6d:82:37:c7:98: 9c:c0:d9:a5:2d:23:bf:7c:0f:5f:81:50:04:91:74: 67:a8:e1:f9:27:b8:eb:d2:e6:f4:8b:3e:b0:5d:bf: 70:39:f4:3b:b0:3d:52:71:85:59:e6:cb:07:f7:70: 2f:43:f3:b1:12:73:b9:7d:91:15:8e:6f:a5:5b:62: cb:c3:71:17:4f:a3:95:f2:3a:29:47:b9:e9:55:6b: ef:2f:76:c0:7e:13:8d:1c:e0:c2:9a:32:d9:28:31: e6:44:9e:07:46:90:38:89:a9:57:dd:55:26:99:d3: 8c:8a:87:7c:99:61:64:a2:63:2c:b0:e6:47:10:ea: d2:cd:97:9c:2b:02:e7:d7:76:a1:74:27:83:73:83: 70:13:2c:4e:11:ef:29:d0:aa:50:47:27:4c:87:a1: 48:1d:23:e7:7d:7f:2d:e4:3d:b4:93:57:89:91:1a: 58:fa:83:82:02:cd:0b:9b:7f:38:de:d5:79:5f:b9: 13:f7:35:5e:a4:22:ab:41:1e:0d:01:80:c8:6f:60: dd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:28:42:AA:F1:32:11:81:D8:63:CF:4B:78:6F:28:9A:C1:59:EF:7F X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:24:4c:34:66:9b:e7:3d:60:94:ce:12:15:68:12:db:8f:87: 5a:29:15:54:8d:cd:1d:9e:32:fd:cb:5a:33:2c:18:82:af:bf: f5:6c:61:e8:67:4a:94:ac:3c:1d:51:af:b2:d7:b0:87:7b:69: aa:ea:2c:f3:19:44:fa:84:38:d0:02:16:b4:71:7e:22:dd:55: 57:9b:ba:32:e4:c5:d5:c6:09:e6:a7:bf:ad:42:c4:98:ea:03: 19:a0:fb:01:dd:df:b3:39:0b:84:30:dd:f8:1d:15:77:c6:a0: e6:81:d2:d6:bc:21:09:7b:52:e4:19:7c:d6:51:e7:39:a8:2c: 06:5b:18:e1:e2:06:c6:2b:43:94:64:05:b0:70:c1:bb:bc:4f: ec:fc:70:79:3a:56:e4:70:b5:42:f4:47:64:84:61:37:dd:14: f9:86:36:95:0f:c9:62:06:b7:99:11:5a:93:1b:c9:ae:20:d7: 9a:64:10:26:1e:fa:65:58:b8:9c:d3:b3:22:1a:70:15:7f:59: b3:75:e9:e2:af:4a:77:91:54:22:15:56:18:8b:f7:43:bb:03: f0:b8:5c:78:c3:ff:ca:77:21:50:5f:e9:b0:5d:4d:0e:50:e1: a7:ba:60:f7:48:18:66:fb:14:06:8f:9a:68:a8:7e:11:0b:b7: ec:3e:3a:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF33nv3fTzBWw1eSm9OYkWVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjYxMDI2MTEwMDMxWhcNMjYxMDI3MTEwMDMxWjAzMTEwLwYDVQQD EyhmZDI4NDJhYWYxMzIxMTgxZDg2M2NmNGI3ODZmMjg5YWMxNTllZjdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9kEeDBHWKjZC8qwELxdRO/ybF4s Gd9BGmN6mLl8ErdHEK0uiSVPIAosmiY35XFIgj8dEG5UbYI3x5icwNmlLSO/fA9f gVAEkXRnqOH5J7jr0ub0iz6wXb9wOfQ7sD1ScYVZ5ssH93AvQ/OxEnO5fZEVjm+l W2LLw3EXT6OV8jopR7npVWvvL3bAfhONHODCmjLZKDHmRJ4HRpA4ialX3VUmmdOM iod8mWFkomMssOZHEOrSzZecKwLn13ahdCeDc4NwEyxOEe8p0KpQRydMh6FIHSPn fX8t5D20k1eJkRpY+oOCAs0Lm3843tV5X7kT9zVepCKrQR4NAYDIb2DdkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP0oQqrxMhGB2GPPS3hvKJrBWe9/MB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSRMNGab 5z1glM4SFWgS24+HWikVVI3NHZ4y/ctaMywYgq+/9Wxh6GdKlKw8HVGvstewh3tp quos8xlE+oQ40AIWtHF+It1VV5u6MuTF1cYJ5qe/rULEmOoDGaD7Ad3fszkLhDDd +B0Vd8ag5oHS1rwhCXtS5Bl81lHnOagsBlsY4eIGxitDlGQFsHDBu7xP7PxweTpW 5HC1QvRHZIRhN90U+YY2lQ/JYga3mRFakxvJriDXmmQQJh76ZVi4nNOzIhpwFX9Z s3Xp4q9Kd5FUIhVWGIv3Q7sD8LhceMP/ynchUF/psF1NDlDhp7pg90gYZvsUBo+a aKh+EQu37D46cA== -----END CERTIFICATE-----Generated at Mon Oct 26 19:05:44 2026 by rpki-client