$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft File: iabNn0vrewwE0x_-XGdKh6dznSE.mft (raw, json) Hash identifier: DKkAktY7kwlq+Bre6ckwfcWqD0p2BBQ0T61CfMyvVAA= Subject key identifier: 0C:A1:F1:E7:92:03:2D:39:DB:FB:9E:25:A6:49:BC:C6:F9:25:FE:08 Authority key identifier: 89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 Certificate issuer: /CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Certificate serial: 01A147CF1C0EEC2BE6CD6CA9C1563DD8DA20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft Manifest number: 1AAF Signing time: Sat 17 Oct 2026 03:01:57 +0000 Manifest this update: Sat 17 Oct 2026 03:01:57 +0000 Manifest next update: Sun 18 Oct 2026 03:01:57 +0000 Files and hashes: 1: 1WyX2wYZfSpfBSYJmVIkxnQu2wQ.roa (hash: HByWovJax8W7lyVW8tq54HBM8ZSxxFTqPknO3ul1ROw=) 2: 2CXydi7pS_cJcMpLbvELMfs4pr4.roa (hash: 4VhEMr7PE71mfWduL3bPnzBAu34zlbw2TZ44djrJbfs=) 3: ABESchGm3xAWCWATli7x4kGiTzw.roa (hash: AnU+yC61NkHACr9HWnVDLRjrcdrvaYYu39Z2t2XH2V8=) 4: AkX-mzKyW-zWL7niXL60Uuhd2-M.roa (hash: KT91YU3baNR7x3ucuvqSZ47bi2WtNK8I/Rkt9bmg+ew=) 5: IwsvS8RMbeaKnb6W0isgZ_jGVmw.roa (hash: 4c2RJvFORctjrcpJUYKuJxaYNELJKpkNVKrS5LH92qg=) 6: J99XeamfX85WdvVj9bf7jMIVc1M.roa (hash: mqf7/m5EBvBpIA8HdJaRPy8S8x76AjMtaSPox8GG7EU=) 7: Lk6SP2L13xjIZN2DNZ1tW01PFjk.asa (hash: YWTYWs5dD9oqQES2JzWC64QE3ZcryIjb3fBcdjy1kJs=) 8: VOtCH4o4J2I_5xCMQITnNsVrQfM.roa (hash: lN9s8lkEygb8GJjfZSSBzQIfuy7TwscZaveIQRwQT+M=) 9: VsVyNiSsXQIos_8DFMvFrVCvPpA.roa (hash: R0tV98ZO0gRaUtsVcVg2fiIoo3NKUpn02E2MWrZq94I=) 10: _LeL1BNmnES7Us_tgk-2zM9WYz4.roa (hash: 6CIKHs+5sFlyV+xFBJTDb1/TPrK1K1Sk3+HBhp50WvE=) 11: aumQ2rFvvPhxeJtuueKJVvufvQo.roa (hash: ZFlq8TIHB2weJNR+r1TYQoztERUk3FxSRK57UxVkfCM=) 12: iabNn0vrewwE0x_-XGdKh6dznSE.crl (hash: br0PHtTNH5DuD1gI+GciOAQKNh+IIz0aUOFdIMFC4HE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Oct 2026 20:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:47:cf:1c:0e:ec:2b:e6:cd:6c:a9:c1:56:3d:d8:da:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89a6cd9f4beb7b0c04d31ffe5c674a87a7739d21 Validity Not Before: Oct 17 03:01:57 2026 GMT Not After : Oct 18 03:01:57 2026 GMT Subject: CN=0ca1f1e792032d39dbfb9e25a649bcc6f925fe08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:05:6e:c8:f2:14:a0:6b:5f:35:70:97:f8:dd: 02:0d:cd:ce:43:29:15:65:f5:15:cd:ab:da:63:14: 66:30:b2:9f:db:22:0d:77:59:df:7a:ed:11:63:c9: 36:6c:72:3c:b3:6c:ae:20:0c:c1:4b:68:d5:1e:33: 87:bd:e7:a8:94:7e:b1:41:e8:f5:c4:8d:42:bb:78: e0:e4:ff:b5:ab:4c:5b:be:b5:8f:da:db:83:66:e7: c9:bd:58:42:55:55:50:e4:20:b7:e5:9a:ec:5d:0f: 1e:5e:7f:7d:74:f8:0e:41:de:97:0f:59:1e:d6:5f: 8d:2c:d7:98:0d:46:34:6f:4a:74:e1:8e:37:ed:ac: a8:00:de:13:22:3b:02:89:58:6c:3f:e4:8e:8d:2a: 8e:de:f0:97:8a:d5:1a:39:74:ec:8d:be:96:68:e7: 1d:87:b1:2a:0c:d4:67:78:46:f3:c1:d3:c1:67:9d: 3c:43:43:0c:fc:a9:28:55:09:a3:99:9b:91:34:a8: a7:4b:35:28:46:8f:5a:d9:20:dc:13:de:1d:fc:b8: f9:ac:aa:ef:75:e1:32:74:3b:a2:4f:cb:6b:fa:80: 32:c0:5b:d5:f7:ed:cb:f7:b7:05:fd:fd:52:f5:82: 20:a1:64:39:7e:97:53:2e:48:cf:17:a1:62:2b:3b: 73:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:A1:F1:E7:92:03:2D:39:DB:FB:9E:25:A6:49:BC:C6:F9:25:FE:08 X509v3 Authority Key Identifier: keyid:89:A6:CD:9F:4B:EB:7B:0C:04:D3:1F:FE:5C:67:4A:87:A7:73:9D:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iabNn0vrewwE0x_-XGdKh6dznSE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/76/99a4cc-4720-4a64-aa06-1f924495fcdd/1/iabNn0vrewwE0x_-XGdKh6dznSE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:be:b7:46:c8:50:11:49:2d:03:67:5b:d0:16:c3:f5:92:c8: 20:f9:fc:bb:b5:91:08:78:b4:a2:70:9b:41:42:c4:47:1d:f4: 34:99:88:00:07:b0:68:01:bd:e6:61:71:c3:73:9a:48:31:7c: ba:4b:39:8e:77:da:93:2d:9f:23:10:01:a2:78:f7:90:91:99: 94:c1:38:4d:6d:62:86:54:8e:67:f8:77:8f:a2:9c:d1:5d:d1: d8:a2:6e:84:20:09:e0:8a:95:5a:b7:50:ce:d3:c2:b2:52:32: 10:cd:c7:24:8f:c6:06:7a:e1:6e:54:bf:a5:1d:df:66:19:bf: 0f:59:cb:72:d9:2e:07:4f:4a:5b:37:32:a4:f3:34:5a:74:07: be:4a:de:ba:5a:53:d8:cd:b5:3d:e4:33:15:cd:6e:79:35:6f: 23:45:c2:ed:fc:0c:d5:96:04:0b:a6:62:83:85:32:e0:e7:9a: 64:0b:ca:43:5e:15:d1:82:4e:c2:67:b0:6b:38:e3:ef:a7:e6: 8f:aa:9a:49:83:18:3e:73:cf:e1:da:a7:2a:9b:98:1f:c4:95: 90:bd:5a:70:c0:9d:ad:dd:e0:65:cf:1c:dc:a6:94:8f:ae:cc: c7:89:fd:41:4b:cf:8c:21:ba:f5:4e:70:f3:89:f3:b0:b9:cb: da:6c:af:a7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFHzxwO7CvmzWypwVY92NogMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YTZjZDlmNGJlYjdiMGMwNGQzMWZmZTVjNjc0YTg3YTc3 MzlkMjEwHhcNMjYxMDE3MDMwMTU3WhcNMjYxMDE4MDMwMTU3WjAzMTEwLwYDVQQD EygwY2ExZjFlNzkyMDMyZDM5ZGJmYjllMjVhNjQ5YmNjNmY5MjVmZTA4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAVuyPIUoGtfNXCX+N0CDc3OQykV ZfUVzavaYxRmMLKf2yINd1nfeu0RY8k2bHI8s2yuIAzBS2jVHjOHveeolH6xQej1 xI1Cu3jg5P+1q0xbvrWP2tuDZufJvVhCVVVQ5CC35ZrsXQ8eXn99dPgOQd6XD1ke 1l+NLNeYDUY0b0p04Y437ayoAN4TIjsCiVhsP+SOjSqO3vCXitUaOXTsjb6WaOcd h7EqDNRneEbzwdPBZ508Q0MM/KkoVQmjmZuRNKinSzUoRo9a2SDcE94d/Lj5rKrv deEydDuiT8tr+oAywFvV9+3L97cF/f1S9YIgoWQ5fpdTLkjPF6FiKztzeQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAyh8eeSAy052/ueJaZJvMb5Jf4IMB8GA1UdIwQY MBaAFImmzZ9L63sMBNMf/lxnSoenc50hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYt MWY5MjQ0OTVmY2RkLzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Ni85OWE0Y2MtNDcyMC00YTY0LWFhMDYtMWY5MjQ0OTVmY2Rk LzEvaWFiTm4wdnJld3dFMHhfLVhHZEtoNmR6blNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAL63RshQ EUktA2db0BbD9ZLIIPn8u7WRCHi0onCbQULERx30NJmIAAewaAG95mFxw3OaSDF8 uks5jnfaky2fIxABonj3kJGZlME4TW1ihlSOZ/h3j6Kc0V3R2KJuhCAJ4IqVWrdQ ztPCslIyEM3HJI/GBnrhblS/pR3fZhm/D1nLctkuB09KWzcypPM0WnQHvkreulpT 2M21PeQzFc1ueTVvI0XC7fwM1ZYEC6Zig4Uy4OeaZAvKQ14V0YJOwmewazjj76fm j6qaSYMYPnPP4dqnKpuYH8SVkL1acMCdrd3gZc8c3KaUj67Mx4n9QUvPjCG69U5w 84nzsLnL2myvpw== -----END CERTIFICATE-----Generated at Sat Oct 17 06:00:50 2026 by rpki-client