$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: BCrHe0ed4g2YC9PfikG/qgGC4ZQGZvvqsXKOT1PwDXo= Subject key identifier: D2:F9:FB:AB:7D:EA:54:9A:84:02:D5:68:2B:08:E1:54:4F:AF:CA:62 Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 01A120C117A360708F9B44E5A54724785505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 0DFA Signing time: Fri 09 Oct 2026 13:01:27 +0000 Manifest this update: Fri 09 Oct 2026 13:01:27 +0000 Manifest next update: Sat 10 Oct 2026 13:01:27 +0000 Files and hashes: 1: 0-DUuatym4EjrLpEXcW6I4MvGuM.roa (hash: uxv6/KY05jYuEsZLZV3EP7utj37no6k0dC74Q/DN0po=) 2: 0G0rRTu6YWCR1V_Lc199bCBf3eY.roa (hash: ONejcgv+C+EtCtZmR2C80Az2frNnLr2aDGvIHLHpMsw=) 3: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: yppKWfiMOZyeMV2jjl5cp7rFr6W3Nl4rG52yg2FQSsA=) 4: DRWGbkvEcD_bNQTgjUEfobLZ-PA.roa (hash: eZVLmuCp5+bXUFcL2aI3C/aZXJNWqBIZX9DvM7Y7ZFY=) 5: RxPOdCnW7tymnjueSRcA6hs4elk.roa (hash: FCPYguPsplTXs5/9P4PJ+u4lYOZKePLa/u9GPsujen4=) 6: Y-ntuvRTafT1eOZlmfGsaPPEtjE.roa (hash: v4qO0jj2DVZ9xq0w+y70kJel8FoTbySNEx7XDJ9VH/Q=) 7: dJpXPlF_vRyOgX7jQKghLw8pQUQ.roa (hash: E1+cy9PTWiny/1y88hiJPYv+llkKbECfLmkj5G9alPY=) 8: kN69teI4lOPRDRSTeJKcvbg3DVI.roa (hash: 0zY8u4pSs4JdcMd1LnlNAD4f7WGos0AD35DsttS72fg=) 9: lu5yurSkT9e_Taok7SCt_R26FuY.roa (hash: CeXf6vw9DkbZGqczzaPxh8skoxIspZwWkZW0SRU+ELM=) 10: mgliWT245mKPpOJ9J-koUWKPC38.roa (hash: 2leVbMv5cZcWloTjT8tRG7S73gX0MLHEKiLR37iqlKc=) 11: nyqLqit5oB_bMTURFw941vObpAs.roa (hash: YyM6j1YO1pKfOQnOF8zW9g/xPYJJDmuheUmA+y3jAx0=) 12: qHpfpL-iX9xY8GdRHaONTT8pr8Y.roa (hash: +ysYA2z1c9FzjaGNYUk90Ddk4xsZHBpqAK7t8gXQInM=) 13: uf3e_BE2zQVDAEvwnBCYDlW_CRA.roa (hash: pdun+BKUOQ7DoLG0PPskjv1gebPPRcfr5c7Kait8/nk=) 14: xbafFgHngcJFMb2cngm3oN0_3sA.roa (hash: 3QhvTvFkxgvJXVXMTx914Du8ko0OHV0OfDyouPKHYiA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Oct 2026 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:20:c1:17:a3:60:70:8f:9b:44:e5:a5:47:24:78:55:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: Oct 9 13:01:27 2026 GMT Not After : Oct 10 13:01:27 2026 GMT Subject: CN=d2f9fbab7dea549a8402d5682b08e1544fafca62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:95:38:68:0e:66:fe:97:50:2a:70:74:1f:01: e9:e6:06:cb:d4:0f:85:55:b3:72:53:cc:ed:bc:bb: 7e:89:55:dd:b6:28:0d:66:46:0f:95:78:0f:dd:5e: 14:5f:6e:d9:e5:e9:88:54:9f:7b:b9:7e:03:e6:30: 3e:19:92:d5:42:d3:d2:bf:47:9b:a1:b0:27:ff:cc: cd:44:25:8e:68:98:d1:3f:6c:c2:66:98:1d:b8:b0: bf:e2:50:2c:65:b2:b6:9a:62:52:e5:91:f4:64:49: fa:8f:6d:20:b4:7f:e6:73:dd:43:d4:a5:e5:d2:b7: 97:b4:44:0a:fe:3a:77:9c:d2:92:7c:a8:2d:d3:b6: 38:4b:f4:ff:4b:cc:e5:f1:49:32:2f:30:22:57:39: ed:fa:56:59:14:a1:d3:d5:ea:5d:ae:94:ce:9c:a2: bb:bb:fb:e1:c7:b4:de:2a:0e:12:2c:5a:13:8d:cb: 61:a3:fa:56:b8:ed:a0:7e:e4:f9:67:48:46:5e:a8: 06:59:ed:01:2f:1a:99:12:11:59:ff:92:60:46:5e: 69:57:0f:c2:fa:94:bb:39:df:09:91:13:4d:69:af: cd:76:80:9e:d3:e9:4d:04:e6:4d:5f:76:02:03:33: ad:34:05:2e:c7:f7:56:86:c7:5f:44:89:a0:6e:54: 5a:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F9:FB:AB:7D:EA:54:9A:84:02:D5:68:2B:08:E1:54:4F:AF:CA:62 X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:10:5d:48:9b:09:fe:d0:2a:b5:26:bd:fe:ff:3f:15:bf:e2: 2e:9d:16:10:08:f2:db:a9:aa:e4:e0:74:64:94:c5:53:15:9d: 02:ef:7e:12:86:d3:6c:ef:6d:70:d1:68:d2:9e:59:1f:84:87: 27:07:e6:1a:77:bf:6f:2c:66:7f:11:a6:61:f5:28:ce:ef:e1: b7:91:44:b6:0c:0c:26:9f:62:bc:f5:bb:6a:56:42:c1:68:5b: a1:19:81:d7:4b:6b:49:32:6d:d4:f4:ce:49:52:b5:6d:87:1b: 12:9b:16:f8:99:a8:8a:b1:36:a8:f6:51:b8:d2:63:69:22:3f: 7e:6b:13:de:e0:7f:ab:18:c5:c9:5f:58:79:99:fb:3d:d0:b5: 49:dd:82:31:01:19:ee:b4:15:a4:93:08:d7:20:d2:f8:7d:26: bf:68:99:3e:5d:2c:d4:f5:44:1e:21:a4:60:4f:3b:65:c2:95: d8:f0:0c:35:68:73:92:6f:a9:8f:74:f9:5f:34:66:77:15:a2: ec:07:b4:0c:7b:a6:7c:5d:0c:86:8a:e4:bd:ae:02:7e:a8:c6: 8c:a3:65:ab:ee:c5:39:12:c4:20:74:52:59:7c:ed:d3:65:4b: 42:f3:7b:ed:a8:c6:86:a5:a0:ce:f2:de:9e:7c:7e:d3:9a:ca: 8b:48:a9:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEgwRejYHCPm0TlpUckeFUFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjYxMDA5MTMwMTI3WhcNMjYxMDEwMTMwMTI3WjAzMTEwLwYDVQQD EyhkMmY5ZmJhYjdkZWE1NDlhODQwMmQ1NjgyYjA4ZTE1NDRmYWZjYTYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZU4aA5m/pdQKnB0HwHp5gbL1A+F VbNyU8ztvLt+iVXdtigNZkYPlXgP3V4UX27Z5emIVJ97uX4D5jA+GZLVQtPSv0eb obAn/8zNRCWOaJjRP2zCZpgduLC/4lAsZbK2mmJS5ZH0ZEn6j20gtH/mc91D1KXl 0reXtEQK/jp3nNKSfKgt07Y4S/T/S8zl8UkyLzAiVznt+lZZFKHT1epdrpTOnKK7 u/vhx7TeKg4SLFoTjctho/pWuO2gfuT5Z0hGXqgGWe0BLxqZEhFZ/5JgRl5pVw/C +pS7Od8JkRNNaa/NdoCe0+lNBOZNX3YCAzOtNAUux/dWhsdfRImgblRapwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNL5+6t96lSahALVaCsI4VRPr8piMB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABhBdSJsJ /tAqtSa9/v8/Fb/iLp0WEAjy26mq5OB0ZJTFUxWdAu9+EobTbO9tcNFo0p5ZH4SH JwfmGne/byxmfxGmYfUozu/ht5FEtgwMJp9ivPW7alZCwWhboRmB10trSTJt1PTO SVK1bYcbEpsW+JmoirE2qPZRuNJjaSI/fmsT3uB/qxjFyV9YeZn7PdC1Sd2CMQEZ 7rQVpJMI1yDS+H0mv2iZPl0s1PVEHiGkYE87ZcKV2PAMNWhzkm+pj3T5XzRmdxWi 7Ae0DHumfF0Mhorkva4CfqjGjKNlq+7FORLEIHRSWXzt02VLQvN77ajGhqWgzvLe nnx+05rKi0iprA== -----END CERTIFICATE-----Generated at Fri Oct 9 20:53:25 2026 by rpki-client