$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft File: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft (raw, json) Hash identifier: /Mz34wlLEd0kvBcoBerb8Z/49pYGp3RKNBNHu/sXr2k= Subject key identifier: A9:60:0D:AA:32:39:90:36:59:14:D7:06:35:5B:4E:85:39:F9:9F:93 Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1 Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1 Certificate serial: 01A17EBCD716EB81F13BB0608066B857F99C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft Manifest number: 02B4 Signing time: Tue 27 Oct 2026 19:01:07 +0000 Manifest this update: Tue 27 Oct 2026 19:01:07 +0000 Manifest next update: Wed 28 Oct 2026 19:01:07 +0000 Files and hashes: 1: 0PwBP1m5V8tHPFCHGGYOau0rRTc.roa (hash: M0W/FLJbKezFVRY+boZRSGO4f4RhltYple/V23X0j4c=) 2: 1vK1T7KdFH0hBpOuHuKe8W_luZE.roa (hash: qhZOYXpVTc+RHC0IfCFs2RzEIVYZAgoD6YvTFLHwFmE=) 3: 8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl (hash: f0S2h0W0cW0I9ZAisXSg5gWFWm9O6irF6EhnIzawyog=) 4: JcePCXWu8_9ZZzjxfVygKM8dWzw.roa (hash: 0S4YgLpuoSBRqOUxV6YpZdqEiuMF4cz82gQj2otpNQw=) 5: Md-o3lGIoXUo9ynVTwQnDQUNyzM.roa (hash: AWCf1DkAv4fQq3K+BQw40VyMuDn4MGmNjixx31UPhmA=) 6: Nd6V0QCloRDIZfwDcQtVL1w6Z0A.roa (hash: TIjs2IbFM1v00nTvmxBW2uHZechx9jNZhQSCyvBAeP8=) 7: O9sJ-_TKMq6bS7__E1UX2XB1imA.roa (hash: +Z6Yn/3PglFToHJ9MMw/pkkVUwEYwsRd5WZO7o88I9I=) 8: QEGryiURhVI85Y_iwFPpO1kjb3E.roa (hash: f7QZn8PJdOvgT/DCDoEpmb1SfJG64+IFdudonB3DpJU=) 9: S64PRp6HfgfeBA5dqF_nm378oSE.roa (hash: KH+IlbpUNkPXeoQclXeI5i/KLaVnfhqbd5izf4u4qTc=) 10: SHnHAD4XActufnWbDbBuCezR5sk.roa (hash: nenlz/3VAG7POjOi6mcs6RNeMaF2/86fDvCTf+cSRc4=) 11: Sq_qOTsf7wVB0vwgreS3nB_jIPk.roa (hash: OK/CHpHTM2yPPc6litBPMbap80Y0eTVdGYncN8WvmXg=) 12: WFIitC1iC4SxaD-gROSFjGsIGEA.roa (hash: tUjrSM/VRqbKLANp+j7DdS1R8QyDACe7TIIRQbZyYRc=) 13: XZAVpeao-MzWMM0T1IBuo6mJOhw.roa (hash: 4OhzlwI1uDhgkruwa46Ix7LBdf/mbvESkAg3CQYlmdQ=) 14: bGTHKMCwmJVzyHYU3KNYDg0jpi4.roa (hash: t9eEDkdFYwdSvb8hr3A4ec+b83VLHsVFWQATSd2+69k=) 15: bIX0tHr0jNswqPbh1gH8l-5GqA8.roa (hash: 5BjYOxvY1gubdV0c42SuZfXnljPiDdTy3UNiDoGVdu4=) 16: bTLlcnL0Fm_nCJarfemQWZlQvug.asa (hash: +U6OavydfvrqqdI9vdtdZM6LAnVLXxOVl7v9NGcpnyo=) 17: ea-J5bW7cK-quuNuRi6CFgFcSLY.roa (hash: qIqvWSMcazfocJrExCZsZTdbNeOv46Qe1fgtgnWNwqY=) 18: fYhnGLcy2_Ou27KADH18mycTzz4.roa (hash: sP66OdJ/+I0oQxB3kcnMaYSOI2OOAjekthsNq69mxkE=) 19: vSXSp5A3lM38ZHU363V73iY2sOY.roa (hash: OEc0FstKUDyge4yjj89lJISWQxLtMasQvdcX8uQFwbM=) 20: znznPgmiVfClQspsE4FxbLwuLGk.roa (hash: P3S6+AOoBSM1R2KGeRW8cymJyc/ckeqjjTGRQ6mN/pQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 19:01:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7e:bc:d7:16:eb:81:f1:3b:b0:60:80:66:b8:57:f9:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1 Validity Not Before: Oct 27 19:01:07 2026 GMT Not After : Oct 28 19:01:07 2026 GMT Subject: CN=a9600daa323990365914d706355b4e8539f99f93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:65:f2:e8:df:0c:48:0c:70:eb:35:45:1d:3b: 20:5f:46:ae:84:d8:24:cf:10:29:c9:a6:19:d6:ef: d8:32:97:fc:b7:f5:81:30:15:11:18:39:23:1b:e5: 6a:cb:19:29:f5:a0:fb:50:44:01:2c:10:4d:f0:92: d1:33:05:82:f5:7e:85:8a:f0:65:d7:8c:1a:1d:bf: 9c:39:c3:40:b4:58:47:36:16:cb:6b:15:6b:6c:0d: 63:1c:d9:c3:5f:85:9d:ce:c5:a3:d4:ed:80:8c:0b: 83:0a:0e:90:0b:80:c6:5a:7f:1c:c1:5a:2b:37:97: 4f:47:2c:4b:f4:6d:ee:73:d9:7e:7f:2a:c3:15:9c: 37:d3:09:7b:07:31:ee:be:6f:97:f4:0c:16:7c:5c: 5f:79:ff:39:5c:53:84:4f:e7:50:7c:09:af:a4:fe: 85:ad:34:17:f4:00:9e:f0:21:3d:45:40:c1:da:96: 59:7d:b2:ea:f1:90:51:a0:57:26:18:4e:ad:9a:f1: c5:af:c2:80:77:78:28:0a:bb:66:d2:08:66:14:52: 02:e2:46:07:31:b4:7a:be:33:e6:4e:c2:07:6a:f7: 3f:66:ab:3e:4d:99:86:2f:20:a8:34:50:b9:86:c9: 73:34:ae:40:18:da:ca:2d:07:b7:05:30:0a:52:60: 43:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:60:0D:AA:32:39:90:36:59:14:D7:06:35:5B:4E:85:39:F9:9F:93 X509v3 Authority Key Identifier: keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:49:7c:db:40:09:fd:da:7d:3a:bb:c4:2a:0c:df:c5:31:fc: e8:74:90:f9:8f:0f:d1:2a:2a:9a:70:1c:fd:73:de:3b:8b:c1: 1b:33:1b:eb:97:42:e1:ce:22:16:cb:04:10:0d:93:70:18:09: 56:83:fc:93:35:20:36:40:f2:8b:f5:3b:00:3d:f6:ba:49:4b: 6e:e2:03:c0:b8:fd:be:ee:fc:15:59:c2:c3:bb:bf:92:79:df: 76:35:b4:35:57:cb:6f:97:87:cd:1a:13:49:a5:fc:ad:f3:8f: 2a:d6:dc:d6:2e:29:bf:7d:7c:55:26:be:05:aa:6f:05:22:ab: f2:f8:17:a3:61:84:82:5c:9c:50:9a:b7:d8:4c:1a:3b:1e:e9: 2b:b1:74:d7:79:15:e7:12:bc:11:f2:06:8c:74:09:49:9d:06: 4c:c8:51:1d:e6:5f:c6:50:9c:59:b0:fd:99:f2:81:92:99:b0: 89:00:63:84:93:7d:61:b1:42:df:9e:88:3d:5d:42:23:a5:60: 68:7b:f0:4f:8a:d5:eb:01:55:e8:e0:69:e1:d1:c9:1a:aa:61: 70:d8:86:35:c2:ba:c8:84:45:e9:c9:b9:4b:f8:6b:89:76:99: bc:81:b9:55:3c:ef:67:f6:37:55:59:76:29:99:fe:50:87:b1: 01:52:2d:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF+vNcW64HxO7BggGa4V/mcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGYwMGJkY2M0NDQxNzNmNTk5NGRlMzRhM2JmNjNmM2FkOTc2 NGM2ZDEwHhcNMjYxMDI3MTkwMTA3WhcNMjYxMDI4MTkwMTA3WjAzMTEwLwYDVQQD EyhhOTYwMGRhYTMyMzk5MDM2NTkxNGQ3MDYzNTViNGU4NTM5Zjk5ZjkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1WXy6N8MSAxw6zVFHTsgX0auhNgk zxApyaYZ1u/YMpf8t/WBMBURGDkjG+Vqyxkp9aD7UEQBLBBN8JLRMwWC9X6FivBl 14waHb+cOcNAtFhHNhbLaxVrbA1jHNnDX4WdzsWj1O2AjAuDCg6QC4DGWn8cwVor N5dPRyxL9G3uc9l+fyrDFZw30wl7BzHuvm+X9AwWfFxfef85XFOET+dQfAmvpP6F rTQX9ACe8CE9RUDB2pZZfbLq8ZBRoFcmGE6tmvHFr8KAd3goCrtm0ghmFFIC4kYH MbR6vjPmTsIHavc/Zqs+TZmGLyCoNFC5hslzNK5AGNrKLQe3BTAKUmBD+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKlgDaoyOZA2WRTXBjVbToU5+Z+TMB8GA1UdIwQY MBaAFPAL3MREFz9ZlN40o79j862XZMbRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYt Y2ZhNWE0Yjg5ODZiLzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84OS9kNjJkZTEtMTE3My00ODhkLWFmMTYtY2ZhNWE0Yjg5ODZi LzEvOEF2Y3hFUVhQMW1VM2pTanYyUHpyWmRreHRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW0l820AJ /dp9OrvEKgzfxTH86HSQ+Y8P0SoqmnAc/XPeO4vBGzMb65dC4c4iFssEEA2TcBgJ VoP8kzUgNkDyi/U7AD32uklLbuIDwLj9vu78FVnCw7u/knnfdjW0NVfLb5eHzRoT SaX8rfOPKtbc1i4pv318VSa+BapvBSKr8vgXo2GEglycUJq32EwaOx7pK7F013kV 5xK8EfIGjHQJSZ0GTMhRHeZfxlCcWbD9mfKBkpmwiQBjhJN9YbFC356IPV1CI6Vg aHvwT4rV6wFV6OBp4dHJGqphcNiGNcK6yIRF6cm5S/hriXaZvIG5VTzvZ/Y3VVl2 KZn+UIexAVItHQ== -----END CERTIFICATE-----Generated at Wed Oct 28 03:14:21 2026 by rpki-client