$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft File: bOl89NjQvBezrx1ixNcUiGYb0hI.mft (raw, json) Hash identifier: aKirCRG+XYBeXNyq8P8Vb4XwUtN6/qqPLvETy69IxM4= Subject key identifier: C4:5D:71:1A:95:66:EE:AF:E2:32:D4:FB:CA:DB:80:8E:3C:C3:8A:AA Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Certificate serial: 01A175F04FE58640D337834317AD7C0F5757 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft Manifest number: 1ACE Signing time: Mon 26 Oct 2026 02:00:45 +0000 Manifest this update: Mon 26 Oct 2026 02:00:45 +0000 Manifest next update: Tue 27 Oct 2026 02:00:45 +0000 Files and hashes: 1: 3VQqtiom1KN9zcDFbHb_HNwz1EI.roa (hash: n7BuRmEffiATFiumwmipm2pKN3sbI8aRpEp3yWS0w6c=) 2: 53Y6HNT6PybZ5fv0RIq3VzI1Ero.roa (hash: gfRH81Dg27dQ3kodzezmL1Q0yfGmr/Pdqe1spxmMPZE=) 3: 7fjKgyx9Yaxh1FmHZYJUH95301c.roa (hash: T1XxvO4P4dkHl+WGoPHzZBE5VBrM/N30kEx3n7zSiDA=) 4: 8rGqH77YTfgMLRPyoN61N8RnEq0.roa (hash: ZNQ10Ukgjrp4rH/Ovez3kQihf1PS+l23PddvrRzZauI=) 5: BXn_bVoFgxHmHunAkFZSuzgFSwk.roa (hash: jxJIsK3YcEKMp25t1FYnjxefcJAQeAeiUCQ6rxD9bpw=) 6: BoaVLgPlhn4qr_fU3lgNc_DP-CI.roa (hash: 8gys4r5Jrh79V6ospkWBTCV9aubZPTwmXqR+dBSZNIM=) 7: E1du0wCDYd0qkbzycOzoURh4BYI.roa (hash: KvrqxA058Oc1sNN2BjNJzwOLTtzAgr6gDrllwRypkQM=) 8: ID3uGpE-dcekqFUA9CaskNQTHgw.roa (hash: +8FnPQxela/00fZdYSydOiN682t6g2gq5E5EtP0QcC8=) 9: LfmeRYcfUiEj399TDpOym_UlFRA.roa (hash: BkStJv/EZ8z0hAQkEE3CqcK8hG9A1BieEUEqY6z0bK8=) 10: NEyQG9kyLEW4Um4QAvO7DA9LZsE.roa (hash: v1Y4jsLwKJqAeGZpT4JA4xV86AlZtwzcF7xc4splz3Q=) 11: TY35IYclW4VPKdwgjzeN1-eRV5w.roa (hash: NrbtXiKXpUhJK+M5wfVFLQO6KPLEcpep0fo9uaa4vxY=) 12: UPWe1Wug7fNHuCoRI5LkUE4bICs.roa (hash: RDVH/BCV293ZQWWctDV3PRotDWVexWOj6PnUwJgAPTM=) 13: ayDmsI9qPMkxJ9NCKjnvD4ewlH0.roa (hash: D0WB+C7bGTZZc6yEWTFDivFil9okzEXHOU5scGXoB+Q=) 14: bOl89NjQvBezrx1ixNcUiGYb0hI.crl (hash: Phl3BPSheUGvfWe5vDVKPw3DziQJEAQYEG+butyGqP4=) 15: h-Wv51tawGDDmzKTTiZygQFK1dI.roa (hash: gqUuhqm1O9kzFr7mzHK7ZrQWJPre8M3ei4+B6j2pDcQ=) 16: kDFa5fuToySOCU5vcGqCPDIk2Pc.roa (hash: I1BI9NSvaTv9rq7lHhxdUbN5f5WvqbSLYeczo8o1iF8=) 17: kehR6DRCeFwK5vsEVm60Bz8cG6c.roa (hash: L7sYa6xHC69xAZ7O1gkCc5slSgVN1A33m9IE9XvzF3U=) 18: mpGPMzUEL2GiaFu_ro-uoSMpDSM.roa (hash: De6x6yshStzd8qqnnIj6N4UKaPqhjyF/TsaAnqUmWqQ=) 19: oBqkwnj05lVwlwGOkOtelMXi290.roa (hash: KWxt3/pFpWp3KL1iplFsqb9jfnpqg64kOikp0uiyOdM=) 20: sBAGBCoZpRTh-6po9Toi-VKMV10.roa (hash: XU348a2UokXBEiecPQsK1jFxCMx0Gc+NuqKhJQxgwZk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:75:f0:4f:e5:86:40:d3:37:83:43:17:ad:7c:0f:57:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212 Validity Not Before: Oct 26 02:00:45 2026 GMT Not After : Oct 27 02:00:45 2026 GMT Subject: CN=c45d711a9566eeafe232d4fbcadb808e3cc38aaa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:fb:7d:de:2c:b9:e8:ef:f4:b8:74:e5:b5:43: f1:b0:f3:dc:bb:fb:28:02:bb:60:96:c9:fa:7c:2a: 67:f1:fb:f9:78:45:59:81:0d:3e:02:12:97:00:71: f3:d7:14:83:27:97:f3:44:bf:41:59:f9:3a:00:01: c4:25:e4:19:9a:76:70:e7:2d:13:d6:48:cc:7a:6f: da:7e:ed:99:64:2d:c9:82:52:a3:66:fb:c8:01:39: 1f:3e:87:56:56:17:49:4b:70:b1:a9:a1:d1:6c:b5: ee:d0:8b:cf:b1:ad:c7:b7:17:7b:91:0b:c0:47:03: b4:11:45:e6:b6:a7:3f:ee:b7:ab:74:30:b3:92:d9: 45:9a:6d:49:3e:12:bb:84:ce:48:fa:9e:be:96:6b: 7a:f5:36:bf:5b:e0:97:02:d2:9a:82:77:7c:c0:fc: 11:37:94:1f:22:26:67:60:20:e0:7a:5c:6e:6d:d6: 24:09:52:a1:8c:be:5f:03:c4:0b:2a:ee:82:d3:97: 9e:18:31:b2:b3:c0:6e:67:2d:fc:c9:2e:97:27:e5: 44:d5:24:3f:f7:40:a2:8a:76:69:d2:2c:eb:c1:f0: b8:8c:5e:6d:ab:c4:d5:2a:9b:62:05:6c:96:75:01: 10:31:f4:52:ed:7f:b5:dd:da:e0:2c:a0:1d:3b:4e: 3f:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:5D:71:1A:95:66:EE:AF:E2:32:D4:FB:CA:DB:80:8E:3C:C3:8A:AA X509v3 Authority Key Identifier: keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:62:5c:d3:73:40:ad:47:36:d3:0d:c9:8c:d4:91:25:e8:14: a8:96:75:4b:d4:b6:e3:72:64:e7:b2:20:a9:5f:25:e9:ee:bd: d4:c4:ab:fb:6f:da:6c:54:ce:27:2b:f3:d6:57:89:e3:9e:b6: ae:9a:80:0e:cd:d9:e1:78:55:a8:f6:33:ea:2d:8e:80:de:4c: ce:ca:a3:a9:7c:8b:f1:13:a8:4a:3e:bb:c0:fa:54:fe:c4:38: 66:0f:88:75:21:81:e3:2c:ba:a3:28:7c:62:c7:f8:ff:b8:db: 60:3b:0a:1d:b5:e1:cb:29:c7:42:fe:2b:b4:7b:95:34:5b:bd: 39:b1:a4:97:9e:ca:34:59:11:3e:91:58:d5:76:b8:b8:c0:15: 1f:ac:9e:d1:c4:b1:50:7b:77:dd:38:13:c5:e0:23:96:ce:05: bd:68:92:e3:d0:e4:ec:1e:3c:a8:a8:bd:83:39:fa:f3:9f:2d: 75:56:9d:8a:2c:dc:9f:a2:68:87:26:9d:ed:5f:d4:1d:8f:ab: b1:fa:a5:a4:5a:c9:21:e7:76:6a:b5:50:ff:02:94:1e:9e:4c: 78:ba:41:7d:b0:c1:67:d7:3b:67:cd:f4:e3:7b:01:8a:86:29: 86:31:57:f3:e1:b5:45:d7:c8:e9:a3:25:56:05:9b:66:30:64: d4:8d:94:96 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF18E/lhkDTN4NDF618D1dXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZTk3Y2Y0ZDhkMGJjMTdiM2FmMWQ2MmM0ZDcxNDg4NjYx YmQyMTIwHhcNMjYxMDI2MDIwMDQ1WhcNMjYxMDI3MDIwMDQ1WjAzMTEwLwYDVQQD EyhjNDVkNzExYTk1NjZlZWFmZTIzMmQ0ZmJjYWRiODA4ZTNjYzM4YWFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPt93iy56O/0uHTltUPxsPPcu/so Artglsn6fCpn8fv5eEVZgQ0+AhKXAHHz1xSDJ5fzRL9BWfk6AAHEJeQZmnZw5y0T 1kjMem/afu2ZZC3JglKjZvvIATkfPodWVhdJS3CxqaHRbLXu0IvPsa3Htxd7kQvA RwO0EUXmtqc/7rerdDCzktlFmm1JPhK7hM5I+p6+lmt69Ta/W+CXAtKagnd8wPwR N5QfIiZnYCDgelxubdYkCVKhjL5fA8QLKu6C05eeGDGys8BuZy38yS6XJ+VE1SQ/ 90CiinZp0izrwfC4jF5tq8TVKptiBWyWdQEQMfRS7X+13drgLKAdO04/GwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMRdcRqVZu6v4jLU+8rbgI48w4qqMB8GA1UdIwQY MBaAFGzpfPTY0LwXs68dYsTXFIhmG9ISMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMt Mzk5M2FhMzI0ZTFmLzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84YS9lNGNjYjEtY2EyNS00MDk5LTgyNzMtMzk5M2FhMzI0ZTFm LzEvYk9sODlOalF2QmV6cngxaXhOY1VpR1liMGhJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgmJc03NA rUc20w3JjNSRJegUqJZ1S9S243Jk57IgqV8l6e691MSr+2/abFTOJyvz1leJ4562 rpqADs3Z4XhVqPYz6i2OgN5MzsqjqXyL8ROoSj67wPpU/sQ4Zg+IdSGB4yy6oyh8 Ysf4/7jbYDsKHbXhyynHQv4rtHuVNFu9ObGkl57KNFkRPpFY1Xa4uMAVH6ye0cSx UHt33TgTxeAjls4FvWiS49Dk7B48qKi9gzn6858tdVadiizcn6Johyad7V/UHY+r sfqlpFrJIed2arVQ/wKUHp5MeLpBfbDBZ9c7Z83043sBioYphjFX8+G1RdfI6aMl VgWbZjBk1I2Ulg== -----END CERTIFICATE-----Generated at Mon Oct 26 13:38:26 2026 by rpki-client