$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft File: SIxl3DWbWMprpdPa64dPBYaE6MY.mft (raw, json) Hash identifier: kxatQSqag8poEEHFXNI62TuUfym4d5AlyW3ky7UigIc= Subject key identifier: 15:81:76:4A:1A:94:F8:2A:2B:F8:BB:21:36:74:42:D8:16:3E:E2:C0 Authority key identifier: 48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 Certificate issuer: /CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Certificate serial: 01A178159AD7B7DC9962EB23AE604A17626C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft Manifest number: 1028 Signing time: Mon 26 Oct 2026 12:00:44 +0000 Manifest this update: Mon 26 Oct 2026 12:00:44 +0000 Manifest next update: Tue 27 Oct 2026 12:00:44 +0000 Files and hashes: 1: 8DylJ6bMwHx9Bdrvn2E9Zu5-6Yc.roa (hash: vmfPrDMZxv7M04Wo8WXPZw8AXlVkf20vtyHb5e8KwgU=) 2: 9Cp-MTJ4qLd92W1VLnGQl0LXr-c.roa (hash: 5gwGzTjze+ZsjYP/6JdA+Sy/zd3Nz2uvd4XnkQoXRfg=) 3: CiMQMlsaob6RUwchgCgnZuTjr8s.roa (hash: Ar1fgrhz+dRsI5kSs4y0oWEzM2iAvsmrTdXD/xtv77Y=) 4: E4JbKjh9d4V-tkS22c4Y2xMCkFg.roa (hash: 7djPzKioQUY77MCLFItH4oWSHNi6vM51IHyM3Wgv2dk=) 5: My1lWafqU6ikUvtq4M-ub2MxD1I.roa (hash: UvpW6m+Ws53gXcKKs+IbQFznyrhTBzwk2z9Qv12jd1c=) 6: SIxl3DWbWMprpdPa64dPBYaE6MY.crl (hash: 2h4goXSakwvZ9ECryFPPR/JdYqrOB3Axb0UM1yBPMRo=) 7: UVRNeFdK0MFmPktuaxuakdFBiyw.roa (hash: Qe3jYuCQSRz8rrbqzPjF4ta2+ILAQBCmo8wsXzpnbtM=) 8: YfIHk0vhXMsawbQpQSUx4NkqARo.roa (hash: jyjsv+8CT/zFqpfSyQvWtrC5fl6L+Qm0Q0VVf1vxxCM=) 9: _GXs5D3IvlrXACIDGV1jenI0WNE.roa (hash: YXv+qavyugnUTBH4aVvxk6AhP8epVFfWY0KRl4DJGts=) 10: f9XaNrWrnsnye9Nnn2-Ly1K5UOI.roa (hash: W/HCDixp3chA9F+ml8Y61wZheEIzzJOIG7tl8p8DNMs=) 11: iRf_gs5n9xup496QtRtuInpoD-U.roa (hash: BDQw7Ot2/EiioII6Hz7qQJc1eJwtGMRxOvQFtmCg1xA=) 12: jteFQiK73wa6i4lrpiIPNofIe0U.roa (hash: G8t6kOJLv2x/ceaMNLBszGM9PcNzECaWuzPtlc+XAqM=) 13: lHqP6_LNIJjH2DY1nkYIw_wx6vg.roa (hash: HTFvctpryJcVZOxTlZV4EEM5WCYV9Pw93rtuaN3DxLg=) 14: mjB_YwpdfbzEMOoCN657fTyMgX4.roa (hash: zKy3p/lM5a5D8i2Rw65iFKwlrzxpy3cP+UdwJk2L738=) 15: uUDKYyFFirLuGqR8U0Iysb1Nw8I.roa (hash: Y7R75luVVqvdP03OWGWhzCZwuixQZrQDRe/qiiGkEy4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:78:15:9a:d7:b7:dc:99:62:eb:23:ae:60:4a:17:62:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=488c65dc359b58ca6ba5d3daeb874f058684e8c6 Validity Not Before: Oct 26 12:00:44 2026 GMT Not After : Oct 27 12:00:44 2026 GMT Subject: CN=1581764a1a94f82a2bf8bb21367442d8163ee2c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f7:54:02:86:88:21:9a:5d:62:18:e8:70:59:fc: 48:ee:53:46:66:91:12:cd:aa:02:e0:d4:69:9f:83: 80:73:73:98:ae:68:9f:1f:2e:de:d4:30:2b:d0:20: 92:6c:eb:5a:49:79:28:78:1f:24:ba:fe:59:48:98: 5c:e1:89:5a:88:49:de:8f:dc:c2:78:a1:67:7e:27: 89:f7:ee:aa:11:53:8e:59:ee:08:75:33:9c:34:2a: 25:20:86:72:15:ca:db:f6:a5:47:14:c0:b6:14:d4: 71:95:ab:e6:cd:16:30:4c:65:9b:85:14:95:62:1e: 74:47:3d:3e:85:e5:76:02:e4:fb:ce:71:e9:4e:4b: e1:a6:1b:0e:9c:63:e5:70:1c:69:a2:30:3e:48:24: 29:97:b6:72:9b:4d:cc:f4:e9:85:95:5b:d4:6f:9f: ae:e1:09:77:84:0f:8f:bf:ca:08:2d:3f:41:7e:15: 87:2a:77:68:a6:15:1b:d9:ee:1f:01:58:57:6e:24: 0c:99:ba:5d:fd:fa:64:11:62:de:b8:aa:81:b5:5c: b3:16:35:e9:14:e7:76:69:b9:c2:73:e6:6d:d8:06: 1f:58:49:62:84:40:17:1b:ee:3d:b3:27:2c:bd:63: 51:ca:8e:e5:be:44:05:56:43:96:52:34:c9:66:32: 7d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:81:76:4A:1A:94:F8:2A:2B:F8:BB:21:36:74:42:D8:16:3E:E2:C0 X509v3 Authority Key Identifier: keyid:48:8C:65:DC:35:9B:58:CA:6B:A5:D3:DA:EB:87:4F:05:86:84:E8:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SIxl3DWbWMprpdPa64dPBYaE6MY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/c48271-dee5-4841-a7dd-b0d72e910efe/1/SIxl3DWbWMprpdPa64dPBYaE6MY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:ba:04:bf:44:cb:1f:0d:49:e9:d2:fb:b4:29:f4:ff:02:c9: df:b7:e8:bc:1f:09:22:47:79:2c:62:ba:f3:c1:9a:36:c3:a5: 60:c6:7d:99:12:80:5e:50:9b:16:62:f9:03:ee:f2:29:95:53: d4:c8:2f:89:57:57:7d:ca:d2:6b:8b:f5:6c:20:aa:12:c5:94: e6:e8:3c:90:69:5f:2d:55:f1:90:e1:37:30:ff:f1:1a:19:ce: 06:b7:f9:58:80:ee:49:d6:b1:de:46:ec:87:6c:04:fe:dd:75: 2f:5b:49:de:c8:85:23:7b:d4:d2:36:1a:0e:62:74:fd:64:d0: 37:46:5f:dc:70:5d:dd:24:f4:71:83:4c:33:99:ef:c9:f6:69: ab:c1:cc:c3:40:df:8b:db:d9:91:29:71:f8:09:41:7c:44:5f: cc:6e:56:1a:84:ec:95:bc:25:50:cb:c1:4f:13:13:5b:e7:c4: 96:6d:a1:87:c5:d6:6a:b2:20:02:f5:a5:61:11:ba:0c:a7:ca: b5:87:32:c6:30:1d:f7:55:a3:59:dd:75:49:d4:43:00:55:64: 60:ac:5f:96:20:2a:e6:6d:f0:88:35:61:e8:ce:4c:52:7f:53: 02:88:d7:6e:91:be:61:e8:a9:29:36:b4:09:22:cb:f3:6f:94: 6c:dc:d7:a1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF4FZrXt9yZYusjrmBKF2JsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ4OGM2NWRjMzU5YjU4Y2E2YmE1ZDNkYWViODc0ZjA1ODY4 NGU4YzYwHhcNMjYxMDI2MTIwMDQ0WhcNMjYxMDI3MTIwMDQ0WjAzMTEwLwYDVQQD EygxNTgxNzY0YTFhOTRmODJhMmJmOGJiMjEzNjc0NDJkODE2M2VlMmMwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA91QChoghml1iGOhwWfxI7lNGZpES zaoC4NRpn4OAc3OYrmifHy7e1DAr0CCSbOtaSXkoeB8kuv5ZSJhc4YlaiEnej9zC eKFnfieJ9+6qEVOOWe4IdTOcNColIIZyFcrb9qVHFMC2FNRxlavmzRYwTGWbhRSV Yh50Rz0+heV2AuT7znHpTkvhphsOnGPlcBxpojA+SCQpl7Zym03M9OmFlVvUb5+u 4Ql3hA+Pv8oILT9BfhWHKndophUb2e4fAVhXbiQMmbpd/fpkEWLeuKqBtVyzFjXp FOd2abnCc+Zt2AYfWElihEAXG+49sycsvWNRyo7lvkQFVkOWUjTJZjJ9vQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWBdkoalPgqK/i7ITZ0QtgWPuLAMB8GA1UdIwQY MBaAFEiMZdw1m1jKa6XT2uuHTwWGhOjGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQt YjBkNzJlOTEwZWZlLzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC9jNDgyNzEtZGVlNS00ODQxLWE3ZGQtYjBkNzJlOTEwZWZl LzEvU0l4bDNEV2JXTXBycGRQYTY0ZFBCWWFFNk1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILoEv0TL Hw1J6dL7tCn0/wLJ37fovB8JIkd5LGK688GaNsOlYMZ9mRKAXlCbFmL5A+7yKZVT 1MgviVdXfcrSa4v1bCCqEsWU5ug8kGlfLVXxkOE3MP/xGhnOBrf5WIDuSdax3kbs h2wE/t11L1tJ3siFI3vU0jYaDmJ0/WTQN0Zf3HBd3ST0cYNMM5nvyfZpq8HMw0Df i9vZkSlx+AlBfERfzG5WGoTslbwlUMvBTxMTW+fElm2hh8XWarIgAvWlYRG6DKfK tYcyxjAd91WjWd11SdRDAFVkYKxfliAq5m3wiDVh6M5MUn9TAojXbpG+YeipKTa0 CSLL82+UbNzXoQ== -----END CERTIFICATE-----Generated at Mon Oct 26 22:33:23 2026 by rpki-client