$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft File: 1KdSLSfmKuI6RgFD66ZzO3myRHc.mft (raw, json) Hash identifier: WwU8JrimEoanGbfutzZxnoITONR4Dfbal72Zt9zPqtQ= Subject key identifier: B0:82:03:83:CD:C1:7F:02:CC:CA:FA:03:D6:7B:0D:14:75:5D:45:AF Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477 Certificate serial: 01A11AF58CBA35E7BC5F901921A9033D66C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft Manifest number: 010F Signing time: Thu 08 Oct 2026 10:01:02 +0000 Manifest this update: Thu 08 Oct 2026 10:01:02 +0000 Manifest next update: Fri 09 Oct 2026 10:01:02 +0000 Files and hashes: 1: 1-N-2fC6tfa1s0LvlFU9jMbLrhuE.roa (hash: RE3o5Zu1XdF9S+04ylutP3QqzKtcsQWMmIT7k6SNN/Y=) 2: 1KdSLSfmKuI6RgFD66ZzO3myRHc.crl (hash: ydrSSc+hZSiM308MR8bFZxtXH4b3Y86016nGSjgkM+U=) 3: 3DxUz2y-w-oU9XkwLblu0mnExSE.roa (hash: j+9/Pz/kjffz7vgclDxuszWQFHGKnkAq/0VsDedDSxA=) 4: 6kERmgZGL5UqVKqbENAa-FNSgHc.roa (hash: AClJH/YtHZ63QiXgfCJgcjixUw8nfxsUu8O75U0YUJI=) 5: AhMkHazE-91WYq1pzL4rD-YgpOY.roa (hash: N7RR15LWLaA1GWhDaUwnFbFOrZQPw3IJjIesRqmsD5I=) 6: CBhFxYlbZteyN6PZ-Vmyl3AaymU.roa (hash: cEqju8RXsbFDyu/dW9+z6y7ODNyFcVjrj9eawVPTsVE=) 7: FkByO5VyomUSANjFcmnEdvz3Cko.roa (hash: z10lQ6g3SDPSArAHievRO6Z2mqsSExBrr1d205CDUP4=) 8: K7O0xdV18ha5dPNdq-y0BPQgffc.roa (hash: GEqEkzuoCanIwB018rtlec4WErFm2E3DumXI3txV98E=) 9: SKjJw3_dqVQh5tqn8vnBC1JzJSI.roa (hash: FFebWzZWCHdxw5ZCEnSdY08q5KwfVzoC6UmmM8w/pz4=) 10: TqDntdHJZddaYt_ZyotBF9-hm14.roa (hash: VjSEFTxxCdGkCwFWGpwHDnoo4e0X5kbRBsmPmmTPxWI=) 11: WvAmQJBuWNK-A1dgFB9mFwv86Gk.roa (hash: i6VXTVtK2u+Sa4dxw7J/aRal1n9vO5pWlCr6D3BmpWo=) 12: XhZYqo-93sizkFwJq1Oc8KABtwQ.roa (hash: FFax2+o10DIFWYK/5aiR6THgjmcFiIwVqFNYjJSFM+w=) 13: bPSazfrJEoM_auhnCGJjDI29Zwk.roa (hash: pMTZbr0m442O8974ozmFdKCgEYF3GhKq7mIvRyWA1Yc=) 14: jlnRp7Jr9ytnSH4nVGSVmBf_k6o.roa (hash: 7kRo5njKROlYBvZ0FU20K/hBTNAanIB/DZh3W6WgLMY=) 15: q-BhPuQnM-Q-h6hN62IefM9bmG4.roa (hash: OIcCu5qI8ffXeo2TrrcMk7ECFhZnyqwj4znnE1b0z/Y=) 16: rUKH9k4MHdd4Y1ypLX0RMcrlJ4k.roa (hash: z/3YdmL7lhmSOdD9Jb00nUrqP817x/GBxNytvu/Ui24=) 17: wZMooB7OVcFLzuI4NUrersbqikQ.roa (hash: pEN10g0qlhvjBHq9CVkl9+QR6Ky5ASwHfrEgR03oriI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 09 Oct 2026 10:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:1a:f5:8c:ba:35:e7:bc:5f:90:19:21:a9:03:3d:66:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477 Validity Not Before: Oct 8 10:01:02 2026 GMT Not After : Oct 9 10:01:02 2026 GMT Subject: CN=b0820383cdc17f02cccafa03d67b0d14755d45af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:ca:7a:71:71:13:5e:16:1b:79:01:58:89: a5:98:b8:32:9b:11:5e:e4:ff:11:d1:f2:44:14:f2: 5a:c8:1e:dc:23:03:b8:fd:b9:40:d6:fe:34:fe:a3: 3b:2e:69:63:47:ba:27:b4:a5:65:66:9a:37:a0:00: 09:72:c0:3d:7d:01:f0:61:1f:38:11:c6:65:16:1e: c4:f4:b0:4e:14:d6:af:0c:65:f1:d3:39:7b:20:82: b3:81:37:6e:37:7c:6f:ed:d5:f7:65:7d:9a:de:c7: 83:91:a7:92:92:40:bd:db:47:e2:3a:a4:b8:82:8a: 88:30:d2:1f:41:db:4a:14:29:5f:7e:da:39:d1:4f: df:31:82:db:8e:92:4c:a0:44:4d:c1:fc:ec:07:c1: 50:0c:0a:40:4d:09:32:0f:19:cb:4d:76:23:a6:e6: 73:f6:6e:49:1a:55:a6:38:12:b4:26:9e:78:86:64: 16:f4:b2:a9:b3:2a:c8:22:21:b1:31:39:7f:99:fa: 33:8d:d9:b2:66:8f:08:24:8d:6b:cb:ae:e7:67:d7: 0a:76:60:6e:a6:c6:fa:c1:2d:64:a7:53:bf:e0:a3: fd:b0:81:00:76:2d:da:ce:c3:ad:f1:44:0f:8f:38: 21:98:d2:70:12:99:2e:ca:79:6c:ee:4d:1e:8f:6e: c0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:82:03:83:CD:C1:7F:02:CC:CA:FA:03:D6:7B:0D:14:75:5D:45:AF X509v3 Authority Key Identifier: keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:02:94:c5:7c:45:ee:04:7b:53:39:eb:72:ab:ad:bb:31:37: 80:a5:3e:db:0d:bc:16:b9:05:67:14:63:9b:7d:1f:c3:c9:81: 01:19:e4:44:c1:38:a9:c8:62:6c:a9:81:a8:cb:b1:1d:b4:5b: f7:77:ea:06:c5:3c:a1:51:84:65:89:9d:ed:c2:66:d6:7d:29: 08:db:35:f6:b6:ec:b4:86:55:5e:60:cf:e6:8a:c5:b3:4c:32: a0:3e:61:9f:9a:49:ba:f9:c7:c4:22:1e:f3:70:8f:f7:f4:e3: 70:eb:04:f1:40:48:e6:33:5c:a8:ea:45:6b:94:bc:27:34:fa: 53:e3:9d:1b:f2:4f:27:55:e4:22:08:a8:8e:a4:a7:3e:8c:8e: 6b:93:18:cf:cd:ef:59:6c:05:e2:1f:7b:b8:42:e2:3a:ac:67: da:94:06:de:44:67:86:be:2f:a4:53:d1:6d:57:db:bd:d2:19: f1:94:f3:08:88:35:fc:0f:97:8f:9b:e3:b6:7a:87:95:b4:a5: 48:7f:31:09:4f:0e:d5:a8:b0:ce:bb:87:e2:71:82:ff:ae:5b: 24:c0:93:59:3a:f9:df:60:6b:71:1b:0b:f2:df:a6:65:ca:45: 24:02:bf:1c:db:bb:10:3a:b4:53:83:db:10:f7:a0:0c:d6:72: ba:48:6c:7b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEa9Yy6Nee8X5AZIakDPWbBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YTc1MjJkMjdlNjJhZTIzYTQ2MDE0M2ViYTY3MzNiNzli MjQ0NzcwHhcNMjYxMDA4MTAwMTAyWhcNMjYxMDA5MTAwMTAyWjAzMTEwLwYDVQQD EyhiMDgyMDM4M2NkYzE3ZjAyY2NjYWZhMDNkNjdiMGQxNDc1NWQ0NWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO7KenFxE14WG3kBWImlmLgymxFe 5P8R0fJEFPJayB7cIwO4/blA1v40/qM7LmljR7ontKVlZpo3oAAJcsA9fQHwYR84 EcZlFh7E9LBOFNavDGXx0zl7IIKzgTduN3xv7dX3ZX2a3seDkaeSkkC920fiOqS4 goqIMNIfQdtKFClffto50U/fMYLbjpJMoERNwfzsB8FQDApATQkyDxnLTXYjpuZz 9m5JGlWmOBK0Jp54hmQW9LKpsyrIIiGxMTl/mfozjdmyZo8IJI1ry67nZ9cKdmBu psb6wS1kp1O/4KP9sIEAdi3azsOt8UQPjzghmNJwEpkuynls7k0ej27AAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLCCA4PNwX8CzMr6A9Z7DRR1XUWvMB8GA1UdIwQY MBaAFNSnUi0n5iriOkYBQ+umczt5skR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALgKUxXxF 7gR7UznrcqutuzE3gKU+2w28FrkFZxRjm30fw8mBARnkRME4qchibKmBqMuxHbRb 93fqBsU8oVGEZYmd7cJm1n0pCNs19rbstIZVXmDP5orFs0wyoD5hn5pJuvnHxCIe 83CP9/TjcOsE8UBI5jNcqOpFa5S8JzT6U+OdG/JPJ1XkIgiojqSnPoyOa5MYz83v WWwF4h97uELiOqxn2pQG3kRnhr4vpFPRbVfbvdIZ8ZTzCIg1/A+Xj5vjtnqHlbSl SH8xCU8O1aiwzruH4nGC/65bJMCTWTr532BrcRsL8t+mZcpFJAK/HNu7EDq0U4Pb EPegDNZyukhsew== -----END CERTIFICATE-----Generated at Thu Oct 8 17:44:25 2026 by rpki-client