$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft File: 1KdSLSfmKuI6RgFD66ZzO3myRHc.mft (raw, json) Hash identifier: zZPHSBl3EpED3mUjenH/ZpTcMGm0z58YhE1yFSrRE3o= Subject key identifier: C3:23:20:C4:27:FF:3D:95:4B:F6:BA:50:23:51:9D:F0:62:A2:E5:8D Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477 Certificate serial: 01A1171854FEE4A10217AB1867B7761C7C80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft Manifest number: 010D Signing time: Wed 07 Oct 2026 16:00:32 +0000 Manifest this update: Wed 07 Oct 2026 16:00:32 +0000 Manifest next update: Thu 08 Oct 2026 16:00:32 +0000 Files and hashes: 1: 1-N-2fC6tfa1s0LvlFU9jMbLrhuE.roa (hash: RE3o5Zu1XdF9S+04ylutP3QqzKtcsQWMmIT7k6SNN/Y=) 2: 1KdSLSfmKuI6RgFD66ZzO3myRHc.crl (hash: 3XPQzzaFr8Wkp1BIU76qmTRYTefafun3wUcgVP8RLKc=) 3: 3DxUz2y-w-oU9XkwLblu0mnExSE.roa (hash: j+9/Pz/kjffz7vgclDxuszWQFHGKnkAq/0VsDedDSxA=) 4: 6kERmgZGL5UqVKqbENAa-FNSgHc.roa (hash: AClJH/YtHZ63QiXgfCJgcjixUw8nfxsUu8O75U0YUJI=) 5: AhMkHazE-91WYq1pzL4rD-YgpOY.roa (hash: N7RR15LWLaA1GWhDaUwnFbFOrZQPw3IJjIesRqmsD5I=) 6: CBhFxYlbZteyN6PZ-Vmyl3AaymU.roa (hash: cEqju8RXsbFDyu/dW9+z6y7ODNyFcVjrj9eawVPTsVE=) 7: FkByO5VyomUSANjFcmnEdvz3Cko.roa (hash: z10lQ6g3SDPSArAHievRO6Z2mqsSExBrr1d205CDUP4=) 8: K7O0xdV18ha5dPNdq-y0BPQgffc.roa (hash: GEqEkzuoCanIwB018rtlec4WErFm2E3DumXI3txV98E=) 9: SKjJw3_dqVQh5tqn8vnBC1JzJSI.roa (hash: FFebWzZWCHdxw5ZCEnSdY08q5KwfVzoC6UmmM8w/pz4=) 10: TqDntdHJZddaYt_ZyotBF9-hm14.roa (hash: VjSEFTxxCdGkCwFWGpwHDnoo4e0X5kbRBsmPmmTPxWI=) 11: WvAmQJBuWNK-A1dgFB9mFwv86Gk.roa (hash: i6VXTVtK2u+Sa4dxw7J/aRal1n9vO5pWlCr6D3BmpWo=) 12: XhZYqo-93sizkFwJq1Oc8KABtwQ.roa (hash: FFax2+o10DIFWYK/5aiR6THgjmcFiIwVqFNYjJSFM+w=) 13: bPSazfrJEoM_auhnCGJjDI29Zwk.roa (hash: pMTZbr0m442O8974ozmFdKCgEYF3GhKq7mIvRyWA1Yc=) 14: jlnRp7Jr9ytnSH4nVGSVmBf_k6o.roa (hash: 7kRo5njKROlYBvZ0FU20K/hBTNAanIB/DZh3W6WgLMY=) 15: q-BhPuQnM-Q-h6hN62IefM9bmG4.roa (hash: OIcCu5qI8ffXeo2TrrcMk7ECFhZnyqwj4znnE1b0z/Y=) 16: rUKH9k4MHdd4Y1ypLX0RMcrlJ4k.roa (hash: z/3YdmL7lhmSOdD9Jb00nUrqP817x/GBxNytvu/Ui24=) 17: wZMooB7OVcFLzuI4NUrersbqikQ.roa (hash: pEN10g0qlhvjBHq9CVkl9+QR6Ky5ASwHfrEgR03oriI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 08 Oct 2026 16:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:17:18:54:fe:e4:a1:02:17:ab:18:67:b7:76:1c:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477 Validity Not Before: Oct 7 16:00:32 2026 GMT Not After : Oct 8 16:00:32 2026 GMT Subject: CN=c32320c427ff3d954bf6ba5023519df062a2e58d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:46:0b:8d:f8:7b:a0:3d:c6:76:18:38:4e:2e: 57:83:e4:03:1d:c0:e0:2b:f2:57:55:c1:bc:87:16: 5c:84:d4:ce:0c:52:cc:79:e5:ff:30:e7:c3:f7:e3: f4:65:d7:f4:04:c8:3c:b2:7f:d6:fb:95:d6:2e:8b: b5:d3:7c:a3:f5:49:3b:9f:1a:97:de:dd:8c:8e:87: db:5b:75:7b:06:84:27:1d:07:c4:af:5b:2d:91:43: e1:06:88:5b:aa:2e:f1:1f:63:02:90:f9:61:b9:bd: f0:68:5b:d0:c7:ab:ad:b8:01:4a:72:1d:86:12:02: 7c:c1:e7:a7:22:b0:32:4c:b4:82:e7:d2:c6:ac:a2: 79:f2:bc:70:c3:8d:61:d4:22:cd:c4:1e:e3:50:36: de:3a:39:2a:f8:8e:37:08:4f:56:5d:79:d9:6e:80: 6f:91:95:1d:b4:d3:8c:b5:a7:5b:5e:ca:3b:2a:f1: 02:3e:19:18:b2:95:bc:d8:86:24:11:56:05:34:c0: 8b:f2:a6:65:e8:32:d4:4b:6f:83:85:cf:0d:60:3b: a6:3b:f9:27:80:5e:63:49:65:02:92:e7:a0:fc:20: 95:8e:09:70:16:10:56:f8:71:26:50:28:96:2e:2e: 31:09:1c:8c:ee:0c:52:00:67:ff:42:43:a0:29:0b: 52:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:23:20:C4:27:FF:3D:95:4B:F6:BA:50:23:51:9D:F0:62:A2:E5:8D X509v3 Authority Key Identifier: keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:9b:a0:a5:2d:7a:0b:7b:8a:62:e6:6c:63:3b:d1:77:4a:05: ca:d5:bb:6b:05:fd:42:14:cb:57:6d:70:76:ec:1b:9b:5a:89: df:19:84:ad:2e:65:05:b2:09:30:08:14:96:ad:a8:b7:6e:75: 12:98:6f:9d:d0:26:a0:bb:95:95:6e:31:f4:f9:36:81:dd:c1: 5e:92:76:28:d7:9e:80:ef:13:5b:9c:53:c2:ac:c7:99:a0:09: 8e:02:28:5d:13:4a:7a:b1:cc:55:7d:1c:86:b6:f5:f4:18:45: 91:ee:d0:14:b1:f3:9e:64:98:63:6f:96:37:be:c7:31:5b:e3: fb:f7:8a:cb:f5:06:8a:8f:e6:9e:17:82:f8:8b:26:b6:1e:6b: 54:1d:80:b4:5d:e0:0f:89:a9:e9:55:d2:2b:93:ab:64:52:60: a0:6c:6a:f7:b7:c1:43:f5:0f:85:e3:fc:e2:7a:70:f3:1d:2a: 73:03:7d:67:7e:d3:82:77:f6:a1:ed:4a:a8:6f:e0:56:3a:a7: 79:23:cb:cb:d8:69:24:e8:12:3f:46:2a:46:c6:d7:9b:ac:58: ca:34:d1:47:40:9f:c4:d3:cf:27:21:8c:18:c4:4f:5f:63:6a: ae:2a:5e:41:53:a9:80:56:85:35:43:dd:0c:3c:ce:39:53:9f: 13:55:5c:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEXGFT+5KECF6sYZ7d2HHyAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0YTc1MjJkMjdlNjJhZTIzYTQ2MDE0M2ViYTY3MzNiNzli MjQ0NzcwHhcNMjYxMDA3MTYwMDMyWhcNMjYxMDA4MTYwMDMyWjAzMTEwLwYDVQQD EyhjMzIzMjBjNDI3ZmYzZDk1NGJmNmJhNTAyMzUxOWRmMDYyYTJlNThkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAskYLjfh7oD3Gdhg4Ti5Xg+QDHcDg K/JXVcG8hxZchNTODFLMeeX/MOfD9+P0Zdf0BMg8sn/W+5XWLou103yj9Uk7nxqX 3t2MjofbW3V7BoQnHQfEr1stkUPhBohbqi7xH2MCkPlhub3waFvQx6utuAFKch2G EgJ8weenIrAyTLSC59LGrKJ58rxww41h1CLNxB7jUDbeOjkq+I43CE9WXXnZboBv kZUdtNOMtadbXso7KvECPhkYspW82IYkEVYFNMCL8qZl6DLUS2+Dhc8NYDumO/kn gF5jSWUCkueg/CCVjglwFhBW+HEmUCiWLi4xCRyM7gxSAGf/QkOgKQtSawIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMMjIMQn/z2VS/a6UCNRnfBiouWNMB8GA1UdIwQY MBaAFNSnUi0n5iriOkYBQ+umczt5skR3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUt ZDg0ODhiM2FiNDJmLzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8yMDc5MzQtOWVkYy00YTg5LTgyMGUtZDg0ODhiM2FiNDJm LzEvMUtkU0xTZm1LdUk2UmdGRDY2WnpPM215UkhjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpugpS16 C3uKYuZsYzvRd0oFytW7awX9QhTLV21wduwbm1qJ3xmErS5lBbIJMAgUlq2ot251 EphvndAmoLuVlW4x9Pk2gd3BXpJ2KNeegO8TW5xTwqzHmaAJjgIoXRNKerHMVX0c hrb19BhFke7QFLHznmSYY2+WN77HMVvj+/eKy/UGio/mnheC+Ismth5rVB2AtF3g D4mp6VXSK5OrZFJgoGxq97fBQ/UPheP84npw8x0qcwN9Z37Tgnf2oe1KqG/gVjqn eSPLy9hpJOgSP0YqRsbXm6xYyjTRR0CfxNPPJyGMGMRPX2NqripeQVOpgFaFNUPd DDzOOVOfE1VcuQ== -----END CERTIFICATE-----Generated at Thu Oct 8 02:24:19 2026 by rpki-client