$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft File: RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft (raw, json) Hash identifier: wU33YdR9F+GlJU/RkQaWCAHyr7gJfIcLjMw7peQvwH0= Subject key identifier: B4:E9:A2:DE:23:A3:FE:61:88:FE:8D:95:21:11:06:55:5E:BC:2E:E1 Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33 Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533 Certificate serial: 01A15DE30EC7ADBD9EC75C42E798BDB1FDEC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft Manifest number: 0134 Signing time: Wed 21 Oct 2026 09:55:23 +0000 Manifest this update: Wed 21 Oct 2026 09:55:23 +0000 Manifest next update: Thu 22 Oct 2026 09:55:23 +0000 Files and hashes: 1: 27SFGjL64PRRMSLcGYBH49SrHwY.roa (hash: PITM8gWftdzoJkt0rkZ9FWqRBqnEUQ3T5vRe+zc5/CY=) 2: 5tISpF8rQEYFqX2FwQmh5rWJ0Zk.roa (hash: AczR6yQs7ci1IaX5b+iS3KJri6446eAoxlf9O/ku2LE=) 3: CFo5ABZ8MUKR3Fd6UO8--zq7M8k.roa (hash: 2+XQO3qwflJmVUasaub9xdlpRBF+UPsxhcWzlGiEL9U=) 4: CJ-zj836A3TR54KML6nA2kNlyiY.roa (hash: AuGdHKTStnhkWfUpHj8s2x6Pp9jt1yZgqVw4hJJIo3Y=) 5: HLt3ChQvLj8LY2RlhdFsx32ZjtQ.roa (hash: wKiOyGKSsl/R2H5PXAn1g9VUgp4V7yTcuvPe7XIgMUI=) 6: N1LDUBXoMuyaQ5RB_L5TdL6A_bo.roa (hash: ydFk7XHt/wPpdtN+nRxyF+IGde9jjOJbhdYJVNBXgSE=) 7: RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl (hash: 0U0d1Q+qR1xKrhIFuS6cHA43T9ClCw6n50m/uDkoO+Q=) 8: RWqR8eRXwBg3aJWIwMUB5XfKcoY.roa (hash: ZZrhZPCpVQcaNwpf6YMJogA6HgteaOnJWAKIEHcMG/I=) 9: UvkchOlf8k5gf0Jd4S3LaiUQp24.roa (hash: bOM90kiakeCMvJKkLnEePDredxuMm7f3j0ru01BV2rg=) 10: _KYE_stCSx0rJkyhe2kaYHwY1yQ.roa (hash: SVDZayo1vRR6C9CEr2Y02TySWICy6qTYmYRW1EPFXaQ=) 11: fJB8oRf1C6vKaO7myZ7LMHrSK0E.roa (hash: Z3DT4Iuv/+d3kQTawlogZW0GVTOl0W6XRptIt8v4Yuc=) 12: fTMIdoB4kQzu02mFfH9z8btZ5uM.roa (hash: 5eDUcm8uO6+nohQB/UiadkgP4q7oAy/sELIvvCPSQxA=) 13: nk9xUVbrQk03Ta5kBEtwBRsxj3o.roa (hash: y8rjtAjlPGYqktsMfNPd+YZPmUHg0mqok5iv3DPzIpQ=) 14: qfTY39j6wENhgC39URgloBvaDwc.roa (hash: MJgSYqEnjtZo7TnO5PmqwrhzDK5fq5ePybyEEHZ72Z8=) 15: v46RZaRNAYpk-MTz9439WBJeCk8.roa (hash: iuiKs0eDwH4UX4kxhQWkANGq3ZFWYOsgmkYbbfAKPYA=) 16: wsBY1hQB4VwOF7aL1jCKyn3x_1Q.roa (hash: DtUB3FEcBbo8RHf3v0MZKsrQqRBn+Ep3UIkhR2wSWSQ=) 17: xNYBtHtKlWI4iA2yM39CNxxB3YE.roa (hash: c5VvgWr2oNDztERgklFXuCsqKhPSllyvYEbuD8nPSxI=) 18: zaDnFGvlfelI_tMjoTP339vPBGw.roa (hash: 6zQB6LLudq9lrD59fSKuhQnrVhHCZxEGxEn2HPI44zQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 09:55:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5d:e3:0e:c7:ad:bd:9e:c7:5c:42:e7:98:bd:b1:fd:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533 Validity Not Before: Oct 21 09:55:23 2026 GMT Not After : Oct 22 09:55:23 2026 GMT Subject: CN=b4e9a2de23a3fe6188fe8d95211106555ebc2ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:9d:77:f2:08:24:37:24:1c:e1:cc:64:18:af: 05:26:0c:67:47:be:9c:e6:91:85:71:33:02:8f:ba: 07:05:26:d3:f9:ef:f9:98:4f:82:30:e0:35:f0:45: 56:b2:64:20:be:b3:b3:d3:b1:d6:0e:2a:1e:1e:58: 5e:82:1f:94:f8:90:12:34:d0:7e:de:e0:6a:ba:55: 4d:cf:74:83:35:38:8f:2e:08:de:13:33:8b:bf:36: d4:51:02:a0:b1:6e:5f:a3:d8:f5:c5:4f:b7:8f:0e: 00:b7:4b:66:a6:02:0d:75:f5:81:a6:fa:8e:e1:15: a5:2a:8b:38:6d:73:2f:3d:5f:f5:51:ea:38:24:a5: 71:9e:31:6f:d9:bb:c5:8c:f4:cc:5e:36:50:55:de: 4d:db:4f:9e:6b:5b:27:29:d2:f0:cc:98:d5:86:a9: 58:2e:ba:b7:7d:f3:57:e1:37:84:de:ec:f7:ce:9b: 6e:52:c3:c3:64:7a:b8:6b:31:1c:60:f5:7b:d1:cd: a9:c5:7d:48:b6:45:16:cb:2d:31:5d:e5:c4:76:6d: 13:db:d7:74:0c:d9:81:7d:a1:40:7c:fb:b3:85:b5: 40:8e:fb:4b:80:f1:5e:c7:4a:f6:4f:93:34:68:e5: 89:32:d6:8f:67:b4:6c:7d:70:93:3f:1d:9b:a0:ff: 68:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:E9:A2:DE:23:A3:FE:61:88:FE:8D:95:21:11:06:55:5E:BC:2E:E1 X509v3 Authority Key Identifier: keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:e7:df:14:ad:2b:a2:d0:0b:2a:76:6c:ba:e4:b4:21:63:24: d4:58:21:fc:c3:21:4c:4e:07:15:73:c8:72:9d:2f:ec:85:4e: 4d:78:41:4e:30:91:f9:8b:c2:54:8b:57:fd:c3:8a:eb:b6:13: cb:cf:7e:18:db:9a:34:90:98:04:a5:03:cb:c0:4c:82:8a:bf: f5:b3:2b:ad:70:91:82:71:e8:ba:8b:38:e0:8d:da:9d:81:c7: 7e:61:38:1b:f4:65:a5:40:86:0a:1f:39:bc:28:2b:57:c5:27: 99:60:4f:3b:77:71:47:56:5d:0a:95:e2:9c:d5:3a:8d:54:63: a3:c2:75:fb:d2:39:e5:63:7e:63:47:4d:54:62:f5:18:d4:9a: 57:a5:ee:8e:9e:d6:20:d3:50:22:22:db:4b:43:2a:5f:55:a0: 6b:66:69:b9:46:3b:2b:11:81:fc:df:71:81:c9:03:b6:1d:93: 75:24:bd:91:1e:ea:71:6d:57:93:3d:5e:97:ef:58:b9:92:d0: dc:47:7a:51:8a:51:ff:29:90:2c:e2:45:22:e9:9c:f6:2f:77: d6:92:c3:01:af:71:25:af:7a:34:26:a2:7b:f3:24:8b:78:da: 72:8b:8d:f0:73:7b:42:53:04:49:9b:fa:2e:2f:33:9e:e4:54: ef:c0:f4:70 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFd4w7Hrb2ex1xC55i9sf3sMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0NTkxMjA4MDljMjNiZjMwMzNlM2Y1NzM5OTUyNzZmMGM3 YTI1MzMwHhcNMjYxMDIxMDk1NTIzWhcNMjYxMDIyMDk1NTIzWjAzMTEwLwYDVQQD EyhiNGU5YTJkZTIzYTNmZTYxODhmZThkOTUyMTExMDY1NTVlYmMyZWUxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzp138ggkNyQc4cxkGK8FJgxnR76c 5pGFcTMCj7oHBSbT+e/5mE+CMOA18EVWsmQgvrOz07HWDioeHlhegh+U+JASNNB+ 3uBqulVNz3SDNTiPLgjeEzOLvzbUUQKgsW5fo9j1xU+3jw4At0tmpgINdfWBpvqO 4RWlKos4bXMvPV/1Ueo4JKVxnjFv2bvFjPTMXjZQVd5N20+ea1snKdLwzJjVhqlY Lrq3ffNX4TeE3uz3zptuUsPDZHq4azEcYPV70c2pxX1ItkUWyy0xXeXEdm0T29d0 DNmBfaFAfPuzhbVAjvtLgPFex0r2T5M0aOWJMtaPZ7RsfXCTPx2boP9oGwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLTpot4jo/5hiP6NlSERBlVevC7hMB8GA1UdIwQY MBaAFERZEggJwjvzAz4/VzmVJ28MeiUzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEt Y2NhNzlhNjk4MjBhLzEvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OC8zYzdhZjYtZjQ2Ni00ZDg3LWI5ZjEtY2NhNzlhNjk4MjBh LzEvUkZrU0NBbkNPX01EUGo5WE9aVW5id3g2SlRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAieffFK0r otALKnZsuuS0IWMk1Fgh/MMhTE4HFXPIcp0v7IVOTXhBTjCR+YvCVItX/cOK67YT y89+GNuaNJCYBKUDy8BMgoq/9bMrrXCRgnHouos44I3anYHHfmE4G/RlpUCGCh85 vCgrV8UnmWBPO3dxR1ZdCpXinNU6jVRjo8J1+9I55WN+Y0dNVGL1GNSaV6Xujp7W INNQIiLbS0MqX1Wga2ZpuUY7KxGB/N9xgckDth2TdSS9kR7qcW1Xkz1el+9YuZLQ 3Ed6UYpR/ymQLOJFIumc9i931pLDAa9xJa96NCaie/Mki3jacouN8HN7QlMESZv6 Li8znuRU78D0cA== -----END CERTIFICATE-----Generated at Wed Oct 21 19:58:33 2026 by rpki-client