$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft File: 1nPYSbfVBHN21X5veW8AGLcLRQY.mft (raw, json) Hash identifier: dYhe0GrcyXW/kRNLm220XyFiFh/RZcKfja1M/3Xi7fQ= Subject key identifier: 5B:C8:CE:09:B9:19:A1:E2:81:AE:FB:09:50:67:66:C8:4A:A5:71:99 Authority key identifier: D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 Certificate issuer: /CN=d673d849b7d5047376d57e6f796f0018b70b4506 Certificate serial: 01A10B826DFFD6F5E71B186F393044F2D543 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft Manifest number: 1AA6 Signing time: Mon 05 Oct 2026 10:00:59 +0000 Manifest this update: Mon 05 Oct 2026 10:00:59 +0000 Manifest next update: Tue 06 Oct 2026 10:00:59 +0000 Files and hashes: 1: 1-_yOHxDowuUEcsMT-tBSHJNawJY.roa (hash: OkEE2PY+HxH7AS4Wef2NDEm88il1r3tB4z1trxdzMcY=) 2: 1EJ_XfQMx6Y9yqlKxeYGCdoslO0.roa (hash: YK8CRl6X799i7UjLTxVvL97sv8/qoADyGmSlEddAXF4=) 3: 1nPYSbfVBHN21X5veW8AGLcLRQY.crl (hash: n0UCl3A+RMYbTjou2ezO3S72+XMnD7P+p5XsQwJsCJg=) 4: 1vy2Zod5icTuhsQoU0EnDjOvBUw.roa (hash: lJYkGyyhIavQAOFGfkLnoEQo2R64Z5o6AfYNpKGslCE=) 5: 3v81jWmwGIghf6l1abg6waAEeoo.roa (hash: 2xCQdXuSHLV6YT0QssUgSQv/xmh0FjaCpT+b6qTdhnk=) 6: 4kaVbFQvrJOAhPQSlSaYPi3hGKc.roa (hash: 0Knyq2lSkHBl5OxmwpQgrMQirBzFuxXt+/bCQAQTrMg=) 7: 5HitUAfp7De6p9xafpMt3ATjBQk.roa (hash: 5d3h3a5UI6rNss12Jcnnn3jOrPpOcrY8ye2eLfKL2mg=) 8: 6sT_2wW3QFQmWTC2CM0vH6Hbq7E.roa (hash: TDLoh7DszsOvKZFOmyvLjh7bfnLG215xsT9A8ZTykgo=) 9: 7aWPPwJsKlW4Fi6xN_XXtLIfJXA.roa (hash: 7BMUVhvyY50Slydl26/j9TUmeiQb1ahox00oD5OJl90=) 10: 8gJt_vKgY7RalSb-2BGe533Itg8.roa (hash: SlU8QzhG9LmIVc3LENP/NU0v6qpC64nU8O2T4x7X/MA=) 11: 98pyVUSP-3YD0M9jomfshbJFQVE.roa (hash: HDKg8j9nXrhmetLV5gGWpJVaamFSbchAi6J311nU4CE=) 12: BDDyMncaJebobPWoAjI_C7AgFnU.roa (hash: 6NAVrH1PJ/MJGFzOgYGVfE7zNiR7cYr1T+PoNc+JTKo=) 13: BEdOsJ0uWzAykBj59D8-m5m6Qs4.roa (hash: HDNZu2O3gU5q7Ilkr86atZzAlLz8h2wJffq5uz6Nd+k=) 14: Cg5FaKG67uP3SPgq_VSkJRLg6D0.roa (hash: j3qDHySSQdId0uGBx2KNwYnD9BeODhiYFkQVPncbDdc=) 15: DFbe-grnv214-1UWkNCvNfxBROA.roa (hash: MXboD8VwpBFHaKDAOrbSzIk3lEvSK+PtFTR39zMGr4I=) 16: ElXvSvuLFTsYAmvz_TBH6ZJm0iQ.roa (hash: 3gwzPqGe9jISnECuIn7U7ob+0WRbHpl5+HRdhbPVSuc=) 17: Fq1NPfsyOmVZECU2FJjJ5_NLWA0.roa (hash: zP4xgXcFTiI3pGf02z+g6mojyh0+IkrvjR4QKlDg2SU=) 18: JBhxjPEeoajBhy7cTpg7oEWhavM.roa (hash: gWp4UHWiDKCPjbcZjxktO81He434yg99QNMFol+Sp+o=) 19: JNkRMvPPESUnCgbdrEYiBVlkTl8.roa (hash: aQmkjT1suDgq8ev3sMJGRKct+cd3Qs3CINDoMn3EIxA=) 20: LXOlrFf8_l83rpmn17vhLFJbiZM.roa (hash: sNb9fSP4DWs/c7lN80M3XZoZwHMjGq02DY0II5j0Qyw=) 21: OfWV2U6d2G66IUWsrNxQqrV7mss.roa (hash: gASQVd+Sh51sow2h+7M1wSuBugvFozeRnIy6awd7pEU=) 22: UhjMuilgxrHuJbG_v5PNxnq08SY.roa (hash: Xd2IZu005wTJgMzbjP6ZPuNUygMnfEV45FJoAZWWctE=) 23: Xt6zWGQgJ7OZ5m019bhnxofUJnU.roa (hash: 4nQ6eOkRIm9+m+ARz/C/jnfX9vVdmTgRULBpQgKiGQk=) 24: _RlUaty7XFL7Cg1Bd_uBGGhGjOQ.roa (hash: qwy34usdJCqXP9Il0XAoY9RGd5uIHfbG7rpjrxu69io=) 25: hHFL6YvmkxeC88wNUSyE--wEbwg.roa (hash: oRWVW/Ew2m5MAblBqbb+qw5rCChK2C1xyIO8/seBpWQ=) 26: jX6P-bHofIqjGsTJnOwPDX7xdQE.roa (hash: a9lEvQ6DaP+YBlQpn96SMBqrqZvPXdiisAwCLDojp1s=) 27: kIwcjzINW8dxv0n9475H5UAlv-o.roa (hash: z7kthu14PX9eFygYlQs12XpkisLRPxXCnKfsTXiY9WE=) 28: nGziJ4JPpx9Cbq4yitFCOBS9t6E.roa (hash: tHfu57V4VKiKHp0XzDwqW8mvWljSgux9wLYlu3RCeEE=) 29: qKKybqkrLx3Ya1--kbP2_lmbPEk.roa (hash: uTZzIjPiBF1BZfJxXa4Io6x8P1a8OROcC2WIKx0Gejk=) 30: r-YJXwiwh7rALoSlt5jqijBslf8.roa (hash: J9wniZHNEr62grnQnCFHnmZd2pysSh/T/q+LFn4tk4w=) 31: sgdwL4FzMun4HY-yk-2aNwsjCIY.roa (hash: 4jfU3ykpRiEb9apfKYx0SLztCFzoJlz6AMhRgZUm4lQ=) 32: svBR3bGWVaZYfi0KyiWyrD9Uw4k.roa (hash: mBYHUbx1m9DpD1cLPkr3K0AOJjiELWaZ7tIIWQo2etY=) 33: xee85XP9L7aWHvTNVB6I9nZcNlU.roa (hash: R3ViaO85fnRciS7RiBQnaPMq6GgojqoWPmvM1MsLncY=) 34: zOH_qOgQOsgw3q138l3rckG6Ago.roa (hash: +Mx8N2tCJhWGBRIEJoPVrZh2rwV5PL/bGJpe+6e4qH0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Oct 2026 08:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:0b:82:6d:ff:d6:f5:e7:1b:18:6f:39:30:44:f2:d5:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d673d849b7d5047376d57e6f796f0018b70b4506 Validity Not Before: Oct 5 10:00:59 2026 GMT Not After : Oct 6 10:00:59 2026 GMT Subject: CN=5bc8ce09b919a1e281aefb09506766c84aa57199 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:64:af:9c:d8:4e:f6:53:14:da:0c:b9:9b:b7: e7:5a:96:4e:2f:94:6d:69:b1:5a:d7:b7:54:99:f3: 79:fb:c6:34:0c:f7:6e:2f:d8:2d:f5:6b:9a:01:13: 5a:79:41:4f:47:d4:ea:c8:8f:ec:01:35:e7:5c:fa: 67:15:c1:8b:e9:15:08:f2:8d:35:11:b6:b4:79:0a: 60:25:53:af:4a:01:94:6f:80:51:1c:d9:b6:3a:15: 69:dd:68:56:94:cb:54:a4:c8:8c:eb:9c:2f:99:26: 36:03:5d:c1:23:90:a9:9c:14:4a:30:ce:c0:fc:e3: eb:55:9b:76:ec:3b:8a:9d:d8:1e:18:0e:68:5d:48: 15:86:82:5e:ba:dd:d6:d3:2a:d0:82:e4:2c:db:5d: 46:a7:31:f3:39:61:d8:42:78:b0:7c:48:c2:69:f1: 19:88:c1:c6:82:e4:7f:3b:03:51:6d:69:07:c9:ea: f7:ac:f4:2e:7a:2f:67:9e:9f:aa:a2:32:0a:21:a0: b1:73:d8:d5:95:68:e1:8e:7e:da:47:89:f5:b0:86: a5:c2:ba:48:77:9b:5d:c8:0a:0f:31:29:9f:3a:cb: e4:44:9b:eb:7f:99:ef:4f:86:e7:4f:cc:c2:d4:d3: 25:b1:0e:b7:64:cb:11:bb:fa:50:56:09:44:98:48: c5:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C8:CE:09:B9:19:A1:E2:81:AE:FB:09:50:67:66:C8:4A:A5:71:99 X509v3 Authority Key Identifier: keyid:D6:73:D8:49:B7:D5:04:73:76:D5:7E:6F:79:6F:00:18:B7:0B:45:06 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1nPYSbfVBHN21X5veW8AGLcLRQY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2ece62-1d8c-450c-91e8-8eeb757cf545/1/1nPYSbfVBHN21X5veW8AGLcLRQY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:44:f8:32:0c:53:70:1d:2a:85:4f:74:96:13:82:e8:ec:37: 6d:9e:37:12:52:11:e2:fe:93:d0:1e:31:10:78:8e:43:4b:8b: b7:bf:a2:b3:0d:7e:00:fa:f6:88:d6:0e:9f:12:21:6b:a8:f4: ff:3f:95:fc:7c:8b:ae:e0:e9:a3:e7:82:c9:ce:89:4e:4a:67: d2:0f:62:a7:1e:29:c7:52:45:93:4a:3e:42:23:3c:dc:b6:92: 81:f8:63:8f:66:87:a0:b0:e1:53:37:cc:08:c3:22:8d:31:09: d0:d8:54:67:e4:28:11:2b:a7:98:a3:c3:6b:ae:aa:bc:06:58: a2:12:2b:d4:9b:34:9d:5d:b3:cd:f0:ca:db:09:97:57:05:11: ab:af:70:1d:43:fb:6b:e7:6f:2f:cf:a3:fb:0a:6d:b1:73:bb: 72:bf:9d:28:cd:15:76:78:dd:45:99:d7:5d:26:8e:c1:12:ca: ff:d6:a2:88:e2:c9:bd:ef:52:e4:66:4a:21:a6:51:0f:2b:08: 9a:77:7c:0c:2f:d1:16:99:fd:31:af:d8:2b:0a:09:6a:97:0d: 08:ea:93:4c:fc:26:d8:e7:9b:47:72:ba:a8:bb:db:34:6b:fc: bd:9c:2a:9a:43:59:d8:37:c8:50:06:78:1c:d2:4f:45:50:ed: aa:2d:26:c8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaELgm3/1vXnGxhvOTBE8tVDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ2NzNkODQ5YjdkNTA0NzM3NmQ1N2U2Zjc5NmYwMDE4Yjcw YjQ1MDYwHhcNMjYxMDA1MTAwMDU5WhcNMjYxMDA2MTAwMDU5WjAzMTEwLwYDVQQD Eyg1YmM4Y2UwOWI5MTlhMWUyODFhZWZiMDk1MDY3NjZjODRhYTU3MTk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32SvnNhO9lMU2gy5m7fnWpZOL5Rt abFa17dUmfN5+8Y0DPduL9gt9WuaARNaeUFPR9TqyI/sATXnXPpnFcGL6RUI8o01 Eba0eQpgJVOvSgGUb4BRHNm2OhVp3WhWlMtUpMiM65wvmSY2A13BI5CpnBRKMM7A /OPrVZt27DuKndgeGA5oXUgVhoJeut3W0yrQguQs211GpzHzOWHYQniwfEjCafEZ iMHGguR/OwNRbWkHyer3rPQuei9nnp+qojIKIaCxc9jVlWjhjn7aR4n1sIalwrpI d5tdyAoPMSmfOsvkRJvrf5nvT4bnT8zC1NMlsQ63ZMsRu/pQVglEmEjFoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFvIzgm5GaHiga77CVBnZshKpXGZMB8GA1UdIwQY MBaAFNZz2Em31QRzdtV+b3lvABi3C0UGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgt OGVlYjc1N2NmNTQ1LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS8yZWNlNjItMWQ4Yy00NTBjLTkxZTgtOGVlYjc1N2NmNTQ1 LzEvMW5QWVNiZlZCSE4yMVg1dmVXOEFHTGNMUlFZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJkT4MgxT cB0qhU90lhOC6Ow3bZ43ElIR4v6T0B4xEHiOQ0uLt7+isw1+APr2iNYOnxIha6j0 /z+V/HyLruDpo+eCyc6JTkpn0g9ipx4px1JFk0o+QiM83LaSgfhjj2aHoLDhUzfM CMMijTEJ0NhUZ+QoESunmKPDa66qvAZYohIr1Js0nV2zzfDK2wmXVwURq69wHUP7 a+dvL8+j+wptsXO7cr+dKM0VdnjdRZnXXSaOwRLK/9aiiOLJve9S5GZKIaZRDysI mnd8DC/RFpn9Ma/YKwoJapcNCOqTTPwm2OebR3K6qLvbNGv8vZwqmkNZ2DfIUAZ4 HNJPRVDtqi0myA== -----END CERTIFICATE-----Generated at Mon Oct 5 16:13:43 2026 by rpki-client