$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft File: Ka7sqK_wmbK64FeB3KjdkCfw2is.mft (raw, json) Hash identifier: CNB0YgNGaW7BtPvZQEr8aDMhV1DeFeLF8PV29Nbr/i8= Subject key identifier: C7:D5:A2:84:15:66:1E:82:C3:8F:16:F3:95:DF:41:98:CC:E3:DC:75 Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b Certificate serial: 01A1803DDE02896C45632DE01F764CB110E6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft Manifest number: 0142 Signing time: Wed 28 Oct 2026 02:01:40 +0000 Manifest this update: Wed 28 Oct 2026 02:01:40 +0000 Manifest next update: Thu 29 Oct 2026 02:01:40 +0000 Files and hashes: 1: 1q_wYD9UWOnoJzVrOoUZdi0ptKs.roa (hash: VrKJCQshMNsRpRS3xMtIqZM3UIX0Rv/9TMlKh43+0eE=) 2: 41i4ev5edbKVJwvdRc7UmMCrvCg.roa (hash: m9BCRj3y94R37HOuPnWLtwP7M0mYu2TFW0DGKzHM/Z8=) 3: 50FgNVwdKIXZBSoi9_tx_m369VY.roa (hash: ECrdWmJHCoSD4ehG05AezfCmwTDPcEay5D7cVyccxQw=) 4: 7yrgfzbw8vVRPOjj7HWXtxyf49Q.roa (hash: md2tHitigyecVuWcaFRQgwV0T+xTsDPtPKLbeAD5RVI=) 5: BdOjrY77wFG1RfqnZLrdZFMXaRg.roa (hash: bODeK0rFTfjBKeuHpe99mPxykv44Z0oBibXlE79cC5U=) 6: FLDisamNsDJXm_1lT92yfeRj3fw.roa (hash: WM25J4c59hU5SI4kz6OM2HoWYEmKXTDdKjYCSlG2JzI=) 7: IDFQmB2_BNbe8TZvBZB6pYkqhGU.roa (hash: dE0Z7qv5NDY7r0/9XxQ9jfsrqbdxqd+FO+WrhOi5Glg=) 8: Jj70oOtEM3MPYlWgVX1aJYN3MXw.roa (hash: xzFEEvPbBuccgBOT1CsatLmHtV69WRilCT0khWKpwtQ=) 9: Jk_N7QSRVi_cTxcu3qy15ogPA68.roa (hash: Rmy9FhhubCl3WFg5IP5VOAwqyczxSE6B2MhGe3ccsM0=) 10: Ka7sqK_wmbK64FeB3KjdkCfw2is.crl (hash: i3eU7iptptHsy+zwMrJKT1D6+i7/7qkLZbP5xQhudxQ=) 11: NklB14-VXLI3MM6lJe389quYPZU.roa (hash: D2ILNVHNm82CCp8tZk+B53IKie8TqikfqpmmGRxzs5M=) 12: URT0EEJBnslT-0WyvEI0zhxE7ao.roa (hash: l8gQYKhmIYyk/qnAnSCwTsLP9MGIBmIKOkyQVshPQkY=) 13: VOA0hCAmccn3JFjBj1YG73p2_z4.roa (hash: fdiyK2e1RDodBjjbIJyeBT4dY1npNcatRvvQ4NjK3Go=) 14: WFW6qhbNTOwNvMn1wBdtZc0maBc.roa (hash: 4FeYT4PmqlfqsjKx24dhNEkHWmZbQRRBE78LWYeUekw=) 15: XDkpyuTsa2dXmdMU0IZvUIi8Kqw.roa (hash: NiUsvK3LHefrtsdv2Hnh9ukqkYgOTh3duZjlWdR5BP4=) 16: ZOUpcJbmawhfKT6X9vbpqXgFbzE.roa (hash: t1IEQIm5R7nnAL2Bg46AN21+xubthTU7oKqD6v54mRI=) 17: _WY29sxvL7eTgbKFEoCzs5DGbWk.roa (hash: 0n3QlO/r3sjWRk/sTTbpZIaERpyILu3lDPLbKxDkXXE=) 18: h-EWcWkmbvgj39jkxm-JcD4jNys.roa (hash: 5gX5iFM/ehmHTHBUKpjDT1zVGwl4cU31igc51yeX2UU=) 19: j4Fd2DjxWr_xPGcMiuUhdZLMc30.roa (hash: KhwmTUHddEmqeMPHDyYX5yKpCm2bT7FKBk70Iu6qVsU=) 20: kA7PdZv1BHY99jFpYu5rnXF5Gpw.roa (hash: cX0Aca9kGYKiN/9m9sBSvjG37vCXXVdWtb4rGx97cf8=) 21: lUlD9gbYsyOLr3r0s3Uaa4KVupU.roa (hash: Bx05tts8mxf//4522K5SFSuxKCitbQyyOHV0CHxYOm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 02:01:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:80:3d:de:02:89:6c:45:63:2d:e0:1f:76:4c:b1:10:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b Validity Not Before: Oct 28 02:01:40 2026 GMT Not After : Oct 29 02:01:40 2026 GMT Subject: CN=c7d5a28415661e82c38f16f395df4198cce3dc75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:76:f3:30:d4:d8:9d:5d:4e:79:bb:e2:ee:d3: bd:33:ae:a9:a9:69:00:3c:91:5e:6e:ab:c1:10:5e: 5b:62:8a:0c:50:8d:01:ca:5b:37:73:c2:f5:08:e1: db:ad:b6:f7:69:67:d9:7c:b6:a0:f3:28:16:21:2d: 52:e6:20:3a:0d:12:04:fb:66:5b:d4:f4:98:6a:25: 57:0a:e6:09:05:d4:79:83:46:af:28:74:29:52:7a: 74:89:1c:9b:a5:ff:4b:60:81:7b:a0:d5:20:00:45: 6b:02:a6:25:e8:0e:7b:04:24:3a:c5:14:b9:49:a7: 60:22:13:4e:14:05:ea:5f:58:81:79:bc:e2:2e:39: 20:98:2e:df:8b:ca:f3:c4:ce:c0:42:f2:f1:2d:be: 24:d5:e0:02:0e:c4:ed:68:19:12:f8:4d:7b:71:28: 24:ee:e7:70:be:03:38:f1:ca:96:4b:97:0d:62:f3: ca:27:34:55:d8:3c:83:87:92:6c:c7:02:d1:6e:d9: 5d:32:81:d3:5d:ed:41:33:4c:3f:7c:1c:f7:56:86: 39:a4:6f:d6:27:97:db:9b:be:de:1a:07:0b:53:0f: 42:ba:7e:9d:8f:c8:2a:5c:40:5a:ca:52:c3:c9:eb: f6:9c:87:84:6f:27:36:74:69:a8:f3:73:32:18:f4: a0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:D5:A2:84:15:66:1E:82:C3:8F:16:F3:95:DF:41:98:CC:E3:DC:75 X509v3 Authority Key Identifier: keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ae:46:8b:9e:7c:e4:c1:80:76:42:ff:ad:84:7c:37:83:b3: 6b:80:21:9c:4d:ec:4b:83:50:c3:4a:30:ba:c7:f3:b6:5c:22: 4b:4d:5a:9d:c8:91:36:d9:f8:8c:92:3c:69:a2:3e:db:12:cd: 88:d6:de:94:58:21:67:0d:57:fa:81:82:1c:3a:a7:31:4d:04: 4a:bf:c3:3c:af:c6:1d:c6:9f:dc:91:b8:d4:d4:a7:ab:13:d6: 0b:0b:0d:a5:6f:0e:a2:a5:54:e0:1a:37:f2:64:8b:e2:c9:4e: 93:60:2b:79:c2:7c:1a:69:ca:d3:a9:c2:02:fc:77:c3:da:1b: 71:27:24:c5:27:5f:5c:e3:d6:ac:1f:bd:b6:e3:e7:5c:89:48: 95:52:85:7c:41:99:a7:1c:01:08:42:6e:11:fc:d4:6a:93:1d: 5d:8f:95:e4:e7:84:e6:c7:b8:50:92:36:d3:a4:01:20:c1:73: b4:5c:c1:06:2e:7e:c5:cf:e9:8e:ae:e0:b4:fa:32:92:6e:4f: 4f:59:05:7a:4a:41:12:10:aa:7d:73:e3:62:94:5f:7c:87:b6: 03:8e:53:ca:b8:31:5b:4e:23:55:d6:a8:82:9e:9d:6b:50:d2: de:2c:08:d4:17:99:3e:f0:d7:fb:66:06:73:e7:8b:80:82:f0: 96:bd:9e:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGAPd4CiWxFYy3gH3ZMsRDmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YWVlY2E4YWZmMDk5YjJiYWUwNTc4MWRjYThkZDkwMjdm MGRhMmIwHhcNMjYxMDI4MDIwMTQwWhcNMjYxMDI5MDIwMTQwWjAzMTEwLwYDVQQD EyhjN2Q1YTI4NDE1NjYxZTgyYzM4ZjE2ZjM5NWRmNDE5OGNjZTNkYzc1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs3bzMNTYnV1Oebvi7tO9M66pqWkA PJFebqvBEF5bYooMUI0Byls3c8L1COHbrbb3aWfZfLag8ygWIS1S5iA6DRIE+2Zb 1PSYaiVXCuYJBdR5g0avKHQpUnp0iRybpf9LYIF7oNUgAEVrAqYl6A57BCQ6xRS5 SadgIhNOFAXqX1iBebziLjkgmC7fi8rzxM7AQvLxLb4k1eACDsTtaBkS+E17cSgk 7udwvgM48cqWS5cNYvPKJzRV2DyDh5JsxwLRbtldMoHTXe1BM0w/fBz3VoY5pG/W J5fbm77eGgcLUw9Cun6dj8gqXEBaylLDyev2nIeEbyc2dGmo83MyGPSgHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMfVooQVZh6Cw48W85XfQZjM49x1MB8GA1UdIwQY MBaAFCmu7Kiv8JmyuuBXgdyo3ZAn8NorMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZa5Gi558 5MGAdkL/rYR8N4Oza4AhnE3sS4NQw0owusfztlwiS01anciRNtn4jJI8aaI+2xLN iNbelFghZw1X+oGCHDqnMU0ESr/DPK/GHcaf3JG41NSnqxPWCwsNpW8OoqVU4Bo3 8mSL4slOk2ArecJ8GmnK06nCAvx3w9obcSckxSdfXOPWrB+9tuPnXIlIlVKFfEGZ pxwBCEJuEfzUapMdXY+V5OeE5se4UJI206QBIMFztFzBBi5+xc/pjq7gtPoykm5P T1kFekpBEhCqfXPjYpRffIe2A45TyrgxW04jVdaogp6da1DS3iwI1BeZPvDX+2YG c+eLgILwlr2eVg== -----END CERTIFICATE-----Generated at Wed Oct 28 11:22:02 2026 by rpki-client