$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft File: Ka7sqK_wmbK64FeB3KjdkCfw2is.mft (raw, json) Hash identifier: o2vAdNoyszvhv5bNioMtMESy/dk+F2hi7ap0Ba5YF+s= Subject key identifier: 16:52:D1:5B:14:D5:1F:CD:C7:DD:16:AE:F9:E3:B4:E9:A8:95:41:74 Authority key identifier: 29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B Certificate issuer: /CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b Certificate serial: 01A17A71DBD0B268D028F9F4E64D23A6C266 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft Manifest number: 013F Signing time: Mon 26 Oct 2026 23:00:44 +0000 Manifest this update: Mon 26 Oct 2026 23:00:44 +0000 Manifest next update: Tue 27 Oct 2026 23:00:44 +0000 Files and hashes: 1: 1q_wYD9UWOnoJzVrOoUZdi0ptKs.roa (hash: VrKJCQshMNsRpRS3xMtIqZM3UIX0Rv/9TMlKh43+0eE=) 2: 41i4ev5edbKVJwvdRc7UmMCrvCg.roa (hash: m9BCRj3y94R37HOuPnWLtwP7M0mYu2TFW0DGKzHM/Z8=) 3: 50FgNVwdKIXZBSoi9_tx_m369VY.roa (hash: ECrdWmJHCoSD4ehG05AezfCmwTDPcEay5D7cVyccxQw=) 4: 7yrgfzbw8vVRPOjj7HWXtxyf49Q.roa (hash: md2tHitigyecVuWcaFRQgwV0T+xTsDPtPKLbeAD5RVI=) 5: BdOjrY77wFG1RfqnZLrdZFMXaRg.roa (hash: bODeK0rFTfjBKeuHpe99mPxykv44Z0oBibXlE79cC5U=) 6: FLDisamNsDJXm_1lT92yfeRj3fw.roa (hash: WM25J4c59hU5SI4kz6OM2HoWYEmKXTDdKjYCSlG2JzI=) 7: IDFQmB2_BNbe8TZvBZB6pYkqhGU.roa (hash: dE0Z7qv5NDY7r0/9XxQ9jfsrqbdxqd+FO+WrhOi5Glg=) 8: Jj70oOtEM3MPYlWgVX1aJYN3MXw.roa (hash: xzFEEvPbBuccgBOT1CsatLmHtV69WRilCT0khWKpwtQ=) 9: Jk_N7QSRVi_cTxcu3qy15ogPA68.roa (hash: Rmy9FhhubCl3WFg5IP5VOAwqyczxSE6B2MhGe3ccsM0=) 10: Ka7sqK_wmbK64FeB3KjdkCfw2is.crl (hash: pTi1ksiqnd/lAIefADCrHStGEPdWueDvVO5sTle7NtQ=) 11: NklB14-VXLI3MM6lJe389quYPZU.roa (hash: D2ILNVHNm82CCp8tZk+B53IKie8TqikfqpmmGRxzs5M=) 12: URT0EEJBnslT-0WyvEI0zhxE7ao.roa (hash: l8gQYKhmIYyk/qnAnSCwTsLP9MGIBmIKOkyQVshPQkY=) 13: VOA0hCAmccn3JFjBj1YG73p2_z4.roa (hash: fdiyK2e1RDodBjjbIJyeBT4dY1npNcatRvvQ4NjK3Go=) 14: WFW6qhbNTOwNvMn1wBdtZc0maBc.roa (hash: 4FeYT4PmqlfqsjKx24dhNEkHWmZbQRRBE78LWYeUekw=) 15: XDkpyuTsa2dXmdMU0IZvUIi8Kqw.roa (hash: NiUsvK3LHefrtsdv2Hnh9ukqkYgOTh3duZjlWdR5BP4=) 16: ZOUpcJbmawhfKT6X9vbpqXgFbzE.roa (hash: t1IEQIm5R7nnAL2Bg46AN21+xubthTU7oKqD6v54mRI=) 17: _WY29sxvL7eTgbKFEoCzs5DGbWk.roa (hash: 0n3QlO/r3sjWRk/sTTbpZIaERpyILu3lDPLbKxDkXXE=) 18: h-EWcWkmbvgj39jkxm-JcD4jNys.roa (hash: 5gX5iFM/ehmHTHBUKpjDT1zVGwl4cU31igc51yeX2UU=) 19: j4Fd2DjxWr_xPGcMiuUhdZLMc30.roa (hash: KhwmTUHddEmqeMPHDyYX5yKpCm2bT7FKBk70Iu6qVsU=) 20: kA7PdZv1BHY99jFpYu5rnXF5Gpw.roa (hash: cX0Aca9kGYKiN/9m9sBSvjG37vCXXVdWtb4rGx97cf8=) 21: lUlD9gbYsyOLr3r0s3Uaa4KVupU.roa (hash: Bx05tts8mxf//4522K5SFSuxKCitbQyyOHV0CHxYOm0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 23:00:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7a:71:db:d0:b2:68:d0:28:f9:f4:e6:4d:23:a6:c2:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29aeeca8aff099b2bae05781dca8dd9027f0da2b Validity Not Before: Oct 26 23:00:44 2026 GMT Not After : Oct 27 23:00:44 2026 GMT Subject: CN=1652d15b14d51fcdc7dd16aef9e3b4e9a8954174 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5f:f4:0c:ff:9e:56:2c:7c:98:cf:d7:10:e5: 24:b2:4a:0e:66:a3:cf:f6:81:32:96:71:b8:30:f4: b9:8f:50:42:e7:e8:d6:22:ac:8b:fa:84:27:4e:95: a1:46:78:63:64:35:b9:f8:81:94:03:2d:3d:4f:a8: af:2f:bc:1f:eb:fa:79:a0:b0:cc:13:e2:6b:fd:84: cc:fe:14:d6:6c:83:4f:c2:66:52:ef:94:dd:13:23: 20:86:07:48:82:3c:09:9e:a3:5d:3f:b7:32:fd:23: d2:17:83:77:d5:c0:93:58:50:d9:03:39:9a:96:78: 77:7a:73:f0:50:de:5f:a1:bd:48:6c:6d:8c:a0:db: 82:7a:51:e0:e2:78:b6:38:3d:4f:6a:12:11:9b:f6: 91:bf:e2:22:17:db:40:ce:f6:d9:9b:45:df:0c:73: 05:f1:fe:5d:8e:85:c8:95:aa:28:6f:ca:f2:cb:df: 9b:62:9f:66:31:b9:3a:70:1f:1e:09:c4:bc:9c:b9: da:97:e5:23:de:ab:8b:45:7e:02:64:de:d6:7f:d8: 78:ce:f4:a9:ea:4a:70:ea:2d:19:99:0e:0a:89:fa: cf:6c:3e:e5:36:62:c7:75:8b:61:5a:5c:26:11:00: b2:18:26:39:63:9c:84:19:47:12:3c:1f:8a:71:44: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:52:D1:5B:14:D5:1F:CD:C7:DD:16:AE:F9:E3:B4:E9:A8:95:41:74 X509v3 Authority Key Identifier: keyid:29:AE:EC:A8:AF:F0:99:B2:BA:E0:57:81:DC:A8:DD:90:27:F0:DA:2B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ka7sqK_wmbK64FeB3KjdkCfw2is.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/40d9a5-2566-49e1-a57b-d1abf4ee32cb/1/Ka7sqK_wmbK64FeB3KjdkCfw2is.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:d6:7f:71:79:77:6b:c4:a5:5e:3f:95:cf:9f:14:ff:1e:90: b1:68:c1:d9:8e:2c:91:92:ad:1c:a4:2e:e1:84:3c:6c:d1:84: 5e:55:11:30:d0:12:30:ea:27:f9:76:05:8e:1a:13:46:25:95: f7:bc:e2:66:43:d7:e0:d4:5f:9b:d7:c5:57:ac:8f:65:37:8f: 1b:26:71:52:34:8e:45:55:e3:f7:48:20:f0:00:ab:b3:7f:56: 6f:11:a2:7f:5b:42:b6:65:1d:02:1b:b4:d2:dc:d7:64:6c:1b: f1:d5:ca:ed:5b:86:2a:d0:8e:86:b8:b2:d8:43:18:7c:0c:d7: a9:f6:2b:5d:23:0e:8e:1f:02:b1:c4:c0:7b:7e:ac:b9:f9:94: f1:6b:af:79:a7:be:f2:59:5d:23:2e:00:99:da:96:a1:22:f9: 42:1c:4b:8c:40:bd:5d:ed:64:f9:7d:f0:40:8d:64:e8:21:cf: 42:02:8a:84:2f:d9:73:64:69:46:a2:fb:aa:87:11:86:8c:ee: c1:82:d2:47:de:3c:ff:c1:cc:45:23:b9:75:d5:e2:c4:a8:1f: 66:ae:3f:2d:48:53:5b:ea:90:c7:b8:75:68:4a:69:bc:da:e5: 7e:b3:ee:c4:ae:dd:7e:4f:e2:91:df:f6:b2:e1:9f:7d:e1:98: ed:82:b7:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF6cdvQsmjQKPn05k0jpsJmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5YWVlY2E4YWZmMDk5YjJiYWUwNTc4MWRjYThkZDkwMjdm MGRhMmIwHhcNMjYxMDI2MjMwMDQ0WhcNMjYxMDI3MjMwMDQ0WjAzMTEwLwYDVQQD EygxNjUyZDE1YjE0ZDUxZmNkYzdkZDE2YWVmOWUzYjRlOWE4OTU0MTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0V/0DP+eVix8mM/XEOUkskoOZqPP 9oEylnG4MPS5j1BC5+jWIqyL+oQnTpWhRnhjZDW5+IGUAy09T6ivL7wf6/p5oLDM E+Jr/YTM/hTWbINPwmZS75TdEyMghgdIgjwJnqNdP7cy/SPSF4N31cCTWFDZAzma lnh3enPwUN5fob1IbG2MoNuCelHg4ni2OD1PahIRm/aRv+IiF9tAzvbZm0XfDHMF 8f5djoXIlaoob8ryy9+bYp9mMbk6cB8eCcS8nLnal+Uj3quLRX4CZN7Wf9h4zvSp 6kpw6i0ZmQ4KifrPbD7lNmLHdYthWlwmEQCyGCY5Y5yEGUcSPB+KcUQx3wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBZS0VsU1R/Nx90WrvnjtOmolUF0MB8GA1UdIwQY MBaAFCmu7Kiv8JmyuuBXgdyo3ZAn8NorMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2It ZDFhYmY0ZWUzMmNiLzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85YS80MGQ5YTUtMjU2Ni00OWUxLWE1N2ItZDFhYmY0ZWUzMmNi LzEvS2E3c3FLX3dtYks2NEZlQjNLamRrQ2Z3MmlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANtZ/cXl3 a8SlXj+Vz58U/x6QsWjB2Y4skZKtHKQu4YQ8bNGEXlURMNASMOon+XYFjhoTRiWV 97ziZkPX4NRfm9fFV6yPZTePGyZxUjSORVXj90gg8ACrs39WbxGif1tCtmUdAhu0 0tzXZGwb8dXK7VuGKtCOhriy2EMYfAzXqfYrXSMOjh8CscTAe36sufmU8Wuveae+ 8lldIy4AmdqWoSL5QhxLjEC9Xe1k+X3wQI1k6CHPQgKKhC/Zc2RpRqL7qocRhozu wYLSR948/8HMRSO5ddXixKgfZq4/LUhTW+qQx7h1aEppvNrlfrPuxK7dfk/ikd/2 suGffeGY7YK3VA== -----END CERTIFICATE-----Generated at Tue Oct 27 09:16:33 2026 by rpki-client