$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft File: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft (raw, json) Hash identifier: Iu8N3/xxrUQ5he74WYyXhqeecLRw8Y4hIRkkcADM4cQ= Subject key identifier: 7A:71:10:92:1A:5C:37:38:1E:8E:34:FB:CF:17:07:E3:00:CE:B3:7E Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c Certificate serial: 01A17C97A8F253D510B1C63F51A7C27FACC7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft Manifest number: 14AA Signing time: Tue 27 Oct 2026 09:01:16 +0000 Manifest this update: Tue 27 Oct 2026 09:01:16 +0000 Manifest next update: Wed 28 Oct 2026 09:01:16 +0000 Files and hashes: 1: 0D2Coi_5SwdJlFEetQmAXpix1_Y.roa (hash: O54xx0/U3Iv4833S5PBG2AXq1GmV4OY3bg/vxy1jIiU=) 2: CnxrWW9MQbA3OxKH-Q8jpaMZj0Q.roa (hash: I2lPd7hD8IUUjVTMDWiwz4fKXB1nPb5e6pLyv73hBK8=) 3: Eqmef-fTn9NYQY7xZznBlyZF1n4.roa (hash: CIQuiGAfVrQ7ckL7hoIedbZW1Y/7JzYFdGkSQM+CDZk=) 4: JtO7qR3b0Sbf_bMm2ZZf38XlgW0.roa (hash: Xv7/+jGUByuWwIlTxgEz+e13PVfFQwso8wA5vIJGZu0=) 5: Lkpu54v6ux0vfrMmr2dvF4EUmIY.roa (hash: 2lIxKAyj2wAnIHlH+oCwYSCBBNm4zlmBFuipn6Ti/Cc=) 6: N_Jp-G27wqAqsqkajDg53k_oUEE.roa (hash: NpaEZ0EEykOhPXCywjsGGExbKvpF7O0B2ojyn6pZCPc=) 7: Qb3PbnFDL4mdSjR2jyNA4d2qGd8.roa (hash: SSV+bssWPQAuqc5ovMdhlCtwycW1eCc9kZ2WzWI50JU=) 8: RYBfpwejJ-O5VWAWQi-3ZPFKnlw.roa (hash: FL1iJ8ZhnIIckmcYe2gVMH7xyuA0yKyn2gvsjGhQolg=) 9: Y4EKL6L_aZ5mH_FWw58Y8LeL-mM.roa (hash: 3FRCxyy8iUcxjxUlddROkL3TH8VGARt21d3zIaUzi+Q=) 10: blYZox4f4_vM6K9fFkD2iJsHjIQ.roa (hash: esJo/q3B8cKAs15RB4pxpLJXfULrwErmAwOgAdqCBIQ=) 11: btjH39NkLdJ0RLIY8PihBNLBXc8.roa (hash: OJPUd5DIB59mHeLoL5lkzseaUcvpxTAxanm/t5gaFc0=) 12: oR1Ict7sFE1QFq_X9_1Hl7bjRsg.roa (hash: BHxmvHg3RHWm40qUL6Y3LOpMB581BLXBjhyRosBP/sY=) 13: r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl (hash: sgR/iPw/20DbrAAOCnhHA52Ldev56omhvMFMr5wa/SI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7c:97:a8:f2:53:d5:10:b1:c6:3f:51:a7:c2:7f:ac:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c Validity Not Before: Oct 27 09:01:16 2026 GMT Not After : Oct 28 09:01:16 2026 GMT Subject: CN=7a7110921a5c37381e8e34fbcf1707e300ceb37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9d:a0:05:e2:9d:9c:f5:39:6a:43:aa:13:cb: d3:b6:b8:50:94:35:45:06:78:88:dc:38:b7:ab:50: a3:a0:37:e6:11:0d:17:c7:d3:ea:b7:6d:89:e4:38: 8e:d6:31:d5:07:e1:04:8a:7f:04:14:78:a3:25:b4: cd:17:65:2d:eb:ee:c0:e5:7e:81:ba:b5:6f:a2:4a: 58:3e:02:97:19:34:4f:b6:02:88:e2:1f:d9:f1:3f: 67:5e:b6:2b:ba:61:5f:87:48:33:31:71:6e:a9:f4: 49:0c:c1:f4:22:dd:59:d1:ac:f2:0c:61:30:62:f7: 41:6d:48:48:12:46:b0:cd:bd:8b:1a:bb:58:0e:6a: 2e:bc:d1:4d:23:16:ec:fb:f4:cc:ef:13:3b:ea:ed: 1d:90:f1:b9:fc:b9:47:d9:bf:4e:5c:09:3d:c8:dd: dd:0c:c0:41:74:8f:e9:8e:42:1d:f8:ee:22:c6:cb: 70:f9:83:c7:58:a9:f0:67:2e:3e:5c:8c:c6:37:c6: 6f:ac:89:99:d1:8a:41:9f:17:7b:24:ff:be:ff:b2: 02:93:57:8a:f8:0c:6f:cf:36:f3:a5:f6:48:68:86: 72:fa:af:e5:88:6c:8e:89:f7:0f:43:27:c4:50:34: d6:6b:e9:7c:f9:0b:1b:e6:c5:ac:f2:dd:e0:83:85: b3:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:71:10:92:1A:5C:37:38:1E:8E:34:FB:CF:17:07:E3:00:CE:B3:7E X509v3 Authority Key Identifier: keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:87:b4:62:33:40:8d:05:91:31:6c:85:33:30:19:4a:72:63: 58:f1:03:8c:b7:29:92:62:7a:c7:78:2e:89:19:5c:40:cd:0a: 15:c4:3a:df:d6:d2:53:80:f2:0b:cd:68:03:05:ff:56:9c:ab: ff:24:1c:38:39:87:4e:68:5f:a2:48:7b:02:18:72:a4:7d:4c: 71:44:8d:73:23:7b:5a:5a:8e:59:d1:fc:55:b5:10:5f:c8:d9: 86:ee:87:fb:39:40:f1:cd:93:29:99:63:b4:18:73:e0:2b:e6: 58:13:3c:25:fa:b2:f7:f5:2c:fa:c0:03:24:b4:31:ce:5f:b2: 93:4c:ec:95:da:5f:20:b5:30:ab:8e:9b:4a:0e:2d:b9:72:89: de:f2:00:49:47:79:e6:81:59:0c:93:0d:62:51:30:bc:78:2a: 5b:86:e4:23:63:f6:74:83:0b:c0:85:4e:84:89:b1:8f:ac:31: 9e:3a:c6:cf:1f:3f:de:9a:24:3b:08:f5:fe:31:1e:9d:f7:bd: 5c:a0:7c:ec:8a:41:40:d1:c4:d4:c3:c2:83:56:6b:c3:3d:c0: 89:12:dd:f8:98:c0:7f:55:ee:06:ab:de:2a:9c:70:ec:c4:c7: 49:8a:e2:39:5a:e9:09:6f:67:88:f8:68:6b:8d:9f:3e:9f:dc: 4c:4f:4e:72 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF8l6jyU9UQscY/UafCf6zHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmZjZmODVhYWQxMDFjNDU2YzFhYzlhMDFhNzE5MmZjNTc4 OGU5MmMwHhcNMjYxMDI3MDkwMTE2WhcNMjYxMDI4MDkwMTE2WjAzMTEwLwYDVQQD Eyg3YTcxMTA5MjFhNWMzNzM4MWU4ZTM0ZmJjZjE3MDdlMzAwY2ViMzdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm52gBeKdnPU5akOqE8vTtrhQlDVF BniI3Di3q1CjoDfmEQ0Xx9Pqt22J5DiO1jHVB+EEin8EFHijJbTNF2Ut6+7A5X6B urVvokpYPgKXGTRPtgKI4h/Z8T9nXrYrumFfh0gzMXFuqfRJDMH0It1Z0azyDGEw YvdBbUhIEkawzb2LGrtYDmouvNFNIxbs+/TM7xM76u0dkPG5/LlH2b9OXAk9yN3d DMBBdI/pjkId+O4ixstw+YPHWKnwZy4+XIzGN8ZvrImZ0YpBnxd7JP++/7ICk1eK +AxvzzbzpfZIaIZy+q/liGyOifcPQyfEUDTWa+l8+Qsb5sWs8t3gg4WzqQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHpxEJIaXDc4Ho40+88XB+MAzrN+MB8GA1UdIwQY MBaAFK/2+FqtEBxFbBrJoBpxkvxXiOksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTIt NjQ0YmQwZmM3ZjgwLzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTItNjQ0YmQwZmM3Zjgw LzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFIe0YjNA jQWRMWyFMzAZSnJjWPEDjLcpkmJ6x3guiRlcQM0KFcQ639bSU4DyC81oAwX/Vpyr /yQcODmHTmhfokh7AhhypH1McUSNcyN7WlqOWdH8VbUQX8jZhu6H+zlA8c2TKZlj tBhz4CvmWBM8Jfqy9/Us+sADJLQxzl+yk0zsldpfILUwq46bSg4tuXKJ3vIASUd5 5oFZDJMNYlEwvHgqW4bkI2P2dIMLwIVOhImxj6wxnjrGzx8/3pokOwj1/jEenfe9 XKB87IpBQNHE1MPCg1Zrwz3AiRLd+JjAf1XuBqveKpxw7MTHSYriOVrpCW9niPho a42fPp/cTE9Ocg== -----END CERTIFICATE-----Generated at Tue Oct 27 15:50:58 2026 by rpki-client