$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: 3D4A1g+CLbK9/HjbAaKG0K4lranUn/DQ1Su8nwB33GA= Subject key identifier: B7:9C:88:40:F0:C8:B6:A8:06:2B:27:EB:DA:D2:0B:0D:6B:55:EF:9B Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 01A178F11E203628B31BF74C058A113B72A9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 149A Signing time: Mon 26 Oct 2026 16:00:30 +0000 Manifest this update: Mon 26 Oct 2026 16:00:30 +0000 Manifest next update: Tue 27 Oct 2026 16:00:30 +0000 Files and hashes: 1: 2JOxayZ4kxrtihpkJSNfTVv34wU.roa (hash: zOn78CRIowaCVixyqjErS7L368UV3aEuLomuXw4ifTk=) 2: 8JmGNshMSYZovGEGptxvSVmLazw.roa (hash: cBtmgXslMy9oeFHfquJAM4IBewoqUtnRBO1wAOTF0Qk=) 3: 9VFCcM5TkSFj-DtH7qLQwgSN5IM.roa (hash: wrh+UMairP6Hp+q2S/1S737Q0ISs8AkPKt06IH0nojo=) 4: EaUMOU4n5eMN9_93bWF9KbfM0Js.roa (hash: Qat9O3DT5PJNAgSB1rpNeEeKlT31JeYDByOxfigK1Mc=) 5: Qds8QcMRNkZLZIxEq4DIiHLqmf8.roa (hash: 8W6wOK2I4qsuYzKI/ho+wcaX0Cqt4fg6SETKF3W+ImI=) 6: TjDmMYZX4kBSUtV2aoQj0qKysRg.roa (hash: l2/gMvnSsklv14g/tuA37El8fuSOsjkNRMRQv6RZ2fY=) 7: X1LVS0a4yLVV-n31U0OmgdyXH_Q.roa (hash: HB5LPZBvI9YtdaaDN25t7bfdVncLanwsoppFOKXdT7I=) 8: arDSEArnZyqLs7jmsgT1tnPs8rc.roa (hash: /Km/RAgR6E8ZdX77lmgH7Nk0dxMhyfy0FGDCtSzOc/w=) 9: bwOIwRe-t7R54b9v9np6_kJQ_dE.roa (hash: Q1d3WN659RXAKPuHuKTKUTC5odQwSZ9Vh4CW0Um2Opc=) 10: d0K0IoBy5xJlcUIFuELdP0a1cwQ.roa (hash: 4io78nOLezFoyBWo3ZpnK3RNwopEXZfQZmn24eH/WJQ=) 11: dxZrm_kRJNnz8YeorAaaxgmTmrU.roa (hash: Le5MlQmjVvWn8m1gclKNCqW1PZyJn3stX+9I88dbC/c=) 12: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: pLjxSfN/eVWpG9t8KV4dB9ms7kQBDNJ8upQSVxPucsU=) 13: gVoDkYx52kg2ObqLQQiu3dVABJ4.roa (hash: Q8A5Ai5FoLvBhe3BwpyHiBUhPSy+KXj0LhOWSA21Wgw=) 14: mfX6n982kHfEGonK72FOllXPKLM.roa (hash: mQgbn3Sty6H0kID4K5HG3Lec+s4hrDOIUIKg6j/AGRo=) 15: oSJ76RTJAM4Rkm0VytsagsICSMI.roa (hash: 5KF6cvuY3cWzSG6wpKOaFIJmUmHSua9Uf0BUoXvpF6w=) 16: w56M8w2Q_qfZu41_qHQO5zW4jwk.roa (hash: RAJ8brQ6bDHIdv8dDAPBh54oGKG2dIlrIsob6HcQ27I=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 11:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:78:f1:1e:20:36:28:b3:1b:f7:4c:05:8a:11:3b:72:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Oct 26 16:00:30 2026 GMT Not After : Oct 27 16:00:30 2026 GMT Subject: CN=b79c8840f0c8b6a8062b27ebdad20b0d6b55ef9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:5f:2e:52:eb:70:fc:6f:1c:bf:32:61:03: 78:c3:51:82:e5:1d:39:bb:00:53:31:31:9c:5e:f3: dd:bc:7e:ac:4e:1a:57:7f:eb:9a:e5:eb:38:20:a8: de:40:fe:8d:6c:93:ae:51:d2:9a:1d:8c:14:bc:ca: 84:be:6b:77:ab:fb:88:65:6c:de:c3:2b:f8:b6:94: 73:fc:50:00:a3:cc:d7:79:83:01:5e:9f:ca:73:44: f3:fb:0d:be:77:c2:00:ee:45:a9:4b:95:67:0e:81: 64:f1:3d:11:57:c4:d1:af:cb:8c:ff:cd:d1:b7:76: 57:24:4c:2d:ea:d7:fe:9f:e8:33:62:36:a5:c3:fa: a9:cd:5e:a3:d6:a6:22:50:a1:4b:b0:fc:77:3b:b3: 5f:a5:8f:ac:1d:6c:25:fd:f5:d8:90:3e:59:d2:8a: 22:dd:aa:f8:28:1a:31:6a:27:9c:5c:bc:d8:ee:ba: 30:2b:d7:2a:18:4a:19:15:99:59:78:23:5a:c6:0b: 86:5b:2a:d9:c1:ef:08:a8:0a:16:af:8a:b7:10:0a: cf:2b:fb:b7:34:bc:09:5b:85:5d:71:4a:13:63:cf: 32:c7:e5:66:f1:88:5a:0c:9e:5f:53:d2:24:dd:de: 87:de:dd:1c:29:37:14:2e:0c:05:c7:10:df:3e:0b: fa:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:9C:88:40:F0:C8:B6:A8:06:2B:27:EB:DA:D2:0B:0D:6B:55:EF:9B X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:59:a6:1a:55:72:3a:58:0f:d5:ca:4e:b6:3d:78:4e:e4:fd: c9:b0:56:82:12:bd:12:c4:0a:37:59:ea:c7:59:78:3b:f9:8e: 00:e0:8d:6a:66:46:1f:05:09:44:7b:d9:51:a5:ed:ec:85:2a: 3b:6e:87:30:b5:f6:60:24:4e:1d:9d:09:bf:c0:30:37:5c:9e: d9:05:c8:82:ae:e7:57:6b:b1:4a:6d:7a:d2:7d:8b:8c:0b:61: 89:d1:18:64:2e:37:34:66:19:6f:66:34:e0:72:c7:ad:3d:69: 7b:ca:2e:4d:17:14:bf:a5:7e:01:41:f5:c9:be:c6:1f:e3:ed: eb:7f:bf:5b:3d:26:1f:7e:88:0f:08:65:25:35:10:be:a0:43: a9:34:50:f2:ce:95:ad:e6:71:22:34:66:30:de:e9:3c:77:24: 9d:3a:47:2f:19:a6:f2:c2:f0:82:a6:09:ac:6e:80:c7:dc:f2: a5:e2:a1:26:3d:e1:91:76:22:19:cc:f8:97:54:49:22:b3:1d: 96:e8:f6:19:6b:d4:e7:24:df:5e:94:e1:d6:41:a6:5d:8f:2e: 43:c7:1b:8d:32:9a:2d:89:46:be:9c:99:f3:32:8c:66:42:f8: bb:9f:94:e5:e4:f3:3f:9b:98:e5:87:94:c3:2b:d0:16:69:c7: c5:84:f7:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF48R4gNiizG/dMBYoRO3KpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjYxMDI2MTYwMDMwWhcNMjYxMDI3MTYwMDMwWjAzMTEwLwYDVQQD EyhiNzljODg0MGYwYzhiNmE4MDYyYjI3ZWJkYWQyMGIwZDZiNTVlZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpBfLlLrcPxvHL8yYQN4w1GC5R05 uwBTMTGcXvPdvH6sThpXf+ua5es4IKjeQP6NbJOuUdKaHYwUvMqEvmt3q/uIZWze wyv4tpRz/FAAo8zXeYMBXp/Kc0Tz+w2+d8IA7kWpS5VnDoFk8T0RV8TRr8uM/83R t3ZXJEwt6tf+n+gzYjalw/qpzV6j1qYiUKFLsPx3O7NfpY+sHWwl/fXYkD5Z0ooi 3ar4KBoxaiecXLzY7rowK9cqGEoZFZlZeCNaxguGWyrZwe8IqAoWr4q3EArPK/u3 NLwJW4VdcUoTY88yx+Vm8YhaDJ5fU9Ik3d6H3t0cKTcULgwFxxDfPgv6JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLeciEDwyLaoBisn69rSCw1rVe+bMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAalmmGlVy OlgP1cpOtj14TuT9ybBWghK9EsQKN1nqx1l4O/mOAOCNamZGHwUJRHvZUaXt7IUq O26HMLX2YCROHZ0Jv8AwN1ye2QXIgq7nV2uxSm160n2LjAthidEYZC43NGYZb2Y0 4HLHrT1pe8ouTRcUv6V+AUH1yb7GH+Pt63+/Wz0mH36IDwhlJTUQvqBDqTRQ8s6V reZxIjRmMN7pPHcknTpHLxmm8sLwgqYJrG6Ax9zypeKhJj3hkXYiGcz4l1RJIrMd luj2GWvU5yTfXpTh1kGmXY8uQ8cbjTKaLYlGvpyZ8zKMZkL4u5+U5eTzP5uY5YeU wyvQFmnHxYT3WQ== -----END CERTIFICATE-----Generated at Mon Oct 26 22:55:11 2026 by rpki-client