$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft File: Dj8xyerObwpezNuN8rAcc1FWhoY.mft (raw, json) Hash identifier: +4sGF8BUOHA2jKDUXLXh4nSXojJ61shbevFLLa1lmUk= Subject key identifier: BC:8C:60:0B:38:BA:C6:C1:D6:7B:04:CB:7C:AB:C2:05:36:C8:3C:DE Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Certificate serial: 01A104DC094F32F4E28570B4CAF559047B1C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft Manifest number: 1A57 Signing time: Sun 04 Oct 2026 03:01:31 +0000 Manifest this update: Sun 04 Oct 2026 03:01:31 +0000 Manifest next update: Mon 05 Oct 2026 03:01:31 +0000 Files and hashes: 1: Dj8xyerObwpezNuN8rAcc1FWhoY.crl (hash: GK5MFDBY0VW1SWk2xC3UVDhBHU1ZC3YMnuqWFrKMUUo=) 2: H_7ICe9bA6bKL6KxaXlnbRtE9DQ.roa (hash: myn2XXBsyfDvjK8OtF68llJ02gjDW6IloTyqRTy6l4w=) 3: Hs51wq2_SIQJ1nds1uh8F6Dx3ik.roa (hash: qxptTNT2o/4UgSRP/kpcf65j1wxXKH/EWbmmjxAt01o=) 4: N2OatwOOlKKioT0NRltvF2MW-2A.roa (hash: AtT0Hq5M6f320Q4NS840MNR01KALlUtkbsCAVvpe4jQ=) 5: OnrSgXShMD1_YxLsr4K4NR2DYjo.roa (hash: bEj/ZTsWrileSoseeV3gIpSqKmunzW5sU0pOXuBCYTw=) 6: P36bForyKz3A1xYxUt5uRvnbjGo.roa (hash: CVAU2pcmHNPpR0Ea2g62GxYoWi/yJ4n8I1Gjfyzzm7o=) 7: SM90LiH91VtlPCGHFr3CKSsHv0Y.roa (hash: XAYb3lsOE4KC9elTgFUEcm0bx9BxW9iNpIaDYCdyiew=) 8: UqleOCOfPnolHy26c63w8sv6kxk.roa (hash: TFhiCPhgDCJT/VB/4VLTfoJPPS4mOC/hIwRArT1aGa4=) 9: hA4LZGEpLGlLMjbHRVLskAR0nGU.roa (hash: VmVFGxtwjgzGgXnpNKA7htr01o6wk9c+gM+jTcxW2ok=) 10: kTAGdAP94XB_eZK0C7vAHDqzJI8.roa (hash: CuJkjxQNxfp3wO54mRyTZ1oYxOazwRwfQjI9X+1M5ho=) 11: r_euWEHWB_wzU16rSDnkg8NIiGM.roa (hash: 12QG/5iTtnjlTjpFN6Uc829CvAhr4LDM2fjYVha8AqA=) 12: uZHn0r02l2agjVRMRfZ3xICbMLw.roa (hash: YR/6cl0OhmlwCiQwg5TQ7bSWNguLPLl/GP2GOc23T+k=) 13: yYOwtyKahcxZCOoytNIFiE-qAW8.roa (hash: eofnDKszG901n4rKY8DsTQFASkhAGR/8+Zpt3ZNH6qA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 03:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:04:dc:09:4f:32:f4:e2:85:70:b4:ca:f5:59:04:7b:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686 Validity Not Before: Oct 4 03:01:31 2026 GMT Not After : Oct 5 03:01:31 2026 GMT Subject: CN=bc8c600b38bac6c1d67b04cb7cabc20536c83cde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:78:4b:60:8d:54:e9:6e:58:92:ff:9d:ef:db: 92:c2:b5:eb:89:2a:4d:53:da:d7:d7:d0:94:6c:b6: a5:92:91:5c:8f:c4:a1:e5:09:f2:a1:fe:95:9a:16: 5b:71:1b:2e:68:99:f0:bf:0d:57:db:51:f7:ea:5c: dd:a9:3b:52:f0:82:e2:1a:d7:2c:a1:5f:de:6b:07: 65:1a:ce:73:51:2d:92:f2:7b:18:98:64:7a:dc:6d: 0d:0e:34:03:53:20:f2:d0:2d:57:93:40:e3:a4:29: 07:42:c2:da:1e:01:ee:53:20:b7:94:7c:f9:2e:6c: 7e:f1:f4:50:e4:2a:4b:fc:9a:41:8d:d9:2d:62:e3: 25:ed:c7:3c:d1:a4:3c:c1:e5:f1:64:0a:4c:06:28: 26:be:4b:2d:ae:0d:87:36:73:12:34:84:66:8c:30: 24:e9:50:34:35:9f:2c:fd:38:c9:45:84:af:3e:98: 4b:f3:7a:e0:30:d6:4d:cc:81:f6:70:b1:22:58:e3: 33:74:e5:6e:40:cd:e0:b8:20:f7:d5:3e:e2:e6:a0: 94:c7:37:2b:e9:5d:4b:69:d9:63:ec:ab:b4:52:27: 02:33:d5:f7:82:a9:c0:23:6b:b3:68:1a:61:ab:04: 5a:61:47:c0:e7:f3:30:a0:90:c5:bf:45:27:a2:27: 6c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:8C:60:0B:38:BA:C6:C1:D6:7B:04:CB:7C:AB:C2:05:36:C8:3C:DE X509v3 Authority Key Identifier: keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:ed:5a:4c:c2:50:cc:2b:fe:18:a5:ef:f5:b5:3b:d5:3a:3d: 5a:28:68:52:f9:cb:17:e2:86:21:77:97:3d:8b:34:61:f1:24: 86:ae:8b:30:60:f3:81:5c:e7:f6:6e:38:49:af:44:79:74:72: 5a:28:34:b7:bb:72:cc:7a:00:b8:f5:fd:da:56:82:d8:a4:a1: 99:40:d9:f8:56:46:1a:91:5e:94:b1:43:08:78:60:bd:ae:d9: b1:2f:2a:69:58:8a:b4:a7:14:c6:82:d4:71:f1:25:8f:12:a0: 03:95:e4:8c:44:bb:5e:1a:c7:19:58:81:c2:60:64:de:c5:32: 20:e7:50:7b:7e:31:2f:3b:48:36:b5:ce:b6:9b:66:ab:bf:f0: 50:68:41:e6:3d:3b:57:b1:47:70:f0:78:9c:36:13:66:10:31: 85:0c:86:6a:f4:a0:3b:6b:c5:8a:33:f1:33:1a:27:5d:1c:06: 9e:a3:ad:74:71:fe:45:79:33:58:c0:f9:7d:22:95:cf:69:98: f2:86:22:58:6a:af:78:6a:9b:61:9b:6b:c4:35:bd:0b:0b:f6: 03:7a:e3:ea:be:8d:89:db:f7:af:f5:a7:d3:13:67:a4:67:c0: 5d:7d:35:c9:4a:ea:16:43:27:2f:57:00:5c:1d:f0:03:7b:9a: f5:df:7d:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEE3AlPMvTihXC0yvVZBHscMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlM2YzMWM5ZWFjZTZmMGE1ZWNjZGI4ZGYyYjAxYzczNTE1 Njg2ODYwHhcNMjYxMDA0MDMwMTMxWhcNMjYxMDA1MDMwMTMxWjAzMTEwLwYDVQQD EyhiYzhjNjAwYjM4YmFjNmMxZDY3YjA0Y2I3Y2FiYzIwNTM2YzgzY2RlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl3hLYI1U6W5Ykv+d79uSwrXriSpN U9rX19CUbLalkpFcj8Sh5Qnyof6VmhZbcRsuaJnwvw1X21H36lzdqTtS8ILiGtcs oV/eawdlGs5zUS2S8nsYmGR63G0NDjQDUyDy0C1Xk0DjpCkHQsLaHgHuUyC3lHz5 Lmx+8fRQ5CpL/JpBjdktYuMl7cc80aQ8weXxZApMBigmvkstrg2HNnMSNIRmjDAk 6VA0NZ8s/TjJRYSvPphL83rgMNZNzIH2cLEiWOMzdOVuQM3guCD31T7i5qCUxzcr 6V1Ladlj7Ku0UicCM9X3gqnAI2uzaBphqwRaYUfA5/MwoJDFv0UnoidsiwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLyMYAs4usbB1nsEy3yrwgU2yDzeMB8GA1UdIwQY MBaAFA4/Mcnqzm8KXszbjfKwHHNRVoaGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYt ZGQ1ZGRkMDVkYjBiLzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9hNmRkYTEtMWI4Ny00ZWMzLTkzOGYtZGQ1ZGRkMDVkYjBi LzEvRGo4eHllck9id3Blek51TjhyQWNjMUZXaG9ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoO1aTMJQ zCv+GKXv9bU71To9WihoUvnLF+KGIXeXPYs0YfEkhq6LMGDzgVzn9m44Sa9EeXRy Wig0t7tyzHoAuPX92laC2KShmUDZ+FZGGpFelLFDCHhgva7ZsS8qaViKtKcUxoLU cfEljxKgA5XkjES7XhrHGViBwmBk3sUyIOdQe34xLztINrXOtptmq7/wUGhB5j07 V7FHcPB4nDYTZhAxhQyGavSgO2vFijPxMxonXRwGnqOtdHH+RXkzWMD5fSKVz2mY 8oYiWGqveGqbYZtrxDW9Cwv2A3rj6r6Nidv3r/Wn0xNnpGfAXX01yUrqFkMnL1cA XB3wA3ua9d992A== -----END CERTIFICATE-----Generated at Sun Oct 4 13:38:37 2026 by rpki-client