$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft File: pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft (raw, json) Hash identifier: 1RNxTLFuDklWcZLKGx8P4PiHWbQYPYGxZ8+/Uu2x+CM= Subject key identifier: C3:4A:D4:B0:74:75:DE:E4:F4:54:68:E6:FB:4F:FD:72:D4:A9:4C:B5 Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2 Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2 Certificate serial: 01A125B003B5F4347A0A6B4A2D7AC571E8C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft Manifest number: 0112 Signing time: Sat 10 Oct 2026 12:00:54 +0000 Manifest this update: Sat 10 Oct 2026 12:00:54 +0000 Manifest next update: Sun 11 Oct 2026 12:00:54 +0000 Files and hashes: 1: 8eWn-LZ8SHda6Hq0PZ8MjLvheII.roa (hash: t0Q9JGg0FFkCyUnnAjxlIairjnAp1fGIhWq7kxGfNJg=) 2: Dl8kjWnig9EJLu_V18bsJwWgThI.roa (hash: l/ftiedkdOtevwG6rB8zoiK5YC04kv/8SOqTEc+HzIM=) 3: E2z6-aE0lSQ3PEiEzxW-JiraDEE.roa (hash: KsnALsa02zQjMMj5q5msrnek1tk5/ZfIcaQoMmke+mE=) 4: EFeoepCweNchcY3yfWtwGD_ZuaI.roa (hash: pYKBI/KFA8wkQgixMUY8skRW5VKXK8M6e31dK0HwAis=) 5: G_cJpHD_tLUwCg2RMVO24zq3Grw.roa (hash: xNL/dYNyvvIlOS2j+6Eyo8zzNd4uG3W4GbIaOCiKFl4=) 6: HAt__vrw52VuZkpPDGhyJ1Sqq6U.roa (hash: j9XKjBk7nFDWQWKVzLFTasY9jD5D/3qYwK+3ZpEzpj0=) 7: I4AgYPx6q-AXqCOLfyv2qdwV6wU.roa (hash: 8y1qmodCTXEdWfudBIOg5DrmRpEF6FezAaUs7Ropbsg=) 8: JEVNWQm_Cx4mWqq5f1Vg9xZ9JzQ.roa (hash: suXL0V83sdkLjwTY6BS/4DMQepDMTnnLPjHsyUslYPM=) 9: JpbDWGlEPEX32kqGhGQOeWSYx5Q.roa (hash: JNJaUsPN0pZohEeyDrNgCF5tl5YPCYCRSpC1PRT7kZo=) 10: MlxaAHik4Irhhg2pDV_s_Rvf7bI.roa (hash: 3NA/JBsu3EKmNF330/KjUrrDVxnecTt8Q2GPQT4XUMo=) 11: O1gPaiiuHk3Ynoh8wcqM-XkdraY.roa (hash: suwi7xOa2pEQsq5Ilao9i/obnAr3R24ZSt95W5s3w8g=) 12: QOM15JeN0LuoBWCIcbxrvBihxTo.roa (hash: RgmDFHjBWCEG8nuyIsqAeoRJCFfCkfWjGGmoJpZMo70=) 13: R26ho8RD5wA-FJFM2n4H8lCIMDU.roa (hash: K8bV/6TdZ6xy+XDttrJ2eOGl3w4V8h8EbfrCk8vy/rQ=) 14: SirBpcdRe0m-u_7kALpPCFiPrPs.roa (hash: Z3DSwVfj4GWtECnzKi66mFueac7BJgJGEnZh6Zx4AQg=) 15: UNcrdBCA_IAi--0l3IsFosaU7lY.roa (hash: 8FZC4gbje388SsnaqTJsrZ50Gofq4vRkK1UBtNYlK+4=) 16: X4pU60oDGJrdQI6mIHlAf5rK9qE.roa (hash: pOrJ7LztgT1wu4oDyjOGr9iWSnnOAH4w2AcPvFhqBnA=) 17: Xy2lL2DYT88B5SmizPLux-GXV3Q.roa (hash: Mh0mK933Nfyx6zsgugTVc4TLaFDjax/ayFtH6UHp1oo=) 18: ak2Qp1unBPBGGKshocpx5pL8uig.roa (hash: mOmd1/1RN87KSSOrhLIJgH1FH+upMs+93rOqXUD4go4=) 19: g4bMCR1I2A-6CXSx0W_2l3WKHNg.roa (hash: W5QhjY/Vw7lnM6k8E56FkxoOhrKCflFe48p21g7wGsM=) 20: i5MOqIaSyXP0Wf307JZ-H9fPCU8.roa (hash: WqvJAJL4M1ePBiSqQQISn5kDX+foal+qOH30XzgeJBs=) 21: n5NcxiT9PS0KRcc3R-BBqbuxAco.roa (hash: bz9bpUxzgrZqP4jqMtfZiRv9Qka9ZHViEEqOfmNETJA=) 22: os3bcu3roUzbLBzHQwm9bp3nxZ8.roa (hash: lfz697NMPxlXy6wIBOMRer/mHkvfB1xMD+9SuaGfDyQ=) 23: pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl (hash: 9LbgkY75LluFjCbfpjP4Mrqr/chg3JawXeNinBn2eXA=) 24: wyD5rZUYnotDvDLBTn1HvdDE-sg.roa (hash: LP8H59Ja7nr0y53p7ISvyJuUcJ0QD06m9kkaSrByJHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 Oct 2026 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:25:b0:03:b5:f4:34:7a:0a:6b:4a:2d:7a:c5:71:e8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2 Validity Not Before: Oct 10 12:00:54 2026 GMT Not After : Oct 11 12:00:54 2026 GMT Subject: CN=c34ad4b07475dee4f45468e6fb4ffd72d4a94cb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:3e:60:97:90:9e:94:30:28:69:a0:4e:99:8c: 7b:43:22:8e:3e:58:fc:cc:6e:c2:0e:ae:92:29:0d: 6d:d0:80:ce:c7:c2:80:11:f0:43:f9:94:d5:d6:96: ea:27:fc:0a:25:c2:f5:15:af:39:78:e0:4e:a5:48: aa:87:2e:df:12:37:fd:5d:91:08:23:ad:db:46:4f: 14:7e:8e:3c:a0:48:00:34:58:d5:9a:dc:63:1b:72: 66:c2:35:34:64:55:b6:91:3c:b9:fa:a2:ee:a5:e3: b9:d7:4b:15:c1:4e:72:d7:ab:f5:e1:4a:5b:c0:c3: 86:cd:7a:8c:26:86:96:97:89:36:ed:8a:a8:45:e1: 82:9c:66:f4:3f:8f:1c:3f:27:b9:8c:6d:59:ab:bc: be:95:14:97:e7:c5:d7:17:91:b9:4b:f0:c3:84:95: bf:bf:89:1e:d2:7b:d9:ff:78:d1:03:58:77:0c:75: 90:36:e9:36:79:75:00:d8:ee:45:ba:f2:a8:dc:08: 87:17:8f:4e:2e:be:58:62:63:31:65:c1:3d:d9:93: 15:06:39:a7:a1:42:03:e0:9f:66:15:fa:5e:c8:44: 02:7e:c5:ff:b3:cf:82:dd:c9:dd:4f:e2:6e:87:f9: 28:15:ff:d9:fc:4a:25:d7:6b:f8:5f:e3:1c:ef:7a: f9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:4A:D4:B0:74:75:DE:E4:F4:54:68:E6:FB:4F:FD:72:D4:A9:4C:B5 X509v3 Authority Key Identifier: keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:8f:a5:1e:ec:03:87:4b:91:d2:47:ef:71:1c:9f:2d:48:a1: f2:e8:22:23:b7:a8:84:57:78:1f:5e:d5:bf:fd:2f:f2:79:9d: 43:41:5d:26:f1:09:45:4e:75:45:20:68:f1:36:81:e1:8b:41: 4d:14:3a:00:75:0b:a9:4c:48:09:87:93:40:85:cc:5e:d3:33: 97:57:08:53:51:06:99:a4:60:06:6a:46:4e:b7:64:ca:4f:21: 37:3f:9a:84:04:dd:31:06:e5:3e:cd:f7:67:df:c2:58:c8:ac: c8:20:7d:b7:d8:bd:24:3e:95:91:d3:74:7b:8b:4e:2a:68:b6: c9:22:d2:4d:fb:ca:0e:2a:c5:b4:97:3d:88:e3:c7:be:74:4f: d1:86:5e:f4:a1:9e:8d:d6:e3:0a:7c:7f:6b:6e:55:f9:a3:11: 34:e7:11:47:4d:17:6b:9d:3b:38:b9:8a:b8:1f:f5:60:26:16: 8c:62:5c:cf:14:e1:53:9d:cf:7a:84:cf:56:ba:38:70:0c:b9: 0f:ae:09:16:84:b7:64:2b:ed:7d:05:61:90:fe:67:81:e0:2a: 43:11:3a:4d:39:00:3b:bc:1c:a2:f1:74:67:0e:ca:e0:03:53: 50:5e:31:39:1f:ea:29:b3:8e:3e:60:2c:e4:e4:75:f6:34:bf: 26:68:c9:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaElsAO19DR6CmtKLXrFcejCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3MTMwZTdkM2E3NjA5N2QwMmE5NThiM2YwMzk1ZGZkMTg3 ZDE3ZTIwHhcNMjYxMDEwMTIwMDU0WhcNMjYxMDExMTIwMDU0WjAzMTEwLwYDVQQD EyhjMzRhZDRiMDc0NzVkZWU0ZjQ1NDY4ZTZmYjRmZmQ3MmQ0YTk0Y2I1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvD5gl5CelDAoaaBOmYx7QyKOPlj8 zG7CDq6SKQ1t0IDOx8KAEfBD+ZTV1pbqJ/wKJcL1Fa85eOBOpUiqhy7fEjf9XZEI I63bRk8Ufo48oEgANFjVmtxjG3JmwjU0ZFW2kTy5+qLupeO510sVwU5y16v14Upb wMOGzXqMJoaWl4k27YqoReGCnGb0P48cPye5jG1Zq7y+lRSX58XXF5G5S/DDhJW/ v4ke0nvZ/3jRA1h3DHWQNuk2eXUA2O5FuvKo3AiHF49OLr5YYmMxZcE92ZMVBjmn oUID4J9mFfpeyEQCfsX/s8+C3cndT+Juh/koFf/Z/Eol12v4X+Mc73r5wwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMNK1LB0dd7k9FRo5vtP/XLUqUy1MB8GA1UdIwQY MBaAFKcTDn06dgl9AqlYs/A5Xf0YfRfiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMt MmVjZTA0ZTE4NWMyLzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYS9lYTQ0NTUtNzgzNi00NGM0LWIyYTMtMmVjZTA0ZTE4NWMy LzEvcHhNT2ZUcDJDWDBDcVZpejhEbGRfUmg5Ri1JLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvI+lHuwD h0uR0kfvcRyfLUih8ugiI7eohFd4H17Vv/0v8nmdQ0FdJvEJRU51RSBo8TaB4YtB TRQ6AHULqUxICYeTQIXMXtMzl1cIU1EGmaRgBmpGTrdkyk8hNz+ahATdMQblPs33 Z9/CWMisyCB9t9i9JD6VkdN0e4tOKmi2ySLSTfvKDirFtJc9iOPHvnRP0YZe9KGe jdbjCnx/a25V+aMRNOcRR00Xa507OLmKuB/1YCYWjGJczxThU53PeoTPVro4cAy5 D64JFoS3ZCvtfQVhkP5ngeAqQxE6TTkAO7wcovF0Zw7K4ANTUF4xOR/qKbOOPmAs 5OR19jS/JmjJwg== -----END CERTIFICATE-----Generated at Sat Oct 10 17:05:06 2026 by rpki-client