$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json) Hash identifier: GuK9Pfe6Icys24rlzn/i2KCuiQPRFhsTb0XvLIpR6ic= Subject key identifier: BE:CB:B0:CF:D1:F3:5C:17:5E:78:40:AB:CC:C4:D8:88:C7:13:97:BF Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4 Certificate serial: 01A17C28D1176F28EE45B3EC4C473343A860 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft Manifest number: 1AC9 Signing time: Tue 27 Oct 2026 07:00:11 +0000 Manifest this update: Tue 27 Oct 2026 07:00:11 +0000 Manifest next update: Wed 28 Oct 2026 07:00:11 +0000 Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=) 2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=) 3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=) 4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=) 5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=) 6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: Gd50LWOCSrw0TJX5jvbra6/rl8cY3D21XhOrhTNu+oE=) 7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=) 8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=) 9: vzidGM-MJjldkGGDVWaxyGxbVlE.roa (hash: yoJENfRbWs+TKZhJt2OSgIUYi9IpVHltrW6bYU1ft9s=) 10: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 07:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7c:28:d1:17:6f:28:ee:45:b3:ec:4c:47:33:43:a8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4 Validity Not Before: Oct 27 07:00:11 2026 GMT Not After : Oct 28 07:00:11 2026 GMT Subject: CN=becbb0cfd1f35c175e7840abccc4d888c71397bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:27:ca:92:05:47:da:5a:f8:9e:d2:3a:53:16: a6:7f:16:03:1a:fd:a0:de:22:e8:20:23:db:e5:6b: 02:99:ef:51:0a:76:ef:08:3b:f8:6b:eb:c4:1c:a4: 8b:04:ca:b9:f0:ae:4c:9b:58:e4:6e:cb:64:23:0c: 5f:5e:48:e2:c3:63:56:f0:77:b7:83:d9:3a:03:d7: 3b:32:d1:b3:76:46:c4:53:ec:a7:11:b3:f4:d4:27: fa:af:70:4b:92:5d:b6:81:2c:e5:e5:d1:de:1e:4f: 82:be:b5:35:1e:f6:ea:fc:32:36:22:d6:bd:77:67: 87:9f:f0:84:2a:85:fc:32:e3:5a:68:c7:98:0b:05: 8c:8f:7d:45:8e:bd:98:9a:ac:cf:7d:07:30:7f:03: 27:1d:cc:02:de:67:36:f7:0c:58:b6:cd:c4:81:50: 0e:39:bb:a3:fa:e1:8d:f1:94:40:09:55:0a:c0:3b: 71:45:fa:be:5f:4a:c6:76:84:d1:2a:19:d3:1b:ca: 46:2a:05:50:25:61:6d:0b:71:bc:fc:af:8f:1d:6a: 53:9e:cc:67:d9:bd:c9:b8:15:f9:d5:16:e4:bc:d8: ef:ed:4f:92:da:b4:9d:79:49:d6:52:7f:1c:57:5a: ba:e1:da:6f:c0:20:d9:e3:6a:f6:db:53:a9:39:04: 8e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:CB:B0:CF:D1:F3:5C:17:5E:78:40:AB:CC:C4:D8:88:C7:13:97:BF X509v3 Authority Key Identifier: keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:28:5e:37:f1:43:5a:c8:35:46:72:a9:13:d2:04:dd:f8:6d: 25:c2:91:db:ef:2b:e9:83:53:4f:a0:75:d4:de:16:46:8e:4c: 9d:5a:47:3c:77:47:da:de:28:90:d6:7d:cf:b3:58:69:24:17: 8b:bb:92:2e:97:a6:b0:64:10:42:a1:3b:4a:1e:62:56:f6:19: 6d:b0:c3:34:37:8e:e4:56:3e:06:27:35:30:f0:24:c7:b1:73: eb:55:ef:83:35:d5:6e:dd:00:81:21:d2:1a:f4:28:16:a1:9a: b8:ee:b6:8d:61:75:cc:99:82:bd:c8:5d:71:a2:b3:74:e2:a3: f6:a2:ef:cc:8a:92:81:4c:cd:04:17:fc:5e:15:d5:7f:4d:37: 28:2b:fc:bd:a5:f8:a9:37:8e:b4:03:9c:e6:60:fb:8d:87:36: c8:77:0f:34:af:31:77:eb:b3:31:e2:d9:b6:4c:ab:11:00:79: ba:e2:c2:b9:34:9e:29:89:1f:be:74:ac:bc:4d:b2:3f:b8:b6: ea:a3:31:0b:24:ba:a0:94:d3:35:98:55:ff:c7:4b:c9:b5:21: 58:9e:ea:c7:83:61:39:54:f6:f4:d4:98:d2:a8:71:7a:38:e3: 5a:2a:94:15:2c:61:dd:24:59:18:8e:b9:7b:9f:20:59:e8:7e: 17:96:a8:b7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF8KNEXbyjuRbPsTEczQ6hgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM1MWExNGNlOWQyNTIzOWI5MmZlNWFiY2U1MzI1MTUwNDRj MWFiYTQwHhcNMjYxMDI3MDcwMDExWhcNMjYxMDI4MDcwMDExWjAzMTEwLwYDVQQD EyhiZWNiYjBjZmQxZjM1YzE3NWU3ODQwYWJjY2M0ZDg4OGM3MTM5N2JmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCfKkgVH2lr4ntI6UxamfxYDGv2g 3iLoICPb5WsCme9RCnbvCDv4a+vEHKSLBMq58K5Mm1jkbstkIwxfXkjiw2NW8He3 g9k6A9c7MtGzdkbEU+ynEbP01Cf6r3BLkl22gSzl5dHeHk+CvrU1Hvbq/DI2Ita9 d2eHn/CEKoX8MuNaaMeYCwWMj31Fjr2YmqzPfQcwfwMnHcwC3mc29wxYts3EgVAO Obuj+uGN8ZRACVUKwDtxRfq+X0rGdoTRKhnTG8pGKgVQJWFtC3G8/K+PHWpTnsxn 2b3JuBX51RbkvNjv7U+S2rSdeUnWUn8cV1q64dpvwCDZ42r221OpOQSOpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL7LsM/R81wXXnhAq8zE2IjHE5e/MB8GA1UdIwQY MBaAFDUaFM6dJSObkv5avOUyUVBEwaukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEt Mjk1Mzg5NGIxZjZkLzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hYy8zZTIxNjUtM2JiNS00NWMzLTk4OWEtMjk1Mzg5NGIxZjZk LzEvTlJvVXpwMGxJNXVTX2xxODVUSlJVRVRCcTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALCheN/FD Wsg1RnKpE9IE3fhtJcKR2+8r6YNTT6B11N4WRo5MnVpHPHdH2t4okNZ9z7NYaSQX i7uSLpemsGQQQqE7Sh5iVvYZbbDDNDeO5FY+Bic1MPAkx7Fz61XvgzXVbt0AgSHS GvQoFqGauO62jWF1zJmCvchdcaKzdOKj9qLvzIqSgUzNBBf8XhXVf003KCv8vaX4 qTeOtAOc5mD7jYc2yHcPNK8xd+uzMeLZtkyrEQB5uuLCuTSeKYkfvnSsvE2yP7i2 6qMxCyS6oJTTNZhV/8dLybUhWJ7qx4NhOVT29NSY0qhxejjjWiqUFSxh3SRZGI65 e58gWeh+F5aotw== -----END CERTIFICATE-----Generated at Tue Oct 27 17:36:39 2026 by rpki-client