$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft File: Us2aZRLb8lpfGbgn16LH4iou6N0.mft (raw, json) Hash identifier: U9EipphvgdQXAHa8p83PqQGgFEUyhsCZpchPtF44bG4= Subject key identifier: 3E:64:3C:08:A1:10:CC:30:7C:7F:B3:6C:C4:A4:9A:79:E3:A3:FA:5F Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 01A17F61560C82FA7E7000F1A19D1396A092 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft Manifest number: 0D9E Signing time: Tue 27 Oct 2026 22:00:47 +0000 Manifest this update: Tue 27 Oct 2026 22:00:47 +0000 Manifest next update: Wed 28 Oct 2026 22:00:47 +0000 Files and hashes: 1: 1-IlB2CphFhJ1Es2Auj6Y8Pv_wcE.roa (hash: dBSNrPPwvAMKy5o27/nj2blgxOw2PO1uOCPT4ejHFgg=) 2: 2rLUhnluwL6wnKGGvW337qHfa_A.roa (hash: vOmCdy4dcO0yKPbRSBS7H0+V0LqrEgZGLIPDsfuR8RI=) 3: 3JNAFPmuRusA7_P1cHUrpNc8ZWQ.roa (hash: zKy+aXsrA8Z978tqaQi0ynXqJW9mllBBtqQYt4mz8gc=) 4: 3eP-ZYKR74zQteZxg-jYK68KuKU.roa (hash: rI+Q6O08EYSoWZw7Ks588qVsTWbvSuHUC1dp2GQPsEg=) 5: FzTjuLk_7nA9UDQXeDEoPzRq1Pk.roa (hash: HHvcn0OMUDNhaE4ndCUSU7YL9isEufzC3TEBmLz+PNk=) 6: KnBckRYNpkrmgA2l68UnOSdG8M8.roa (hash: e9ryBHEjHKpJhCoyv4UnySH5Ms6mFlk1tA5pBRXFaKc=) 7: Px4XmExl2QONyqSP6s8-qLoIeoI.roa (hash: reA0XoIHBbZsGAjNzRWT9dW+9757Ms5dgcUGYfnrDi8=) 8: Q4zYlgqR2E6QteR-SS7vLL4f0Fo.roa (hash: xdne681KIBXOw1iuKrPmdm7hma+L/l6mzmX+ckXNgJI=) 9: Us2aZRLb8lpfGbgn16LH4iou6N0.crl (hash: u4iFfsCYPemuPXLBA4eCkicrtR7DVee4zGY/0o9TDCk=) 10: VSTiw2oboQnkmXjBgIGhkxGhepE.roa (hash: 4F/73GATV4uqNlUOzonR9d297kijNCKmpTNCvz9MLPA=) 11: b4bnSjrxkGqwlr0zkoxcOijmFkc.roa (hash: fQuLS072q+zjmBm2EgGlUmemoEePNKD15HIZM6Eyfw4=) 12: bLd5QVIMiCwkFLZ8S98BxMCkWUo.roa (hash: +BUONYpT5TSnB0r+YO2WPo4xPzFtw/P+I5ni5WwQLtM=) 13: cwwhcNpzOg_pmBszouIx8h2CHRU.roa (hash: vBJrQQ0ItgE86n69h/fkj396ErwZyqxGCsEUUVNAzdI=) 14: hlAbpQnKYaIDHrjCT-1lNBwSXu0.roa (hash: BILz2oAMGgMF6vZP6W3jaxaaHIODVkHC+m/GaL33QlM=) 15: kPZtrooPlOyF8jQupuEU9Gy1bJQ.roa (hash: KtcI+6F6qPHzsOZYQ0EOD+pODuibLz2OAgS4M/a6Aq4=) 16: oLlQgePRk9yvcOlL0Fl_a56u9H4.roa (hash: Wqock9cGRbZPQGtCkafIuYZm7FqajUuA17fJ83OGRks=) 17: xp9MuE3K7E-Sb2HgnwhKc3yErto.roa (hash: 9FJKEkYOHXVi/GiMh+ZQtwPZthuSJbC+u80wUEZ5uBo=) 18: z_CtgXkP8jFHRAPlb_0WHOVWk_w.roa (hash: 1AnOmJE7jzbQyN7up6vsvpPbwqFxmSsOlfJMIHV8LFw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7f:61:56:0c:82:fa:7e:70:00:f1:a1:9d:13:96:a0:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Oct 27 22:00:47 2026 GMT Not After : Oct 28 22:00:47 2026 GMT Subject: CN=3e643c08a110cc307c7fb36cc4a49a79e3a3fa5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:fd:3e:79:ab:8c:5d:e1:3c:6a:8a:99:1a:f3: f8:fd:4b:f4:0c:c5:ea:60:23:42:09:df:2c:d7:c5: ca:3d:66:59:06:40:21:8b:6e:79:e6:a9:1c:d4:d7: 42:57:22:eb:6b:de:ea:91:bd:92:b6:2b:6c:b6:46: ad:cc:a4:d0:e3:bb:95:1a:ba:03:63:8f:80:94:10: 85:84:dc:73:51:fc:94:ff:45:0d:f1:19:e0:f7:9f: a5:bf:72:a5:c1:6c:e7:3b:af:7e:ac:ad:d6:f8:59: ab:0e:c3:24:0f:66:6f:ad:e2:89:10:77:b8:11:1e: d5:2c:a5:d4:6a:84:a5:90:e0:d0:34:91:39:b6:4f: a3:b9:ad:7b:bf:50:64:eb:38:93:f5:6f:46:ac:fc: 67:cb:4d:a5:a1:69:8b:04:83:a9:07:e9:c1:ea:b5: 76:93:83:c9:66:dd:9c:e4:12:87:32:88:4b:1e:c9: 44:03:72:4a:a0:26:4b:87:4f:fe:d9:28:cc:96:5b: 01:09:f5:7f:a0:e1:6b:a7:3a:58:99:03:05:08:fb: ad:d3:f2:f4:ec:d7:5c:67:e3:08:92:f7:1c:e0:ad: 2f:93:02:38:a5:cf:0d:06:93:60:31:08:7c:c1:1e: 29:23:75:94:38:70:28:d5:b6:7b:3d:e7:fa:06:04: de:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:64:3C:08:A1:10:CC:30:7C:7F:B3:6C:C4:A4:9A:79:E3:A3:FA:5F X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:13:78:19:df:8c:1e:cf:76:d5:9a:ca:1f:e1:d2:60:fc:85: 74:9b:1c:b5:9b:50:0f:8b:7d:15:ab:f6:13:5e:12:ce:c6:cc: 7e:77:e0:2a:72:85:b6:dc:8f:69:ae:ba:f3:bd:d1:3e:96:4c: 9e:65:ec:4a:54:e4:41:a4:01:e0:12:75:0f:10:4d:0b:9a:ed: 5f:f1:b7:04:8e:f0:97:b1:4e:ac:87:aa:dc:c3:b8:9c:fb:64: 7a:fe:4a:4b:fd:cf:28:52:fc:ff:84:d9:99:52:6d:b4:71:2d: 2c:06:0c:bb:32:56:b6:00:08:32:f8:f3:15:31:4f:17:17:1d: de:be:2b:52:f9:84:ab:91:ab:98:7e:68:c6:6f:9a:58:42:5f: c9:64:a0:2b:1d:3b:50:e5:54:09:2f:38:09:41:c8:e7:22:5f: 5d:30:79:9e:e4:84:16:e7:3d:47:48:37:bd:f0:ad:4a:78:4b: 61:21:6f:7f:b2:b1:48:25:0a:7b:57:5d:b6:9f:b3:e8:f2:62: 0f:c2:5e:6a:1d:df:93:39:1f:db:aa:4b:7c:7f:e2:b0:6e:72: e2:aa:09:8f:9c:4c:92:f3:3e:af:27:23:92:46:5c:6e:42:df: 63:b3:99:6a:ae:5b:a7:f3:21:a2:b1:80:87:1e:0c:12:03:2b: 10:c9:ba:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF/YVYMgvp+cADxoZ0TlqCSMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjYxMDI3MjIwMDQ3WhcNMjYxMDI4MjIwMDQ3WjAzMTEwLwYDVQQD EygzZTY0M2MwOGExMTBjYzMwN2M3ZmIzNmNjNGE0OWE3OWUzYTNmYTVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmf0+eauMXeE8aoqZGvP4/Uv0DMXq YCNCCd8s18XKPWZZBkAhi2555qkc1NdCVyLra97qkb2StitstkatzKTQ47uVGroD Y4+AlBCFhNxzUfyU/0UN8Rng95+lv3KlwWznO69+rK3W+FmrDsMkD2ZvreKJEHe4 ER7VLKXUaoSlkODQNJE5tk+jua17v1Bk6ziT9W9GrPxny02loWmLBIOpB+nB6rV2 k4PJZt2c5BKHMohLHslEA3JKoCZLh0/+2SjMllsBCfV/oOFrpzpYmQMFCPut0/L0 7NdcZ+MIkvcc4K0vkwI4pc8NBpNgMQh8wR4pI3WUOHAo1bZ7Pef6BgTe/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD5kPAihEMwwfH+zbMSkmnnjo/pfMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALhN4Gd+M Hs921ZrKH+HSYPyFdJsctZtQD4t9Fav2E14SzsbMfnfgKnKFttyPaa66873RPpZM nmXsSlTkQaQB4BJ1DxBNC5rtX/G3BI7wl7FOrIeq3MO4nPtkev5KS/3PKFL8/4TZ mVJttHEtLAYMuzJWtgAIMvjzFTFPFxcd3r4rUvmEq5GrmH5oxm+aWEJfyWSgKx07 UOVUCS84CUHI5yJfXTB5nuSEFuc9R0g3vfCtSnhLYSFvf7KxSCUKe1ddtp+z6PJi D8Jeah3fkzkf26pLfH/isG5y4qoJj5xMkvM+rycjkkZcbkLfY7OZaq5bp/MhorGA hx4MEgMrEMm6XQ== -----END CERTIFICATE-----Generated at Wed Oct 28 04:40:04 2026 by rpki-client