$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft File: O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft (raw, json) Hash identifier: kXs4sdrpcDGI2aLKE3qUs9gx/FrNHwNZBa7/4K6VdmE= Subject key identifier: 6F:78:5B:88:F6:D8:1B:28:62:BC:8B:7E:EC:01:B6:D8:DB:44:27:D5 Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Certificate serial: 01A17C29323018DAE7BABDB28D032AFC4FCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft Manifest number: 1ACD Signing time: Tue 27 Oct 2026 07:00:36 +0000 Manifest this update: Tue 27 Oct 2026 07:00:36 +0000 Manifest next update: Wed 28 Oct 2026 07:00:36 +0000 Files and hashes: 1: 1-ehuABryUVINj2W3NK-g46DB49o.roa (hash: YXDM1cCPDyh4BpBxko9niqIGoA4Nx7Wm0bIxDril5ZU=) 2: 49TpBZIbyHobsWcoh4oSwqHHj24.roa (hash: H3ZabpGlNw6ABVIQ/nTAsG4jZDJmHYwqGcghd6J47mU=) 3: CJMQtEYFaJCIAob5YTIM33reer0.roa (hash: 2fmW/5EjPlZQDHVPyDvXpi5tn/bBcbJ02R3RN2NWWE8=) 4: GhJdnyWj9py61uVvaxvqFfy0V7c.roa (hash: ljlh5bK4up2SZeKlCTioJwKwERt/6WFEKI2x/h9hHl8=) 5: O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl (hash: Ou62a5Rb54T0fpaJb8vLQu05uainiyMv9JtNa/CsSFI=) 6: YTSwtqCla-KMN-KojPP7ZcEJhCI.roa (hash: ucZ995yNrK5VHoaXITb+Y7tbONn7bL9sNblRcrvwpcQ=) 7: eSL82eEcvzSK2dkw6o4hr1h_hm0.roa (hash: iOpyDBpoorKPMwT1bNhIwY8hNcyUZXYXJpDFE6NQs9Q=) 8: gLrTd-tF6YKwKPVyN-B9kSozUjE.roa (hash: TmnCSJykitabQj5d7T0dn/Ydx5URkDDijEKhCVoUSe8=) 9: nKmF1TZGqw4Rl01o8Upo8B1uARg.roa (hash: jsNr28qDsooPsLwTF7PUY4RAqfXcXlMffZUWeSf+lRc=) 10: y2kC-JHxws7OdlKjntbmzAIGoYo.roa (hash: LqoUkGt/W9j9zMAyvyXO0TzR2hTHbWsAzvz5pfbOIEo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7c:29:32:30:18:da:e7:ba:bd:b2:8d:03:2a:fc:4f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b Validity Not Before: Oct 27 07:00:36 2026 GMT Not After : Oct 28 07:00:36 2026 GMT Subject: CN=6f785b88f6d81b2862bc8b7eec01b6d8db4427d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:3e:bc:40:f7:f5:d5:59:fc:bd:88:73:de:74: ff:f1:87:d5:5e:6f:d1:97:50:14:99:6a:c2:5a:f1: 68:06:7a:72:81:5e:ba:2c:9b:0a:1d:e0:1a:cf:2b: 72:82:d5:40:32:2d:5a:f1:3b:7d:45:e0:78:63:bc: 16:11:3e:53:60:2a:d0:e2:c3:0a:44:39:9b:b4:5a: b5:34:30:1b:27:56:8a:24:9b:89:19:51:1f:d1:35: ce:f3:49:63:b6:b4:7c:02:c4:24:bc:cc:34:c3:fd: 40:7c:68:a7:3c:cb:88:89:83:5c:a8:cd:64:db:79: e5:9a:c4:67:29:0f:26:f1:d9:f4:da:d2:cb:d7:68: b6:83:73:b8:37:21:a5:03:0d:79:72:79:01:89:18: fd:03:97:6f:1b:f9:55:e1:e3:0b:d6:37:ff:b2:81: fa:21:16:45:d9:e4:59:22:39:35:25:4e:ba:4d:2f: 98:07:82:9a:b6:d0:9b:c1:e8:2a:fd:04:f7:11:c1: 9e:39:c5:b0:c8:14:17:8f:22:26:52:ed:e1:91:e2: 59:06:12:de:80:ad:6f:c3:99:99:fd:a7:01:8b:9b: 25:87:02:e9:55:1e:92:59:bd:79:b0:7f:7b:84:46: f1:66:f7:90:87:53:fa:88:93:05:4e:a2:3a:0b:8f: ea:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:78:5B:88:F6:D8:1B:28:62:BC:8B:7E:EC:01:B6:D8:DB:44:27:D5 X509v3 Authority Key Identifier: keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:e3:dc:2f:6a:47:4e:9f:a6:ee:ce:70:72:e6:11:41:02:39: 2d:5d:01:f4:c3:f4:93:6d:a4:64:23:c2:0e:12:3d:06:9e:78: 5f:9d:63:1e:14:4c:aa:e6:84:b9:8c:81:9f:96:c4:1e:d7:2c: 6d:71:ec:19:4b:85:cf:60:c3:13:cb:1c:2b:92:5f:86:43:6c: 7e:4b:1b:c9:8c:fa:6b:51:52:35:70:fd:76:dd:f0:e0:69:f9: 38:68:7d:2a:6e:d3:51:09:66:63:3a:8a:01:4d:00:c6:ef:77: b1:ff:3a:91:12:c4:b4:4b:ae:88:b3:e7:a4:1b:c2:73:87:a9: 8b:40:33:07:4c:c5:1d:12:41:ab:9f:b2:c9:d6:b4:a8:e2:c2: a1:5f:f2:7a:a6:6e:fa:2d:8c:62:0f:8e:43:d7:01:a7:91:3f: 43:79:03:28:0a:2a:49:27:1e:b5:c2:f4:59:87:13:a7:ee:9b: f4:e8:2b:0d:53:75:66:81:88:87:fd:03:68:b5:ba:55:90:a1: 12:d2:31:3e:64:c1:04:91:d0:dc:f9:e0:34:a5:95:e2:a5:34: 11:7d:32:9a:a5:d4:08:3b:0d:ab:ab:dc:d6:9c:9b:34:8e:6e: 2e:ff:a2:ce:c0:ff:f7:1d:d2:5b:9a:d9:48:4c:00:c8:71:60: 4a:b3:50:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF8KTIwGNrnur2yjQMq/E/MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiZmE2NjM2ZmU2NDQwYWNmMjkzYjc1NzA1YTdhMWRjYWRh ODQyMGIwHhcNMjYxMDI3MDcwMDM2WhcNMjYxMDI4MDcwMDM2WjAzMTEwLwYDVQQD Eyg2Zjc4NWI4OGY2ZDgxYjI4NjJiYzhiN2VlYzAxYjZkOGRiNDQyN2Q1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzT68QPf11Vn8vYhz3nT/8YfVXm/R l1AUmWrCWvFoBnpygV66LJsKHeAazytygtVAMi1a8Tt9ReB4Y7wWET5TYCrQ4sMK RDmbtFq1NDAbJ1aKJJuJGVEf0TXO80ljtrR8AsQkvMw0w/1AfGinPMuIiYNcqM1k 23nlmsRnKQ8m8dn02tLL12i2g3O4NyGlAw15cnkBiRj9A5dvG/lV4eML1jf/soH6 IRZF2eRZIjk1JU66TS+YB4KattCbwegq/QT3EcGeOcWwyBQXjyImUu3hkeJZBhLe gK1vw5mZ/acBi5slhwLpVR6SWb15sH97hEbxZveQh1P6iJMFTqI6C4/q1wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG94W4j22BsoYryLfuwBttjbRCfVMB8GA1UdIwQY MBaAFDv6Zjb+ZECs8pO3VwWnodytqEILMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEt OTJlYzUxNWM1OTVhLzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iNi9hNDdjZGYtZDIxYi00ZjFkLTg5MDEtOTJlYzUxNWM1OTVh LzEvT19wbU52NWtRS3p5azdkWEJhZWgzSzJvUWdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANePcL2pH Tp+m7s5wcuYRQQI5LV0B9MP0k22kZCPCDhI9Bp54X51jHhRMquaEuYyBn5bEHtcs bXHsGUuFz2DDE8scK5JfhkNsfksbyYz6a1FSNXD9dt3w4Gn5OGh9Km7TUQlmYzqK AU0Axu93sf86kRLEtEuuiLPnpBvCc4epi0AzB0zFHRJBq5+yyda0qOLCoV/yeqZu +i2MYg+OQ9cBp5E/Q3kDKAoqSScetcL0WYcTp+6b9OgrDVN1ZoGIh/0DaLW6VZCh EtIxPmTBBJHQ3PngNKWV4qU0EX0ymqXUCDsNq6vc1pybNI5uLv+izsD/9x3SW5rZ SEwAyHFgSrNQOw== -----END CERTIFICATE-----Generated at Tue Oct 27 16:48:37 2026 by rpki-client