$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft File: a8XefXJVt9WCYMZaEgsWTvEO-QM.mft (raw, json) Hash identifier: ZpUTOzxB0u0o8VAJH9Vf9+c0lSFhF3NhVSMThzJ/mlI= Subject key identifier: C1:27:7B:2A:0F:8D:9F:2D:4F:75:80:BA:90:13:46:3E:95:95:E2:5F Authority key identifier: 6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 Certificate issuer: /CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Certificate serial: 01A13635704D74DDFAE073E800D607528829 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft Manifest number: 1A82 Signing time: Tue 13 Oct 2026 17:00:33 +0000 Manifest this update: Tue 13 Oct 2026 17:00:33 +0000 Manifest next update: Wed 14 Oct 2026 17:00:33 +0000 Files and hashes: 1: 0kI-1w2SNQehfoRycoNU1Pziv3I.roa (hash: viuJDQhBSgYavhQbluwLnuiQSVTVx0a9HzJyfcAYcOw=) 2: 5DlckLw7-djlSZ1lp36YaxGlvKE.roa (hash: eYIP1EqGYnvhmzjtkEGHQx/0NRgSz/vE0nE/kWbBXzk=) 3: 9lOq7Wh0Dc-TKs_jMnqAjp9qty8.roa (hash: gQsP3f9jY08L6TReTRhgCoFcXcYx56yiIKyEwP5fgis=) 4: B7aE9R9fg8NCdOQeiZzwMIi2ZNw.roa (hash: d1Ep9dN1bkXXcsIWaTx6sw5pJSc2xeGu6SeeEZeK/UM=) 5: H3x0T_83rlo2BTe5d7dbAF2ptxg.roa (hash: PQJVU6JoM83KwjANErOepQ3bz3i1NBfWfLmiBsgEm0c=) 6: KQ8fXNipeYkCVN179So0D0TWljQ.roa (hash: XxbQ5bE5bKEdW9jXnVZEomEiZqEsNztBM796TwnerwI=) 7: Tapjbvh-PuZAz-k3jhJRlpWxLVk.roa (hash: 4kpMa9oce3yLyGOA9Rf9dgs0rQL4kCPs5/HrQzn7jc8=) 8: a8XefXJVt9WCYMZaEgsWTvEO-QM.crl (hash: oad36RP1T6cPvioDMKvldeQVC38B0eRC7Xf585x9EL4=) 9: apYOCQON8Q50nYzp4ypso-jbqys.roa (hash: GBiBhZg5+hSaQBI+hKWqc24pEoVUkpkEuUna1OBDqxw=) 10: no_ORyMn9T6-xikFSqLg-Gz96M4.roa (hash: Cp3JrKwrBj3GbQGbhILQy1X/3llVpyj5IPBpaVZnel0=) 11: qkO3HWUjh2SeVz2kOfBJ3fz48jY.roa (hash: /yTAZn/rmLrDKLc8NDsiQRU6zHvgZlDcdPO4KfqzKvE=) 12: se8BvmMQMrcgHtpi_ujjg8KT8CQ.roa (hash: cAQdGWRmSeLyjwmIoEHBdUkwP7QnABnaaE31A7C6720=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 14 Oct 2026 14:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:36:35:70:4d:74:dd:fa:e0:73:e8:00:d6:07:52:88:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6bc5de7d7255b7d58260c65a120b164ef10ef903 Validity Not Before: Oct 13 17:00:33 2026 GMT Not After : Oct 14 17:00:33 2026 GMT Subject: CN=c1277b2a0f8d9f2d4f7580ba9013463e9595e25f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a2:57:94:ee:e6:96:e7:5f:92:e1:f1:a2:b8: 47:82:48:9b:0d:89:a9:74:7e:83:94:3d:56:cc:a8: f3:6c:29:64:6d:45:c2:25:ab:be:dd:2b:eb:8f:a4: b4:68:63:7d:a6:6b:d5:3f:52:4e:9e:3f:32:9d:35: 86:a9:8c:b9:f3:33:22:3e:5e:59:07:f0:18:1c:ec: bb:ec:6b:50:62:1e:4e:d6:04:13:82:15:87:a4:64: 1a:1a:69:1f:53:df:ff:ce:bc:c6:59:57:4e:7b:a9: a1:b6:90:0b:33:21:b0:e3:44:3f:0b:c7:c8:db:f9: d6:64:20:0c:43:1a:cf:cb:2e:7d:92:e7:a1:fc:45: 4d:3f:d6:e1:6c:81:b2:b4:27:9a:e5:af:73:52:69: ae:1e:79:d8:b4:7d:ed:05:67:bb:d2:4b:69:69:f8: c4:56:09:01:56:dd:a7:da:7b:99:d3:24:39:c3:97: 87:4f:a0:cf:01:15:05:90:58:19:08:c7:95:10:de: 76:04:d4:75:57:18:10:ee:56:67:c7:69:b7:76:2e: 68:bf:9c:a9:d1:2f:59:cd:aa:91:e1:d0:f9:0d:af: 19:7d:d2:58:c7:46:65:72:c9:44:a9:82:c7:1d:25: d0:89:7d:9a:13:8d:04:a9:95:1d:b8:f0:ac:d3:16: 66:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:27:7B:2A:0F:8D:9F:2D:4F:75:80:BA:90:13:46:3E:95:95:E2:5F X509v3 Authority Key Identifier: keyid:6B:C5:DE:7D:72:55:B7:D5:82:60:C6:5A:12:0B:16:4E:F1:0E:F9:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8XefXJVt9WCYMZaEgsWTvEO-QM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/32109e-24c9-4c88-a8e8-fdf6638d2c04/1/a8XefXJVt9WCYMZaEgsWTvEO-QM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:e3:44:b8:4e:96:b7:a9:86:dc:4b:a1:b3:2a:aa:f7:f9:9f: b4:04:66:83:bf:e5:e7:fd:ed:6d:30:5c:9e:9f:e5:67:07:05: 9a:ec:36:f2:86:4b:b8:0b:2d:8e:15:2f:b6:d3:db:23:a7:23: 63:ae:d2:4b:c9:87:7a:bd:13:b6:7e:61:8f:e1:73:c2:c7:3c: 17:3f:96:2e:11:80:23:5c:fb:22:ae:7a:43:1f:1d:80:0f:ed: 7f:0e:4c:b7:dc:eb:f4:71:87:4e:f3:e6:41:f1:bd:aa:50:be: 39:76:d9:50:1c:01:50:84:5a:e4:80:1a:d4:89:d6:f9:ad:db: d4:e7:8c:53:6b:33:db:f5:b7:c1:13:c5:38:0c:26:0d:ff:01: 27:6b:e6:19:82:30:45:1b:6f:fb:26:33:6b:70:1a:a7:4c:b9: 2e:77:12:2e:92:4f:30:93:2f:78:2d:ad:4c:44:98:16:48:9d: 64:7c:ae:75:8d:42:2f:1f:69:19:55:22:96:2c:0c:ef:52:95: 5c:a9:7d:3c:22:f2:ad:b2:1b:b5:fd:77:00:62:c7:b1:64:c2: 16:85:de:55:e1:c3:9c:09:91:b1:bd:1b:f4:c3:31:4a:6c:f6: cb:9d:7f:d6:01:92:56:8e:5d:ae:86:73:99:a6:52:06:04:fe: ae:96:85:c1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaE2NXBNdN364HPoANYHUogpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZiYzVkZTdkNzI1NWI3ZDU4MjYwYzY1YTEyMGIxNjRlZjEw ZWY5MDMwHhcNMjYxMDEzMTcwMDMzWhcNMjYxMDE0MTcwMDMzWjAzMTEwLwYDVQQD EyhjMTI3N2IyYTBmOGQ5ZjJkNGY3NTgwYmE5MDEzNDYzZTk1OTVlMjVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2aJXlO7mludfkuHxorhHgkibDYmp dH6DlD1WzKjzbClkbUXCJau+3Svrj6S0aGN9pmvVP1JOnj8ynTWGqYy58zMiPl5Z B/AYHOy77GtQYh5O1gQTghWHpGQaGmkfU9//zrzGWVdOe6mhtpALMyGw40Q/C8fI 2/nWZCAMQxrPyy59kueh/EVNP9bhbIGytCea5a9zUmmuHnnYtH3tBWe70ktpafjE VgkBVt2n2nuZ0yQ5w5eHT6DPARUFkFgZCMeVEN52BNR1VxgQ7lZnx2m3di5ov5yp 0S9ZzaqR4dD5Da8ZfdJYx0ZlcslEqYLHHSXQiX2aE40EqZUduPCs0xZm1QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMEneyoPjZ8tT3WAupATRj6VleJfMB8GA1UdIwQY MBaAFGvF3n1yVbfVgmDGWhILFk7xDvkDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgt ZmRmNjYzOGQyYzA0LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYi8zMjEwOWUtMjRjOS00Yzg4LWE4ZTgtZmRmNjYzOGQyYzA0 LzEvYThYZWZYSlZ0OVdDWU1aYUVnc1dUdkVPLVFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWuNEuE6W t6mG3Euhsyqq9/mftARmg7/l5/3tbTBcnp/lZwcFmuw28oZLuAstjhUvttPbI6cj Y67SS8mHer0Ttn5hj+Fzwsc8Fz+WLhGAI1z7Iq56Qx8dgA/tfw5Mt9zr9HGHTvPm QfG9qlC+OXbZUBwBUIRa5IAa1InW+a3b1OeMU2sz2/W3wRPFOAwmDf8BJ2vmGYIw RRtv+yYza3Aap0y5LncSLpJPMJMveC2tTESYFkidZHyudY1CLx9pGVUiliwM71KV XKl9PCLyrbIbtf13AGLHsWTCFoXeVeHDnAmRsb0b9MMxSmz2y51/1gGSVo5droZz maZSBgT+rpaFwQ== -----END CERTIFICATE-----Generated at Tue Oct 13 19:27:37 2026 by rpki-client