$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft File: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft (raw, json) Hash identifier: Mt4qiJ1QAAiDgh7advG61zNXlEI3X2R2Xv5s+PtjqAM= Subject key identifier: 91:79:7C:F7:AC:4C:D8:E7:E8:59:16:7C:F6:3D:80:EC:0D:D8:4B:99 Authority key identifier: 32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F Certificate issuer: /CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Certificate serial: 01A10211844460C26DD63C65155D2083B16D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft Manifest number: 1AB0 Signing time: Sat 03 Oct 2026 14:01:04 +0000 Manifest this update: Sat 03 Oct 2026 14:01:04 +0000 Manifest next update: Sun 04 Oct 2026 14:01:04 +0000 Files and hashes: 1: 0ld9oICrjkM9PiOBYi7PkCMaP7g.roa (hash: 7pPoPeKMxfAld72vWaWuaU3WiGoLWbNKS8HJfbCj2GY=) 2: 1BFQM936y9WGcLJKwy60Wg2ag-8.roa (hash: NTbQFXMY5QSvW0BgWqBt3HeqiX8tXZPRJi0IS+SKq2s=) 3: DT8TXPB7Zoh4Y9JFFdsSZ2RIgLg.roa (hash: cdCtaCnFbbokb4IxB6SbsLXr+yswcQckTbmvZnS/sJA=) 4: H3d0QP653F6Jo-epVSXBiVH1h6k.roa (hash: B2NZF4jz4UwnLzA3KbDxjNp0EF7Qv4Th+B09WImKi2I=) 5: MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl (hash: AAG7e8VHy2ARMMQNqv9zSAXY/Dhk8kVEQ0uVLqe+PtU=) 6: O2mRnCNeDokP5q-PUWLd28D1SG8.roa (hash: XL7s2EUC28zeBKoJlmCFsu+5IjkYrbxfH3a9YMWon60=) 7: XPPuMgWRNY1QAnjWn2LftTc8cH4.roa (hash: LqWi3Xbli/jxxlx74n8O7L6EJtxaJ1UA0GYHmPMDyEU=) 8: ZRr2QwcqGgt_EOiTtMFoE-lkmow.roa (hash: SIg3ToChfd1+8YW/rxSI4oA419Stw5Sb9StcFL22beM=) 9: dY6eqUD4ykA92I5VKqHmYTX3q88.roa (hash: uvlx5CXBvfA8EWdxrFvclZnKJJH1HmhxtH5z6Fa+fBo=) 10: hCjWTJUhp9C-lxxCdRV4Jwzm4mk.roa (hash: ECwHPN5lxdIugX2ttk1L3l/uci2ps9CeCy1VAcBMeQs=) 11: lERL5Mrj2Bt3hRDr7br_N3d-JkE.roa (hash: /A5fyVRtCeR1gSok1lWq8T+wbRAaNz8PoEuYxSfdZSU=) 12: lWQXyxEJYv9OPJsRSSX1CCPbFb8.roa (hash: qyL/Gv6WkVcsE18337JVKs2VK9z6GTYDQ6GMJ2m3/WQ=) 13: whyP5FxoblHoIHhMTAeqWb1jp8w.roa (hash: a7SodNhSARcbHydA3wymHLN4IRqMOWIhBwT2PU/EoPc=) 14: zd2dqaKa6O4wz9TxJzSxhbKbteU.roa (hash: Sv1+bPBughIj/le0hfMKADppbA91Co/u0NeJGW/Uifs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 14:01:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:02:11:84:44:60:c2:6d:d6:3c:65:15:5d:20:83:b1:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32474ac7ca85e09c2d48b33e7bf66f8ed764de0f Validity Not Before: Oct 3 14:01:04 2026 GMT Not After : Oct 4 14:01:04 2026 GMT Subject: CN=91797cf7ac4cd8e7e859167cf63d80ec0dd84b99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:6a:67:35:4c:f8:a2:c9:f6:b0:00:c0:8f:ca: 9d:3b:7c:a8:7a:a2:5d:69:3d:0e:03:7b:44:1c:4f: 96:fe:ce:dd:a3:82:b3:86:13:9c:8c:5e:ea:3b:8f: 31:96:60:13:29:13:18:28:62:f2:ac:07:d0:d5:c1: 45:ec:3c:ef:88:40:53:85:f3:7a:b3:63:c0:c6:ef: 91:9e:01:71:f0:60:e6:0d:c9:17:bb:de:68:e7:4e: b0:ea:69:3b:55:a5:b8:44:28:86:29:2a:10:b0:1d: 49:dd:4a:21:fd:b0:88:f6:9b:b6:39:bc:a3:97:b4: dd:41:6a:d8:a0:51:6f:85:8a:5d:d7:f6:b4:6d:ae: 0e:80:84:f0:f4:67:5c:e7:1a:8a:fe:7d:57:24:54: aa:45:91:6a:dc:ad:9d:0a:1a:b7:89:75:90:fd:90: bf:77:cd:a1:a1:1b:e3:0d:a2:83:a4:66:4f:fb:8a: bc:32:6f:31:d2:9b:e3:a8:de:68:9e:fd:e9:ff:84: 21:26:3b:79:70:bf:0e:99:e6:20:ff:b6:47:65:7b: a0:6a:d0:b0:4d:72:c2:fc:2b:06:a7:ef:39:fc:eb: ea:f0:7a:d0:4e:ca:2a:0a:22:df:a4:31:cc:e2:d4: 13:6c:42:89:06:a6:8c:2d:28:bb:81:3c:3d:51:e6: 82:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:79:7C:F7:AC:4C:D8:E7:E8:59:16:7C:F6:3D:80:EC:0D:D8:4B:99 X509v3 Authority Key Identifier: keyid:32:47:4A:C7:CA:85:E0:9C:2D:48:B3:3E:7B:F6:6F:8E:D7:64:DE:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/1fd0a6-4517-4a0b-b3c9-12ec22c9c5a2/1/MkdKx8qF4JwtSLM-e_Zvjtdk3g8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:84:18:a3:50:87:8b:91:00:60:66:21:a1:8b:95:16:5b:f0: e2:70:f9:b8:82:6f:ec:c3:cb:a9:0c:a7:9b:6e:ee:f8:f7:25: 3b:83:b4:bf:85:4e:2c:c5:ad:8c:ab:db:42:36:e5:df:7c:49: 46:67:b2:e9:23:59:5b:43:1d:96:4e:15:14:e1:46:bb:bd:12: b2:1a:7a:7a:d2:71:36:e5:3e:2c:68:e4:ae:45:8b:27:1c:ec: 3e:db:9a:44:05:cf:1e:02:c5:7b:75:80:45:43:99:43:03:4b: 59:91:2c:2a:15:14:89:fd:8f:5f:47:61:83:9f:10:45:9c:40: 13:d7:9b:e5:66:f5:71:b6:8e:10:00:23:68:39:8b:a3:7e:62: a2:64:b6:74:4b:00:80:52:d2:9e:35:66:50:e1:6a:8e:2d:8a: 18:50:6f:66:79:9a:3a:0e:e2:7e:7e:27:07:c8:cd:41:39:9d: 06:96:97:49:3d:60:f3:ca:80:6f:2c:47:dc:52:e7:fa:7d:17: 0f:7a:f8:0e:52:b2:46:5b:b4:92:65:3f:28:11:15:f2:a6:dd: 48:37:4e:14:60:28:17:1e:4b:b5:10:9d:f7:c3:cc:a9:db:42: 49:09:20:53:6e:7c:f1:b4:d9:67:b9:13:b8:54:a7:1a:8a:c2: 9f:d2:b1:78 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaECEYREYMJt1jxlFV0gg7FtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMyNDc0YWM3Y2E4NWUwOWMyZDQ4YjMzZTdiZjY2ZjhlZDc2 NGRlMGYwHhcNMjYxMDAzMTQwMTA0WhcNMjYxMDA0MTQwMTA0WjAzMTEwLwYDVQQD Eyg5MTc5N2NmN2FjNGNkOGU3ZTg1OTE2N2NmNjNkODBlYzBkZDg0Yjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWpnNUz4osn2sADAj8qdO3yoeqJd aT0OA3tEHE+W/s7do4KzhhOcjF7qO48xlmATKRMYKGLyrAfQ1cFF7DzviEBThfN6 s2PAxu+RngFx8GDmDckXu95o506w6mk7VaW4RCiGKSoQsB1J3Uoh/bCI9pu2Obyj l7TdQWrYoFFvhYpd1/a0ba4OgITw9Gdc5xqK/n1XJFSqRZFq3K2dChq3iXWQ/ZC/ d82hoRvjDaKDpGZP+4q8Mm8x0pvjqN5onv3p/4QhJjt5cL8OmeYg/7ZHZXugatCw TXLC/CsGp+85/Ovq8HrQTsoqCiLfpDHM4tQTbEKJBqaMLSi7gTw9UeaCAwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJF5fPesTNjn6FkWfPY9gOwN2EuZMB8GA1UdIwQY MBaAFDJHSsfKheCcLUizPnv2b47XZN4PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzkt MTJlYzIyYzljNWEyLzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC8xZmQwYTYtNDUxNy00YTBiLWIzYzktMTJlYzIyYzljNWEy LzEvTWtkS3g4cUY0Snd0U0xNLWVfWnZqdGRrM2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYQYo1CH i5EAYGYhoYuVFlvw4nD5uIJv7MPLqQynm27u+PclO4O0v4VOLMWtjKvbQjbl33xJ Rmey6SNZW0Mdlk4VFOFGu70Sshp6etJxNuU+LGjkrkWLJxzsPtuaRAXPHgLFe3WA RUOZQwNLWZEsKhUUif2PX0dhg58QRZxAE9eb5Wb1cbaOEAAjaDmLo35iomS2dEsA gFLSnjVmUOFqji2KGFBvZnmaOg7ifn4nB8jNQTmdBpaXST1g88qAbyxH3FLn+n0X D3r4DlKyRlu0kmU/KBEV8qbdSDdOFGAoFx5LtRCd98PMqdtCSQkgU2588bTZZ7kT uFSnGorCn9KxeA== -----END CERTIFICATE-----Generated at Sun Oct 4 00:47:27 2026 by rpki-client