$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: ooZ5rgTBRzduR29g7X5JqT0Zw7W6TTKWvEZ6BBTD+PA= Subject key identifier: 51:6A:25:FC:2C:93:38:81:DA:9A:E6:BB:2C:73:2D:0D:DA:C0:2F:80 Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 01A14C50009896E1B0D9CDAB636529F365AD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 16CD Signing time: Sun 18 Oct 2026 00:01:13 +0000 Manifest this update: Sun 18 Oct 2026 00:01:13 +0000 Manifest next update: Mon 19 Oct 2026 00:01:13 +0000 Files and hashes: 1: 35wDpRsfaq8aq0FjZJRW12A2SwI.roa (hash: S32iSai/D3+xMYiGNdr33Lz5mjsLhdP2ds6sS7Zu5bY=) 2: 4xaEdixeinTNAew5f36B5ogFapc.roa (hash: U+lj7Po2vIYbjteMOk724C6A7iSVfdA9w8Qr+wSn2EY=) 3: 6bp5_uY1eTTE0FRpgy0dJ0tGIWA.roa (hash: JQ6e3y/UZad8zx3alMXWmLY2Cs0ywtM7PcyjG1jGvp0=) 4: 9561YDYiFuwA3cK9_Ao81cqPzyw.roa (hash: sI0N1MtQFC1Bs34l2HPoGh51MHvRDzLlzChm4jYV9bI=) 5: IrFs_aYDL98DrBmqXNeImOXYqVs.roa (hash: /du+UzfxF5Oy69bwitaws2QcGuPpQ2q/PzP+2+rlKmc=) 6: Mpb5tIfxbf_t0TleDipa0dPzQfg.roa (hash: dlPOC3LjslO4GRq7Su9TrpsYGXUfWyZVAl7s4ntuJgI=) 7: SnpB0ExR-bCAJLKknHnesUTaAWU.roa (hash: wlr5EY83KcqFkovq8AptI/Jy70VxHPVKk3n5WEh7t3w=) 8: W-auLweCazJVGZa2RWm9KCu-wKE.roa (hash: KDvTseiWMAdzP9ZuSgmWkkWqgGW79SkpbkY25PFZ98s=) 9: YSP2K25IRGuG9q-MByo9uJoo_cg.roa (hash: Pd46j8HnroPwAsfvmv91RgjQs2qRGo37bfk5Rd39ViM=) 10: ZNVLkE0Hncpo1bsQ8SqkvCmjNMs.roa (hash: ckctwOhfUle+O6fK0mnv5ZMxRNGqbUG5lJdOX3nwnlo=) 11: djAPpFOBLqUtxJOa9UwBPjNac1E.roa (hash: 7Rj31INl1FIcMdN33laOh9K9+J+bHShe/BZUzyt8PUg=) 12: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: UpK6HfaKKXyDW448CzngrrbHoh7IYEdyW2BX54KoQQE=) 13: nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa (hash: lYeXLJKim2pWsORoTqRVNykk1XTHGi948eQwJ6tFxj4=) 14: pnn2LDubyB-s2_PbTNDUNt7JA_8.roa (hash: vW3hxl2FPzWH44KmHJKXNpZV557F5Hczl/NZRDVCKlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 18 Oct 2026 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:4c:50:00:98:96:e1:b0:d9:cd:ab:63:65:29:f3:65:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Oct 18 00:01:13 2026 GMT Not After : Oct 19 00:01:13 2026 GMT Subject: CN=516a25fc2c933881da9ae6bb2c732d0ddac02f80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:0b:a2:e2:39:97:d8:92:1a:e8:f5:84:82:01: dc:ad:c1:f7:aa:a8:a9:9b:80:13:61:58:33:66:b5: 2b:8f:ba:5f:e0:6d:bf:69:15:f6:da:f4:46:30:75: c9:68:e1:4c:59:fa:fb:6e:67:e9:72:70:75:94:a2: d1:d2:fe:09:0a:d0:a9:49:90:0f:e8:74:23:9d:80: d3:81:dc:c6:09:f5:f4:86:05:dc:c9:60:e3:ca:5e: 88:7c:7f:d7:53:9a:a0:f7:b7:80:18:7b:0d:62:1f: 35:97:cc:bb:1f:d2:dc:c8:b5:29:99:99:e3:df:ca: 59:d9:37:af:98:3a:c7:39:c8:0c:f1:16:28:29:f0: e5:9c:10:b0:54:c5:5d:fb:49:0e:c1:5e:39:81:0d: 78:35:1c:ee:57:d3:91:3e:d9:39:f7:45:43:ba:18: d0:06:23:29:0e:23:25:f2:f1:ab:82:bf:44:e0:a9: 99:00:8b:ce:81:ee:e2:90:53:08:db:6d:5e:9d:e7: 80:cb:d6:b2:fc:a0:d4:99:d0:f4:4f:1a:c3:75:c1: 66:59:e2:d1:74:2c:07:21:86:3d:24:ec:d3:f1:20: 3d:15:f3:e6:5a:64:54:7f:51:a0:30:62:79:92:2e: 46:d3:34:da:ba:8e:39:90:dc:22:73:71:cb:d1:3d: 19:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:6A:25:FC:2C:93:38:81:DA:9A:E6:BB:2C:73:2D:0D:DA:C0:2F:80 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:84:f2:f0:5e:e9:04:52:c1:a8:4e:cf:03:9c:70:64:a3:86: 60:33:68:54:7c:5f:69:8a:7d:c3:b6:c4:c9:42:0f:ae:1f:a0: 9f:8a:39:29:40:d6:5b:cf:dc:78:f6:15:ec:ed:0f:11:11:88: d4:80:c7:2c:15:2d:da:6e:85:0d:6a:4a:92:96:2d:1a:f1:70: 00:c2:2b:25:70:d9:1c:2f:39:ee:00:e5:03:c3:e7:b6:16:45: 9b:72:d6:50:6b:d8:70:e6:70:f3:99:f0:a4:0c:75:76:b3:3e: 09:d6:d6:b0:54:3e:b6:03:e9:e9:ca:59:c7:6a:ab:d4:aa:00: 29:45:c7:74:5c:6e:86:7a:f7:2d:81:8f:e4:44:bd:da:bd:4c: 50:9f:53:0e:34:66:90:cb:6c:5e:f0:1c:66:32:9d:d7:99:ca: fc:ef:6a:91:45:4e:c0:15:50:21:e0:47:03:d9:60:3b:e8:6e: 38:06:0e:d6:f3:8e:84:d9:1b:43:4b:69:10:ba:05:60:ce:af: 9a:57:88:4b:eb:70:1f:fa:9a:6d:a8:26:2e:24:28:78:af:07: 83:02:37:6c:3d:d9:40:2c:2f:84:01:66:80:98:af:40:e3:14: 61:9b:9e:3c:04:69:36:11:9c:a8:a6:93:af:4a:31:f6:7f:cf: 3d:f8:78:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFMUACYluGw2c2rY2Up82WtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYxMDE4MDAwMTEzWhcNMjYxMDE5MDAwMTEzWjAzMTEwLwYDVQQD Eyg1MTZhMjVmYzJjOTMzODgxZGE5YWU2YmIyYzczMmQwZGRhYzAyZjgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgui4jmX2JIa6PWEggHcrcH3qqip m4ATYVgzZrUrj7pf4G2/aRX22vRGMHXJaOFMWfr7bmfpcnB1lKLR0v4JCtCpSZAP 6HQjnYDTgdzGCfX0hgXcyWDjyl6IfH/XU5qg97eAGHsNYh81l8y7H9LcyLUpmZnj 38pZ2TevmDrHOcgM8RYoKfDlnBCwVMVd+0kOwV45gQ14NRzuV9ORPtk590VDuhjQ BiMpDiMl8vGrgr9E4KmZAIvOge7ikFMI221eneeAy9ay/KDUmdD0TxrDdcFmWeLR dCwHIYY9JOzT8SA9FfPmWmRUf1GgMGJ5ki5G0zTauo45kNwic3HL0T0ZBQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFFqJfwskziB2prmuyxzLQ3awC+AMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWYTy8F7p BFLBqE7PA5xwZKOGYDNoVHxfaYp9w7bEyUIPrh+gn4o5KUDWW8/cePYV7O0PERGI 1IDHLBUt2m6FDWpKkpYtGvFwAMIrJXDZHC857gDlA8PnthZFm3LWUGvYcOZw85nw pAx1drM+CdbWsFQ+tgPp6cpZx2qr1KoAKUXHdFxuhnr3LYGP5ES92r1MUJ9TDjRm kMtsXvAcZjKd15nK/O9qkUVOwBVQIeBHA9lgO+huOAYO1vOOhNkbQ0tpELoFYM6v mleIS+twH/qabagmLiQoeK8HgwI3bD3ZQCwvhAFmgJivQOMUYZuePARpNhGcqKaT r0ox9n/PPfh4wg== -----END CERTIFICATE-----Generated at Sun Oct 18 06:52:42 2026 by rpki-client