$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft File: sCJf0DWnzmSnyIveca61YPNIOXQ.mft (raw, json) Hash identifier: MlBax6WP64IsnkQ46/BjQpUUbi9lU1958nRRnxR3p4M= Subject key identifier: 3F:13:EB:49:B4:CF:83:2C:47:8B:E5:B6:92:16:55:18:1C:EF:B0:35 Authority key identifier: B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 Certificate issuer: /CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Certificate serial: 01A1A6A63BF01C8C4E0646A15E450F232B0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft Manifest number: 0401 Signing time: Wed 04 Nov 2026 13:01:14 +0000 Manifest this update: Wed 04 Nov 2026 13:01:14 +0000 Manifest next update: Thu 05 Nov 2026 13:01:14 +0000 Files and hashes: 1: 0CCIV1hEHH3hY6pokk9jTnU8V30.roa (hash: GgaU+5w/qihCGGu/5k2TUotqsGtIXN8Ll7E8ReKlxoQ=) 2: 27Onk2ipikR9sCWrsjcv1XdwhhU.roa (hash: tYN0cEsdrNAHZ2qeeAujA9ZWZlxGIp9FSB29X48sim4=) 3: 75dJ9l9pm2mLQKlmsqkMPbP5nLU.roa (hash: y9JQO9ERriwN1YTQ2JmQZB4kivefmPeXhn7RTehloi0=) 4: 7k8If11aObVXGmnKtKwIcne1q0o.roa (hash: YMdPgL5RHn3ZUXXjNuLlB+pdjKmlISEakxjgynyqsGg=) 5: AEeBq3XFkbn8pyHJEeb3isWEmIA.roa (hash: gkDvS6y+2rhPnDPFUFxFEdfe5IUZN7R+qqVkzML65dE=) 6: IIIXZtSualOwJL3v5moeDxfjfvI.roa (hash: 7rMLEXqsuij2IE2v0cNkJojz7+yY0hLnMUTfWDw4n9Q=) 7: S8PqQWvAZE-e0h1xwtiuNTE5rHY.roa (hash: w5hcZAmF4buAGhakgXjQA0sa4vpLG5fCK2GR/ajM+u0=) 8: sCJf0DWnzmSnyIveca61YPNIOXQ.crl (hash: wgUXAncI+jPgXoXTyJq1ukHoT+uP47cLcfLa8vQYn6Y=) 9: vdGT0nZTpJLGcOzDL6xuJ_FCZW8.roa (hash: Xc1ItXjvzK2wPVfmMfhj8HS0B6C/GKW+6dgSc1M77LU=) 10: wPOPfa9gC7Gx-gFnDub7_hrEhi4.roa (hash: VxkO6fBbTYMBO4jXH/JD3dN5+ZLMhiKDYjCspmghV5A=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 13:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a6:a6:3b:f0:1c:8c:4e:06:46:a1:5e:45:0f:23:2b:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0225fd035a7ce64a7c88bde71aeb560f3483974 Validity Not Before: Nov 4 13:01:14 2026 GMT Not After : Nov 5 13:01:14 2026 GMT Subject: CN=3f13eb49b4cf832c478be5b6921655181cefb035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:23:85:70:96:01:d8:9f:5e:a1:3f:85:fa:43: 9c:e1:05:a7:23:aa:43:b5:68:14:cc:24:e5:dd:21: 66:40:08:bc:51:48:29:7a:53:8b:5a:9b:99:3d:97: 2e:47:1f:ef:1d:7a:74:ab:f2:0c:62:12:d7:0a:38: 5e:7a:ad:5a:e4:7c:8a:3c:80:17:0d:95:fb:b7:ce: 87:63:02:2f:09:f8:69:57:86:8c:3f:96:a5:13:69: b5:b6:5e:37:35:e9:00:b6:25:ce:20:aa:ed:72:21: 52:9b:d8:5e:e3:54:c1:e4:84:2e:95:b4:68:61:cb: a8:72:de:4f:86:ff:98:54:ae:99:a7:40:6a:f7:e8: ec:7e:ef:8a:92:37:82:ff:3b:46:5f:29:eb:70:5b: f1:11:7f:0c:20:0c:de:1e:39:af:da:9c:e3:32:d4: 61:83:ef:e5:dc:0c:f7:a7:53:1c:f8:27:01:26:73: b7:1c:ff:d2:e2:3b:11:04:a9:00:56:8d:45:27:8d: d4:6a:da:87:27:76:21:45:7c:cb:85:32:fa:8d:c6: f5:82:0f:03:e0:e3:a7:07:9d:40:f5:a6:85:02:03: 25:f7:42:2c:7d:27:73:d9:7a:3b:dc:9b:f7:c0:f5: d2:b1:de:8b:9d:92:8a:4f:4a:8f:88:38:a9:72:1f: 04:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:13:EB:49:B4:CF:83:2C:47:8B:E5:B6:92:16:55:18:1C:EF:B0:35 X509v3 Authority Key Identifier: keyid:B0:22:5F:D0:35:A7:CE:64:A7:C8:8B:DE:71:AE:B5:60:F3:48:39:74 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sCJf0DWnzmSnyIveca61YPNIOXQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/c46278-e1d0-4dc7-98c7-443e4bab7de6/1/sCJf0DWnzmSnyIveca61YPNIOXQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:1d:f7:6b:ae:1b:cd:bb:bc:e9:c6:87:de:e2:b9:da:34:29: b0:52:da:24:9f:02:4d:6a:14:77:0f:fd:a7:e5:47:b5:4c:d1: 77:d1:ec:89:93:48:8e:77:d3:3e:55:cf:5c:a6:8c:e8:25:dc: 73:56:7e:13:d2:2d:33:5d:d7:71:44:fa:a6:cc:e4:f7:4e:08: d1:97:88:ed:d1:7d:20:19:b1:35:84:b4:63:9e:6c:d2:99:f4: ef:32:9d:19:5e:13:25:77:23:fb:15:80:b6:66:5c:e2:b4:b9: 9e:62:7b:29:09:bd:33:24:bd:02:52:2c:68:ed:9d:63:dd:db: f0:0e:27:24:82:dd:75:44:78:d1:88:23:c1:2d:84:d0:cf:3d: 89:00:cb:c8:cc:2f:2f:2e:21:aa:a3:45:05:b9:26:4e:f5:6c: ca:67:2f:63:a0:65:ce:39:b1:3a:4c:b9:dd:41:48:6c:b9:89: 9f:dd:e0:95:05:8a:eb:05:84:71:b7:78:aa:55:a3:90:a4:b6: 6f:2c:3c:97:49:7b:13:9e:47:3c:3d:eb:90:8a:28:b3:a0:94: 2d:fc:3d:ba:50:2e:76:24:b4:40:40:0d:3f:10:92:17:1f:3d: 5c:15:b5:e6:a7:1c:5f:8b:d8:0d:15:68:cc:fb:59:02:f3:5d: 32:ca:76:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGmpjvwHIxOBkahXkUPIysKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwMjI1ZmQwMzVhN2NlNjRhN2M4OGJkZTcxYWViNTYwZjM0 ODM5NzQwHhcNMjYxMTA0MTMwMTE0WhcNMjYxMTA1MTMwMTE0WjAzMTEwLwYDVQQD EygzZjEzZWI0OWI0Y2Y4MzJjNDc4YmU1YjY5MjE2NTUxODFjZWZiMDM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCOFcJYB2J9eoT+F+kOc4QWnI6pD tWgUzCTl3SFmQAi8UUgpelOLWpuZPZcuRx/vHXp0q/IMYhLXCjheeq1a5HyKPIAX DZX7t86HYwIvCfhpV4aMP5alE2m1tl43NekAtiXOIKrtciFSm9he41TB5IQulbRo Ycuoct5Phv+YVK6Zp0Bq9+jsfu+KkjeC/ztGXynrcFvxEX8MIAzeHjmv2pzjMtRh g+/l3Az3p1Mc+CcBJnO3HP/S4jsRBKkAVo1FJ43UatqHJ3YhRXzLhTL6jcb1gg8D 4OOnB51A9aaFAgMl90IsfSdz2Xo73Jv3wPXSsd6LnZKKT0qPiDipch8EzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD8T60m0z4MsR4vltpIWVRgc77A1MB8GA1UdIwQY MBaAFLAiX9A1p85kp8iL3nGutWDzSDl0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4Yzct NDQzZTRiYWI3ZGU2LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi9jNDYyNzgtZTFkMC00ZGM3LTk4YzctNDQzZTRiYWI3ZGU2 LzEvc0NKZjBEV256bVNueUl2ZWNhNjFZUE5JT1hRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbx33a64b zbu86caH3uK52jQpsFLaJJ8CTWoUdw/9p+VHtUzRd9HsiZNIjnfTPlXPXKaM6CXc c1Z+E9ItM13XcUT6pszk904I0ZeI7dF9IBmxNYS0Y55s0pn07zKdGV4TJXcj+xWA tmZc4rS5nmJ7KQm9MyS9AlIsaO2dY93b8A4nJILddUR40YgjwS2E0M89iQDLyMwv Ly4hqqNFBbkmTvVsymcvY6BlzjmxOky53UFIbLmJn93glQWK6wWEcbd4qlWjkKS2 byw8l0l7E55HPD3rkIoos6CULfw9ulAudiS0QEANPxCSFx89XBW15qccX4vYDRVo zPtZAvNdMsp2Qw== -----END CERTIFICATE-----Generated at Thu Nov 5 01:42:43 2026 by rpki-client