$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft File: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft (raw, json) Hash identifier: 6dxw7HzsyHoF2zofio44bUFeuJW7R4Mb7xG7vjbZ6ls= Subject key identifier: A8:EA:D5:6D:3B:C5:5A:A7:9A:2B:8A:16:17:05:AE:82:57:F1:D0:1E Authority key identifier: 44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 Certificate issuer: /CN=44e888a76e99851b01fb86cec537d4d8e610de16 Certificate serial: 01A17DAA31ABEBD3C80E2EF124AB1C44CBD3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft Manifest number: 1AE3 Signing time: Tue 27 Oct 2026 14:01:08 +0000 Manifest this update: Tue 27 Oct 2026 14:01:08 +0000 Manifest next update: Wed 28 Oct 2026 14:01:08 +0000 Files and hashes: 1: 67pKVcBP4g1ka7BHnXY8o1GjatI.roa (hash: NHI8d7vH5tjpxPomV3eBVCOa5aQTAvgW0GwAOx6HDCM=) 2: 6oyqxH6fbfCjScGv2qC0XiD5gCU.roa (hash: X2pwG2wmLfB4M+6njFbtbY0lJjAJiNG8E4ePk2t5PZ8=) 3: BG7hZwdKTnkeh7F43mqTspITrC4.roa (hash: 9w3fRT22xu3zZICYpxgXI0CEKv6s/N6rtv0UUVT3l1A=) 4: E3UcI6HbofZm_snwFtZqoqwg5-4.roa (hash: d4QiFFj+amh2JyYpNEFn0n/k8uKNUlkfpX81m7S5ZMs=) 5: Ig2ees5HLfOePoZmV44oy1ypzFU.roa (hash: Xt9yas6tqq8RhgQUndyXvcQyGrhriLDFS4gSQyBaGSk=) 6: KsuuqZuzWciosvKgFRPXzNp2Gcs.roa (hash: fH9tuqcfvS+JzHyWBgJi96fMfx/uXZQsaH9PlzbW4JY=) 7: ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl (hash: OrrmluzX0YoX4uzthdwTBslV7r8TbU/JbhMqZpnwwGc=) 8: _s7vUDean7Bk3XkZfaPzLom7oDA.roa (hash: GgtG8eWJVnz8jQ43nDutA9e3I7bTjxYLRfGFuNm9kaE=) 9: gAqwEcTCZcYoTWX4c9WWfhoNMgI.roa (hash: vAiaSmq1X3G0blOObiQg/SKw+90F8oGpc/icVWBJSss=) 10: k0wZqmhMQI1_yKbqeg-OeoA8ghg.roa (hash: okOMVmkk1MoA9VfXhi+YW9SB7pABGOjg3hztcxMcS9k=) 11: nzPG4vwX1IeVP2cSHRY5OFKnn24.roa (hash: OLyA9Gv/rl69xwJleWIyqhvz9X35ZOv/7WlzFp3vKrM=) 12: qMM2yBBqAUZtpJ-UlQnkHWnMjy0.roa (hash: TpFOiG67I1bJklLN/pt/Lsphs7nPRwEpTIL7MabwCy0=) 13: qOQMcO_XSSMHONHJzrh7779P3jo.roa (hash: ade5av8pqt7Ksv1kVj/c8U/iRecFohg4Rxixd7NnxeU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7d:aa:31:ab:eb:d3:c8:0e:2e:f1:24:ab:1c:44:cb:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44e888a76e99851b01fb86cec537d4d8e610de16 Validity Not Before: Oct 27 14:01:08 2026 GMT Not After : Oct 28 14:01:08 2026 GMT Subject: CN=a8ead56d3bc55aa79a2b8a161705ae8257f1d01e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2e:1d:65:ce:0a:08:69:3c:a9:6f:da:f8:b0: 1c:2e:b5:ef:ba:17:63:75:85:2a:21:f7:68:9f:6e: c9:bd:06:c8:41:5c:b3:ff:4a:24:f7:9f:0e:a8:ff: 95:cd:93:3c:c2:c0:d3:49:e4:11:ba:47:25:66:c9: e4:1f:0f:ae:dc:d0:ed:30:fc:5b:b3:b4:99:ff:f1: 82:38:56:e6:dd:a2:c3:ad:e0:56:a1:e9:89:2e:01: e3:e3:b5:95:cf:be:05:93:86:01:56:ea:68:54:1c: 16:6e:71:f3:e6:b4:46:bd:59:db:d8:bb:9d:5d:bb: 6c:87:1a:e6:03:1b:63:c1:20:46:9a:94:7b:b6:8e: 7a:87:09:e2:4a:fa:03:30:ca:d3:8f:6b:f9:2f:f0: 15:c9:8e:d7:6b:18:5a:95:80:f2:1e:e3:8d:ab:ae: 27:25:dd:1b:4d:01:d8:a8:09:06:65:ea:56:4c:4a: 74:92:89:6b:d6:34:a8:ae:dd:4c:44:28:e8:d8:fc: 40:25:58:7a:8c:66:ee:c6:90:30:fb:39:ce:a6:21: 25:dc:ad:29:4d:4f:2e:b0:47:7b:77:d8:fa:b3:33: cf:1a:6e:6e:9e:b1:c8:3b:d5:cd:9a:3f:f2:ea:1f: 60:04:b3:bc:46:f7:d6:5c:7d:ef:7f:41:77:b0:fa: ff:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:EA:D5:6D:3B:C5:5A:A7:9A:2B:8A:16:17:05:AE:82:57:F1:D0:1E X509v3 Authority Key Identifier: keyid:44:E8:88:A7:6E:99:85:1B:01:FB:86:CE:C5:37:D4:D8:E6:10:DE:16 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/82e2ba-442c-42b0-9315-bc0dba932b35/1/ROiIp26ZhRsB-4bOxTfU2OYQ3hY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:61:c4:da:ad:ac:b4:57:d5:8b:80:08:7f:f6:3f:6f:d1:13: b1:ca:a8:2e:c4:e7:b1:11:b8:2a:3f:82:3c:ee:56:82:b1:ac: 00:f7:64:81:f7:e2:a1:3e:3b:68:05:a3:bc:07:43:66:7f:1f: f7:e7:f9:48:53:e9:66:ac:19:82:7f:bc:34:70:86:3a:54:98: 53:07:80:85:68:2e:14:98:69:f7:b8:e0:91:c0:19:eb:34:fe: 22:44:31:f3:77:33:02:84:0b:0c:0d:ae:a8:56:89:51:d9:47: 8d:bf:9d:fc:1d:4d:78:bc:85:08:1e:e5:34:a3:9a:76:e7:c2: 97:9c:b6:f4:3d:c9:85:44:b0:10:4e:f4:6d:f7:57:0d:2c:75: 06:15:cb:63:c4:a2:e7:a9:d5:c1:90:98:89:70:67:71:20:e7: 8a:d6:84:75:b6:c3:91:8a:09:a0:e9:64:d3:97:9b:b3:cf:93: e8:e2:f2:31:c0:18:9a:f4:74:d0:f1:a1:28:7f:fa:f6:81:bd: 25:a0:27:8b:33:c9:ad:b3:5c:a4:c2:33:7f:f3:c4:14:3b:8f: c9:1e:bd:8e:55:c1:bc:a4:7c:5b:2e:7f:da:40:b8:bd:28:3d: 63:36:b1:30:e9:2e:d8:66:5f:51:27:0c:22:c1:6c:95:e5:94: 00:f2:99:a2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF9qjGr69PIDi7xJKscRMvTMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ0ZTg4OGE3NmU5OTg1MWIwMWZiODZjZWM1MzdkNGQ4ZTYx MGRlMTYwHhcNMjYxMDI3MTQwMTA4WhcNMjYxMDI4MTQwMTA4WjAzMTEwLwYDVQQD EyhhOGVhZDU2ZDNiYzU1YWE3OWEyYjhhMTYxNzA1YWU4MjU3ZjFkMDFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwS4dZc4KCGk8qW/a+LAcLrXvuhdj dYUqIfdon27JvQbIQVyz/0ok958OqP+VzZM8wsDTSeQRukclZsnkHw+u3NDtMPxb s7SZ//GCOFbm3aLDreBWoemJLgHj47WVz74Fk4YBVupoVBwWbnHz5rRGvVnb2Lud XbtshxrmAxtjwSBGmpR7to56hwniSvoDMMrTj2v5L/AVyY7XaxhalYDyHuONq64n Jd0bTQHYqAkGZepWTEp0kolr1jSort1MRCjo2PxAJVh6jGbuxpAw+znOpiEl3K0p TU8usEd7d9j6szPPGm5unrHIO9XNmj/y6h9gBLO8RvfWXH3vf0F3sPr/3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKjq1W07xVqnmiuKFhcFroJX8dAeMB8GA1UdIwQY MBaAFEToiKdumYUbAfuGzsU31NjmEN4WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUt YmMwZGJhOTMyYjM1LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMS84MmUyYmEtNDQyYy00MmIwLTkzMTUtYmMwZGJhOTMyYjM1 LzEvUk9pSXAyNlpoUnNCLTRiT3hUZlUyT1lRM2hZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGHE2q2s tFfVi4AIf/Y/b9ETscqoLsTnsRG4Kj+CPO5WgrGsAPdkgffioT47aAWjvAdDZn8f 9+f5SFPpZqwZgn+8NHCGOlSYUweAhWguFJhp97jgkcAZ6zT+IkQx83czAoQLDA2u qFaJUdlHjb+d/B1NeLyFCB7lNKOadufCl5y29D3JhUSwEE70bfdXDSx1BhXLY8Si 56nVwZCYiXBncSDnitaEdbbDkYoJoOlk05ebs8+T6OLyMcAYmvR00PGhKH/69oG9 JaAnizPJrbNcpMIzf/PEFDuPyR69jlXBvKR8Wy5/2kC4vSg9YzaxMOku2GZfUScM IsFsleWUAPKZog== -----END CERTIFICATE-----Generated at Wed Oct 28 00:42:30 2026 by rpki-client