$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: ZnCSe14Pt6V6amaUIv9Wgqz+ClKaZlEcVHGNlSthwtU= Subject key identifier: B0:7A:8D:4D:14:71:E5:D9:6A:14:43:BB:98:02:AD:E1:96:E2:A0:3A Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 01A17695A1F8EEE515F25C7AB219B0C20D58 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 1AE6 Signing time: Mon 26 Oct 2026 05:01:20 +0000 Manifest this update: Mon 26 Oct 2026 05:01:20 +0000 Manifest next update: Tue 27 Oct 2026 05:01:20 +0000 Files and hashes: 1: 1iiQznngAAUoJBg2IRNbTIROLgA.roa (hash: IfOiJ0y8Jxc7SmQONu8fFngEQ795WWF+gFMreRxG3CU=) 2: 3BOp-YxEDCV8bR7KeQJ8iZNQrP0.roa (hash: GQeGMsayLy25d3Mzz8Sr1dTr20A68juU11xi9SJ1kwQ=) 3: Bzo_VHzhyMxVmlaGb7eDpMOzKNw.roa (hash: faAu0B/ZNdAR9cPNQILlVsqLeHnhVt95YfA/GQi7kCw=) 4: FpZLKm-2HuyBs9RMbUcbmbopMuU.roa (hash: 3TSsOddEtljGL8cZUDm9jJjfR573z1TKNPv7WQMwWsE=) 5: GIo6XBIIGKLKY5fo-2KAJGPCwGY.roa (hash: KkZCoIa9nndDPKaAqxfqTYTtr6XtVmuZC5N9YIEfldg=) 6: MASv_rraqDJSYbqgrPz4hvaUE2c.roa (hash: cVsPoSNgg1jdtpq+zgxbSf3SDxFypt0t/a96jTQx6hE=) 7: NzbIi-FrPomQ6ctOPJJUrBGgm1I.roa (hash: PdBiVtgjdqqfmsvkZMECcdaQfrG9aEwqLBPPRyETYkY=) 8: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: AgguiL612k3fdjXogHvJou7aTDhOiNugDK8LUNKLQgg=) 9: bzkVBP_m0QOkL7HvzQFXrT5rq10.roa (hash: NzVgHolIVrpawCE7CDio6iuv1mdZYc6KIW6NA0eXBBI=) 10: dKLrGCnnWV06iolZrHx2nh4vWJg.roa (hash: IGn7SudG+KQQ8pkrK3hPDPOgmXUuAfTQAKdCH2IyL6I=) 11: mEhn-x7tkmLGeYlMpZdP2RjzVPY.roa (hash: YARnW3hK0MAvwIlgDRpM5wiqLHphA51kgJTHfm2NanQ=) 12: mr3eytu19hz9X8102ddOQBMhaCs.roa (hash: rgExvt59Z6M78VouciXS9dA08jr+rMik1ukA2amoJZc=) 13: pUmN_6XpWcEqw-3rUBgKOFddqas.roa (hash: Cn7MMw/oqRiT9o2HCgwnJRlue/qjCZYJ4u8zRlj1ypM=) 14: w-PDKFF3prApvO2JzmgAyow-O5c.roa (hash: yGP/NbSbCcqtvQkL6kf+yxHQ3/xxKzetGY7fqt3Etok=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:76:95:a1:f8:ee:e5:15:f2:5c:7a:b2:19:b0:c2:0d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Oct 26 05:01:20 2026 GMT Not After : Oct 27 05:01:20 2026 GMT Subject: CN=b07a8d4d1471e5d96a1443bb9802ade196e2a03a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:77:f8:c5:fb:4c:e7:c2:0b:ac:ed:de:92: 2b:ac:4e:3a:48:17:83:86:8a:d1:3c:a0:3a:21:18: 92:41:30:8a:c0:56:17:31:df:34:84:62:c0:b1:e5: 45:73:4d:71:6d:8b:57:6d:9c:3c:55:c9:a3:d4:77: 9b:97:ee:fe:e8:77:e3:c2:8e:62:2e:c6:1e:77:1c: 23:11:55:8d:ab:17:ba:1b:71:5e:fa:08:d9:37:10: 5b:e0:e6:f9:73:46:cd:89:0f:ea:9f:e6:34:68:ee: e8:ef:cf:a5:7e:46:a4:37:ba:c4:6d:f9:19:41:a0: 64:d8:f8:54:88:7a:81:a4:ec:1c:29:0c:12:41:72: 64:91:69:af:ec:5e:73:80:26:82:59:42:38:dc:48: 98:21:13:30:9d:34:64:92:20:d1:02:02:ad:fd:36: 8f:7b:84:2a:72:38:a9:89:4d:20:42:fb:43:f5:e4: 3c:99:89:15:30:79:32:61:94:46:3b:5c:52:6d:13: 29:3c:93:7d:0f:7a:42:64:3d:6e:64:dd:16:d5:57: de:82:78:b3:7a:78:34:60:e4:61:cb:ca:85:9c:93: 2d:22:4a:39:8d:f6:6c:48:d9:bc:e0:5d:bc:90:cf: 54:4e:0b:ac:db:93:a6:ef:3c:39:62:76:51:84:1f: 63:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:7A:8D:4D:14:71:E5:D9:6A:14:43:BB:98:02:AD:E1:96:E2:A0:3A X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7b:f3:9c:e4:f7:9b:fa:e2:2a:f5:ab:ff:de:de:a4:9d:02: b1:9d:5b:c5:a8:cd:c9:26:14:89:6d:7a:38:1f:c4:4b:54:1a: 07:55:d4:ec:e7:ff:01:a2:4f:10:69:fa:76:fe:6f:1d:e3:9e: 32:b0:d5:e2:d8:5b:22:6b:a8:d5:85:60:4d:0e:7f:07:ce:2b: 8b:63:73:b5:e9:12:02:5b:2a:51:4a:f8:d8:06:c0:39:a8:e7: a2:ae:16:b4:88:44:d7:e0:80:55:de:cf:2a:a0:6b:a5:73:f7: 03:41:98:7b:49:8e:31:12:cb:d1:5f:ea:57:18:52:55:5a:4f: ce:29:11:30:2f:83:1a:32:53:d4:21:f6:6f:69:62:dc:56:0d: 80:b7:a8:11:ae:54:b4:07:6a:e6:90:80:a1:1b:55:83:03:a8: f4:73:d9:9c:aa:f6:91:a9:82:1f:17:ba:63:c8:dc:b7:ae:b5: 2c:28:49:6b:6e:5f:99:b5:48:e4:fa:70:d2:20:bb:13:a7:e3: 66:99:30:b8:87:cd:36:fe:12:d0:6b:a5:cc:45:8c:27:a8:d3: 12:33:78:ab:b5:78:67:7b:a8:37:40:6d:6a:92:8f:b8:09:c4: db:14:65:e7:73:7d:a3:c1:ba:b8:a2:3e:37:4b:56:cc:80:a6: 8a:96:78:3f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF2laH47uUV8lx6shmwwg1YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjYxMDI2MDUwMTIwWhcNMjYxMDI3MDUwMTIwWjAzMTEwLwYDVQQD EyhiMDdhOGQ0ZDE0NzFlNWQ5NmExNDQzYmI5ODAyYWRlMTk2ZTJhMDNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu93+MX7TOfCC6zt3pIrrE46SBeD horRPKA6IRiSQTCKwFYXMd80hGLAseVFc01xbYtXbZw8Vcmj1Hebl+7+6Hfjwo5i LsYedxwjEVWNqxe6G3Fe+gjZNxBb4Ob5c0bNiQ/qn+Y0aO7o78+lfkakN7rEbfkZ QaBk2PhUiHqBpOwcKQwSQXJkkWmv7F5zgCaCWUI43EiYIRMwnTRkkiDRAgKt/TaP e4QqcjipiU0gQvtD9eQ8mYkVMHkyYZRGO1xSbRMpPJN9D3pCZD1uZN0W1Vfegniz eng0YORhy8qFnJMtIko5jfZsSNm84F28kM9UTgus25Om7zw5YnZRhB9jjwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLB6jU0UceXZahRDu5gCreGW4qA6MB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPXvznOT3 m/riKvWr/97epJ0CsZ1bxajNySYUiW16OB/ES1QaB1XU7Of/AaJPEGn6dv5vHeOe MrDV4thbImuo1YVgTQ5/B84ri2NztekSAlsqUUr42AbAOajnoq4WtIhE1+CAVd7P KqBrpXP3A0GYe0mOMRLL0V/qVxhSVVpPzikRMC+DGjJT1CH2b2li3FYNgLeoEa5U tAdq5pCAoRtVgwOo9HPZnKr2kamCHxe6Y8jct661LChJa25fmbVI5Ppw0iC7E6fj ZpkwuIfNNv4S0GulzEWMJ6jTEjN4q7V4Z3uoN0BtapKPuAnE2xRl53N9o8G6uKI+ N0tWzICmipZ4Pw== -----END CERTIFICATE-----Generated at Mon Oct 26 12:40:44 2026 by rpki-client