$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft File: DnX7T1KoKdE24pqaAlxjbRmuMo4.mft (raw, json) Hash identifier: zLyRhtRES8yiwCuOCUXIssgdv6P0caTwoi9Uyb0+qbk= Subject key identifier: E6:66:CB:A8:A0:12:0E:FD:72:E5:50:43:63:CF:BD:42:53:55:10:87 Authority key identifier: 0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E Certificate issuer: /CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Certificate serial: 01A14014AE394310B85427D5A60511F1059C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft Manifest number: 0E07 Signing time: Thu 15 Oct 2026 15:00:59 +0000 Manifest this update: Thu 15 Oct 2026 15:00:59 +0000 Manifest next update: Fri 16 Oct 2026 15:00:59 +0000 Files and hashes: 1: 3X72ts_u8UdAU2Nlgp4DF8Gg6a8.roa (hash: Ge4PsKYMryByO0OYDYTZfYZO1YJ9pHjF9aOWXLR3eBQ=) 2: DnX7T1KoKdE24pqaAlxjbRmuMo4.crl (hash: f18ksFL0+zxf/XbOdUVG61CfWdVoiq4u2HnS6bLS5E4=) 3: N5Hudy2VnUqERpoYZy52ejzqRK0.roa (hash: b7FmbOQsfYS1R+Itfkubnt9bf1rGQpODcJT/qJhwWfM=) 4: RvgHuN48Gaw4Z0yXN5U-Mx-yBC8.roa (hash: 11O1dCnyW4ak3pt/UcQ7wt5WT+qQiWljnBw8QixvRm4=) 5: TaMheOMdZP2tmei_s2ybU2SsCPg.roa (hash: DqAPmPSrPef9PUHYVbmORYuL6XIcTBrJp4dUoyY7wso=) 6: VjLb0Ff9Rp0sRtZ3I0hgr8CR-Dw.roa (hash: GefZdRtA37zUPmoSEnb+eXtdNbny7mYFUcfboZsg9O8=) 7: ZI7F3jKTZwJk-LUKENd65TQcrdo.roa (hash: iCF9DneZ25ibtnOz6TMJhKlkts/cMoUjQNUcoMlxdWI=) 8: bCxF1YIcZoN7ceq1lAJlo4b2OJY.roa (hash: GcQjQRXZYAFV8e3nN6Y2+o4JZPtkLbvCin8oHuv00v4=) 9: dTdtChpCkEVrMVZHMHKE-jbH_GY.roa (hash: fsIrJQXTsn0IW0QWk8FmYi2jq4XIMsylIBeiz+5y+MY=) 10: hSwhgn7GqbDE2g92wIWvoRDpJt0.roa (hash: 1tYyHehnlq7huNEHSU0Bk4wVNe02+9T/+COLNPbU76Y=) 11: iFH8kIof4Bf2ZNAAgpOOhNv9_48.roa (hash: x8zBwmCQvHkgb9zrfYzXpfld67ZAlmEFxLD8Z9xwwSY=) 12: kGneqi-DhIJThQbxo8k8aRtzhC0.roa (hash: LH1+UqmotTldhBb3/js9nM0r1q8ixXwicRK2tem2Z4A=) 13: qn7-xSOm3GNFbVMeEpI89BCHyGs.roa (hash: OAD6prCAz8lBbB+PhlF1Idqkbd0upRCxQF4VAJd3pnc=) 14: tmmFANwQ5JZt55dmVzsRd-EFMeE.roa (hash: IUAeNJHevZ0Yr6Nmz7PrwPyyil5rAJsrSz1KRdXRxu0=) 15: u5Z-UKS58TkiLtE3jgGoEP3fjMk.roa (hash: dKMTBSri97vDmRtTBlERANRnsrt6qOfB6A2VvhHx3Ew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Oct 2026 15:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:40:14:ae:39:43:10:b8:54:27:d5:a6:05:11:f1:05:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0e75fb4f52a829d136e29a9a025c636d19ae328e Validity Not Before: Oct 15 15:00:59 2026 GMT Not After : Oct 16 15:00:59 2026 GMT Subject: CN=e666cba8a0120efd72e5504363cfbd4253551087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5b:ac:bc:9e:bd:fd:43:29:19:4d:07:01:7d: 4a:df:f5:9e:91:39:93:83:b1:0c:e3:4b:75:9a:f8: b5:35:09:44:62:43:12:55:9a:76:df:f3:e4:bb:f4: 6a:75:0b:54:5b:d7:9f:d4:78:15:e7:a2:7b:08:b1: d7:2a:6c:ff:b8:25:8b:77:2a:5c:b0:ed:d1:7b:10: e7:ff:6c:97:93:cf:d3:46:4a:da:d1:fb:9d:0e:5a: c9:d7:60:c6:df:73:58:84:41:4b:f2:97:09:65:1c: a0:06:97:03:0c:26:3f:eb:9a:43:0b:05:b8:c4:70: 42:96:49:e1:22:99:a4:08:49:eb:35:4b:3a:ef:07: 4b:77:9e:c8:c0:40:e3:41:e0:8c:14:ad:c4:66:55: 29:ce:12:79:91:be:1d:5a:5b:2c:e5:2d:d3:44:b6: 16:f9:a8:b9:cc:60:7c:e1:3c:69:df:ae:86:7f:90: e6:a2:f7:8e:a3:ff:1f:90:3c:d7:b3:69:c7:e3:39: 14:04:0c:9c:9b:7b:f3:dc:c6:56:4c:0f:b9:7f:a2: 88:df:18:8c:fa:40:24:b7:d2:fe:45:e4:f8:88:11: f2:69:a6:56:37:6d:47:c9:f7:da:f8:a7:46:5d:e4: 0e:a4:ad:3e:88:9c:20:33:93:bd:57:16:48:fb:46: fb:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:66:CB:A8:A0:12:0E:FD:72:E5:50:43:63:CF:BD:42:53:55:10:87 X509v3 Authority Key Identifier: keyid:0E:75:FB:4F:52:A8:29:D1:36:E2:9A:9A:02:5C:63:6D:19:AE:32:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DnX7T1KoKdE24pqaAlxjbRmuMo4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/5759f6-93e2-4029-a49f-35ba267ded3b/1/DnX7T1KoKdE24pqaAlxjbRmuMo4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:33:dc:36:20:c2:1e:5d:39:8c:bf:99:e1:5e:a5:f7:e6:b5: 9d:87:c3:7f:6a:1f:15:a6:8d:c1:dd:9e:9f:b4:6a:7e:37:e9: c5:51:c6:03:d5:ba:99:60:ff:5f:ce:0c:7b:c3:3c:87:7e:01: 88:e4:45:0b:ef:31:15:98:37:c7:93:76:f3:fb:91:3c:f7:8a: 56:b6:96:a8:d1:ce:54:96:bd:0a:56:74:a2:35:97:55:d4:f0: a3:5f:14:d8:00:54:eb:1d:50:04:1b:1a:6f:88:83:91:90:f8: 59:b7:81:61:e8:2a:17:75:14:d0:c4:8b:72:90:68:a8:ad:67: 77:da:b8:4a:f6:12:0a:fe:ba:d5:a8:0e:a4:27:1f:fc:a8:07: 8d:96:b2:f9:0a:76:45:aa:58:ac:98:f2:9f:b9:d8:33:eb:c5: 50:76:9b:17:ca:f6:75:f1:cf:b4:fb:3b:b6:b4:d9:5f:99:6d: 6b:88:91:88:eb:91:3f:e8:ae:1a:a9:c1:3a:62:10:2a:9a:a4: be:c3:10:eb:18:2a:3d:27:84:3c:c5:6e:54:b5:a2:2e:ac:df: a5:07:05:51:24:4f:60:2b:2a:54:c2:2f:03:49:f9:66:5a:82: fb:ab:eb:3a:9d:82:82:1e:a4:1f:b6:d2:86:ae:c1:23:a6:bd: 6b:45:93:f3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFAFK45QxC4VCfVpgUR8QWcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBlNzVmYjRmNTJhODI5ZDEzNmUyOWE5YTAyNWM2MzZkMTlh ZTMyOGUwHhcNMjYxMDE1MTUwMDU5WhcNMjYxMDE2MTUwMDU5WjAzMTEwLwYDVQQD EyhlNjY2Y2JhOGEwMTIwZWZkNzJlNTUwNDM2M2NmYmQ0MjUzNTUxMDg3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1usvJ69/UMpGU0HAX1K3/WekTmT g7EM40t1mvi1NQlEYkMSVZp23/Pku/RqdQtUW9ef1HgV56J7CLHXKmz/uCWLdypc sO3RexDn/2yXk8/TRkra0fudDlrJ12DG33NYhEFL8pcJZRygBpcDDCY/65pDCwW4 xHBClknhIpmkCEnrNUs67wdLd57IwEDjQeCMFK3EZlUpzhJ5kb4dWlss5S3TRLYW +ai5zGB84Txp366Gf5DmoveOo/8fkDzXs2nH4zkUBAycm3vz3MZWTA+5f6KI3xiM +kAkt9L+ReT4iBHyaaZWN21Hyffa+KdGXeQOpK0+iJwgM5O9VxZI+0b7pwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOZmy6igEg79cuVQQ2PPvUJTVRCHMB8GA1UdIwQY MBaAFA51+09SqCnRNuKamgJcY20ZrjKOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYt MzViYTI2N2RlZDNiLzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC81NzU5ZjYtOTNlMi00MDI5LWE0OWYtMzViYTI2N2RlZDNi LzEvRG5YN1QxS29LZEUyNHBxYUFseGpiUm11TW80LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJDPcNiDC Hl05jL+Z4V6l9+a1nYfDf2ofFaaNwd2en7RqfjfpxVHGA9W6mWD/X84Me8M8h34B iORFC+8xFZg3x5N28/uRPPeKVraWqNHOVJa9ClZ0ojWXVdTwo18U2ABU6x1QBBsa b4iDkZD4WbeBYegqF3UU0MSLcpBoqK1nd9q4SvYSCv661agOpCcf/KgHjZay+Qp2 RapYrJjyn7nYM+vFUHabF8r2dfHPtPs7trTZX5lta4iRiOuRP+iuGqnBOmIQKpqk vsMQ6xgqPSeEPMVuVLWiLqzfpQcFUSRPYCsqVMIvA0n5ZlqC+6vrOp2Cgh6kH7bS hq7BI6a9a0WT8w== -----END CERTIFICATE-----Generated at Thu Oct 15 21:33:45 2026 by rpki-client