$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json) Hash identifier: BlhfPpFI4ZsxdaogYPgcjW5eTf4cV3Z/f5IY6eUuZ9M= Subject key identifier: 17:1A:94:DD:23:EA:3B:EE:0F:B0:B5:CC:5D:52:2F:72:28:F6:2B:F2 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 01A17995C85B3D984C73BA45098DB16A2563 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft Manifest number: 17C4 Signing time: Mon 26 Oct 2026 19:00:21 +0000 Manifest this update: Mon 26 Oct 2026 19:00:21 +0000 Manifest next update: Tue 27 Oct 2026 19:00:21 +0000 Files and hashes: 1: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=) 2: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: jGigjHWggv3CwljcQrj1RRAr5dAGWLOKm89DZ8s9Bfs=) 3: 9l-1vV0lLMPdjVLZ8U4gIW0OkT8.roa (hash: kHoKR3oAF432BBb7GV322ecIos7vaNdfIEmHn7z4jA0=) 4: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=) 5: DgnHYMNEO3cW02ohlMn2axnldPY.roa (hash: vaq0LBl35c7hmyKRAqN3BqKt0SzicUAX8/qk3xf0Rag=) 6: EOKiA2av8D9tfqyUWidlxDIVF7I.roa (hash: a+NxQmmW/zjcx38he+RtlHbBR768yZhQrdN+Qy40tRQ=) 7: Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa (hash: L5paJbyh0KobKYZie3ywNQHCitW9V1gxFkZu+lLubKY=) 8: KBFhtKcJq5uA7ADerkedr7ALsUc.roa (hash: zdLI7qiXR8cpmXvF/k9fx3+iYtigbpqLuzWcJYNq8OU=) 9: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=) 10: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (hash: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=) 11: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=) 12: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=) 13: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=) 14: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=) 15: e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa (hash: BxWMVdjBecDx+1X50nR2tWLJ9Ko6bUO8kFQ40XFyRn4=) 16: xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa (hash: dqVw1zy09p9At+bsRY80wcRAlgN5UMI3c+HTy+z8Ljo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 19:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:79:95:c8:5b:3d:98:4c:73:ba:45:09:8d:b1:6a:25:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Oct 26 19:00:21 2026 GMT Not After : Oct 27 19:00:21 2026 GMT Subject: CN=171a94dd23ea3bee0fb0b5cc5d522f7228f62bf2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:0d:ec:b2:f1:77:7b:f5:c9:6b:09:3b:7c:8e: 72:00:30:ce:d9:1a:0e:60:b3:6e:a6:fa:a0:0d:2d: 7c:9d:0c:46:00:b5:e9:60:66:0c:ec:99:9c:c7:94: e1:f8:81:39:95:ad:80:1e:94:06:68:c0:b5:e4:f8: ea:60:96:a1:62:7c:ca:b3:0f:9d:30:09:af:8f:4e: 96:8e:82:e7:70:33:e5:0e:85:0e:8d:ff:c7:db:b5: ec:45:69:4c:a9:f0:cd:f2:49:3b:99:46:84:90:35: 20:6c:e8:65:4d:ae:1a:e4:45:05:85:29:e2:8f:78: 40:3b:a4:61:3c:0b:23:e0:f8:41:4f:62:16:bd:9b: 04:2f:9e:db:74:5b:e7:7b:97:34:70:78:61:47:80: 83:e2:88:de:57:4e:06:23:2d:1b:b5:06:87:74:7a: 5c:96:53:2f:ee:51:5f:c4:d1:cf:ff:38:11:e7:f8: 4d:1e:e4:d9:43:53:7c:f4:49:61:41:66:71:b1:83: 17:d9:91:14:1e:2d:32:b2:f7:ee:99:49:e8:75:5a: d9:14:6b:8e:eb:b9:a6:3b:35:70:d4:84:34:0c:59: ea:68:da:d6:8e:07:2b:8b:a1:26:27:0b:79:b4:75: c0:ec:96:7c:12:19:57:e4:cd:13:bb:62:ef:75:ae: f5:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:1A:94:DD:23:EA:3B:EE:0F:B0:B5:CC:5D:52:2F:72:28:F6:2B:F2 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:12:c5:99:60:98:47:1e:fc:1c:45:7e:f3:1b:93:76:83:91: 94:3d:98:99:11:2d:e1:d3:f7:d4:0f:61:38:20:68:54:ec:a1: 43:62:f1:d7:16:a1:e0:92:c4:38:e6:ac:03:c1:0d:3a:56:41: 7b:66:43:0f:a0:ba:d4:4e:ab:6f:92:37:7c:75:14:d3:e4:88: 93:e4:1a:41:d3:61:a0:b8:12:bf:2a:5e:db:00:96:d0:a9:49: f0:55:56:c5:7a:62:8b:5a:cc:7b:47:21:f3:ab:6f:f9:c5:a1: 6f:87:90:03:49:f2:78:96:dd:fe:b7:df:c5:c9:ee:02:af:8f: e9:d8:e3:a5:d2:0a:07:ec:00:b6:b5:ac:6c:21:e5:12:6c:75: 3c:9d:e9:f1:32:f4:db:5c:49:6e:17:43:e4:71:d5:35:44:e5: ad:70:5d:92:71:43:1a:81:d0:a5:1a:ee:83:4c:94:38:9d:df: 59:5b:9b:64:6f:6b:7a:5b:d6:30:da:57:35:ef:b8:d3:52:b5: a1:b1:db:2f:87:81:18:f3:8b:2c:3e:87:a9:fb:2d:52:b4:60: 07:8c:19:16:dd:e3:b8:53:40:1a:d2:2f:d5:4f:1e:43:c5:e2: f1:13:5f:4a:99:eb:97:6e:21:9c:c7:7e:e9:39:d5:69:ac:2e: 8a:82:a9:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF5lchbPZhMc7pFCY2xaiVjMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYxMDI2MTkwMDIxWhcNMjYxMDI3MTkwMDIxWjAzMTEwLwYDVQQD EygxNzFhOTRkZDIzZWEzYmVlMGZiMGI1Y2M1ZDUyMmY3MjI4ZjYyYmYyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkg3ssvF3e/XJawk7fI5yADDO2RoO YLNupvqgDS18nQxGALXpYGYM7Jmcx5Th+IE5la2AHpQGaMC15PjqYJahYnzKsw+d MAmvj06WjoLncDPlDoUOjf/H27XsRWlMqfDN8kk7mUaEkDUgbOhlTa4a5EUFhSni j3hAO6RhPAsj4PhBT2IWvZsEL57bdFvne5c0cHhhR4CD4ojeV04GIy0btQaHdHpc llMv7lFfxNHP/zgR5/hNHuTZQ1N89ElhQWZxsYMX2ZEUHi0ysvfumUnodVrZFGuO 67mmOzVw1IQ0DFnqaNrWjgcri6EmJwt5tHXA7JZ8EhlX5M0Tu2Lvda710QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBcalN0j6jvuD7C1zF1SL3Io9ivyMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPhLFmWCY Rx78HEV+8xuTdoORlD2YmREt4dP31A9hOCBoVOyhQ2Lx1xah4JLEOOasA8ENOlZB e2ZDD6C61E6rb5I3fHUU0+SIk+QaQdNhoLgSvype2wCW0KlJ8FVWxXpii1rMe0ch 86tv+cWhb4eQA0nyeJbd/rffxcnuAq+P6djjpdIKB+wAtrWsbCHlEmx1PJ3p8TL0 21xJbhdD5HHVNUTlrXBdknFDGoHQpRrug0yUOJ3fWVubZG9relvWMNpXNe+401K1 obHbL4eBGPOLLD6HqfstUrRgB4wZFt3juFNAGtIv1U8eQ8Xi8RNfSpnrl24hnMd+ 6TnVaawuioKpxg== -----END CERTIFICATE-----Generated at Mon Oct 26 23:25:47 2026 by rpki-client