$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft File: 1HX7CTTPaljczvEQh12-Xj6La3U.mft (raw, json) Hash identifier: D5YUteHBjnNjS7ytsS0SgTHyqlpy7pkaVl/bMSlY5C8= Subject key identifier: 4E:6E:9B:ED:3F:65:C5:7C:B9:A7:C2:A7:71:44:56:72:63:A6:BF:40 Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Certificate serial: 01A177A740611E0A060FBCC7B5894A83E500 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft Manifest number: 17C3 Signing time: Mon 26 Oct 2026 10:00:12 +0000 Manifest this update: Mon 26 Oct 2026 10:00:12 +0000 Manifest next update: Tue 27 Oct 2026 10:00:12 +0000 Files and hashes: 1: 1-EC4g1z7TKmKDC6BMJKVgcX5rqM.roa (hash: VN5SDY0+gW7ILuHoqlm/fJEeG3YnPoZJ808VzHVdxfM=) 2: 1HX7CTTPaljczvEQh12-Xj6La3U.crl (hash: 0FaROdLxh/ay9tPgphTTustMxbqecr4f/S69xqMDE38=) 3: 9l-1vV0lLMPdjVLZ8U4gIW0OkT8.roa (hash: kHoKR3oAF432BBb7GV322ecIos7vaNdfIEmHn7z4jA0=) 4: CVL1CK8Ow2cSKBowHcHY0tF8Sjo.roa (hash: ld+tNyBKiP3cgMuyEV6zi3LHUSVViRV1Xe7EeZEcgOs=) 5: DgnHYMNEO3cW02ohlMn2axnldPY.roa (hash: vaq0LBl35c7hmyKRAqN3BqKt0SzicUAX8/qk3xf0Rag=) 6: EOKiA2av8D9tfqyUWidlxDIVF7I.roa (hash: a+NxQmmW/zjcx38he+RtlHbBR768yZhQrdN+Qy40tRQ=) 7: Ipx7ZW4ku9jbIsLnJ7YdfGPhKwo.roa (hash: L5paJbyh0KobKYZie3ywNQHCitW9V1gxFkZu+lLubKY=) 8: KBFhtKcJq5uA7ADerkedr7ALsUc.roa (hash: zdLI7qiXR8cpmXvF/k9fx3+iYtigbpqLuzWcJYNq8OU=) 9: LYO4EVL97axXFG4_1JIRGo_Gcr0.roa (hash: M8NjdLPy4NRB155rg30Ob5fe1Garsp+Fkc/ASUzAL08=) 10: NZPmGfMlXNXVCIzj2BQPnQI3e_8.roa (hash: zE5S0+ZJF7WaGLugEvIAwCS9/+Sc61x6ImWftYSyXwA=) 11: OmMFI95X2qnhZDKjI6slDjGRNqk.roa (hash: Pn7MijhIBVlC/zjDS4+PEDcrihjLjcsRGTtxI7Cgocg=) 12: SKrkFUElNTW-RJXzA9GZbuLjByQ.roa (hash: o0t432S7k6ID0P9LUaLorXFdDHZox3y0pV4ne0vCm/w=) 13: bHsFJaLyCQLt5X5fjeTKRh55ODY.roa (hash: DVWoYx/VlrYQI2tOsueyBqYwG1Fx4jRd1Wy2fvfG26I=) 14: dhB_IkqPVgi3yJTzlaxBzpa9CMs.roa (hash: /dJFhGziZtLlMMTjECful8AqChnK1t2jnoBopwI8PGs=) 15: e4WdAxYOOZhI1HUnTBJUvTzFLcc.roa (hash: BxWMVdjBecDx+1X50nR2tWLJ9Ko6bUO8kFQ40XFyRn4=) 16: xQ0hxU5h6aCqKoBozq3lc-OZvS0.roa (hash: dqVw1zy09p9At+bsRY80wcRAlgN5UMI3c+HTy+z8Ljo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 10:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:77:a7:40:61:1e:0a:06:0f:bc:c7:b5:89:4a:83:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75 Validity Not Before: Oct 26 10:00:12 2026 GMT Not After : Oct 27 10:00:12 2026 GMT Subject: CN=4e6e9bed3f65c57cb9a7c2a77144567263a6bf40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:53:8c:09:7a:28:38:b2:41:89:7a:a0:e1:31: 1e:39:1b:c6:ba:f2:c8:49:9c:ec:58:fd:66:50:b6: b9:32:23:74:0f:6b:24:97:cc:29:c2:08:c9:9f:22: 6d:ad:3a:5a:90:ca:b5:3b:1d:9e:ff:90:fb:aa:d0: c9:28:2e:cf:57:c9:76:ce:16:ea:17:75:5b:d3:c7: ba:45:bc:c4:1c:d3:c3:f0:97:e7:af:e7:67:ea:11: fb:0b:a8:d9:a0:c0:bd:89:f5:98:e6:78:e5:3b:2f: 5e:b2:3c:cf:12:9f:e0:92:8b:b2:db:7a:03:63:9e: 09:d5:b8:cd:c9:b9:cf:dd:00:ce:f4:e7:d2:20:68: 6a:d9:0e:df:eb:09:87:8d:76:64:b9:66:c0:a3:a2: 19:83:d0:75:9f:7c:ff:b0:7a:9a:95:bf:31:f0:f6: 0a:c8:2a:b3:bf:66:fe:b1:e7:3d:e0:e9:f1:e8:dd: 7e:f1:68:4a:11:b7:19:8b:f6:a1:11:c2:74:13:c5: ee:d4:ac:db:65:78:16:49:ce:a6:fd:c7:19:14:15: ba:7d:f0:4e:b8:90:ef:04:e5:05:ff:99:05:cf:62: f7:90:84:0b:1f:6e:e9:43:20:3a:8b:38:05:57:eb: 0c:93:c1:96:88:e6:44:25:40:78:2e:7b:1f:38:25: 98:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:6E:9B:ED:3F:65:C5:7C:B9:A7:C2:A7:71:44:56:72:63:A6:BF:40 X509v3 Authority Key Identifier: keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:6b:bb:f2:99:c7:ff:7d:5b:d3:5c:04:0c:34:52:de:d5:a5: 75:4b:67:ef:7b:fd:3d:16:e5:a1:93:46:83:16:6b:58:9f:ec: 85:01:83:0a:02:5c:6d:3a:22:f9:d4:87:4c:5f:af:f1:4e:1d: 8d:e7:15:2a:b6:bc:dd:44:a4:fb:71:62:e9:19:11:f7:b1:78: 1d:e0:23:7d:d1:d8:71:2d:f0:30:9e:07:93:59:34:3f:7f:d5: cb:e0:11:2b:ab:45:82:35:84:65:27:8d:f8:b9:1c:96:13:ed: cb:2f:4d:76:56:78:cf:b7:34:5f:15:a5:b4:b2:d5:60:de:1e: 8a:7a:76:94:35:e0:79:2d:cd:85:73:40:18:01:bf:e4:92:ca: 21:af:06:38:7e:e2:48:4d:a9:d3:75:62:c4:64:f9:05:4b:a8: 1b:f8:06:c2:cd:c8:4e:83:d8:48:60:8b:be:47:65:32:49:39: 33:7f:96:d5:8b:a4:cc:35:22:d5:90:c3:8e:17:86:27:fa:4e: f6:43:c8:ed:b3:af:94:c8:11:c2:aa:db:a6:54:bd:cf:a2:24: b2:5d:ee:c3:cd:2f:37:b3:ba:2b:f7:5c:b2:86:d3:c5:35:77: c4:b7:4a:b9:92:22:0d:07:5a:b4:32:79:28:f7:2b:c8:9e:72: 66:90:2e:f6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF3p0BhHgoGD7zHtYlKg+UAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ0NzVmYjA5MzRjZjZhNThkY2NlZjExMDg3NWRiZTVlM2U4 YjZiNzUwHhcNMjYxMDI2MTAwMDEyWhcNMjYxMDI3MTAwMDEyWjAzMTEwLwYDVQQD Eyg0ZTZlOWJlZDNmNjVjNTdjYjlhN2MyYTc3MTQ0NTY3MjYzYTZiZjQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAulOMCXooOLJBiXqg4TEeORvGuvLI SZzsWP1mULa5MiN0D2skl8wpwgjJnyJtrTpakMq1Ox2e/5D7qtDJKC7PV8l2zhbq F3Vb08e6RbzEHNPD8Jfnr+dn6hH7C6jZoMC9ifWY5njlOy9esjzPEp/gkouy23oD Y54J1bjNybnP3QDO9OfSIGhq2Q7f6wmHjXZkuWbAo6IZg9B1n3z/sHqalb8x8PYK yCqzv2b+sec94Onx6N1+8WhKEbcZi/ahEcJ0E8Xu1KzbZXgWSc6m/ccZFBW6ffBO uJDvBOUF/5kFz2L3kIQLH27pQyA6izgFV+sMk8GWiOZEJUB4LnsfOCWYWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE5um+0/ZcV8uafCp3FEVnJjpr9AMB8GA1UdIwQY MBaAFNR1+wk0z2pY3M7xEIddvl4+i2t1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYt Yzc5MTRhYjY0MjczLzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9iZmY0YWEtNGYwNy00MTI5LThhZDYtYzc5MTRhYjY0Mjcz LzEvMUhYN0NUVFBhbGpjenZFUWgxMi1YajZMYTNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoWu78pnH /31b01wEDDRS3tWldUtn73v9PRbloZNGgxZrWJ/shQGDCgJcbToi+dSHTF+v8U4d jecVKra83USk+3Fi6RkR97F4HeAjfdHYcS3wMJ4Hk1k0P3/Vy+ARK6tFgjWEZSeN +LkclhPtyy9NdlZ4z7c0XxWltLLVYN4einp2lDXgeS3NhXNAGAG/5JLKIa8GOH7i SE2p03VixGT5BUuoG/gGws3IToPYSGCLvkdlMkk5M3+W1YukzDUi1ZDDjheGJ/pO 9kPI7bOvlMgRwqrbplS9z6Iksl3uw80vN7O6K/dcsobTxTV3xLdKuZIiDQdatDJ5 KPcryJ5yZpAu9g== -----END CERTIFICATE-----Generated at Mon Oct 26 17:32:19 2026 by rpki-client