$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: ZiU4GeOcvejHj6g2/nTe9ttxLpYxrpBr0Vxkj07ALcQ= Subject key identifier: 57:D2:A5:9C:16:7A:25:61:FD:85:16:BC:54:3F:96:18:9A:42:40:AA Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 01A19468B215DB45265DEBDD8772636F6E9C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 0A2C Signing time: Sun 01 Nov 2026 00:00:51 +0000 Manifest this update: Sun 01 Nov 2026 00:00:51 +0000 Manifest next update: Mon 02 Nov 2026 00:00:51 +0000 Files and hashes: 1: 1-OKEScg0BWKcv0ZLac4CAEn6-rQ.roa (hash: 2FtLb2u20I3CTkpwOKbR3dWsZzcDJ0fOcXJUQc4c304=) 2: 3fOCVpT-Lf6UOXcD5Nc80w9uuEI.roa (hash: Olnc6TsFMf/lto0XZ/IXXC3VCnMMv6kWoXMR1B4Qilk=) 3: 6MROEyhCnQoDzzzLgMuqSp8WWW4.roa (hash: U2ETKysUzgCpOSOJ/qWrrLMDT5gA1Ft4qr0viHcAPBA=) 4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=) 5: DR9VqkVtbZff3gkUBcaPLf1vbp4.roa (hash: sIqhfmAWjnSCKWQ8+ZuDooV52eSu6wgQtTvetBcOvWQ=) 6: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=) 7: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=) 8: JDO-N7w0Fa52JLt8GtUoT0ncalo.roa (hash: tzG8NZ2N7BL/I/RQ8HSnEMaZNAihPmVOsUxkrVflzJg=) 9: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=) 10: SLSMQo99u24Epa9sZ-35n9YwQ1g.roa (hash: XooSTwMO75gSa1IEA9BRq8RFfpIDKjq4YYrz5/hOOfU=) 11: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=) 12: WOqoJu5t09R3Cekgx_2O0sa6-Hc.roa (hash: 1qEbFKCQOOiO55/Z1NIx4D98L9A9xFqq+s2fxS0t2Dk=) 13: Y71JSOza9l99m2LkV-uZBA1qT4k.roa (hash: uUv6/DaQOMG287F0xQdwh94hSrXdbb62+qEzPa5p0o4=) 14: ZyKwbccyVfxFWStWGmNBds2K9AE.roa (hash: C74fBVKBp8P7zkaen+ft55vIs/92CO4DbwapwB4BQdE=) 15: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=) 16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=) 17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: Lem2S7+LPo1AAXY1+sJKVcVNBgpwMqXs6bEUD8ms3zM=) 18: hElXO4jKei6eIioTYSRMuOo2tUQ.roa (hash: 9Afji0izgzI/c8xd125iBWAIgGantscuH5lpVBS/wmo=) 19: kpma4xqgzEEytLfdE-9LrfzAf44.roa (hash: vgqc9IvueEpWlOduqOn71G/7ZnxuYFS4IHbsYXqcCYM=) 20: mE5DN157XZf7igs7Qp5o_mpfYoY.roa (hash: OK0s5oWuJ3ewBiMYcBCwgUB2nCoplpS+aaStS616Tlc=) 21: o6aWDaWLtgSw0yJqWoQY-eXoND4.roa (hash: 7Qa4eT/ei1RS6VIpX+STSPoJ4j3+B1WFU+LfkEGMwlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 01 Nov 2026 23:49:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:94:68:b2:15:db:45:26:5d:eb:dd:87:72:63:6f:6e:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Nov 1 00:00:51 2026 GMT Not After : Nov 2 00:00:51 2026 GMT Subject: CN=57d2a59c167a2561fd8516bc543f96189a4240aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:00:05:ef:95:f3:60:58:86:46:23:1c:39:b9: 70:5b:c7:c9:8e:a0:a8:a4:01:5b:1e:b8:44:7a:86: 94:96:7a:dc:f6:ef:9c:a8:aa:c5:90:57:f6:98:97: 91:75:98:81:47:2a:dd:d6:e7:4b:a3:3d:ca:50:c2: a8:dd:68:21:9b:54:6f:73:3f:72:f8:b2:07:57:28: 4a:4d:e8:3d:f6:9a:d3:6b:58:fb:4c:b8:50:e1:97: 42:a7:c7:25:44:a2:db:ee:80:00:3f:0f:25:79:b2: 8c:94:06:75:78:72:1e:9e:e0:c9:49:98:b5:d2:e4: e8:58:50:f6:ba:a7:9a:c5:db:74:b5:a4:9e:a0:e9: 29:e8:98:ce:cb:10:29:02:0e:8b:01:24:11:35:0f: 4f:3b:83:f2:83:de:4f:4c:b4:60:01:6c:5f:7a:1f: 25:d3:6a:e7:18:66:d0:b2:44:16:4c:11:9d:00:01: c8:d0:b8:9e:6c:9a:95:a7:21:1c:2c:bb:d5:1e:e7: d2:31:8b:5d:7a:a9:df:f4:9a:c5:c7:04:0f:ec:4d: 00:9c:22:00:04:aa:a8:2b:eb:2f:c4:71:5b:5e:ef: 20:8d:c7:6d:55:77:bc:cb:4a:f9:92:c2:31:98:d8: ee:d0:38:6b:52:2f:ec:5d:9b:24:94:d2:66:a7:1f: 0a:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:D2:A5:9C:16:7A:25:61:FD:85:16:BC:54:3F:96:18:9A:42:40:AA X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:94:ac:0c:e7:42:0a:c3:fb:6b:4b:c4:19:ad:e7:0e:cf:07: 92:5c:f8:ba:1d:bf:6b:dd:ae:df:ef:77:06:0c:45:b9:18:db: 9c:8f:30:b7:f1:34:3d:04:c7:c4:99:c9:16:70:89:20:d4:0a: 81:4d:dc:36:4f:60:80:92:40:10:08:81:ce:26:1e:a2:08:22: a2:97:c5:21:36:94:72:98:f2:ad:e8:d5:6c:be:8c:05:af:7b: 4d:5c:ce:44:1d:3b:4e:3d:8d:b4:04:84:05:a7:b5:bd:0e:43: c6:8e:9d:6d:2e:8a:8a:84:33:70:82:8e:bc:0a:08:73:74:8f: 73:63:4c:b2:ef:b5:a4:80:c6:b3:72:dd:b5:18:ed:f7:21:84: 24:8c:9f:77:1b:69:63:64:ea:ce:b6:85:e3:b3:07:a5:f2:c2: d6:4b:78:9f:1c:ab:06:f6:f8:08:d6:90:d6:8a:50:85:95:7a: a5:02:e4:7e:b6:db:b8:f3:ed:ca:0b:19:79:26:07:c7:da:2c: 95:c8:9f:99:33:01:91:8c:59:36:70:83:e1:e5:a0:9a:f2:77: cd:dd:b1:10:16:93:8f:d9:13:ab:f6:f9:ef:7a:e9:5a:8f:84: 15:c2:51:3b:cd:34:b8:ff:c4:96:f7:b7:16:64:15:87:16:b1: 77:34:17:32 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGUaLIV20UmXevdh3Jjb26cMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYxMTAxMDAwMDUxWhcNMjYxMTAyMDAwMDUxWjAzMTEwLwYDVQQD Eyg1N2QyYTU5YzE2N2EyNTYxZmQ4NTE2YmM1NDNmOTYxODlhNDI0MGFhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswAF75XzYFiGRiMcOblwW8fJjqCo pAFbHrhEeoaUlnrc9u+cqKrFkFf2mJeRdZiBRyrd1udLoz3KUMKo3Wghm1Rvcz9y +LIHVyhKTeg99prTa1j7TLhQ4ZdCp8clRKLb7oAAPw8lebKMlAZ1eHIenuDJSZi1 0uToWFD2uqeaxdt0taSeoOkp6JjOyxApAg6LASQRNQ9PO4Pyg95PTLRgAWxfeh8l 02rnGGbQskQWTBGdAAHI0LiebJqVpyEcLLvVHufSMYtdeqnf9JrFxwQP7E0AnCIA BKqoK+svxHFbXu8gjcdtVXe8y0r5ksIxmNju0DhrUi/sXZsklNJmpx8KTQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFfSpZwWeiVh/YUWvFQ/lhiaQkCqMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAopSsDOdC CsP7a0vEGa3nDs8Hklz4uh2/a92u3+93BgxFuRjbnI8wt/E0PQTHxJnJFnCJINQK gU3cNk9ggJJAEAiBziYeoggiopfFITaUcpjyrejVbL6MBa97TVzORB07Tj2NtASE Bae1vQ5Dxo6dbS6KioQzcIKOvAoIc3SPc2NMsu+1pIDGs3LdtRjt9yGEJIyfdxtp Y2TqzraF47MHpfLC1kt4nxyrBvb4CNaQ1opQhZV6pQLkfrbbuPPtygsZeSYHx9os lcifmTMBkYxZNnCD4eWgmvJ3zd2xEBaTj9kTq/b573rpWo+EFcJRO800uP/Elve3 FmQVhxaxdzQXMg== -----END CERTIFICATE-----Generated at Sun Nov 1 08:35:31 2026 by rpki-client