$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: fSjYLEWAsyyNUbD7HA1jRGwD5f9kBBmgFNdJSPTQFYQ= Subject key identifier: A7:19:2E:FB:F4:5B:03:C0:D1:21:56:9E:07:5C:28:83:AD:9F:B2:48 Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 01A129DFCE88876ACC2F5B6938F0D1110067 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 09EF Signing time: Sun 11 Oct 2026 07:31:35 +0000 Manifest this update: Sun 11 Oct 2026 07:31:35 +0000 Manifest next update: Mon 12 Oct 2026 07:31:35 +0000 Files and hashes: 1: 3fOCVpT-Lf6UOXcD5Nc80w9uuEI.roa (hash: Olnc6TsFMf/lto0XZ/IXXC3VCnMMv6kWoXMR1B4Qilk=) 2: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=) 3: DR9VqkVtbZff3gkUBcaPLf1vbp4.roa (hash: sIqhfmAWjnSCKWQ8+ZuDooV52eSu6wgQtTvetBcOvWQ=) 4: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=) 5: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=) 6: IyHLg3suZFaQuVarnDT09yy0X2o.roa (hash: 6+BW/hTb1umKDUBp2nCuMYA44iYB5QhDbwWwEQM2hgQ=) 7: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=) 8: McrzfZBG58lAoIZVbLchA8ozW3U.roa (hash: x2EKm20EGVU0hx9hQ/okWee8AkPy9jBR7Mbs+24ZZmc=) 9: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=) 10: WOqoJu5t09R3Cekgx_2O0sa6-Hc.roa (hash: 1qEbFKCQOOiO55/Z1NIx4D98L9A9xFqq+s2fxS0t2Dk=) 11: Y71JSOza9l99m2LkV-uZBA1qT4k.roa (hash: uUv6/DaQOMG287F0xQdwh94hSrXdbb62+qEzPa5p0o4=) 12: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=) 13: alomw2OsWHbd8tHr8rQUVSaTf48.roa (hash: /SgtQ+hB/USe7wR/Kp74UDlxjPB2bz9JIMvjDNTyblY=) 14: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=) 15: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: bz7DPA/Fje6xVAYtUDqtJp7YNixtldJ2uT1EBZqytbg=) 16: hElXO4jKei6eIioTYSRMuOo2tUQ.roa (hash: 9Afji0izgzI/c8xd125iBWAIgGantscuH5lpVBS/wmo=) 17: i0rb2KPL2DH1W3ZoTTA49GPEoNg.roa (hash: t5HKCvRu3qFJrxE6pifsh8y6fGced7fOc+AnJfEScTs=) 18: kpma4xqgzEEytLfdE-9LrfzAf44.roa (hash: vgqc9IvueEpWlOduqOn71G/7ZnxuYFS4IHbsYXqcCYM=) 19: mE5DN157XZf7igs7Qp5o_mpfYoY.roa (hash: OK0s5oWuJ3ewBiMYcBCwgUB2nCoplpS+aaStS616Tlc=) 20: nv5fiWXYzHu66gzzAc2gY1E_2Ws.roa (hash: bTjCfnE77NEactYbdS6nJYXWVoGC6Uw3L9qEunQvAs8=) 21: o6aWDaWLtgSw0yJqWoQY-eXoND4.roa (hash: 7Qa4eT/ei1RS6VIpX+STSPoJ4j3+B1WFU+LfkEGMwlw=) 22: vt424h6obDKnwJMOXmvrwQrJ0n4.roa (hash: UgqAOqQEs4ea9tunaMvnfVZQOJ0nNuuI2B7r/TjjcKc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 04:45:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:29:df:ce:88:87:6a:cc:2f:5b:69:38:f0:d1:11:00:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Oct 11 07:31:35 2026 GMT Not After : Oct 12 07:31:35 2026 GMT Subject: CN=a7192efbf45b03c0d121569e075c2883ad9fb248 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ac:c6:52:cb:aa:f6:27:08:03:70:21:34:89: fd:00:46:01:20:56:d6:0d:53:ca:55:f4:64:33:dc: f8:55:fc:cf:bb:d9:ce:b8:9d:5c:a3:99:c4:0a:fa: 2e:25:e5:64:0e:4b:54:c8:37:0b:29:cd:01:18:e5: 9f:76:a8:e8:81:37:bb:a5:f6:d1:ed:47:57:aa:9f: 3f:bd:3c:88:87:4d:d8:83:91:ef:66:85:c5:18:53: 25:87:6d:14:8a:70:20:fd:60:5e:7f:57:73:11:96: 89:97:f4:4d:bb:67:54:69:7e:36:c7:0a:be:37:62: 29:f3:57:d8:9c:f8:cf:36:39:5c:22:83:00:b1:fe: f1:7c:dd:97:94:87:40:36:eb:74:e5:48:f7:96:37: 1d:a4:4e:bc:7a:0a:97:ce:bf:02:17:7b:3e:ef:0f: 68:34:a7:a6:82:06:dd:24:dd:85:c0:7d:31:c6:e2: 9d:c0:a8:02:f4:a6:6e:04:48:5f:2f:ea:37:75:a0: 5f:85:57:f2:3c:4c:02:b6:e0:f4:c6:61:bb:69:c1: 8b:15:e2:b1:6c:60:46:20:2c:9d:56:e8:28:a6:d1: 8e:b5:ba:34:d3:ba:a0:65:69:7f:00:5d:03:bc:e4: 2d:bb:36:dd:b3:74:37:d3:be:c7:dd:ab:ca:2b:83: 49:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:19:2E:FB:F4:5B:03:C0:D1:21:56:9E:07:5C:28:83:AD:9F:B2:48 X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:3b:04:6b:59:dd:36:fe:76:7f:1d:7e:e6:b5:c7:f5:9d:57: b2:7c:f0:bd:45:b4:9b:8f:02:b5:b7:69:dc:58:26:20:44:45: fe:ac:47:c2:e0:de:c6:76:ca:ed:c7:c3:1f:be:55:70:eb:00: 7e:cb:24:3b:a5:eb:3b:19:1a:4f:b1:f4:00:13:6a:e1:40:72: 62:ce:3b:bd:80:2d:0d:b7:ae:8e:a2:a6:bc:d0:cb:d3:1a:17: 48:da:c5:59:cd:5e:d5:e4:fe:b8:0e:f7:44:63:65:d8:03:72: 29:ed:c1:e5:45:07:65:9f:c0:4d:c9:a1:74:ff:2a:e9:15:8b: 65:a5:01:7a:cf:47:71:ef:5c:ec:4c:e0:da:4b:72:b5:b2:5e: b4:60:59:c9:b8:76:20:ad:70:d1:0a:21:bd:ac:af:a9:9e:f2: 99:c8:56:f9:85:f2:56:f7:a8:10:f1:df:28:57:6a:0d:73:32: 57:97:6a:e2:0f:78:4c:e0:66:ff:77:b2:ed:b7:b7:a8:a3:37: 87:4a:10:f8:f1:af:e9:0b:d8:1c:5d:54:5a:d9:6a:b2:d4:1b: de:8e:13:d7:27:cc:a0:a7:2f:0b:c1:59:56:ff:7b:7d:55:bf: b7:b6:02:ca:42:1f:fc:ea:fc:f3:87:85:02:22:1d:40:a8:c8: 3f:6a:07:b4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEp386Ih2rML1tpOPDREQBnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYxMDExMDczMTM1WhcNMjYxMDEyMDczMTM1WjAzMTEwLwYDVQQD EyhhNzE5MmVmYmY0NWIwM2MwZDEyMTU2OWUwNzVjMjg4M2FkOWZiMjQ4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuazGUsuq9icIA3AhNIn9AEYBIFbW DVPKVfRkM9z4VfzPu9nOuJ1co5nECvouJeVkDktUyDcLKc0BGOWfdqjogTe7pfbR 7UdXqp8/vTyIh03Yg5HvZoXFGFMlh20UinAg/WBef1dzEZaJl/RNu2dUaX42xwq+ N2Ip81fYnPjPNjlcIoMAsf7xfN2XlIdANut05Uj3ljcdpE68egqXzr8CF3s+7w9o NKemggbdJN2FwH0xxuKdwKgC9KZuBEhfL+o3daBfhVfyPEwCtuD0xmG7acGLFeKx bGBGICydVugoptGOtbo007qgZWl/AF0DvOQtuzbds3Q3077H3avKK4NJYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKcZLvv0WwPA0SFWngdcKIOtn7JIMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0DsEa1nd Nv52fx1+5rXH9Z1XsnzwvUW0m48Ctbdp3FgmIERF/qxHwuDexnbK7cfDH75VcOsA fsskO6XrOxkaT7H0ABNq4UByYs47vYAtDbeujqKmvNDL0xoXSNrFWc1e1eT+uA73 RGNl2ANyKe3B5UUHZZ/ATcmhdP8q6RWLZaUBes9Hce9c7Ezg2ktytbJetGBZybh2 IK1w0QohvayvqZ7ymchW+YXyVveoEPHfKFdqDXMyV5dq4g94TOBm/3ey7be3qKM3 h0oQ+PGv6QvYHF1UWtlqstQb3o4T1yfMoKcvC8FZVv97fVW/t7YCykIf/Or884eF AiIdQKjIP2oHtA== -----END CERTIFICATE-----Generated at Sun Oct 11 10:49:15 2026 by rpki-client