$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft File: fD0CKiQM5x4Kbh6argES2oQMw0s.mft (raw, json) Hash identifier: N1UxtkpJcXI2mGdRUu8CTsE6CqK6jEObQ+XkeP93DSc= Subject key identifier: 45:67:C2:8C:FF:2B:D2:ED:59:B7:31:1A:D2:49:B8:FE:60:7B:E7:6F Authority key identifier: 7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B Certificate issuer: /CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Certificate serial: 01A170255CE2131B66AD9602C1BE931AB83B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft Manifest number: 0A19 Signing time: Sat 24 Oct 2026 23:00:59 +0000 Manifest this update: Sat 24 Oct 2026 23:00:59 +0000 Manifest next update: Sun 25 Oct 2026 23:00:59 +0000 Files and hashes: 1: 1-OKEScg0BWKcv0ZLac4CAEn6-rQ.roa (hash: 2FtLb2u20I3CTkpwOKbR3dWsZzcDJ0fOcXJUQc4c304=) 2: 3fOCVpT-Lf6UOXcD5Nc80w9uuEI.roa (hash: Olnc6TsFMf/lto0XZ/IXXC3VCnMMv6kWoXMR1B4Qilk=) 3: 6MROEyhCnQoDzzzLgMuqSp8WWW4.roa (hash: U2ETKysUzgCpOSOJ/qWrrLMDT5gA1Ft4qr0viHcAPBA=) 4: 8_NH5RQ_YbQ811u9QoCYY95gJeE.roa (hash: HKpnqTUUiOWJOLyAG8/c4mXNHUjzJi6QDv9DFDD3etI=) 5: DR9VqkVtbZff3gkUBcaPLf1vbp4.roa (hash: sIqhfmAWjnSCKWQ8+ZuDooV52eSu6wgQtTvetBcOvWQ=) 6: EkYStzwgXm32LEuLnYV7wl1qBsI.roa (hash: N7mlcXfarDGBfU57u461OhXjqlBTWu7CynWyY5v4cBI=) 7: FJnvWNGFuLmbI2RkF1PBMfW4AaM.roa (hash: Lia6Niow9mvTIEp6IZQLMa57V883PVRlmqrb94CP8h4=) 8: IyHLg3suZFaQuVarnDT09yy0X2o.roa (hash: 6+BW/hTb1umKDUBp2nCuMYA44iYB5QhDbwWwEQM2hgQ=) 9: M_ej-GLo9MmDdmCX4I5ZVtk_nXQ.roa (hash: JMYmcXjXP4IGh8j7ah8EVlXTt+wsTE2Eg5az50Gi9Cc=) 10: SLSMQo99u24Epa9sZ-35n9YwQ1g.roa (hash: XooSTwMO75gSa1IEA9BRq8RFfpIDKjq4YYrz5/hOOfU=) 11: VUXL1YAHh0QaMk94A5GiwSVStWg.roa (hash: E8Gi7M7a5aNnzjDA6tR/s1u1Ihh59M38ri5h3GdsQvU=) 12: WOqoJu5t09R3Cekgx_2O0sa6-Hc.roa (hash: 1qEbFKCQOOiO55/Z1NIx4D98L9A9xFqq+s2fxS0t2Dk=) 13: Y71JSOza9l99m2LkV-uZBA1qT4k.roa (hash: uUv6/DaQOMG287F0xQdwh94hSrXdbb62+qEzPa5p0o4=) 14: ZyKwbccyVfxFWStWGmNBds2K9AE.roa (hash: C74fBVKBp8P7zkaen+ft55vIs/92CO4DbwapwB4BQdE=) 15: aHnKScLx6Iyo3WPHZLyJV0tXZe0.roa (hash: yHi8HkOz7Mw+g2Q2UhK0J/I2Czw1w3j+FoapxFEg5gQ=) 16: dFD5UF_mKwhtuJfZT-VrQY9JgrI.roa (hash: L1UCzzRXrSGV1+QhWLfW/rfkPI2GF53RIhnXu1Q8ejo=) 17: fD0CKiQM5x4Kbh6argES2oQMw0s.crl (hash: v+B697dZKkKhSXCE9uIXKvL6+6MCqzBmxQg9GO/fGkk=) 18: hElXO4jKei6eIioTYSRMuOo2tUQ.roa (hash: 9Afji0izgzI/c8xd125iBWAIgGantscuH5lpVBS/wmo=) 19: kpma4xqgzEEytLfdE-9LrfzAf44.roa (hash: vgqc9IvueEpWlOduqOn71G/7ZnxuYFS4IHbsYXqcCYM=) 20: mE5DN157XZf7igs7Qp5o_mpfYoY.roa (hash: OK0s5oWuJ3ewBiMYcBCwgUB2nCoplpS+aaStS616Tlc=) 21: o6aWDaWLtgSw0yJqWoQY-eXoND4.roa (hash: 7Qa4eT/ei1RS6VIpX+STSPoJ4j3+B1WFU+LfkEGMwlw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 23:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:70:25:5c:e2:13:1b:66:ad:96:02:c1:be:93:1a:b8:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7c3d022a240ce71e0a6e1e9aae0112da840cc34b Validity Not Before: Oct 24 23:00:59 2026 GMT Not After : Oct 25 23:00:59 2026 GMT Subject: CN=4567c28cff2bd2ed59b7311ad249b8fe607be76f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:cd:6e:a0:75:85:5c:f5:d4:3e:fa:02:97:b5: 38:10:26:fa:0f:71:2d:63:88:a6:23:fe:7c:4c:07: 46:b8:95:48:f6:e7:00:f0:f9:4d:57:f8:c8:97:05: fc:f7:08:65:78:5d:ee:8e:8c:dd:d5:d7:77:db:86: f4:f6:36:a4:77:04:84:91:4f:47:8c:d8:97:59:ab: fa:b4:b4:71:7f:81:7b:5a:66:66:d6:27:5c:96:da: 51:e9:65:8d:cb:31:93:3c:ea:0a:dc:c4:79:ad:e6: be:9c:87:23:e7:af:8f:6b:5b:e6:94:af:8a:31:2c: 47:88:00:32:63:54:6e:ad:69:a5:88:b8:b5:2a:e4: ec:41:5d:c0:60:ef:4c:7c:03:7b:3d:19:2c:eb:44: bb:37:7f:59:30:59:7f:b1:51:9a:0d:ff:05:01:7f: 9f:b8:ee:12:51:3b:8c:a0:25:a6:48:16:d7:2d:68: 78:4b:94:d8:13:d6:28:24:b9:bd:e4:67:ea:d2:ee: 60:af:f3:58:ec:9b:6e:20:82:b9:2e:b3:0b:36:b8: ed:66:ca:b7:8c:05:64:b2:8b:0b:9b:f5:01:b6:e4: b2:aa:56:1e:1a:ad:2f:91:a4:da:0b:5d:66:8e:9d: 31:ef:f9:28:0c:25:85:38:c5:ea:cd:53:63:f3:e5: 6a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:67:C2:8C:FF:2B:D2:ED:59:B7:31:1A:D2:49:B8:FE:60:7B:E7:6F X509v3 Authority Key Identifier: keyid:7C:3D:02:2A:24:0C:E7:1E:0A:6E:1E:9A:AE:01:12:DA:84:0C:C3:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fD0CKiQM5x4Kbh6argES2oQMw0s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/fd362f-afcb-4cf5-98c6-0948989e6d55/1/fD0CKiQM5x4Kbh6argES2oQMw0s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:cb:1c:21:65:cd:3b:39:a4:02:2d:4a:a3:6c:70:41:d1:e4: 76:98:35:9b:7e:0a:44:8c:cb:1c:62:9f:de:86:fc:f3:aa:ac: 97:61:25:6e:36:34:70:4e:6f:de:11:21:bf:82:8f:e4:aa:c7: 73:0f:f0:7c:e5:2b:d3:7f:05:bd:3d:41:d7:01:b9:48:8f:37: cf:8a:31:c7:2c:10:45:ad:60:1b:dd:5d:ec:a7:ad:75:5d:eb: 77:38:47:ec:be:b0:2b:99:55:70:e0:ee:55:7e:ee:02:8f:83: ee:52:1f:e3:44:8e:b0:95:db:9c:8c:06:36:ed:e5:89:69:dd: e3:9e:ee:54:df:5a:a5:41:2e:9b:ca:73:a1:d8:22:25:45:32: fc:c1:9f:ec:be:2f:16:4a:83:3d:6a:74:72:e1:b0:63:36:d8: 8c:c6:11:2b:59:2c:54:80:e1:e9:07:3d:c0:07:74:6c:1e:e8: 2b:6b:e3:25:2b:00:e0:5c:b9:3d:40:65:c6:9b:c0:d2:31:7e: 6a:1b:58:99:02:1c:a2:a1:9a:47:f6:87:3d:96:9e:a9:c0:2f: 9c:9e:cd:5f:84:3c:0f:22:02:bf:e5:fd:bd:9f:2c:b9:ea:72: e5:ae:6f:e0:3e:41:44:c0:84:95:ea:1b:0a:86:31:79:d0:bf: ca:0c:a1:5a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFwJVziExtmrZYCwb6TGrg7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjM2QwMjJhMjQwY2U3MWUwYTZlMWU5YWFlMDExMmRhODQw Y2MzNGIwHhcNMjYxMDI0MjMwMDU5WhcNMjYxMDI1MjMwMDU5WjAzMTEwLwYDVQQD Eyg0NTY3YzI4Y2ZmMmJkMmVkNTliNzMxMWFkMjQ5YjhmZTYwN2JlNzZmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0c1uoHWFXPXUPvoCl7U4ECb6D3Et Y4imI/58TAdGuJVI9ucA8PlNV/jIlwX89whleF3ujozd1dd324b09jakdwSEkU9H jNiXWav6tLRxf4F7WmZm1idcltpR6WWNyzGTPOoK3MR5rea+nIcj56+Pa1vmlK+K MSxHiAAyY1RurWmliLi1KuTsQV3AYO9MfAN7PRks60S7N39ZMFl/sVGaDf8FAX+f uO4SUTuMoCWmSBbXLWh4S5TYE9YoJLm95Gfq0u5gr/NY7JtuIIK5LrMLNrjtZsq3 jAVksosLm/UBtuSyqlYeGq0vkaTaC11mjp0x7/koDCWFOMXqzVNj8+VqzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEVnwoz/K9LtWbcxGtJJuP5ge+dvMB8GA1UdIwQY MBaAFHw9AiokDOceCm4emq4BEtqEDMNLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYt MDk0ODk4OWU2ZDU1LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jZi9mZDM2MmYtYWZjYi00Y2Y1LTk4YzYtMDk0ODk4OWU2ZDU1 LzEvZkQwQ0tpUU01eDRLYmg2YXJnRVMyb1FNdzBzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACMscIWXN OzmkAi1Ko2xwQdHkdpg1m34KRIzLHGKf3ob886qsl2ElbjY0cE5v3hEhv4KP5KrH cw/wfOUr038FvT1B1wG5SI83z4oxxywQRa1gG91d7KetdV3rdzhH7L6wK5lVcODu VX7uAo+D7lIf40SOsJXbnIwGNu3liWnd457uVN9apUEum8pzodgiJUUy/MGf7L4v FkqDPWp0cuGwYzbYjMYRK1ksVIDh6Qc9wAd0bB7oK2vjJSsA4Fy5PUBlxpvA0jF+ ahtYmQIcoqGaR/aHPZaeqcAvnJ7NX4Q8DyICv+X9vZ8suepy5a5v4D5BRMCEleob CoYxedC/ygyhWg== -----END CERTIFICATE-----Generated at Sun Oct 25 06:47:53 2026 by rpki-client