$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft File: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft (raw, json) Hash identifier: J60Gr4OZcWgB6dsvdVGzLfM18OpUHOvbj86kkseoZ3I= Subject key identifier: DC:6C:55:16:FE:8E:A4:C8:5D:24:D5:4D:14:DB:9A:FD:12:4B:0B:86 Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e Certificate serial: 01A17C97A9EC353446F75671CFA2136AFB29 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft Manifest number: 1AF4 Signing time: Tue 27 Oct 2026 09:01:16 +0000 Manifest this update: Tue 27 Oct 2026 09:01:16 +0000 Manifest next update: Wed 28 Oct 2026 09:01:16 +0000 Files and hashes: 1: 1MlSIVekR7nJOhytdlMR4jKtR-0.roa (hash: Fp4zpsgtHGLmZbR0hKTXyDrZzEqlceg8ruA+2JYmVfM=) 2: 1Xv1ZT3Ka3Pl-sig-kxHu9QPm4A.roa (hash: yCVw68UmAC47CHqpmFupYHC9ZxaKhStlflix7eTg3Ug=) 3: 1utoEShH5AmTt79y1zx-Gta_IU4.roa (hash: ORpna8ZAvXV8ys2iYurxCqgk2LCtS/yxIeHlBJ5A+tA=) 4: 1y7xTrL6Zi63EaoYq9pgRa2ZmlQ.roa (hash: x6v+XwxnZ+9V385BiBIu0MPWBYFFND0ofcUwqGHURxo=) 5: 3ASjA1q8ARIV2ZYv3dMNfit6u3I.roa (hash: 7NA9a/ZKJFAsJurJjGE4qQlN7WKcef8AvmYKofmxtdA=) 6: 3wThh6CKhn_ncQErP2xOaMw46vM.roa (hash: U/vQzD8zfdM0QCfGbqv0YkKIdI6EBacCC74VpNhb6LI=) 7: 4krczbw6OIfHLsE4rx_N8Co4yOw.roa (hash: zxKlKv1GZqpmDDrZvXoufwn7GqO5TPnVqQ8ZVbSEX/k=) 8: 5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl (hash: AxSH5X6Udlz48EImK2Ywl+//lnn9hSDxy7hk0khzknA=) 9: ADSCFOnjMJLAi_8BKddA7FSJKFo.roa (hash: YTUiHXsQfmeuHGdgWhbD4DOLIxz6/HL1IPSKvOV9r04=) 10: CI_IbIiOr7bX2nxFp9oik4WuQKw.roa (hash: LoeO3X2rVxLRDsyO+eMBMVv3AZSWcHWTpYLzyG6GgFI=) 11: EZHW40mMXzLh-R95XQXWSQ1xGew.roa (hash: jXC+C5PX+oNmQCB4dM1aptKPPNjJmtw5ieXSimbQjw4=) 12: F1wz9gMaUrDGSj5_Bql1AKzFVxU.roa (hash: q6zbBfs586JaMimNp5Bcw/8qOnIIxp8Jrco5OLAUgAE=) 13: GnjgrlX5ldq-8V0xMtEgsEXb8K0.roa (hash: 7TO2wIfe9IgC+RH76SDWjU1AztJO8iq77EyqtjbsQmw=) 14: GzMKu8jXjKBUVxDX-5sQgFMQgJs.roa (hash: 0LE/1Wb9HCROg7521ihQ2bGsxl+ElnIJTcDjDH1Uxqs=) 15: H_ZbE32xD4Jhfd7d_Lm5fnPovzM.roa (hash: aZ9uNmSOhcQkLqZFW9owTasfsuaMVCH5Cmg+PDELd3k=) 16: Ho6mNf_9Z2hzoXQrFFuu_J0WfRM.roa (hash: Oprieq0BOhCbckP7sqbHtzOf/Mysy62W8N4pVZm/UiU=) 17: JkmCJQaQoD31a9G80M07RYcqWDc.roa (hash: X8PYnSV1Z/bxPAeWp4ISqBsTtAcgEKcf3dQRI9yc2BI=) 18: K6IhTrUZclyMeBVpYLNDvb8TUbg.roa (hash: 72NmOOFBeGJuzIR1SE1cUuWu7D88rU3xoreFGRYXduw=) 19: KS0FVLSMGfWzQdYtQuL8y-oJdD0.roa (hash: bFjxw1lHEJZaqaMp+L6ugQRb5WaLfdFW4jxueW8cRcA=) 20: PMREMuAIkutRBjiqDqASxjeYw9A.roa (hash: DQwEv2T49rS4AdXgNlBrZxtMU/AO7NKgBezim3eUTbA=) 21: Qfk4KZDN_NVec0Fh5jidYk7fEsM.roa (hash: WIiLwWhQcJYVRWRpVwBUqqxiCRvroZi4xvJ2AYsOSJo=) 22: QqOV1t_rvWgp7d8XnXyjaPwjar8.roa (hash: tOqX3TdeefdEULHlf/6xKuTSxXbTQGcNvDfPoledb9E=) 23: UESPvkGn40lC_qnNZUih916lSYA.roa (hash: wn/Z//Pr0RHYOOOY6bI6NqL/aVXg8hzJxv1NUOW+0pY=) 24: WQgnD-JktijZnRhzkWWmxreQGms.roa (hash: bt7fHkMyPJ2bu7raN/9QpGM2Pefyuc7nqym8N0GRFqM=) 25: XnhnoeUHsuoR4mhcctsEjt9lvMg.roa (hash: /V0gM4qnoLR414oEzXK8LbL+H5gHt5BmuPHE3nwesY8=) 26: a6YPy8t2smPnddF-vAybhOouYkI.roa (hash: 2VTnHbp49NXPzMqgsIFYWCQ+9Ms6/ReLgmJTyeo9QTM=) 27: bBMC-Jl9ZMdEMbHiKoX6e8xbdGQ.roa (hash: FZlvu/V5G6Rj6/p4659ddbcuZLsyU/qT6XCVQg1Pc8U=) 28: bv5xG98RESJXrwU1xeck7PUBsio.roa (hash: 8309DITknQ+X1sMxvcKqt7keYSOvkVj+qcP2H19wns8=) 29: cWC-89CZxEOg7JihRqIYLNl3BdM.roa (hash: RhOP1Hck0E/C3tHN4Cpm5lDskts0RUG2y3go+ErpaZY=) 30: gC3rqU1DQllcWWxpBdLFhPfJBRY.roa (hash: GquGRvoP/5ANJWdn0l9uPSHphibPvx3UXVQbIIbaOLU=) 31: gzIiWHGRR93M4EeKSxyFElEnzfQ.roa (hash: P6od455G5jZ5lUgI4sqFMNPmAnYBu1OSIcRyPwUOGuY=) 32: lc0dVVVdgP6dbN1j-pjMe8nv0pM.roa (hash: gEI4FyTD9TDkg7+cDFUctYOLiTWfZ9Ph9u6WJ4ZseHE=) 33: pJSN_0UYP55mnYa8i9az-116_xU.roa (hash: ooW2IQf7TB4yeIzuJ+xNye0+a25s9T8MsooWPksXqB0=) 34: r_8AqLDA0TKw-_hS4D2cAROProQ.roa (hash: em2qIv+1gRgI1PfQzZQhQrikSZsQfh7/5J5HzcXSfpU=) 35: sPKozshk0dw84yWnLecAcY4Jsz0.roa (hash: CVBUXh81vA8yv2uJ0Pq3RtuahHuKnl7ugAr2hYXTx7Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 09:01:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7c:97:a9:ec:35:34:46:f7:56:71:cf:a2:13:6a:fb:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e Validity Not Before: Oct 27 09:01:16 2026 GMT Not After : Oct 28 09:01:16 2026 GMT Subject: CN=dc6c5516fe8ea4c85d24d54d14db9afd124b0b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:ca:c3:7e:de:38:b3:10:34:cb:05:55:8b:50: 91:a3:85:a6:e4:0d:b3:9f:76:87:c5:8b:8c:6d:13: 4b:bb:8a:cc:ed:95:e2:0d:76:01:55:21:d7:6d:28: 14:01:bc:fb:56:5e:05:81:73:73:b0:f2:67:ee:b7: a0:0a:28:62:1a:e0:8c:d7:29:37:31:49:6f:af:40: d1:33:1a:b3:68:bf:d6:8a:5d:79:70:52:f4:e2:bd: 5c:48:de:2b:34:ea:c2:15:6c:48:30:44:68:3f:3f: f5:96:22:8b:95:df:0f:c1:ab:4b:67:11:8b:7c:0b: 57:99:8d:7c:e4:a1:1e:da:57:98:6f:05:f5:a2:e8: 9d:09:cd:c6:68:9f:cb:9e:ed:37:d7:57:ff:c1:5c: 02:3f:3e:b0:54:6d:ff:18:e1:0c:1b:0b:a8:c4:c2: 17:84:46:99:03:3c:8b:ef:54:e6:89:78:f0:bf:97: 12:26:67:51:83:25:3a:cc:8f:dc:23:7c:f7:3e:c4: a9:d5:8b:a3:93:b8:70:3f:63:c4:4f:aa:bf:05:7c: 9f:8c:31:d3:05:be:f2:d9:f7:2d:9f:76:fb:32:f1: 4c:b9:39:51:83:28:b1:bf:0b:97:99:1a:ff:0f:cf: 0b:11:49:01:c2:aa:dc:c0:3f:6a:73:09:c0:36:8f: cb:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6C:55:16:FE:8E:A4:C8:5D:24:D5:4D:14:DB:9A:FD:12:4B:0B:86 X509v3 Authority Key Identifier: keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:ec:4d:dc:67:85:68:49:8b:1e:8b:96:6b:51:d3:b1:4f:19: 81:6f:31:76:7f:32:d4:21:a1:b3:b0:ec:5c:99:a3:8f:0e:86: 32:fb:f2:95:a0:3b:83:6b:69:a3:0b:dd:3f:ef:53:ab:f5:7e: 58:98:bb:e6:34:a8:55:35:0a:ec:80:06:ab:64:09:e3:08:10: e6:c2:ae:0e:79:cf:eb:49:99:fb:5c:19:5d:54:7a:99:5a:f4: 87:27:b5:92:70:e6:1c:d8:f9:1e:5f:96:01:e5:dd:db:20:f5: 9f:bf:45:9f:95:ca:76:e3:86:46:a9:ae:af:97:6d:e4:fb:fe: ac:59:02:6f:2b:a3:11:06:f8:e3:4b:97:52:fb:c7:a2:6e:b9: c6:de:38:f6:aa:96:8d:bd:2a:56:15:b0:fc:d0:4a:c1:99:0a: 3b:54:6f:b9:86:43:11:8b:1a:d8:5a:23:f2:29:63:d4:20:39: 69:09:18:85:9c:b4:95:83:0d:23:27:6d:c8:cb:b1:8c:70:5f: 09:db:3c:ad:ba:e9:e2:39:0a:e5:d5:71:a0:80:82:4a:89:c4: 2b:2e:2d:8e:d1:87:a4:d4:2a:74:ea:26:94:40:41:c8:9f:0b: 38:ee:51:cf:cb:94:39:8d:5f:16:f3:01:15:c9:2f:ef:e2:ce: c6:be:9f:e3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF8l6nsNTRG91Zxz6ITavspMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2 ZGI5OWUwHhcNMjYxMDI3MDkwMTE2WhcNMjYxMDI4MDkwMTE2WjAzMTEwLwYDVQQD EyhkYzZjNTUxNmZlOGVhNGM4NWQyNGQ1NGQxNGRiOWFmZDEyNGIwYjg2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2crDft44sxA0ywVVi1CRo4Wm5A2z n3aHxYuMbRNLu4rM7ZXiDXYBVSHXbSgUAbz7Vl4FgXNzsPJn7regCihiGuCM1yk3 MUlvr0DRMxqzaL/Wil15cFL04r1cSN4rNOrCFWxIMERoPz/1liKLld8PwatLZxGL fAtXmY185KEe2leYbwX1ouidCc3GaJ/Lnu0311f/wVwCPz6wVG3/GOEMGwuoxMIX hEaZAzyL71TmiXjwv5cSJmdRgyU6zI/cI3z3PsSp1Yujk7hwP2PET6q/BXyfjDHT Bb7y2fctn3b7MvFMuTlRgyixvwuXmRr/D88LEUkBwqrcwD9qcwnANo/L2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNxsVRb+jqTIXSTVTRTbmv0SSwuGMB8GA1UdIwQY MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt OTU2ZjZiNWM2MTcwLzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMexN3GeF aEmLHouWa1HTsU8ZgW8xdn8y1CGhs7DsXJmjjw6GMvvylaA7g2tpowvdP+9Tq/V+ WJi75jSoVTUK7IAGq2QJ4wgQ5sKuDnnP60mZ+1wZXVR6mVr0hye1knDmHNj5Hl+W AeXd2yD1n79Fn5XKduOGRqmur5dt5Pv+rFkCbyujEQb440uXUvvHom65xt449qqW jb0qVhWw/NBKwZkKO1RvuYZDEYsa2Foj8ilj1CA5aQkYhZy0lYMNIydtyMuxjHBf Cds8rbrp4jkK5dVxoICCSonEKy4tjtGHpNQqdOomlEBByJ8LOO5Rz8uUOY1fFvMB Fckv7+LOxr6f4w== -----END CERTIFICATE-----Generated at Tue Oct 27 16:34:22 2026 by rpki-client