$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft File: 2-arjgxG6EG0TSucawO7ZfViHbE.mft (raw, json) Hash identifier: qq+hZ6QQwPAVgr8FPCg1qcC6xBB40CZ++KlXkweWX7k= Subject key identifier: 10:3B:7A:97:F1:0A:80:5E:0A:83:EC:0A:72:19:83:71:A8:CE:FF:50 Authority key identifier: DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 Certificate issuer: /CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Certificate serial: 01A180E2B9BCE8592AC0530E99E11280B75A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft Manifest number: 1AEA Signing time: Wed 28 Oct 2026 05:01:44 +0000 Manifest this update: Wed 28 Oct 2026 05:01:44 +0000 Manifest next update: Thu 29 Oct 2026 05:01:44 +0000 Files and hashes: 1: 1-s8esoK90fuTW0AWj651iPGBuh8.roa (hash: sjKIBezOO4ivMoUNXIkq24CJOPHxFuHSGD6EjG7R65w=) 2: 2-arjgxG6EG0TSucawO7ZfViHbE.crl (hash: lsDZfruV9QVpvQMSLeX+qk6+k1PjIMMQApj3EAjNth4=) 3: 3gBGUy3u0kv0cMFfYhefm1zv6V4.roa (hash: wbVQO0NG95NJdUKsQ+Wjm9lVf3DsbDyNxF0jF2IdjBg=) 4: 6Pnb9u2-c1eMhAGiRwBCeQTT4ro.roa (hash: 1JXCVihKxq73Qe1ncqplSKlgiZyg5/rbL6k+wZhdDKo=) 5: 7DBa_6nBybw3J8T8dr7yX7ebiwU.roa (hash: 9lkcVj8pg/THlhFClMP/jc7G+HKyv/jKnpXVV+mQkS4=) 6: 9VcWKWB5puA52wsDDDkNDjxeGR4.roa (hash: GlsIfnVs54CADMaRa3Sk/1oPA7tZtu4TEPhze/G9m8w=) 7: B7nfsbI7vpYat2Veoezdf_TcIy8.roa (hash: ZifWcufC5UurQhjWI81wwKVDTfPl5QEDU7f59ef2yA4=) 8: Daz8bhqhbaAz3OEyLaZDp_txPzA.roa (hash: FM1qUTL0CvrCixQ27I0/1ARdD95NXI7GlqZPBu6d9FA=) 9: IqxedTmRHFs7BdwPyhpKn0mZRzk.roa (hash: e1NHWivKVF2OWPAThP8SvF6dgP5roy0fH0Mvk/Lerx4=) 10: KZXfDjuE-PvJiBRVRI6B8WHyooo.roa (hash: OMT2qoqGQOn2tlDcwwNCQQxD6FlT7A94fPogcjgcLoY=) 11: RVfXd-D1ecB560CRD5YifVCpd1s.roa (hash: VBLJ7mxpiyU44wmUNd5IC/WX+1HbYUo9OBJtin4d0Sc=) 12: TLi5DNB1nha4h6YESMgyGrCORWo.roa (hash: EUg1KiZtD+nVctjCGIesOCkqRzlFdgvGJVlZhMuO3Jw=) 13: j4OaetARNIVx-9EsgUUwBCsDjoA.roa (hash: 4DqJXihPNyacK6qcrUCR2jeCbK8fq/Etn5AHTyGsM5g=) 14: m4jWmUWu_NL833wHpjlo_itnadw.roa (hash: RwOqkHbntUy2jo5lIc01YSzNvRHA1IqmYHya8PZXPD0=) 15: wUccj_rDqcMS5f6rHGM1S82tXw8.roa (hash: Am0yB5T/uFMdaWWU3crSox2wHqF23olZ6K+6iaufknI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 05:01:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:80:e2:b9:bc:e8:59:2a:c0:53:0e:99:e1:12:80:b7:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dbe6ab8e0c46e841b44d2b9c6b03bb65f5621db1 Validity Not Before: Oct 28 05:01:44 2026 GMT Not After : Oct 29 05:01:44 2026 GMT Subject: CN=103b7a97f10a805e0a83ec0a72198371a8ceff50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3b:89:51:59:5b:d6:70:80:42:3b:97:76:74: 27:12:9e:a7:77:32:21:15:1f:bc:2d:96:33:63:50: e6:d2:be:93:8d:49:6c:8b:39:e0:e4:83:40:3c:bd: 96:51:3e:6f:e3:89:aa:99:44:ea:52:2a:41:0a:07: b4:16:b1:8a:0c:ab:45:d9:a6:7e:42:58:31:6b:39: 75:77:4b:39:c9:3c:91:69:9e:1a:61:f0:4a:b2:17: 2f:b4:8c:ec:6a:51:1d:29:aa:54:1c:a9:4f:17:2a: 6c:e5:75:2e:cc:98:07:6d:d8:de:c1:80:50:88:2c: c4:a4:3d:cf:6a:10:9e:bb:3f:d8:e2:2d:d5:93:c3: 1d:97:44:e3:98:e9:72:5f:fa:d1:cd:fa:1d:da:56: a2:02:67:a3:d7:31:88:d1:fc:16:61:fa:15:43:3b: d2:2c:5e:e2:75:e9:a5:1e:3b:29:e9:6e:c9:38:28: bd:58:ee:5a:f8:a5:42:76:16:58:9e:4a:d3:08:22: f3:cb:33:2a:be:50:b0:79:d7:3b:a0:fd:1c:2e:58: 21:8b:32:18:8f:d3:da:9a:d5:e2:d1:db:82:bc:80: 59:93:76:72:09:9f:ec:37:53:94:7e:45:af:eb:4f: 6c:41:12:d8:6f:56:04:f2:7f:f1:16:0f:fb:ff:93: b7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:3B:7A:97:F1:0A:80:5E:0A:83:EC:0A:72:19:83:71:A8:CE:FF:50 X509v3 Authority Key Identifier: keyid:DB:E6:AB:8E:0C:46:E8:41:B4:4D:2B:9C:6B:03:BB:65:F5:62:1D:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-arjgxG6EG0TSucawO7ZfViHbE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/96436c-f6fa-40ba-a27c-fb1030651067/1/2-arjgxG6EG0TSucawO7ZfViHbE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:47:d9:1c:bf:08:34:f7:6c:51:48:8d:8f:bc:d5:fb:39:98: a6:cf:17:ef:e6:87:d4:c9:86:14:28:40:36:13:c0:49:99:5d: 83:48:e0:5f:bd:31:6a:bc:aa:b6:6b:34:e4:3f:0e:bd:f9:0c: 2c:da:64:ef:da:c8:c3:72:bb:ab:e9:62:97:c9:75:ca:a8:0b: 70:0a:69:ff:59:68:96:cb:19:51:49:fa:1f:ab:b8:42:55:a4: 54:1e:0c:62:b4:54:1f:94:81:8c:d2:15:b4:98:36:8f:59:79: d6:de:e4:1f:39:9e:bb:8a:04:c6:10:5a:fa:a8:01:d8:39:c5: 76:09:fa:9b:81:54:ae:4d:c6:9e:f4:65:27:11:38:21:25:73: 4f:26:c8:42:f5:85:fe:fe:d9:86:76:59:71:78:a7:41:1c:18: d7:64:6c:63:ec:76:8e:3d:1e:30:cc:2e:49:7c:e2:e4:bd:0b: e8:08:a8:be:25:1d:85:25:81:5c:29:d4:8a:7e:18:53:cb:a0: aa:18:9c:f3:49:d3:e9:21:53:7a:e7:17:e7:4b:a7:39:b5:70: 9c:92:12:5a:9e:15:73:07:1f:f9:12:10:e4:78:5b:7f:b8:56: 5d:5b:a2:58:ad:76:06:ed:14:52:a7:fd:0d:fc:7d:d5:f1:f4: ea:57:ac:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGA4rm86FkqwFMOmeESgLdaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRiZTZhYjhlMGM0NmU4NDFiNDRkMmI5YzZiMDNiYjY1ZjU2 MjFkYjEwHhcNMjYxMDI4MDUwMTQ0WhcNMjYxMDI5MDUwMTQ0WjAzMTEwLwYDVQQD EygxMDNiN2E5N2YxMGE4MDVlMGE4M2VjMGE3MjE5ODM3MWE4Y2VmZjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzuJUVlb1nCAQjuXdnQnEp6ndzIh FR+8LZYzY1Dm0r6TjUlsizng5INAPL2WUT5v44mqmUTqUipBCge0FrGKDKtF2aZ+ Qlgxazl1d0s5yTyRaZ4aYfBKshcvtIzsalEdKapUHKlPFyps5XUuzJgHbdjewYBQ iCzEpD3PahCeuz/Y4i3Vk8Mdl0TjmOlyX/rRzfod2laiAmej1zGI0fwWYfoVQzvS LF7idemlHjsp6W7JOCi9WO5a+KVCdhZYnkrTCCLzyzMqvlCwedc7oP0cLlghizIY j9PamtXi0duCvIBZk3ZyCZ/sN1OUfkWv609sQRLYb1YE8n/xFg/7/5O3JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBA7epfxCoBeCoPsCnIZg3Gozv9QMB8GA1UdIwQY MBaAFNvmq44MRuhBtE0rnGsDu2X1Yh2xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2Mt ZmIxMDMwNjUxMDY3LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMS85NjQzNmMtZjZmYS00MGJhLWEyN2MtZmIxMDMwNjUxMDY3 LzEvMi1hcmpneEc2RUcwVFN1Y2F3TzdaZlZpSGJFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj0fZHL8I NPdsUUiNj7zV+zmYps8X7+aH1MmGFChANhPASZldg0jgX70xaryqtms05D8OvfkM LNpk79rIw3K7q+lil8l1yqgLcApp/1lolssZUUn6H6u4QlWkVB4MYrRUH5SBjNIV tJg2j1l51t7kHzmeu4oExhBa+qgB2DnFdgn6m4FUrk3GnvRlJxE4ISVzTybIQvWF /v7ZhnZZcXinQRwY12RsY+x2jj0eMMwuSXzi5L0L6AioviUdhSWBXCnUin4YU8ug qhic80nT6SFTeucX50unObVwnJISWp4Vcwcf+RIQ5Hhbf7hWXVuiWK12Bu0UUqf9 Dfx91fH06lesuw== -----END CERTIFICATE-----Generated at Wed Oct 28 11:36:41 2026 by rpki-client