$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json) Hash identifier: WXmtmd6Z9J1tMKsKo1po5L95+grv+Z8cTx3nAjUT5qM= Subject key identifier: BD:4D:13:BD:3B:78:0A:79:65:5F:34:49:73:57:2F:37:53:AD:05:B2 Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 01A17C6056AB3D1CC45F42A3078D711073E9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft Manifest number: 1969 Signing time: Tue 27 Oct 2026 08:00:50 +0000 Manifest this update: Tue 27 Oct 2026 08:00:50 +0000 Manifest next update: Wed 28 Oct 2026 08:00:50 +0000 Files and hashes: 1: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (hash: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4=) 2: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (hash: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs=) 3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: xHGVU+W8xcMsAfDRaPdsQd7fYzJhTpYnNJeNCkECm4A=) 4: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (hash: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs=) 5: LKPNjW0FwzxJuXJJO8QeVx8xVKA.roa (hash: 7aAIkZ00eO3qTrf1/VDBo5PmzNCovWfeD3QFFzPD2+k=) 6: OhdvuW1MhWIplOiaXjr0jKrnav0.roa (hash: J4+sEU+gHBe6CqLgaPIzNFJg58JXNWIbDProtv3aR8c=) 7: XWplAHLb4h-dRGf7GRqU5aYBne4.roa (hash: vcUnwVhvidom6bWizccTCS7wF3vMreiwdFHr11qyWHQ=) 8: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (hash: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04=) 9: bu5zIhc9syS0fhKBovFQXcGQRxQ.roa (hash: /Bq2k4bmIQ5EUPK41v03YcsLqkRVvDHXfxrIn2yzw5A=) 10: epRr3ot_tO1I-RC0EsosxizeUW8.roa (hash: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo=) 11: hIAZzuP6Gsu6ylCAGgkd82Ycc_M.roa (hash: SQISDbvDjBaLkSadlmENoao3YxR8/bK49Sgx969cf+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 08:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7c:60:56:ab:3d:1c:c4:5f:42:a3:07:8d:71:10:73:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Oct 27 08:00:50 2026 GMT Not After : Oct 28 08:00:50 2026 GMT Subject: CN=bd4d13bd3b780a79655f344973572f3753ad05b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:43:b5:76:2f:3b:e9:4c:a7:48:43:3f:55:d3: 75:83:1c:4a:f9:e6:d5:14:f0:d1:a0:c6:af:b8:b8: 27:e3:fe:5d:40:b6:ce:5c:7d:9b:37:f1:a0:ba:8c: e5:ed:2e:10:77:07:4e:41:6a:d7:1f:f8:76:9f:be: 59:18:c2:2d:07:d0:75:c4:eb:07:15:89:56:97:82: d4:84:48:21:5a:79:10:c4:6f:d2:6c:4f:fc:1a:ec: 41:6e:c3:73:b2:05:fc:a5:58:25:28:dc:85:08:4b: d5:4d:be:a8:a9:eb:69:33:63:80:77:64:9b:98:23: 68:82:7e:7e:5f:66:ac:e3:1f:55:f9:94:9e:4f:78: e2:32:39:c8:1b:5f:8f:67:0c:2b:5f:d1:12:2d:f2: 3b:47:a3:13:7c:10:25:69:9a:37:cc:fd:df:96:e4: f7:82:eb:e9:ac:9e:be:9f:74:a6:25:8b:34:ec:84: a2:d6:e2:09:a0:9d:e4:2d:57:d7:93:2b:b0:8f:6b: b8:9a:d8:c3:e0:85:dd:9d:39:75:d0:03:75:42:7f: 50:6b:83:33:b5:7f:66:62:cf:fc:a8:49:2e:b4:d5: 87:63:1c:46:c0:56:9c:db:17:df:9e:ea:53:d9:ff: c3:c8:20:f5:3d:1a:0b:20:d9:99:83:b4:72:65:58: 8e:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4D:13:BD:3B:78:0A:79:65:5F:34:49:73:57:2F:37:53:AD:05:B2 X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:90:e9:a2:1b:32:51:d4:17:8f:29:f5:73:b3:be:42:8a:4a: 80:cd:70:c0:cb:28:a5:0f:61:ed:9a:88:b1:e8:f5:31:52:5a: a3:b5:65:76:6b:62:7c:81:d3:8d:9e:40:b4:26:46:a0:1e:85: cf:05:9d:b7:0c:e0:33:8c:95:5d:a9:67:c9:a5:59:4c:4d:b1: 0d:0c:27:02:a3:bc:f3:af:c5:89:d3:e1:ad:77:e1:1e:ec:7b: 89:34:04:58:18:1c:dd:09:ea:f2:ea:a1:69:db:a0:15:6f:13: 88:d7:29:4f:65:91:aa:fa:57:f8:3d:5f:ac:b6:ce:30:0c:9c: 34:86:e8:5a:6d:0b:f5:5d:79:f0:a3:f1:5f:2f:3e:d8:3c:f3: 12:53:62:3b:45:c8:e0:ce:c1:d8:55:eb:93:c7:8d:27:ea:1c: 33:67:e1:54:06:67:21:dc:33:cb:b1:f8:02:05:b5:3a:7f:d1: fe:ef:e6:29:61:b0:bf:db:d7:b2:87:7a:8e:3c:9e:11:bf:e2: 85:36:af:28:ac:f4:73:ef:82:98:ac:30:c1:4e:12:2c:e6:39: 50:5c:d1:a3:8f:35:e1:cd:27:7f:c9:a7:de:5c:73:28:1c:2b: 43:bf:e0:41:18:89:e2:0f:f3:7c:a9:d4:f6:39:4a:10:ed:5a: 09:8f:b7:c0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF8YFarPRzEX0KjB41xEHPpMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjYxMDI3MDgwMDUwWhcNMjYxMDI4MDgwMDUwWjAzMTEwLwYDVQQD EyhiZDRkMTNiZDNiNzgwYTc5NjU1ZjM0NDk3MzU3MmYzNzUzYWQwNWIyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0O1di876UynSEM/VdN1gxxK+ebV FPDRoMavuLgn4/5dQLbOXH2bN/Gguozl7S4QdwdOQWrXH/h2n75ZGMItB9B1xOsH FYlWl4LUhEghWnkQxG/SbE/8GuxBbsNzsgX8pVglKNyFCEvVTb6oqetpM2OAd2Sb mCNogn5+X2as4x9V+ZSeT3jiMjnIG1+PZwwrX9ESLfI7R6MTfBAlaZo3zP3fluT3 guvprJ6+n3SmJYs07ISi1uIJoJ3kLVfXkyuwj2u4mtjD4IXdnTl10AN1Qn9Qa4Mz tX9mYs/8qEkutNWHYxxGwFac2xffnupT2f/DyCD1PRoLINmZg7RyZViOSQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFL1NE707eAp5ZV80SXNXLzdTrQWyMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALpDpohsy UdQXjyn1c7O+QopKgM1wwMsopQ9h7ZqIsej1MVJao7VldmtifIHTjZ5AtCZGoB6F zwWdtwzgM4yVXalnyaVZTE2xDQwnAqO886/FidPhrXfhHux7iTQEWBgc3Qnq8uqh adugFW8TiNcpT2WRqvpX+D1frLbOMAycNIboWm0L9V158KPxXy8+2DzzElNiO0XI 4M7B2FXrk8eNJ+ocM2fhVAZnIdwzy7H4AgW1On/R/u/mKWGwv9vXsod6jjyeEb/i hTavKKz0c++CmKwwwU4SLOY5UFzRo4814c0nf8mn3lxzKBwrQ7/gQRiJ4g/zfKnU 9jlKEO1aCY+3wA== -----END CERTIFICATE-----Generated at Tue Oct 27 16:34:35 2026 by rpki-client