$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft File: 9LdilQ63kWZou_qNG4cFYLHKdzk.mft (raw, json) Hash identifier: jnuDkidSDXkx0e2JgKy+NVUwsFIOoSGpCywPZ1SobGk= Subject key identifier: 35:B9:E2:01:EC:A5:78:8B:D8:ED:28:CA:A8:D5:14:C7:9B:63:A2:65 Authority key identifier: F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 Certificate issuer: /CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Certificate serial: 01A1822BF9EBFD8EEDF833DADCCBAE0521F5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft Manifest number: 196C Signing time: Wed 28 Oct 2026 11:01:22 +0000 Manifest this update: Wed 28 Oct 2026 11:01:22 +0000 Manifest next update: Thu 29 Oct 2026 11:01:22 +0000 Files and hashes: 1: 2Mw_RsL7Tu1raZO7N_NmWBt_4Lw.roa (hash: JucO5ifrsP8q+Lpu01KX5CahDpNNuMFp8igwggz5f+4=) 2: 7Iz6U-UbML_bHt2iBpNhyMsUex4.roa (hash: kuOf+8ykZKiwJgvJAoLirBjFoMp1t2BI/tsXr1phgfs=) 3: 9LdilQ63kWZou_qNG4cFYLHKdzk.crl (hash: BMQJUrPE+QRvxJnfidBsye8oJZPo5/JBe5Eh0bqCn7w=) 4: KTnr28UXB2AOhLUGojIXh3TKOoo.roa (hash: 8eiF90G8f4f8jQjBHQ0ai2Os8eR7L9120f3BRFVgphs=) 5: LKPNjW0FwzxJuXJJO8QeVx8xVKA.roa (hash: 7aAIkZ00eO3qTrf1/VDBo5PmzNCovWfeD3QFFzPD2+k=) 6: OhdvuW1MhWIplOiaXjr0jKrnav0.roa (hash: J4+sEU+gHBe6CqLgaPIzNFJg58JXNWIbDProtv3aR8c=) 7: XWplAHLb4h-dRGf7GRqU5aYBne4.roa (hash: vcUnwVhvidom6bWizccTCS7wF3vMreiwdFHr11qyWHQ=) 8: XgKbk-VfS5Fk-dDKQjpQqRf0_lY.roa (hash: iWT0RhDme3TLlIGDD9yrT4WHfNUoRqswY0iSVi2J+04=) 9: bu5zIhc9syS0fhKBovFQXcGQRxQ.roa (hash: /Bq2k4bmIQ5EUPK41v03YcsLqkRVvDHXfxrIn2yzw5A=) 10: epRr3ot_tO1I-RC0EsosxizeUW8.roa (hash: 2A4W4DbPWY16lTKuPfcljbBbTU9AeJIZxwLQ/cXz2wo=) 11: hIAZzuP6Gsu6ylCAGgkd82Ycc_M.roa (hash: SQISDbvDjBaLkSadlmENoao3YxR8/bK49Sgx969cf+M=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 07:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:82:2b:f9:eb:fd:8e:ed:f8:33:da:dc:cb:ae:05:21:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f4b762950eb7916668bbfa8d1b870560b1ca7739 Validity Not Before: Oct 28 11:01:22 2026 GMT Not After : Oct 29 11:01:22 2026 GMT Subject: CN=35b9e201eca5788bd8ed28caa8d514c79b63a265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f1:6f:91:1e:9a:76:65:02:59:24:a4:a2:e4: 7c:9d:dd:50:65:50:bf:5c:82:f6:5c:59:b1:b2:f9: 31:d8:0d:c5:f8:61:06:21:9f:42:f9:c6:23:5d:d5: e0:cd:fb:8b:23:c4:6d:99:06:4a:4b:10:0c:f7:57: 2b:0d:8d:3b:e2:26:37:da:42:5b:a2:56:72:5f:29: e7:c9:f0:52:7a:cf:f9:44:1c:9b:fa:5c:d1:8b:4b: b1:27:6a:fa:40:fe:d7:8e:53:10:74:84:27:b4:6b: 44:3a:79:5a:c1:a1:01:7b:ef:33:f6:55:39:93:b3: df:c8:b4:16:44:42:8a:bb:1f:fb:20:95:94:c1:f3: 14:a8:31:3a:98:15:f3:aa:27:ec:1b:bd:07:e8:f1: e9:ba:3f:eb:53:9c:80:ea:b7:d1:2e:b7:67:88:c7: 0f:12:63:35:ff:4a:85:04:bf:30:b1:43:21:7f:47: af:6a:e4:1c:0d:87:f0:f1:00:f3:02:52:6d:fe:17: de:a2:f3:14:fc:9b:35:0c:97:fe:f4:cd:4e:f0:09: 44:d3:a3:bf:45:85:3e:91:fd:33:39:e5:8b:6e:5e: 4d:20:74:a2:41:f6:e8:fa:b2:e7:2a:ca:8c:b2:c1: 97:00:9b:70:e4:4e:90:83:2b:1d:d5:47:da:25:49: 1a:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B9:E2:01:EC:A5:78:8B:D8:ED:28:CA:A8:D5:14:C7:9B:63:A2:65 X509v3 Authority Key Identifier: keyid:F4:B7:62:95:0E:B7:91:66:68:BB:FA:8D:1B:87:05:60:B1:CA:77:39 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9LdilQ63kWZou_qNG4cFYLHKdzk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/0b23c5-21b5-4ab3-97a0-2f8df187f98b/1/9LdilQ63kWZou_qNG4cFYLHKdzk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:88:6b:d0:45:0d:42:94:c3:56:cd:d0:75:c3:ad:19:19:8b: c2:29:5d:fd:4b:84:65:90:44:11:e5:d6:68:d1:d8:19:e9:cb: 81:a6:5c:d1:bc:b9:34:e9:03:e9:1a:f6:43:f5:b4:cf:68:63: dd:c4:1c:ad:08:2a:d9:ef:66:84:a8:93:d3:43:ef:54:ef:68: 8c:56:75:d5:bd:ba:52:15:e5:19:cc:ba:65:d1:cf:dd:12:84: 48:45:7c:48:a5:18:3b:5b:83:dd:d4:63:06:8b:9c:57:ca:1b: e5:00:4b:a3:5a:0c:77:4f:8a:0a:23:40:51:a4:6a:fe:1f:03: 46:ab:98:df:90:d4:3a:9f:d3:08:f2:3f:c5:03:fc:2e:ef:67: e9:d8:08:b8:fd:c3:42:b3:6c:c4:a3:84:b7:e5:c4:10:a1:72: 36:60:bb:71:13:3c:48:00:6a:7e:ff:09:e0:b2:d7:10:ee:91: 9a:cf:db:4d:96:2b:e4:c9:2d:07:49:ec:03:50:08:d0:0c:2a: be:c7:df:c4:28:c1:9d:83:d7:93:f8:54:40:63:e9:1c:97:9c: 5d:67:a5:6b:99:69:6a:73:b6:21:b2:12:77:41:44:31:84:e5: 29:0d:e8:8a:b4:58:90:55:a9:44:80:19:78:49:54:7e:27:62: a3:25:67:07 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGCK/nr/Y7t+DPa3MuuBSH1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGY0Yjc2Mjk1MGViNzkxNjY2OGJiZmE4ZDFiODcwNTYwYjFj YTc3MzkwHhcNMjYxMDI4MTEwMTIyWhcNMjYxMDI5MTEwMTIyWjAzMTEwLwYDVQQD EygzNWI5ZTIwMWVjYTU3ODhiZDhlZDI4Y2FhOGQ1MTRjNzliNjNhMjY1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/FvkR6admUCWSSkouR8nd1QZVC/ XIL2XFmxsvkx2A3F+GEGIZ9C+cYjXdXgzfuLI8RtmQZKSxAM91crDY074iY32kJb olZyXynnyfBSes/5RByb+lzRi0uxJ2r6QP7XjlMQdIQntGtEOnlawaEBe+8z9lU5 k7PfyLQWREKKux/7IJWUwfMUqDE6mBXzqifsG70H6PHpuj/rU5yA6rfRLrdniMcP EmM1/0qFBL8wsUMhf0evauQcDYfw8QDzAlJt/hfeovMU/Js1DJf+9M1O8AlE06O/ RYU+kf0zOeWLbl5NIHSiQfbo+rLnKsqMssGXAJtw5E6Qgysd1UfaJUkaiQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDW54gHspXiL2O0oyqjVFMebY6JlMB8GA1UdIwQY MBaAFPS3YpUOt5FmaLv6jRuHBWCxync5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAt MmY4ZGYxODdmOThiLzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMi8wYjIzYzUtMjFiNS00YWIzLTk3YTAtMmY4ZGYxODdmOThi LzEvOUxkaWxRNjNrV1pvdV9xTkc0Y0ZZTEhLZHprLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEIhr0EUN QpTDVs3QdcOtGRmLwild/UuEZZBEEeXWaNHYGenLgaZc0by5NOkD6Rr2Q/W0z2hj 3cQcrQgq2e9mhKiT00PvVO9ojFZ11b26UhXlGcy6ZdHP3RKESEV8SKUYO1uD3dRj BoucV8ob5QBLo1oMd0+KCiNAUaRq/h8DRquY35DUOp/TCPI/xQP8Lu9n6dgIuP3D QrNsxKOEt+XEEKFyNmC7cRM8SABqfv8J4LLXEO6Rms/bTZYr5MktB0nsA1AI0Awq vsffxCjBnYPXk/hUQGPpHJecXWela5lpanO2IbISd0FEMYTlKQ3oirRYkFWpRIAZ eElUfidioyVnBw== -----END CERTIFICATE-----Generated at Wed Oct 28 16:32:17 2026 by rpki-client