$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft File: rnNsr92267jXx2lD9KJx4DhRCqk.mft (raw, json) Hash identifier: 6kjss4waIQWC88BU8OnFhT/C0tIJOR/gAYDII92jbgY= Subject key identifier: 98:76:09:09:E4:63:DA:B9:2D:1F:A4:A5:61:54:DC:33:83:64:5A:CA Authority key identifier: AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 Certificate issuer: /CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Certificate serial: 01A17EBD4700A68A2BED2C7B5EA8783D32F8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft Manifest number: 198D Signing time: Tue 27 Oct 2026 19:01:35 +0000 Manifest this update: Tue 27 Oct 2026 19:01:35 +0000 Manifest next update: Wed 28 Oct 2026 19:01:35 +0000 Files and hashes: 1: 9FFbtl92SQwflV8MtJzAZegLGXA.roa (hash: +FwC+M5wIyk/fhrmXIflqm7L2WDvRv2FjdVHYMVPPzU=) 2: FQ-zr24LwDkwYEmw_FlDbzx5P4s.roa (hash: 72rsnmpdkRSkNBR0uk4zMj5njaCBagS3GBHGnSWVLYw=) 3: h_0cAkv9bRuqII55SmmjCPAtEkY.roa (hash: f3qXMN3stUSn8npXGtiCTxgNOHC/rASxYRfTCA56R9E=) 4: kxHXeC-RgFki1x0jEKzH48eBz8c.roa (hash: E6qamccMc25rG9FxeXNYkNGoky+PcxFg+Xq4GlM3NUs=) 5: oYoaCxePjZcRzRJTrNBrONO_Ym0.roa (hash: 4nGnf7vQYWEUFNLWW0oRGYuPycV7h1x++stMCLyo5Bk=) 6: plMF4273xJNdefV7r7jo8RJ8QbU.roa (hash: D9odZxGtxbDzG6OiIstvUcJ7z0OpJ5jME5X2lJ31p5A=) 7: rnNsr92267jXx2lD9KJx4DhRCqk.crl (hash: 72oxM0RQsXwDxChd70Knl/ScoMjhVYIM/GHVa3t+mgQ=) 8: un_1tb4ETb7dJsP5Mq8V0llGT80.roa (hash: cP4I0MaCsjRNc87FbMAxnApmXsIjWX9M4UbopOynI2E=) 9: x1uPGMrYnISpD0QmPBO-tTbLGlM.roa (hash: ZFPHDA01tmwtDf5lu3JucB42d6leTrbu6L4QKi5eAhk=) 10: zLCHjeiw_ejDI_VbLsjC7k1DbE4.roa (hash: 5Mti0up92969Oa1c08K/2LG50PP0mj7MqErSz+8DQcE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 13:57:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7e:bd:47:00:a6:8a:2b:ed:2c:7b:5e:a8:78:3d:32:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ae736cafddb6ebb8d7c76943f4a271e038510aa9 Validity Not Before: Oct 27 19:01:35 2026 GMT Not After : Oct 28 19:01:35 2026 GMT Subject: CN=98760909e463dab92d1fa4a56154dc3383645aca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3f:a8:85:82:30:77:7a:1e:8d:ad:2d:37:1e: 89:90:0e:de:49:51:6c:91:1b:4b:4e:fb:f0:08:d2: 5b:44:b8:16:0d:1b:30:4b:20:c4:d9:2a:d2:d7:af: 91:33:44:19:f8:33:ce:8a:89:fb:f0:92:06:ef:33: 5b:da:69:3a:95:a2:e7:93:8d:e9:e1:60:a6:df:af: 4a:16:b8:15:ae:6f:f6:2c:f3:90:a1:8f:3c:48:94: f0:f6:21:89:e6:a3:ed:4a:c9:e3:c4:cc:cb:0c:f1: 31:3d:cf:04:db:5c:97:0c:1e:1f:a4:73:51:17:ed: 3f:6f:c2:ac:e3:68:e5:46:83:bf:41:36:ac:0c:6c: ca:77:6d:67:b6:c3:15:54:ac:4e:73:4f:6f:d2:69: f2:05:be:16:58:02:e2:c9:f3:d6:12:6c:d4:00:92: cc:5e:3d:9f:e8:ab:b2:e1:f5:2b:c1:42:49:d1:21: 94:a6:ce:b9:61:3c:03:bf:e0:6a:7e:a9:2c:aa:ba: 40:21:1a:04:a3:35:24:5d:6d:ec:c1:ce:98:b9:f8: 17:05:28:09:96:89:ca:90:38:28:22:31:39:c9:b8: b8:2d:27:b8:d0:4a:96:6c:e7:f3:14:2c:e6:07:4c: ca:a5:79:50:49:c3:15:d4:11:1d:0b:67:05:10:b2: f8:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:76:09:09:E4:63:DA:B9:2D:1F:A4:A5:61:54:DC:33:83:64:5A:CA X509v3 Authority Key Identifier: keyid:AE:73:6C:AF:DD:B6:EB:B8:D7:C7:69:43:F4:A2:71:E0:38:51:0A:A9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnNsr92267jXx2lD9KJx4DhRCqk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/86e32b-f067-450f-b67c-3aa150a92ab7/1/rnNsr92267jXx2lD9KJx4DhRCqk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:27:7a:6b:de:f3:92:61:65:3e:b7:92:09:f8:9e:f3:ec:f2: b3:54:84:80:8e:04:bb:7b:78:2f:a6:84:6c:b1:8d:8e:c0:df: cf:ef:a8:9f:b1:7f:4f:8e:8d:a8:74:27:14:3e:39:2b:76:b3: 29:e9:0a:3e:4e:ea:80:3a:b6:35:72:c3:cf:39:82:1b:80:45: 86:83:13:5a:ed:83:66:9e:9b:28:0f:5e:d5:16:70:5c:7e:b5: 27:7e:3b:62:44:f6:49:85:c2:ec:a3:47:6e:b4:13:a3:c4:b1: 4c:45:66:a4:01:cc:0f:5b:0e:0b:81:c9:9c:4e:1c:61:f0:4c: e9:6e:54:48:34:e8:19:9a:0b:58:ca:e2:df:db:34:89:c3:52: 07:96:0b:42:e1:06:87:33:24:9d:53:66:97:84:22:cb:13:ee: ed:86:aa:c9:97:ca:a3:55:7d:06:d3:c3:18:84:a1:85:b5:97: 2f:ac:ca:a8:eb:79:66:c9:37:2b:ac:9e:10:80:ac:91:a8:f0: d9:01:5a:e9:28:e2:b6:f6:51:fc:74:ac:16:b2:02:4f:1d:32: ca:bc:64:0f:9f:54:67:a8:6a:08:55:db:32:ab:b0:ab:24:4d: 49:a3:3c:d1:c7:8b:f7:d7:9f:22:e6:4a:dd:75:f8:47:6f:40: 47:80:22:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF+vUcApoor7Sx7Xqh4PTL4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFlNzM2Y2FmZGRiNmViYjhkN2M3Njk0M2Y0YTI3MWUwMzg1 MTBhYTkwHhcNMjYxMDI3MTkwMTM1WhcNMjYxMDI4MTkwMTM1WjAzMTEwLwYDVQQD Eyg5ODc2MDkwOWU0NjNkYWI5MmQxZmE0YTU2MTU0ZGMzMzgzNjQ1YWNhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1D+ohYIwd3oeja0tNx6JkA7eSVFs kRtLTvvwCNJbRLgWDRswSyDE2SrS16+RM0QZ+DPOion78JIG7zNb2mk6laLnk43p 4WCm369KFrgVrm/2LPOQoY88SJTw9iGJ5qPtSsnjxMzLDPExPc8E21yXDB4fpHNR F+0/b8Ks42jlRoO/QTasDGzKd21ntsMVVKxOc09v0mnyBb4WWALiyfPWEmzUAJLM Xj2f6Kuy4fUrwUJJ0SGUps65YTwDv+BqfqksqrpAIRoEozUkXW3swc6YufgXBSgJ lonKkDgoIjE5ybi4LSe40EqWbOfzFCzmB0zKpXlQScMV1BEdC2cFELL4cwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJh2CQnkY9q5LR+kpWFU3DODZFrKMB8GA1UdIwQY MBaAFK5zbK/dtuu418dpQ/SiceA4UQqpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2Mt M2FhMTUwYTkyYWI3LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS84NmUzMmItZjA2Ny00NTBmLWI2N2MtM2FhMTUwYTkyYWI3 LzEvcm5Oc3I5MjI2N2pYeDJsRDlLSng0RGhSQ3FrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqid6a97z kmFlPreSCfie8+zys1SEgI4Eu3t4L6aEbLGNjsDfz++on7F/T46NqHQnFD45K3az KekKPk7qgDq2NXLDzzmCG4BFhoMTWu2DZp6bKA9e1RZwXH61J347YkT2SYXC7KNH brQTo8SxTEVmpAHMD1sOC4HJnE4cYfBM6W5USDToGZoLWMri39s0icNSB5YLQuEG hzMknVNml4QiyxPu7YaqyZfKo1V9BtPDGIShhbWXL6zKqOt5Zsk3K6yeEICskajw 2QFa6SjitvZR/HSsFrICTx0yyrxkD59UZ6hqCFXbMquwqyRNSaM80ceL99efIuZK 3XX4R29AR4AirA== -----END CERTIFICATE-----Generated at Tue Oct 27 20:33:57 2026 by rpki-client