$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft File: FjB9KfVUPyHqMAm5Uj_nG48Taco.mft (raw, json) Hash identifier: Y2fiIytnOMaQtPCYQSD9BR/GaGXHkSoKmzlVW9gvI8c= Subject key identifier: 6E:B2:F3:BA:0C:73:E7:3B:1C:CA:43:3B:23:B3:9F:88:FC:DC:48:05 Authority key identifier: 16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA Certificate issuer: /CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Certificate serial: 01A110A946E54D77F195C50553B57B64BD11 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft Manifest number: 1AC3 Signing time: Tue 06 Oct 2026 10:01:31 +0000 Manifest this update: Tue 06 Oct 2026 10:01:31 +0000 Manifest next update: Wed 07 Oct 2026 10:01:31 +0000 Files and hashes: 1: 43xKNj8d1J5ZbdUCB9huFf51dlY.roa (hash: 0C77rsfbABsBAgXhMhHrXliF4EtBR+zdrxbfWGDutkA=) 2: B8WZmrTIa2ia6GnyZAc3UYzn6nU.roa (hash: aDzq92qdJqLonxrkAlG+0ptE83HlOqTUO72kLOAz1Z0=) 3: FjB9KfVUPyHqMAm5Uj_nG48Taco.crl (hash: 8lV5ds9Hw+zMO6BCgnMAJxRIFkKoAjAI+1dVvcapuX4=) 4: IgfAmjFLqVW-uCkvUtRuUz3fQFI.asa (hash: 1m1DNwPZO7HOKfXGKGJtUoAVRSnQcqTWcdbAqBMwcJk=) 5: Mqx-zb562ywYV8pX6wNPPIxwnPA.roa (hash: OtbembzOi1Q67rhuvfY9lENyB3xApH7b2U9zu5YCpzg=) 6: NAB7jeRg8xs-PO6aq-mV0JJ8Kt8.roa (hash: BsmxkgNXTeP+5y0lVg3F5Vd5iIuPFhBIw5y8AiZA+lg=) 7: OFmVOiCQetrNkOtmu3zCnKSHdbQ.asa (hash: Hjgzl6kCFsNx4hG5pItQKTRXXfWNO1jZJVBkNf2hlCc=) 8: VsDKu8p7jOW_6XSjzPi6HRYFCeE.roa (hash: meHtFxM6jSoAy9Y7SaMHGYbPp+WrlG0Kpg1DeuyayZE=) 9: X01sfTguEZRlbViMsVbdLRhWtwM.asa (hash: ITEiwLtEtyei9oziGBBYKolA2UiS65//73HaFywy0cU=) 10: ZYc4R1ZUoLFLDb0ExiBMqNZo4PI.asa (hash: hLDXFm9fYXyP3hsrCVS9C7xEpV87H1Pnzgc7QhcK0xY=) 11: bFkaQMapJshDo2hgXls_q4kXpds.asa (hash: Sdg8D0zVBbo49fzIHdCt36EnpRZv3zi4DnsZ64hwpRw=) 12: dAyDeUp51SPbYS8fxmJNG0482Ng.asa (hash: 6/i5RS8ShUMSXbYzZlVqHGyL8kobjym9yxw0gdprH7E=) 13: oxOGLICEA4GzU1uD1B6su4tziyQ.roa (hash: TvZctkDtv5gSKLWgki0lkEZNOjTs1UPnuilELJQxzxc=) 14: plAxktASIb4YACIP-hXXxq1vBPQ.asa (hash: YS1t0iZi+tG5TRUgxqQhrFYuMkSCCdM92QwP+HVjJ7w=) 15: xTbA2Nqn_OGftZ3ziVysvYIrYsc.roa (hash: AKh2Xxbl7XMpoBpUm83TcjMuEMCZWE9rKYeV/5q4Gew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 07 Oct 2026 08:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:10:a9:46:e5:4d:77:f1:95:c5:05:53:b5:7b:64:bd:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16307d29f5543f21ea3009b9523fe71b8f1369ca Validity Not Before: Oct 6 10:01:31 2026 GMT Not After : Oct 7 10:01:31 2026 GMT Subject: CN=6eb2f3ba0c73e73b1cca433b23b39f88fcdc4805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0e:90:d5:2e:c6:4f:23:83:4f:2f:f4:f1:21: e8:87:e0:90:4b:74:89:fb:1a:03:4a:11:39:67:5f: aa:2d:ce:75:04:99:ba:10:1f:3f:71:c3:b3:93:11: 23:a0:36:f2:2f:5f:b4:f4:40:32:2e:58:38:f6:ea: 4d:1c:68:c0:5e:e7:bd:48:62:31:fa:73:4e:1e:52: e9:95:69:01:a9:c5:37:ff:74:f1:a4:91:82:3b:90: ca:c4:58:97:00:0c:8b:22:8e:b0:11:8b:7a:70:2f: b2:51:d0:e0:71:3d:c3:57:4d:71:6c:50:f0:12:5e: 8a:31:7a:4b:6b:c7:7d:8a:ec:38:89:fc:74:28:b7: be:3c:0a:6f:2c:a9:52:59:ce:fb:62:70:7a:bf:e2: 7a:d1:21:c0:1d:10:c6:3e:9f:60:37:65:35:96:9b: 76:01:65:8b:72:57:b5:57:5b:43:a8:66:5c:a2:e9: 28:ea:b6:fe:63:2f:cd:38:c8:e6:9a:e1:f2:32:55: 50:e7:98:3a:41:6b:14:4f:f3:bd:aa:98:73:8a:ab: a8:fa:f5:71:27:a1:5f:bc:59:f5:55:c4:6e:0e:e0: 0e:ab:25:3a:b6:ca:bf:c4:88:a2:0b:cb:c0:43:0b: 5e:95:e1:40:b9:e0:c8:08:5b:42:55:e5:91:bd:a0: 07:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:B2:F3:BA:0C:73:E7:3B:1C:CA:43:3B:23:B3:9F:88:FC:DC:48:05 X509v3 Authority Key Identifier: keyid:16:30:7D:29:F5:54:3F:21:EA:30:09:B9:52:3F:E7:1B:8F:13:69:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjB9KfVUPyHqMAm5Uj_nG48Taco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/bf5e70-6665-49de-b9cf-4cfe40f07a6b/1/FjB9KfVUPyHqMAm5Uj_nG48Taco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:f8:6e:0c:47:78:41:16:d4:3b:43:45:ac:85:33:4e:79:cc: 2c:6b:33:44:93:fc:a8:c4:0c:d0:a8:45:28:7d:e0:4a:4f:7b: d2:9e:96:67:19:de:29:cc:7e:b8:43:a4:55:8e:ed:d0:66:7c: 93:4c:7a:d6:e9:87:cc:3a:6d:0b:32:e4:9e:38:10:f2:31:88: d3:1a:65:8f:0b:25:7a:95:23:46:e2:4e:b1:d4:9a:c1:4a:ff: bf:f5:8c:84:71:35:ac:5e:94:1f:5f:34:51:73:0c:bd:8f:7d: f3:01:db:8e:c5:28:9a:66:59:20:b6:ca:ea:83:92:c3:c5:69: c4:40:a6:28:44:9c:ec:c2:fc:8e:64:ca:2d:26:21:ec:6d:75: a8:a2:ab:ce:6f:c1:8e:83:4c:30:7d:40:5c:e8:91:59:f8:53: 7d:70:3b:be:9a:30:3f:77:1b:1b:6d:17:9a:b6:6e:9f:cc:24: fc:af:39:c9:05:e0:1e:7f:31:3c:2c:78:49:3e:fb:08:87:2f: b4:03:85:16:b2:b2:56:eb:07:be:63:f9:30:6b:d1:90:2d:49: 10:4e:97:a6:23:cc:a6:01:0a:93:d2:f9:e9:0c:03:27:1d:9a: f5:05:19:88:98:3f:6d:7f:bf:dc:37:af:db:64:c5:49:45:f6: 04:78:fd:2c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEQqUblTXfxlcUFU7V7ZL0RMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE2MzA3ZDI5ZjU1NDNmMjFlYTMwMDliOTUyM2ZlNzFiOGYx MzY5Y2EwHhcNMjYxMDA2MTAwMTMxWhcNMjYxMDA3MTAwMTMxWjAzMTEwLwYDVQQD Eyg2ZWIyZjNiYTBjNzNlNzNiMWNjYTQzM2IyM2IzOWY4OGZjZGM0ODA1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxA6Q1S7GTyODTy/08SHoh+CQS3SJ +xoDShE5Z1+qLc51BJm6EB8/ccOzkxEjoDbyL1+09EAyLlg49upNHGjAXue9SGIx +nNOHlLplWkBqcU3/3TxpJGCO5DKxFiXAAyLIo6wEYt6cC+yUdDgcT3DV01xbFDw El6KMXpLa8d9iuw4ifx0KLe+PApvLKlSWc77YnB6v+J60SHAHRDGPp9gN2U1lpt2 AWWLcle1V1tDqGZcouko6rb+Yy/NOMjmmuHyMlVQ55g6QWsUT/O9qphziquo+vVx J6FfvFn1VcRuDuAOqyU6tsq/xIiiC8vAQwteleFAueDICFtCVeWRvaAHgQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFG6y87oMc+c7HMpDOyOzn4j83EgFMB8GA1UdIwQY MBaAFBYwfSn1VD8h6jAJuVI/5xuPE2nKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2Yt NGNmZTQwZjA3YTZiLzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNS9iZjVlNzAtNjY2NS00OWRlLWI5Y2YtNGNmZTQwZjA3YTZi LzEvRmpCOUtmVlVQeUhxTUFtNVVqX25HNDhUYWNvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZfhuDEd4 QRbUO0NFrIUzTnnMLGszRJP8qMQM0KhFKH3gSk970p6WZxneKcx+uEOkVY7t0GZ8 k0x61umHzDptCzLknjgQ8jGI0xpljwslepUjRuJOsdSawUr/v/WMhHE1rF6UH180 UXMMvY998wHbjsUommZZILbK6oOSw8VpxECmKESc7ML8jmTKLSYh7G11qKKrzm/B joNMMH1AXOiRWfhTfXA7vpowP3cbG20XmrZun8wk/K85yQXgHn8xPCx4ST77CIcv tAOFFrKyVusHvmP5MGvRkC1JEE6XpiPMpgEKk9L56QwDJx2a9QUZiJg/bX+/3Dev 22TFSUX2BHj9LA== -----END CERTIFICATE-----Generated at Tue Oct 6 15:59:39 2026 by rpki-client