$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft File: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft (raw, json) Hash identifier: hwOwcIOPrits4fNPUs8nOr/PNSlx5GJt+zie9pu11w4= Subject key identifier: E8:FD:89:8D:0F:10:02:33:A1:48:B7:A8:AF:4F:86:B4:3A:18:F7:A3 Authority key identifier: 92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 Certificate issuer: /CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Certificate serial: 01A17CCE98902B0C30E0EDA383BB01654DCC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft Manifest number: 1AE1 Signing time: Tue 27 Oct 2026 10:01:16 +0000 Manifest this update: Tue 27 Oct 2026 10:01:16 +0000 Manifest next update: Wed 28 Oct 2026 10:01:16 +0000 Files and hashes: 1: 2rAGmumAatpMz3kw0VsK7nvOOnQ.roa (hash: QkO7bxWZSDvJ15l2k1OHawSRFNSNmwY3Ip4idTP8XgU=) 2: 44tbRBm3zSZMoCst6WkxTKufMIE.roa (hash: 5gCjJr0c5JiHRvqLpZ00s+SrgcQffTqmoJaDyLE8c74=) 3: 4b5IG88yGY57oOV8rMMD65D9450.roa (hash: L2WJBC1WPudMtSgpBc/n3eAovKHJ7Y5NfWrM/nSEbtE=) 4: 4kfyvx6IcqlCxed7fdvb4m5sTD4.roa (hash: KVGLl3eS3kXmc+q2aJ0R4MjOlnAmyZYkvCj/Q8Juapc=) 5: 8LiMsP5teezdiR8Ux5IeGxcNTiI.roa (hash: khbWKbmjcKHJ7DJ+ikEmWXgiSZycFmJGOh34yHtbZ5A=) 6: 8hx1gAb9JQ9Jt_adfPfauV83-lw.roa (hash: 5Yu25cs4dK7+vmfRVz+5LCQcuI9l90lTLui83bcVIAU=) 7: KUG1dAS56WFyM7HpXaZJm_9NZcI.roa (hash: bDHk7s2ypHa/VmIhy+huenZ6Yha/61UKd4WW960McEc=) 8: NIP6OMbGVO_LoBDEsbJ6LixxNnc.roa (hash: ZLVjxa/g6JD46/uf8XHrDkESKrByzEppqfl3vJn4wSg=) 9: V0ZbvO-Kau_hina_xax1FtPv3HU.roa (hash: 5pDhKp4j1D9CHXJw1ml9s4a1yEyDrOVGDOf0oK5BSVI=) 10: WrWwHOItDmU_S3g0-w_cgsaPRFA.roa (hash: jNNtsFSn9AMYEFYuH0fqqD4hwORadbXk3pHoHndZnnc=) 11: ZJD3Q6iJx8-f2YHw1Hw_i2VwDds.roa (hash: 4ehtslOSeTUspbDXf2ztNXuLiv7hRwHykkGiKzcBHMY=) 12: cPgrNdoKH1-9MCFvIQZW29dJV4I.roa (hash: Agd9dlngcCbnIAH8YM69F8AtPUMcQnsKqjikW40jBFo=) 13: kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl (hash: TcXQZCIAe0r4yinhjPj8tc0B2kP3i0r1VQ/LpVvMky0=) 14: oU210CVFzLuiQyHcf_YEp8pxk6M.roa (hash: HDzrvRtHa5TwJys+/lsPvAJ6xNgxTrYnp7lOvSNjpgo=) 15: pOcafHbNpE6IufWUjCXZs2WWYP4.roa (hash: lDDN8g4MAtlbqtSRtBrtfZVHqI5iUxRV0FsUbPWXCHU=) 16: tZjmsStp0VcKPFFLWR9K3de-3PQ.roa (hash: OEQhtHW2/RhfDyyYWpUnjsi1Rb0UQYxvnkk2lrldW2w=) 17: yt4sMwydKd-q7CRhhaUoMNZQcYE.roa (hash: HAZLAfvTvsad0Yf/uypEMiAh8+oiLiVNNSNJqAQE/M4=) 18: zMHnxNkGZBmoNQowVHKQvmrR1So.roa (hash: 5IVAfxXNsWU6GCJqjsRbswDzTaG988IprK4skA5INuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7c:ce:98:90:2b:0c:30:e0:ed:a3:83:bb:01:65:4d:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92bf6464ce6e19a4dcf8a32b27a2f1cbe1551055 Validity Not Before: Oct 27 10:01:16 2026 GMT Not After : Oct 28 10:01:16 2026 GMT Subject: CN=e8fd898d0f100233a148b7a8af4f86b43a18f7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:49:92:e6:b2:fd:af:aa:8a:27:db:5c:04:dd: e9:83:cf:88:b7:01:bd:55:70:0b:ff:5a:a0:c4:ec: 99:45:9e:a3:69:53:66:87:fc:27:75:a1:27:6b:f7: d8:fe:26:22:f4:b2:13:53:56:ed:70:5b:4a:0f:b1: 03:25:34:9c:f4:6f:c7:b8:cc:84:0a:0d:83:ce:e2: e9:33:7f:b2:49:8c:3f:fe:36:84:2c:f8:6b:a2:38: 68:6b:f9:3e:88:42:21:ff:6e:f2:0f:2e:8c:e2:db: 6b:2d:4c:c7:93:94:77:a2:eb:85:61:8e:e1:81:e5: bd:5b:d5:55:c5:3d:9f:c8:28:6e:99:4d:e1:1a:e5: 3f:fd:ba:3f:96:4c:fe:f8:1e:fa:5d:e0:01:71:c6: 34:ab:3a:e0:64:d3:91:ec:bf:79:c2:44:9a:d5:20: 55:01:76:fa:f1:ec:ba:9a:0d:f9:f4:9e:96:82:22: 87:93:78:f0:8d:fb:bb:ed:cd:bb:a0:9a:ac:a3:50: 10:d3:f1:3b:80:91:52:e9:29:6a:c0:3d:21:e8:90: 85:7c:ab:b7:6c:f3:22:7a:ad:87:0f:d4:2c:fd:65: e5:b6:47:62:ee:73:d4:97:5f:55:c2:cc:56:09:26: 47:45:79:15:33:9b:2c:ad:71:a0:c3:97:4f:ee:d2: 34:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FD:89:8D:0F:10:02:33:A1:48:B7:A8:AF:4F:86:B4:3A:18:F7:A3 X509v3 Authority Key Identifier: keyid:92:BF:64:64:CE:6E:19:A4:DC:F8:A3:2B:27:A2:F1:CB:E1:55:10:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/f1d697-bc8e-4f14-8b37-b53e30e1412a/1/kr9kZM5uGaTc-KMrJ6Lxy-FVEFU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:fd:2c:69:4e:76:d3:f7:94:0d:0f:75:d5:f0:05:b5:3e:8c: be:4f:36:24:93:3b:cb:92:af:b3:c4:af:a8:13:7e:40:00:86: e1:d3:2e:c1:2e:81:2c:f0:aa:22:7b:db:1f:19:00:15:f0:54: 83:75:70:00:09:a1:aa:ac:45:24:9b:bf:ff:aa:84:dd:9f:7a: 41:3c:02:76:77:94:34:63:4b:15:38:43:f5:26:98:35:4a:9f: 14:79:99:cc:b4:fa:45:ad:ea:14:1a:4d:ae:05:67:5d:d6:c3: ea:4b:c4:15:e6:9b:6c:60:0d:b0:81:2a:c8:eb:7c:fc:4f:cb: 27:ed:b8:55:eb:73:f3:ac:e1:27:1a:c4:48:25:d6:13:2a:54: d5:da:1d:fd:3f:97:50:6e:66:95:74:2c:f4:b4:84:8c:05:06: ce:0b:d0:c0:00:e5:2f:2b:f7:a9:bf:90:9b:a4:8a:24:06:c8: c2:5d:77:d8:69:e0:e0:77:e6:77:44:05:5d:49:52:ed:6a:35: 44:43:76:71:0f:3e:1b:53:fb:5b:84:d1:53:02:74:11:60:d7: bc:8a:c6:a2:7c:b0:6c:38:b7:6b:ee:75:a5:98:10:2b:3a:cf: 15:df:c0:8f:48:4d:e5:24:b0:3d:fe:cf:86:b2:22:63:6c:14: 72:3c:2d:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF8zpiQKwww4O2jg7sBZU3MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyYmY2NDY0Y2U2ZTE5YTRkY2Y4YTMyYjI3YTJmMWNiZTE1 NTEwNTUwHhcNMjYxMDI3MTAwMTE2WhcNMjYxMDI4MTAwMTE2WjAzMTEwLwYDVQQD EyhlOGZkODk4ZDBmMTAwMjMzYTE0OGI3YThhZjRmODZiNDNhMThmN2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+UmS5rL9r6qKJ9tcBN3pg8+ItwG9 VXAL/1qgxOyZRZ6jaVNmh/wndaEna/fY/iYi9LITU1btcFtKD7EDJTSc9G/HuMyE Cg2DzuLpM3+ySYw//jaELPhrojhoa/k+iEIh/27yDy6M4ttrLUzHk5R3ouuFYY7h geW9W9VVxT2fyChumU3hGuU//bo/lkz++B76XeABccY0qzrgZNOR7L95wkSa1SBV AXb68ey6mg359J6WgiKHk3jwjfu77c27oJqso1AQ0/E7gJFS6SlqwD0h6JCFfKu3 bPMieq2HD9Qs/WXltkdi7nPUl19VwsxWCSZHRXkVM5ssrXGgw5dP7tI0KQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOj9iY0PEAIzoUi3qK9PhrQ6GPejMB8GA1UdIwQY MBaAFJK/ZGTObhmk3PijKyei8cvhVRBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzct YjUzZTMwZTE0MTJhLzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kNy9mMWQ2OTctYmM4ZS00ZjE0LThiMzctYjUzZTMwZTE0MTJh LzEva3I5a1pNNXVHYVRjLUtNcko2THh5LUZWRUZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA3f0saU52 0/eUDQ911fAFtT6Mvk82JJM7y5Kvs8SvqBN+QACG4dMuwS6BLPCqInvbHxkAFfBU g3VwAAmhqqxFJJu//6qE3Z96QTwCdneUNGNLFThD9SaYNUqfFHmZzLT6Ra3qFBpN rgVnXdbD6kvEFeabbGANsIEqyOt8/E/LJ+24Vetz86zhJxrESCXWEypU1dod/T+X UG5mlXQs9LSEjAUGzgvQwADlLyv3qb+Qm6SKJAbIwl132Gng4Hfmd0QFXUlS7Wo1 REN2cQ8+G1P7W4TRUwJ0EWDXvIrGonywbDi3a+51pZgQKzrPFd/Aj0hN5SSwPf7P hrIiY2wUcjwtNA== -----END CERTIFICATE-----Generated at Tue Oct 27 15:36:37 2026 by rpki-client