$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: ZzcWNh7BOYzqOaexzKq5iVjJ3LCkwbRUfcuLWqFtUGM= Subject key identifier: 3D:25:68:92:8E:96:51:1C:2D:E2:8D:E1:15:6E:C9:68:FB:E2:E2:D2 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 01A17CCEFD467392E4ACFF25DF4DDFB09946 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 1B09 Signing time: Tue 27 Oct 2026 10:01:42 +0000 Manifest this update: Tue 27 Oct 2026 10:01:42 +0000 Manifest next update: Wed 28 Oct 2026 10:01:42 +0000 Files and hashes: 1: 1nFCKi1R1uWAqKJnbMUD9y_3pno.roa (hash: 5C4IbhqcH3E0EkSlqxD//f0/kRfbI7bdALbkI7++DS0=) 2: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (hash: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU=) 3: 54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (hash: 27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=) 4: BtE_Prg_QTilEMkESiUbs4oIDmA.roa (hash: SFNeqY+UDzZLqbIx3LsR2g+sDJ1BvW0wdb9XdlLKZ0k=) 5: C-Qps28bGJ9viEITk81kKk0b0dA.roa (hash: YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=) 6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: DR1DxeIMmMUmp5kQCVv50OAuDpFyNjOL9GlCooMRIyY=) 7: GpPbNoyLVyrmQ4b8e1AhKTzfuOg.roa (hash: ghZh7XoU09TtPH2tIcN1D5InXaZeImBLFNLb0RMUPhs=) 8: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (hash: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y=) 9: SH8o9XaYeY75kSYDFek1xvvvpes.roa (hash: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q=) 10: c-QDkOwRsaqWaCLR67UW_lU7-L0.roa (hash: AE6Uaz5NJLGOrk5M1q3pxLLZKI8/2jUOSqya5+asWc0=) 11: fNaq8m6O9BbhsyXfpIVgO1FBWfQ.roa (hash: YWEpMcVfS6S4vwVF7Bdrpn4pCsO6G0a695Az/e9ZD/E=) 12: gOXA4eSdbH4c5IeG-4m3cjBuSN4.roa (hash: /bHGxxVaR5KsscDI8PWYa4sB3JKBtwAVf/gqeJepnlg=) 13: ke2TciPSbDOn6zXxGdQLJTfLAsw.roa (hash: 9ny0lYpK79F/d0zmuY5DS1VwZbJpVvPVS9XC0rY+Evc=) 14: qbYP0UksLbSQsOn0c0j6zXw0rP8.roa (hash: esZKDBKEw5qRbj9kqcJN1+giUZn6tIL+9+p2SrfRvrA=) 15: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (hash: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 10:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7c:ce:fd:46:73:92:e4:ac:ff:25:df:4d:df:b0:99:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Oct 27 10:01:42 2026 GMT Not After : Oct 28 10:01:42 2026 GMT Subject: CN=3d2568928e96511c2de28de1156ec968fbe2e2d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:02:93:6b:a4:b2:63:e8:5b:0d:60:5f:95:ca: 48:6d:86:92:59:78:36:fb:2b:71:11:b5:eb:92:76: 19:7e:f6:a9:53:8c:66:47:6e:d3:5f:7c:84:4f:79: aa:f3:c5:ea:69:16:89:5c:3f:98:8f:13:92:3c:34: 0c:cf:68:92:7b:2f:04:fc:42:f3:3d:37:8c:1d:ad: 98:d3:52:6f:f9:36:45:ce:9c:68:61:34:05:ea:d0: b3:28:ee:0e:9a:be:9d:58:20:28:f1:99:a6:80:e5: 29:bd:8e:ec:e6:06:e3:c6:38:5b:41:91:56:ed:4a: e8:63:f0:44:c0:bf:6d:e1:74:74:23:53:7a:8b:e3: f3:8a:e8:fd:93:7a:df:40:98:64:03:48:b2:20:84: ff:9c:4b:7e:da:b7:a3:c6:0f:ef:4d:fc:db:a1:b6: c7:84:0c:ef:61:26:99:22:43:c0:4c:7a:3e:3e:16: c0:73:00:f0:5f:b3:d5:ae:d3:6e:5d:72:20:bc:81: 1a:c6:61:fb:09:74:67:aa:bf:45:75:6c:b5:f0:07: be:00:7e:1e:85:b8:6a:f9:04:e7:16:7a:50:7e:d9: 3e:d3:5e:71:cd:d5:29:8a:f4:28:73:84:00:9b:96: 20:93:07:af:97:46:dc:b0:98:19:9b:40:25:9c:e0: 0e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:25:68:92:8E:96:51:1C:2D:E2:8D:E1:15:6E:C9:68:FB:E2:E2:D2 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:3b:d8:e3:c4:4d:c6:60:79:2f:20:60:b7:00:91:a9:e8:0d: a2:a9:87:36:04:d8:33:26:23:e1:54:e5:b0:23:12:4c:c5:23: 38:4c:51:ce:79:5b:b1:85:7a:fe:bb:d1:62:d2:36:70:32:48: 5d:1b:6b:9c:dd:d8:22:4b:b0:be:83:63:3b:91:21:de:45:43: 64:2e:88:c7:e9:59:bd:c0:fc:f3:29:0e:c2:bd:47:0c:b7:35: 77:75:03:28:94:52:0b:72:70:b1:b7:8d:45:d0:4a:c8:8a:01: 02:ef:20:32:e3:5b:19:ca:56:99:a4:d0:80:a1:bd:30:b1:85: 99:3d:5d:d3:5b:2e:f0:d4:cb:ba:5b:b5:5b:2e:0b:96:a3:ed: b7:31:c5:96:75:9f:42:18:7c:f7:63:c0:ec:dd:b1:84:d2:d3: c5:53:ba:d6:7a:0b:b6:4c:90:cb:0c:27:c0:61:eb:01:61:40: ca:a1:bf:3b:8c:5b:ef:86:38:6a:8b:f8:19:ea:e6:8c:6b:3f: 34:9a:c7:6f:f5:18:f9:14:2e:da:0d:1c:23:dd:28:4a:74:0c: 7b:28:11:35:f7:02:92:ce:22:30:ec:f5:40:33:87:2a:2c:94: 63:1f:2f:7f:78:fc:e3:7c:a7:b0:ef:1b:ef:54:69:da:af:22: f0:83:a8:19 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF8zv1Gc5LkrP8l303fsJlGMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYxMDI3MTAwMTQyWhcNMjYxMDI4MTAwMTQyWjAzMTEwLwYDVQQD EygzZDI1Njg5MjhlOTY1MTFjMmRlMjhkZTExNTZlYzk2OGZiZTJlMmQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1AKTa6SyY+hbDWBflcpIbYaSWXg2 +ytxEbXrknYZfvapU4xmR27TX3yET3mq88XqaRaJXD+YjxOSPDQMz2iSey8E/ELz PTeMHa2Y01Jv+TZFzpxoYTQF6tCzKO4Omr6dWCAo8ZmmgOUpvY7s5gbjxjhbQZFW 7UroY/BEwL9t4XR0I1N6i+Pziuj9k3rfQJhkA0iyIIT/nEt+2rejxg/vTfzbobbH hAzvYSaZIkPATHo+PhbAcwDwX7PVrtNuXXIgvIEaxmH7CXRnqr9FdWy18Ae+AH4e hbhq+QTnFnpQftk+015xzdUpivQoc4QAm5Ygkwevl0bcsJgZm0AlnOAOnwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD0laJKOllEcLeKN4RVuyWj74uLSMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqTvY48RN xmB5LyBgtwCRqegNoqmHNgTYMyYj4VTlsCMSTMUjOExRznlbsYV6/rvRYtI2cDJI XRtrnN3YIkuwvoNjO5Eh3kVDZC6Ix+lZvcD88ykOwr1HDLc1d3UDKJRSC3JwsbeN RdBKyIoBAu8gMuNbGcpWmaTQgKG9MLGFmT1d01su8NTLulu1Wy4LlqPttzHFlnWf Qhh892PA7N2xhNLTxVO61noLtkyQywwnwGHrAWFAyqG/O4xb74Y4aov4GermjGs/ NJrHb/UY+RQu2g0cI90oSnQMeygRNfcCks4iMOz1QDOHKiyUYx8vf3j843ynsO8b 71Rp2q8i8IOoGQ== -----END CERTIFICATE-----Generated at Tue Oct 27 20:45:06 2026 by rpki-client