$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: IZrR/WybQVC/HXN7RmWfJ8OAdDrk53qKuOh8ISFV13c= Subject key identifier: 9F:90:EE:BC:E8:37:6F:24:6C:78:D0:8C:CC:9C:39:3F:42:A4:7F:36 Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 01A12A9F3374DFF0133C559FD6883B4145AB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 1AE3 Signing time: Sun 11 Oct 2026 11:00:38 +0000 Manifest this update: Sun 11 Oct 2026 11:00:38 +0000 Manifest next update: Mon 12 Oct 2026 11:00:38 +0000 Files and hashes: 1: Dv8Xj573URhelnbmcJLlhmPDGD4.roa (hash: qlnvjr9BaLF0/kBmFp/g12eWnCcKOHwXVrBxaeJlhqI=) 2: ErxTNyERBBDMhHQ30nH0srvQHWE.roa (hash: vCvge335d0b4IZOO+kvKrubjYExpx9nKBs7ZlxM4sEY=) 3: GokOnLgcwEKBfp_sk2MIuuQ-_TY.roa (hash: zQRRa9NS4gIwYEiBt9K5iRhHmWoyu+BxEByrxS3tpEY=) 4: V66mUyeO5X_O6JGUAL_LInwhpW0.roa (hash: WTpJ/+xyEsdWBV9e8DfdpDEOxLLOMxmk9zRPy8of4Nw=) 5: WAFGlC69-0ob11MbBQG2gcGKWnk.roa (hash: fs3/LEyDskuqCQv30OKbL6do/sufFAX29xlb3wrGuaA=) 6: b4JEVE3QPzkNygQLlI0iBGroxU0.roa (hash: GbTRuy5jkEUqjUNqE8oi/B2zDg7qLzkinV68BhIMhV0=) 7: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: 9KtD4swuPBvxoMMDnlot2SL4mhEFFyHexnmsj6AVmBk=) 8: fX3KuGbBaSgozBC8VJSKif-SJWQ.roa (hash: YvJvbJ8D5DpHd4D9ZPHBQEllNbujWBnvbGsXVYfxrbQ=) 9: hS05mveN2aMKs32vgPN62OxZyU4.roa (hash: ppIsNge7NuGGbn+pU/a2PkG/ZsHka3x0Ag4o3/gijLY=) 10: iLauOm2qK9XnqY9ztUU9moKfnvg.roa (hash: MD/6ZVmSej56cLCXyFeTYzesox6xFljqFiihcyr2blE=) 11: mOIM-oZXOhPXcspDNu9QRUce9wI.roa (hash: TX23tkqgD+PXYsu3SvaWNxNHNfg0oQahFUpEkkPiqP0=) 12: maoDBiTq7OlnZavgCrqS2PNJzVg.roa (hash: 5lnUQuuOEn9crnGLrQz+sL2Asrk/3K0SqWLzxdWxHuc=) 13: rKU1mC3UrxRCEsXb-l25oaEBhJw.roa (hash: 4jepadulIWtRtacZBukRLsOXuyzRr5YeactatRKpnlE=) 14: vbkUkoSSvSBZWgO04-XIKz79J_g.roa (hash: rJWBZTHWqIREoHZuiUQTaD5sySodS5E6pv5B11Juiwo=) 15: wCrdreEenBFJr40kfhAiXxXP4VE.roa (hash: 1w9FYdnTnijOy22xqaq4vC9r9i/Zq/2AJnQG0P3/L0g=) 16: yX_yhv_jUUfVVPMPnlpzUI5cFxs.roa (hash: bg6ibEfMDVCBPduOQFB/gGWqEjD+qw8SCbixEdu1S7Q=) 17: zyjvREkWFF6X7pbwt-H3M-ZqZks.roa (hash: HtAgtb461giJt36H40FvVS9Xbx1kevgnUEyHwD9fYBI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 11:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:2a:9f:33:74:df:f0:13:3c:55:9f:d6:88:3b:41:45:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Oct 11 11:00:38 2026 GMT Not After : Oct 12 11:00:38 2026 GMT Subject: CN=9f90eebce8376f246c78d08ccc9c393f42a47f36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:5e:c1:42:93:e0:4e:3f:e0:8e:fd:c4:7c:84: 31:00:6c:28:fc:8b:ee:d9:b8:bd:11:04:fe:7d:60: 60:67:07:0f:61:2c:40:da:98:5b:f4:4b:02:6d:9e: 33:66:cb:b4:c7:50:5e:63:3e:b3:f6:13:3b:36:cd: 0e:07:e8:8f:11:2a:63:f8:be:be:2e:e7:3e:1e:e7: b3:56:9a:77:22:34:8f:fc:d7:ae:e1:a8:b8:6d:8a: 15:4d:3b:3c:62:8c:16:9a:11:26:e6:d0:45:32:c1: 47:0a:ba:2e:16:b7:0f:10:76:46:e8:d4:43:88:c1: 3f:dd:99:7d:57:67:7e:5e:90:16:73:de:de:db:20: fa:de:63:b7:e8:84:5b:5d:52:90:b7:e9:22:e5:36: 0e:c9:6b:a1:8e:85:b6:a6:75:04:a7:0e:cc:23:6f: 67:29:c5:96:af:9e:42:08:16:89:dc:b6:1f:20:80: 76:3a:9e:01:ef:60:4b:a4:6d:04:45:e6:2e:48:e9: 4b:f1:db:c0:59:09:df:ce:56:16:8f:84:77:c1:7c: 0f:91:52:fc:10:0c:97:74:41:c8:83:6d:68:6f:75: c8:9c:59:37:3e:b6:02:02:f1:d9:4b:bd:e5:af:e2: 81:d2:ba:0d:d1:f2:27:db:b4:61:5d:d7:e1:d2:f8: d9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:90:EE:BC:E8:37:6F:24:6C:78:D0:8C:CC:9C:39:3F:42:A4:7F:36 X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:68:c5:b2:67:03:b1:86:b1:88:f1:9a:d1:d8:11:ee:82:5f: 93:1f:87:b3:46:4e:03:f1:8c:0a:8d:64:08:f5:41:ae:f9:da: eb:24:5b:86:e4:bc:f3:ec:d1:e7:71:63:dd:53:4f:28:41:dd: ba:98:7a:85:5b:34:2e:c8:ee:07:dc:47:0a:05:8c:30:c3:39: 29:04:7d:65:9f:5a:89:87:d2:ab:15:14:e2:4a:7d:00:57:d5: f6:59:c3:57:28:ec:9e:3e:2c:47:7f:c8:b7:28:3f:64:02:18: 75:e9:51:86:f3:98:67:3c:3d:20:cb:90:1f:3e:44:38:8e:2b: 55:0a:62:c7:9f:e3:a9:08:5d:b6:21:7d:bc:b5:10:5a:4f:c0: 21:74:c1:04:0f:10:d4:f3:8e:02:83:9e:4c:77:d8:15:a3:04: 67:98:d1:58:eb:d4:c6:3e:e6:a9:43:0e:b4:d1:21:22:44:0f: 42:e4:77:1a:8f:c1:74:0b:b9:04:de:5b:12:07:10:2c:50:a2: 99:71:cf:97:77:69:26:e2:cd:8e:4c:56:dd:5e:e8:59:e2:4e: 81:9d:ed:bc:17:db:3a:35:83:9d:a0:0d:46:ce:53:bd:1d:66: 95:f7:c8:ad:81:45:fd:28:cc:e4:9a:e1:ec:06:da:2e:d7:03: 57:27:d1:e4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEqnzN03/ATPFWf1og7QUWrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjYxMDExMTEwMDM4WhcNMjYxMDEyMTEwMDM4WjAzMTEwLwYDVQQD Eyg5ZjkwZWViY2U4Mzc2ZjI0NmM3OGQwOGNjYzljMzkzZjQyYTQ3ZjM2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3F7BQpPgTj/gjv3EfIQxAGwo/Ivu 2bi9EQT+fWBgZwcPYSxA2phb9EsCbZ4zZsu0x1BeYz6z9hM7Ns0OB+iPESpj+L6+ Luc+HuezVpp3IjSP/Neu4ai4bYoVTTs8YowWmhEm5tBFMsFHCrouFrcPEHZG6NRD iME/3Zl9V2d+XpAWc97e2yD63mO36IRbXVKQt+ki5TYOyWuhjoW2pnUEpw7MI29n KcWWr55CCBaJ3LYfIIB2Op4B72BLpG0EReYuSOlL8dvAWQnfzlYWj4R3wXwPkVL8 EAyXdEHIg21ob3XInFk3PrYCAvHZS73lr+KB0roN0fIn27RhXdfh0vjZSwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ+Q7rzoN28kbHjQjMycOT9CpH82MB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMGjFsmcD sYaxiPGa0dgR7oJfkx+Hs0ZOA/GMCo1kCPVBrvna6yRbhuS88+zR53Fj3VNPKEHd uph6hVs0LsjuB9xHCgWMMMM5KQR9ZZ9aiYfSqxUU4kp9AFfV9lnDVyjsnj4sR3/I tyg/ZAIYdelRhvOYZzw9IMuQHz5EOI4rVQpix5/jqQhdtiF9vLUQWk/AIXTBBA8Q 1POOAoOeTHfYFaMEZ5jRWOvUxj7mqUMOtNEhIkQPQuR3Go/BdAu5BN5bEgcQLFCi mXHPl3dpJuLNjkxW3V7oWeJOgZ3tvBfbOjWDnaANRs5TvR1mlffIrYFF/SjM5Jrh 7AbaLtcDVyfR5A== -----END CERTIFICATE-----Generated at Sun Oct 11 18:03:28 2026 by rpki-client