$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft File: RklSvBZUQexuLiAQyTPcgw82FzE.mft (raw, json) Hash identifier: 5mTeBQqI0pkMaotx1hEXkZFjHDn7QHzFveh00IlVXAk= Subject key identifier: 0F:C8:9D:5B:6E:6F:A2:E6:DD:BD:FD:DD:D6:C9:90:8D:49:5A:2B:97 Authority key identifier: 46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 Certificate issuer: /CN=464952bc165441ec6e2e2010c933dc830f361731 Certificate serial: 01A1539BD5EB2A41DF1BD1DFEAFFE1E08285 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft Manifest number: 0E65 Signing time: Mon 19 Oct 2026 10:01:24 +0000 Manifest this update: Mon 19 Oct 2026 10:01:24 +0000 Manifest next update: Tue 20 Oct 2026 10:01:24 +0000 Files and hashes: 1: 2Y_-mHGnzxUPlZ_jGKRDY2NiGkQ.roa (hash: l4MC4MCnTo9aK0gBX0Y1Dtyc7m8oK3j/OFRHObo5fQ8=) 2: 9RXKGNoQqaoli9DhcQsdjNmIZDM.roa (hash: DQcr0sYa1q2Gt2MZ2I3+zmJMFEosHP1WHkCLefzFplA=) 3: EAdzQIoOkWIxeAX2egmYbOGa2TY.roa (hash: FmYvFp8b6P7aKS1iSZ+Aa3ljJdjXeyIZV5bYVlFv2Os=) 4: EtqpvJ3wwieaUcuII15zgYzT3Po.roa (hash: tLmfVIM+XcsVwC8W6onwkX2PrlAqRhgWxMYsh665F2M=) 5: GuPly7j8d_8hrdV6973zg9KyNI8.roa (hash: CvukChB3JkEWj42WDk+cLkdDd2Cw7kdqbd82L0Do7xM=) 6: HjsUoqoPK-jxSAesZLIKCYVg8Ao.roa (hash: HZ81msEvNMRqk5s5wQeDrE3aVOYI9QLZN/fVxCO3LFE=) 7: KlPxQyo9WM4UNkFXk-JKNQhxWCQ.roa (hash: HuxVfxllN8xXG7na3DWRijnzCXhsSpD5nVqys00gQzs=) 8: RklSvBZUQexuLiAQyTPcgw82FzE.crl (hash: ochOu/tI1137VMWJMV/P3MKmYmOldEPSgV/YHq8ELF8=) 9: UjcpoND4jTWKKcWkX2exhWEuEY8.roa (hash: XLZikrKhG93A0xMENVh7LOQQT8lhvwT0f4TqN/G3rY0=) 10: aV15c49lSGl3dteQSHc3IvNZ2Yw.roa (hash: idSDFzUORIOI2C3DdmyZjUWIVKrr2rvoia+URiMKZUk=) 11: asuyLktKYq4NNc_2uebIjQGmRG4.roa (hash: NZW9P6QltbKs99Px6iLY6nMHem8ps5RIUgsWAHR4fr8=) 12: foWBRrwQ_J-5QZyjYh0-06D2Jgg.roa (hash: F50Zb/hD5QHDYX5caLDSp9PIYVBJP0rELAuJY0qPe6U=) 13: jZ1bJSEs7oIxqTsj0Xr5CRUuyVM.roa (hash: S2iYYZF96vNr3811Fr7SoSQvJlJ441QVtJq5Mo3TL4I=) 14: jdhRRSqw1KV-OBkZuUAJ-tCWDik.roa (hash: PZnlHT69L4VcU/X0HEwE+Wn3yCWoZ+g03Z4fHifOKPg=) 15: ta9QPHmvElN9LQbU3Ml0S8yt9cs.roa (hash: pWwk3bYPZv/2DLVIuX6tB76kOFRVtUjaqBNqlUqnu+g=) 16: wea1j7CCiOwKhbp9xRs9xEsak8o.roa (hash: hckz/qMoMAZzO9HmBfzADkSbkz16uEss9Ro4N3hyVDs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 10:01:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:53:9b:d5:eb:2a:41:df:1b:d1:df:ea:ff:e1:e0:82:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=464952bc165441ec6e2e2010c933dc830f361731 Validity Not Before: Oct 19 10:01:24 2026 GMT Not After : Oct 20 10:01:24 2026 GMT Subject: CN=0fc89d5b6e6fa2e6ddbdfdddd6c9908d495a2b97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:04:da:e2:fb:a6:ba:c3:42:6f:26:3f:be:72: 0b:2d:0f:73:f8:99:9d:66:82:f1:54:b0:32:bb:01: 4e:75:27:26:ad:be:bd:2b:bf:fb:4f:40:51:89:24: b9:5f:37:2a:e2:a9:a0:3f:a2:f1:ae:a8:04:ff:ab: f4:5f:2d:f8:c3:49:1b:1e:57:b2:98:51:47:37:b5: 33:76:69:7b:73:fa:e2:19:b3:e4:1e:e2:ca:1f:fb: 11:15:a8:d4:ef:43:71:68:b0:9e:c6:28:13:7a:57: a4:9a:30:9c:2b:97:fa:40:58:39:38:96:29:1a:f1: 33:a8:e0:78:77:db:da:bb:a6:00:66:82:fa:26:cd: b9:d2:b0:3b:ec:e4:6c:f0:23:c4:14:7c:a2:31:5f: fb:4a:52:e0:b7:dc:72:1e:08:56:60:e4:44:1f:ce: 64:9b:f8:89:7d:2f:d2:19:1a:93:ea:1a:b6:63:f8: 72:a3:bf:cb:5f:45:c1:9e:a2:bc:df:c5:78:89:b3: db:25:3a:32:4c:65:2b:47:5f:72:1b:29:35:a2:2a: 2a:ed:0c:7f:06:a9:88:6d:11:1a:da:6f:e0:de:87: 0d:b7:52:eb:d1:1d:4b:ec:b7:72:1c:83:ea:62:10: ab:44:1d:37:bf:a0:0b:f9:0a:6b:73:48:0e:30:88: 50:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:C8:9D:5B:6E:6F:A2:E6:DD:BD:FD:DD:D6:C9:90:8D:49:5A:2B:97 X509v3 Authority Key Identifier: keyid:46:49:52:BC:16:54:41:EC:6E:2E:20:10:C9:33:DC:83:0F:36:17:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RklSvBZUQexuLiAQyTPcgw82FzE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/01058a-4a82-4818-972d-842858122bbc/1/RklSvBZUQexuLiAQyTPcgw82FzE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:62:1d:d5:02:b9:a5:7e:e7:f2:e6:39:9e:fe:3c:5d:8d:fe: 0c:03:62:0e:07:54:9d:2a:fb:be:55:be:69:ff:67:c9:d6:ad: b0:e1:c7:90:2b:be:4d:f9:19:e6:1b:73:47:34:8d:64:ac:9b: 6b:eb:e3:a3:16:8c:83:e5:e8:91:7f:9b:af:2a:4b:b4:7c:f2: 95:bb:50:ea:9f:16:56:05:04:e8:a1:ad:49:0c:12:05:7e:22: 0f:e3:fb:2e:2d:91:e4:7b:c5:45:61:fc:b3:3c:6c:50:3f:7c: 37:c5:57:7a:c6:7c:2a:e8:d6:06:b2:59:9e:3e:f9:34:ed:41: c8:33:66:17:a2:83:48:c1:e2:0f:cb:d4:2f:84:20:a2:4d:71: 76:05:b8:24:cc:b1:fb:8f:fa:fe:df:d2:0e:52:e3:50:31:a5: 90:89:d2:eb:14:07:86:ea:a6:47:4d:3a:03:ec:90:a4:02:10: 31:7b:c6:c2:db:f6:da:ea:fb:b2:14:39:6d:70:c2:28:16:02: 3b:56:04:20:af:7e:ab:46:ea:4b:e5:cd:6e:5c:f1:47:a7:90: 58:f0:38:5d:17:4b:da:6b:86:1d:10:ac:c0:2d:2e:b1:f1:25: 49:99:0a:19:f5:82:a0:a7:08:89:ab:2b:2f:b4:50:53:5a:91: cd:46:27:56 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFTm9XrKkHfG9Hf6v/h4IKFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ2NDk1MmJjMTY1NDQxZWM2ZTJlMjAxMGM5MzNkYzgzMGYz NjE3MzEwHhcNMjYxMDE5MTAwMTI0WhcNMjYxMDIwMTAwMTI0WjAzMTEwLwYDVQQD EygwZmM4OWQ1YjZlNmZhMmU2ZGRiZGZkZGRkNmM5OTA4ZDQ5NWEyYjk3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQTa4vumusNCbyY/vnILLQ9z+Jmd ZoLxVLAyuwFOdScmrb69K7/7T0BRiSS5Xzcq4qmgP6LxrqgE/6v0Xy34w0kbHley mFFHN7Uzdml7c/riGbPkHuLKH/sRFajU70NxaLCexigTelekmjCcK5f6QFg5OJYp GvEzqOB4d9vau6YAZoL6Js250rA77ORs8CPEFHyiMV/7SlLgt9xyHghWYOREH85k m/iJfS/SGRqT6hq2Y/hyo7/LX0XBnqK838V4ibPbJToyTGUrR19yGyk1oioq7Qx/ BqmIbREa2m/g3ocNt1Lr0R1L7LdyHIPqYhCrRB03v6AL+Qprc0gOMIhQnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFA/InVtub6Lm3b393dbJkI1JWiuXMB8GA1UdIwQY MBaAFEZJUrwWVEHsbi4gEMkz3IMPNhcxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQt ODQyODU4MTIyYmJjLzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi8wMTA1OGEtNGE4Mi00ODE4LTk3MmQtODQyODU4MTIyYmJj LzEvUmtsU3ZCWlVRZXh1TGlBUXlUUGNndzgyRnpFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmId1QK5 pX7n8uY5nv48XY3+DANiDgdUnSr7vlW+af9nydatsOHHkCu+TfkZ5htzRzSNZKyb a+vjoxaMg+XokX+brypLtHzylbtQ6p8WVgUE6KGtSQwSBX4iD+P7Li2R5HvFRWH8 szxsUD98N8VXesZ8KujWBrJZnj75NO1ByDNmF6KDSMHiD8vUL4Qgok1xdgW4JMyx +4/6/t/SDlLjUDGlkInS6xQHhuqmR006A+yQpAIQMXvGwtv22ur7shQ5bXDCKBYC O1YEIK9+q0bqS+XNblzxR6eQWPA4XRdL2muGHRCswC0usfElSZkKGfWCoKcIiasr L7RQU1qRzUYnVg== -----END CERTIFICATE-----Generated at Mon Oct 19 15:57:25 2026 by rpki-client