$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft File: 6985kESx8cxhzHceibSdI4WCwH0.mft (raw, json) Hash identifier: pCyeV5A2T+0I05Km2n4XQ3f1dOQF3BwJlz1Z2csOoFM= Subject key identifier: A3:87:CB:C3:4A:B1:05:68:F3:EB:25:CA:A7:37:F6:6E:46:54:75:09 Authority key identifier: EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D Certificate issuer: /CN=ebdf399044b1f1cc61cc771e89b49d238582c07d Certificate serial: 01A17BF284C04A1A613C6485B01D0D902E04 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft Manifest number: 013F Signing time: Tue 27 Oct 2026 06:00:53 +0000 Manifest this update: Tue 27 Oct 2026 06:00:53 +0000 Manifest next update: Wed 28 Oct 2026 06:00:53 +0000 Files and hashes: 1: 0R8JegqJS72TSxgps8LkSaZO93M.roa (hash: bzPHmYAxh9zxsAi7FMhRtpwbiOeWUj0UvZqNZEFvXuM=) 2: 1fcVWlv-qx152QmoD9YOcrUS7Lg.roa (hash: wlUBrp/1FRbe3QO4vxFglbQf+Jkile5NKFRk8v42yDk=) 3: 6985kESx8cxhzHceibSdI4WCwH0.crl (hash: gI+qzZl4MPd1MyD9ShzVeyZs/PRAJMfMDLIDCqUfhIg=) 4: A4U-7phwTYkef8mR1dIeFnz9Wvk.roa (hash: gfDOpM+dmbKKBzSCVie0Kkmz1ZyFgU7RfrvMNCIF264=) 5: ACiq7PUnfxPw7VUiJHMeBlWe2W8.roa (hash: dErc7vBkv+mz2i4cCcDjrz1Nr+sQb9Sm3cGcguldqVk=) 6: AZGSfvVF2aBSDRn_ihzcIWfpdcQ.roa (hash: EVb7Mj3OG5H0UMytTB6DQ5yOP2z+yP5zkMEJ8YGMA1I=) 7: R7Pf0EzaX-yFRMbU80A9k7eGd_0.roa (hash: jeXZAN8VxFOPEzKegeMYU59ubOxlTc5uTncI21wjCK8=) 8: XJq96t3AYbRCnfS7nh1tT1GIo2o.roa (hash: DCbCNIcEwYvcic8+avZqalzxQi8AUgdFK18jg339Z7s=) 9: YJtrcFArWD_uz2yNOX-m6WSFQ3M.roa (hash: xruXaUcy87Eg8MhTGHBVaGMg8Mu4blgygDn6oYs8oqo=) 10: _sgEk7zklCfZtC1O4_dCCLRdlMg.roa (hash: wKMlHNJ1K28OmmB3WsfZYFrOfB6X9R2aDNRCcwZc7Es=) 11: c2w3QKoPlPH3vBuEtnfoEyv9rN4.roa (hash: Zj3hvlJbIFgWC7wJJ6+gJpyVaGnVyiWWtkjmA0jc+ss=) 12: foy3rmrTvDgjTDIvhlnm9qcAC-0.roa (hash: d3xSjhKSrxDttilu81KtUtjLRHSZdD9mi/Rkqyd0zhw=) 13: uA-waARm5JZjm1RSOdEWi8gtdhw.roa (hash: q2jhBOEKA13+Gi8bblMPwqRhwin9tcNd6S6FnjZqGkU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 06:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7b:f2:84:c0:4a:1a:61:3c:64:85:b0:1d:0d:90:2e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ebdf399044b1f1cc61cc771e89b49d238582c07d Validity Not Before: Oct 27 06:00:53 2026 GMT Not After : Oct 28 06:00:53 2026 GMT Subject: CN=a387cbc34ab10568f3eb25caa737f66e46547509 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:21:dc:6e:fa:de:5c:0f:c3:2d:b1:17:0d:55: 29:3f:50:b0:f4:ac:6a:3e:8e:23:79:09:e6:0e:db: d1:ec:08:d7:bc:81:46:50:c1:17:48:9f:e8:c8:2d: de:76:25:1f:15:46:e4:b8:83:69:e3:56:db:f8:0e: bb:9c:e5:56:df:72:cf:36:90:3e:db:6e:cf:69:52: 69:15:a5:df:da:5b:e2:f1:91:0c:1e:95:ca:36:0a: b9:49:d8:fe:84:de:93:0f:52:f5:f7:89:0e:2e:9d: 10:c5:dd:0e:c0:47:da:a3:a1:1c:a4:66:c4:9a:51: 23:e1:ef:7c:44:3b:73:9d:66:07:3f:74:4d:5d:c4: d4:2b:13:fa:7c:ed:fd:a5:fe:6b:1c:03:36:04:a6: bc:ff:88:f6:fb:83:5e:a0:b8:2c:93:d7:49:6d:3d: 9a:f5:ba:a3:f7:b4:e4:11:a6:65:96:12:20:d7:16: 06:09:29:6e:0c:8e:94:ea:12:8e:8a:88:7b:99:df: 77:62:b4:88:d0:1e:0f:2f:84:cf:a3:90:39:16:a0: b3:09:b1:e8:05:b7:c2:16:19:1b:c0:2b:cb:14:1b: 17:55:8b:f4:4a:bb:62:25:6d:ce:ac:72:65:14:41: 85:f2:54:95:f7:54:87:d8:1b:58:d6:b9:5e:bc:e9: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:87:CB:C3:4A:B1:05:68:F3:EB:25:CA:A7:37:F6:6E:46:54:75:09 X509v3 Authority Key Identifier: keyid:EB:DF:39:90:44:B1:F1:CC:61:CC:77:1E:89:B4:9D:23:85:82:C0:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6985kESx8cxhzHceibSdI4WCwH0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/8cac0c-3426-4f07-af20-cbb95183b27a/1/6985kESx8cxhzHceibSdI4WCwH0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:09:39:ba:bc:5a:93:6a:e4:c8:7b:92:c2:1f:6e:cc:4b:de: 74:82:bb:72:5b:83:db:fa:36:8e:14:e4:6e:a7:4e:52:cd:b4: 45:48:47:fd:5a:9c:30:77:c2:d6:bd:30:7f:9b:0b:66:e8:33: e9:fe:eb:a6:ad:1c:15:93:c5:1e:58:94:30:9d:9b:6f:13:d7: 96:52:47:eb:38:b8:c5:20:20:6d:b9:82:2b:7a:25:df:94:e6: 85:3c:7f:c7:aa:92:c3:39:cc:4f:d8:9c:4a:a4:28:c2:d5:5a: 5a:49:73:08:92:88:02:01:be:2a:78:64:01:2d:c8:4a:b8:82: 25:cd:64:49:09:50:51:d6:d1:d4:97:19:af:55:4a:12:11:23: 8d:45:40:07:5e:0c:f8:8a:fc:c1:22:06:6c:f3:ad:e3:b7:3d: 8c:f1:d5:66:96:4e:ed:7e:c2:92:01:e7:24:6d:83:0a:32:c4: 5d:6f:d7:3f:b5:1c:e9:65:6c:ab:3b:f6:41:31:d5:f2:aa:00: c4:c6:bc:1e:ca:00:dd:e7:d0:06:1e:75:9a:4a:6c:93:0e:51: 41:c2:31:c9:6a:e8:6e:5b:9c:03:44:2f:22:8a:a7:e0:bb:4c: 99:68:bf:8a:7b:72:18:db:ff:f2:c3:1e:0b:a6:aa:3d:af:cb: 0c:48:13:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF78oTAShphPGSFsB0NkC4EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGViZGYzOTkwNDRiMWYxY2M2MWNjNzcxZTg5YjQ5ZDIzODU4 MmMwN2QwHhcNMjYxMDI3MDYwMDUzWhcNMjYxMDI4MDYwMDUzWjAzMTEwLwYDVQQD EyhhMzg3Y2JjMzRhYjEwNTY4ZjNlYjI1Y2FhNzM3ZjY2ZTQ2NTQ3NTA5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiHcbvreXA/DLbEXDVUpP1Cw9Kxq Po4jeQnmDtvR7AjXvIFGUMEXSJ/oyC3ediUfFUbkuINp41bb+A67nOVW33LPNpA+ 227PaVJpFaXf2lvi8ZEMHpXKNgq5Sdj+hN6TD1L194kOLp0Qxd0OwEfao6EcpGbE mlEj4e98RDtznWYHP3RNXcTUKxP6fO39pf5rHAM2BKa8/4j2+4NeoLgsk9dJbT2a 9bqj97TkEaZllhIg1xYGCSluDI6U6hKOioh7md93YrSI0B4PL4TPo5A5FqCzCbHo BbfCFhkbwCvLFBsXVYv0SrtiJW3OrHJlFEGF8lSV91SH2BtY1rlevOn+ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKOHy8NKsQVo8+slyqc39m5GVHUJMB8GA1UdIwQY MBaAFOvfOZBEsfHMYcx3Hom0nSOFgsB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAt Y2JiOTUxODNiMjdhLzEvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMC84Y2FjMGMtMzQyNi00ZjA3LWFmMjAtY2JiOTUxODNiMjdh LzEvNjk4NWtFU3g4Y3hoekhjZWliU2RJNFdDd0gwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYAk5urxa k2rkyHuSwh9uzEvedIK7cluD2/o2jhTkbqdOUs20RUhH/VqcMHfC1r0wf5sLZugz 6f7rpq0cFZPFHliUMJ2bbxPXllJH6zi4xSAgbbmCK3ol35TmhTx/x6qSwznMT9ic SqQowtVaWklzCJKIAgG+KnhkAS3ISriCJc1kSQlQUdbR1JcZr1VKEhEjjUVAB14M +Ir8wSIGbPOt47c9jPHVZpZO7X7CkgHnJG2DCjLEXW/XP7Uc6WVsqzv2QTHV8qoA xMa8HsoA3efQBh51mkpskw5RQcIxyWroblucA0QvIoqn4LtMmWi/intyGNv/8sMe C6aqPa/LDEgT/w== -----END CERTIFICATE-----Generated at Tue Oct 27 17:22:49 2026 by rpki-client