$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft File: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft (raw, json) Hash identifier: pRucvJHFC/K+zw+PbZGuMrLzj6KpWpTYOd0+yA21AHg= Subject key identifier: 1A:89:48:E4:D3:B1:65:35:50:FE:48:97:0C:CA:02:12:D3:B6:62:00 Authority key identifier: E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA Certificate issuer: /CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Certificate serial: 01A13D4AB50F6D282D3458442A3A630D267F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft Manifest number: 0FA7 Signing time: Thu 15 Oct 2026 02:01:08 +0000 Manifest this update: Thu 15 Oct 2026 02:01:08 +0000 Manifest next update: Fri 16 Oct 2026 02:01:08 +0000 Files and hashes: 1: 1BUsNPvxh-nEaW12HiIotyTOmeE.roa (hash: Eb+LrSVeh6nCpX6RDLUkP/OBvISRkTfhNDgbqOiV4vY=) 2: 5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl (hash: spmOVR/dZx0l8KCuD1byyZV8fpVxgZkWTTpdL3uFj+s=) 3: ARSSC9zHIGL8uPCTzOB-i0uK97g.roa (hash: xCWcyeUZ+Gey9KypecDF2UwLJVOuDsCEWO1xuzT51Jc=) 4: DNw48YVZHSvMBEUuvya7j6ydIIE.roa (hash: GQAHxbg19rDLpPVxP7BsuOIaocVhRmeV7czR8XW3KEM=) 5: Hc1-eWA2FbYrQtAUjfotRVnvebo.roa (hash: +wyBxaU8SXxYP9llfsxrS9RJyhJbGb3UqzpK5s4+GG4=) 6: SkR9OA9_dcUyBRQNQpyR0J3fL7U.roa (hash: ZkaVuswuFGESnBKz9fl3MI+QLEQQbxe2PSzXDPH+HoU=) 7: Yi680tyzJGfIAumOzsiKpDqyZ-g.roa (hash: k3JeaICryRPO3kOoypJyQPVZrn3TdIMe/T4lvOZb9yo=) 8: _Mqv_JYiF8FH_vcrUd6z5iBTnaA.roa (hash: wgYSTyAlZdDyfFsa4EFJ55y+CMO3Ta5R634E3wfbtNM=) 9: fJW7EYfD-50gKtZxv7Uhc3IrH24.roa (hash: w436OnY6qjYWmprn/yHiq2hzXNy8k69Hv/EWXbmw8n0=) 10: kRt0tDJSVJ_omHpQrdWtGbX3JFE.roa (hash: CrMe+KpHmjRar77RkffCDnmY1XQPJsNcEG8vS6cPsZI=) 11: mFW4zADWbotzoU0wzEidrSWH-UQ.roa (hash: v8M/uk7P0Ux+9wY32sSP1YJp6v/XbIvApRLKBpQlUaU=) 12: o0J93e2ynPAO_ooBBrsbWpkJmVk.roa (hash: 9+ceM91NO20zNjq2ssN5ZXrUJuK961JXQqmxnpqcpFM=) 13: qIXOSdQAmM-9W59tIvFrjCOacag.roa (hash: t9/LH8Ao84MhMXwBIeg/CGYXSM84XUqQW9CXizDPd2g=) 14: scmHvFPvVyV9IKgskiPXIFZZliA.roa (hash: x+i//mSRz34wAqe4SEf89qg0Z8YDvymsxjLahBkl1LM=) 15: tEK5xeFRZZT0xmnBo_SJCuhaz6M.roa (hash: Ptc+FGC+cpAZyzLKTVYPy89IR+7KjxXcG3j40Vai/9Y=) 16: uNRa4zAzcrZDnOveV1CME0I3J4w.roa (hash: OR0NOoULuJszdvy9CmwD+cwSKbUxjzkFUFY9AzTSQAA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 Oct 2026 02:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:3d:4a:b5:0f:6d:28:2d:34:58:44:2a:3a:63:0d:26:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e4be8efec1fb03d8af979af1cba13a0845a7b0ba Validity Not Before: Oct 15 02:01:08 2026 GMT Not After : Oct 16 02:01:08 2026 GMT Subject: CN=1a8948e4d3b1653550fe48970cca0212d3b66200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:74:bf:7c:88:d0:da:1a:2a:26:ad:15:21:9a: 34:54:0f:a5:d6:4a:4a:bb:40:00:79:4d:62:30:8f: 18:e6:c2:7f:e7:76:63:d2:a8:b2:2d:24:0c:fd:0e: 54:ca:9a:39:a2:c6:ed:19:99:2c:a9:11:ee:e3:49: c7:a2:ba:d6:62:f4:84:d8:ec:83:13:8e:56:bb:97: 4a:49:de:00:55:55:71:be:1c:0b:fa:a1:a7:f5:c2: 95:8d:89:36:e7:91:85:44:b5:83:d0:20:ee:a0:d8: 93:04:c9:ba:e4:bb:f5:cc:96:05:f5:af:90:8a:68: 8f:4a:7c:d2:2b:fc:ab:29:8f:c7:b4:c3:06:52:c8: ba:ee:62:04:6b:51:bd:63:d4:df:65:c4:35:18:c4: 1b:27:6f:79:1f:f2:aa:71:c9:d1:8c:56:7c:fd:70: ea:a6:a9:82:eb:68:dc:26:b1:d3:37:8f:65:72:5a: 99:33:5b:37:fc:63:55:99:b1:5f:2f:c2:44:1d:d1: dc:bd:81:c1:d8:ea:35:53:6e:c8:0f:89:cd:1e:ae: b9:0c:85:7a:2e:b6:cc:b1:05:67:f4:7b:95:ed:30: cc:e7:c7:41:3f:d1:85:40:37:e7:76:80:40:9d:ac: 95:87:b7:ec:3c:dd:42:2f:35:38:08:fc:d5:20:ec: b2:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:89:48:E4:D3:B1:65:35:50:FE:48:97:0C:CA:02:12:D3:B6:62:00 X509v3 Authority Key Identifier: keyid:E4:BE:8E:FE:C1:FB:03:D8:AF:97:9A:F1:CB:A1:3A:08:45:A7:B0:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5L6O_sH7A9ivl5rxy6E6CEWnsLo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0f9f02-c2ad-4ec8-b4d5-dfbfa3fcf021/1/5L6O_sH7A9ivl5rxy6E6CEWnsLo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:ce:c2:61:84:69:ce:2d:ca:70:51:a9:59:d2:38:35:12:82: 33:d3:27:c0:ca:cb:d1:f6:cc:52:cd:71:4d:fb:a9:0e:90:66: 4e:63:56:2c:a2:fc:af:86:23:37:20:8c:da:62:93:15:49:f8: 66:d2:07:4d:f4:7e:e3:17:a2:09:e6:37:c4:ec:57:78:15:20: 40:b0:43:be:f5:7e:fc:bb:8b:77:37:40:a0:7c:a2:f6:77:a1: 9b:cf:22:06:48:ba:f8:b6:cc:c1:84:5c:f5:61:f4:7a:8f:ce: 37:95:5f:09:92:d2:f9:61:4a:4a:07:3f:2f:2d:ca:b9:5d:57: 45:51:2f:28:36:00:10:d1:36:7d:27:84:51:d3:c2:b3:d1:a5: d9:f1:18:e2:92:be:7d:7e:72:e3:7f:6e:36:73:7e:08:ee:f3: c4:81:05:54:74:91:ef:f4:50:2b:e3:64:73:6f:08:e0:30:23: a8:13:20:fe:55:df:97:59:45:26:38:a3:e2:c3:dd:fc:bc:18: ea:17:cc:a5:c1:f9:97:2d:cd:6f:03:91:fa:c2:c8:75:ba:9f: 22:f6:14:e5:2b:2a:75:6c:23:23:cc:ee:a7:90:88:7c:92:2f: 19:82:09:03:a3:fa:11:14:73:f6:eb:f8:66:26:68:15:3d:81: a1:2b:9a:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaE9SrUPbSgtNFhEKjpjDSZ/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU0YmU4ZWZlYzFmYjAzZDhhZjk3OWFmMWNiYTEzYTA4NDVh N2IwYmEwHhcNMjYxMDE1MDIwMTA4WhcNMjYxMDE2MDIwMTA4WjAzMTEwLwYDVQQD EygxYTg5NDhlNGQzYjE2NTM1NTBmZTQ4OTcwY2NhMDIxMmQzYjY2MjAwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3S/fIjQ2hoqJq0VIZo0VA+l1kpK u0AAeU1iMI8Y5sJ/53Zj0qiyLSQM/Q5Uypo5osbtGZksqRHu40nHorrWYvSE2OyD E45Wu5dKSd4AVVVxvhwL+qGn9cKVjYk255GFRLWD0CDuoNiTBMm65Lv1zJYF9a+Q imiPSnzSK/yrKY/HtMMGUsi67mIEa1G9Y9TfZcQ1GMQbJ295H/KqccnRjFZ8/XDq pqmC62jcJrHTN49lclqZM1s3/GNVmbFfL8JEHdHcvYHB2Oo1U27ID4nNHq65DIV6 LrbMsQVn9HuV7TDM58dBP9GFQDfndoBAnayVh7fsPN1CLzU4CPzVIOyy+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBqJSOTTsWU1UP5IlwzKAhLTtmIAMB8GA1UdIwQY MBaAFOS+jv7B+wPYr5ea8cuhOghFp7C6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUt ZGZiZmEzZmNmMDIxLzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wZjlmMDItYzJhZC00ZWM4LWI0ZDUtZGZiZmEzZmNmMDIx LzEvNUw2T19zSDdBOWl2bDVyeHk2RTZDRVduc0xvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnc7CYYRp zi3KcFGpWdI4NRKCM9MnwMrL0fbMUs1xTfupDpBmTmNWLKL8r4YjNyCM2mKTFUn4 ZtIHTfR+4xeiCeY3xOxXeBUgQLBDvvV+/LuLdzdAoHyi9nehm88iBki6+LbMwYRc 9WH0eo/ON5VfCZLS+WFKSgc/Ly3KuV1XRVEvKDYAENE2fSeEUdPCs9Gl2fEY4pK+ fX5y439uNnN+CO7zxIEFVHSR7/RQK+Nkc28I4DAjqBMg/lXfl1lFJjij4sPd/LwY 6hfMpcH5ly3NbwOR+sLIdbqfIvYU5SsqdWwjI8zup5CIfJIvGYIJA6P6ERRz9uv4 ZiZoFT2BoSuaTw== -----END CERTIFICATE-----Generated at Thu Oct 15 11:28:22 2026 by rpki-client