$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft File: T4rqLwJfSVvqzufOWoggUZ3aE3A.mft (raw, json) Hash identifier: xAbDGI95BFwJE4HAiaFK1NugiGsSomHOcHvMg1mLHSI= Subject key identifier: 5F:AA:C0:7B:17:6C:10:42:81:82:DC:FD:BC:5D:10:D0:75:F5:DD:5B Authority key identifier: 4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 Certificate issuer: /CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Certificate serial: 01A1551C981B0125E66A8F7F8F73852EBE43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft Manifest number: 1B5F Signing time: Mon 19 Oct 2026 17:01:39 +0000 Manifest this update: Mon 19 Oct 2026 17:01:39 +0000 Manifest next update: Tue 20 Oct 2026 17:01:39 +0000 Files and hashes: 1: 1-wBsQnm28tUXcoKxVRlBLYBCu-s.roa (hash: qxdufcUUaMn5EZeCpwUTNX6nIAfhQU+7lHeBQPbYV20=) 2: 1zpG2CVrxsMORx6-f7bFYATXDp8.roa (hash: ZOZ+1A/5qrE+UhYF92TopbAqYAeLlDGmriRx3ZRkiq8=) 3: 2cSsNxEkMXdX8udFtydZtUrw4eE.roa (hash: 0BavGB+tI61POh6iQrEJRfFZeL9cXqVHnf5DK1BoX8Y=) 4: 4BT3ESnzNjCT2x59JVbAAXxSXAY.roa (hash: O8CcngTVUlHleqwd4kGt0w16qDAwdr4oH0nwRI5FfLI=) 5: 67Hu1VCqZOSeOiCM6FEEFd3iXlE.roa (hash: Him9pl9KpdgeG8GWKYKiLJdFav7i0xf6FzUlhcxDHRg=) 6: 7ZTyX9adnTNDDr2DkH9w3SeIE7Q.roa (hash: TDggRWtskV5FNrfGL200t0vlFEUm+QOeNFcEHwtHFss=) 7: Ezkbpw5h6Yu188ximBXledMTyHY.roa (hash: EUfk52t0TP+il+Ji1SToM3ssr1h7ZowDd/it1ELPNV0=) 8: FuaYYjgBfEQcCzdt3IfIOZHBF18.roa (hash: lZIUFdAbzhx1VS24I+2a5RfR2Jz8EjNumHCTBfayC3U=) 9: Hov6U5ZVW8cdcNKCk5lUHb3Lnkw.roa (hash: VRQ7H7vvIOcoLzyjhrMXqxjXmp38gz2oT9+Kuynel2c=) 10: MpedeZnqqfWdHaUYwzO5l8FT3pM.roa (hash: 75NfuiTmUQjPMCKkuZLw9T7cDXANU8tWdyz9AlGaZ6s=) 11: N0E_F_u9h5bIU-j9MGpdicwRJM4.roa (hash: 23BfC+EZdJUIXPiNf0+Gr0wVhGOB4qpNJ1OtcS1XZzc=) 12: NQ3alsbcYrDD3Id4_ZbBebDtKMQ.roa (hash: R7bDblUywN+L5+T5OsDfB/grAiWD1P3KTdK+6VLq0W8=) 13: OjY3C6L-EuPc2t0Qn-e-3bjWy-0.roa (hash: OthyvAnziDLpR9g+pkOT+1ZzWC7VC/seTw30st0/H/s=) 14: T4rqLwJfSVvqzufOWoggUZ3aE3A.crl (hash: 5JeAJWBO5+FHOTpImm1isKTWqAAbElOIkLj+ymvCKMA=) 15: UW3uCirPlSHTXeq2kWhdNXEEF_A.roa (hash: SLhda1CULfByTMm1GHCHLQiMUOu4j8DhX2dtlcfjO6M=) 16: kSRDcXV5BduSfvL7CkkTWshA1dU.roa (hash: tuGJ9p+esAzUMHyIoxPT4iHzxY3yItPA7UzoeT2/0vQ=) 17: mkAVPuJI8QOGwHX046ylOVj6YeQ.roa (hash: cHuseTitZM61+PjKXgr2SvysGLK0bdK5xs/hORXpxOQ=) 18: okpXovGo8Qws_PPRtlsVVUmZZzA.roa (hash: 4oR/V429uTC5kWQN94QEJqxEv4CSp9VQuHnF9qGLwmM=) 19: qyFRBJyuib1PnIx-vXa3UO6rHbk.roa (hash: ttUZYHflFlcNbkH75tZXAFD7K0f4LBSVLHQuKhH+hJo=) 20: sZQD0TfJ8HC_2qGUYRIygeuNHq0.roa (hash: KOmrBoIDja+ViB1TQrWYGvEgnzLPHGkGzbBf9gl0eY0=) 21: wl3GFHoVFq2V6agPvVTqKcV6mcw.roa (hash: kC952UxlZ4u8JejZZo0O0+1EVkE3lenB3kDD7eQXlTY=) 22: xh9-cYUUKhW8R7RtZCiBjbPkinU.roa (hash: KHkDJpMlqbbJXAmtu6AWC6oa3xuKdiclk8iuepf/pBc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Oct 2026 17:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:55:1c:98:1b:01:25:e6:6a:8f:7f:8f:73:85:2e:be:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f8aea2f025f495beacee7ce5a8820519dda1370 Validity Not Before: Oct 19 17:01:39 2026 GMT Not After : Oct 20 17:01:39 2026 GMT Subject: CN=5faac07b176c10428182dcfdbc5d10d075f5dd5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:97:4e:3e:21:3e:2a:34:ef:af:05:21:d0:24: bb:68:29:95:e8:6b:bd:04:01:18:fa:a2:3c:65:09: 87:25:63:ee:68:62:4b:97:26:ed:4e:58:b5:24:91: f1:47:a6:c9:5a:f5:22:a7:be:96:7e:85:fc:75:0b: f1:16:71:b2:4b:2a:56:1f:5f:2b:62:d2:33:4d:66: 35:dc:9b:5e:b8:09:07:aa:63:03:a6:ef:0b:73:2e: 97:e1:ca:ce:9b:a6:70:51:24:5e:c7:e4:6b:b6:fb: 3a:50:6e:6a:d2:60:27:ca:e2:d1:94:d1:44:49:b4: 50:0b:b2:8f:bd:e2:30:77:7d:15:f9:cc:ce:3a:ec: 40:85:e3:c9:55:c6:26:0c:a7:12:ff:ec:85:95:b1: af:15:b7:d0:78:b3:2e:0b:69:9d:03:1f:ec:68:e0: 40:4f:04:93:b3:f9:ef:20:01:6b:72:d9:a7:db:7c: 05:35:82:72:c1:59:ae:34:75:07:e7:aa:86:eb:e3: 71:19:f4:0d:c0:d4:ba:29:88:c6:63:b4:6a:f1:ca: 87:5f:4c:54:b4:26:29:3f:ea:08:61:94:54:31:3b: 3f:70:d3:9c:7f:32:7d:af:14:fe:71:b4:2a:50:26: e9:9a:cb:c2:97:0e:01:fd:be:c1:a1:a3:1e:65:40: 27:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:AA:C0:7B:17:6C:10:42:81:82:DC:FD:BC:5D:10:D0:75:F5:DD:5B X509v3 Authority Key Identifier: keyid:4F:8A:EA:2F:02:5F:49:5B:EA:CE:E7:CE:5A:88:20:51:9D:DA:13:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4rqLwJfSVvqzufOWoggUZ3aE3A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/eb70a3-17e1-4d86-8b9e-6080952f0e04/1/T4rqLwJfSVvqzufOWoggUZ3aE3A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:4c:7f:1b:6d:09:29:f7:e7:7e:fd:50:a7:6a:0f:d5:eb:eb: c1:5d:dd:0b:5b:7e:87:84:76:8d:a2:e5:29:8d:b4:44:c7:0e: 76:ec:25:92:a8:77:77:52:3f:9d:ff:4f:ef:fd:d7:77:0a:07: c9:1f:d0:d8:29:d2:46:ce:a0:36:ed:44:0d:2a:bc:5d:9a:49: ce:dc:66:82:1a:0f:84:43:76:3a:99:42:b9:df:8d:75:14:67: 3f:52:2d:91:42:0b:27:e7:a3:76:8f:5f:b6:55:d4:d2:97:2e: a3:7a:a5:60:f0:1f:29:df:f7:02:22:06:df:25:00:ea:93:44: 13:a4:21:3a:03:d3:66:29:19:6f:7f:26:d3:98:56:99:47:84: 6b:b4:c6:8d:5d:d6:4b:7c:23:d7:3e:2d:0a:e4:85:fc:b9:9f: 2e:44:6f:b8:c6:2e:18:b2:2d:a2:77:0a:88:5d:9d:d0:b1:42: c2:4d:11:e5:91:23:a4:7a:2d:ad:7d:36:cd:62:0c:cc:63:a6: 8c:a7:b8:a2:f7:3d:1e:af:10:73:35:75:6e:65:cc:b1:ec:3d: ac:9e:6c:4a:5d:d8:5e:85:2a:b0:54:a9:c1:6f:8c:c4:3b:d5: ba:f6:4a:09:f6:5b:41:1e:6d:bd:76:29:6b:78:f0:54:57:44: 62:e8:1c:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFVHJgbASXmao9/j3OFLr5DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmOGFlYTJmMDI1ZjQ5NWJlYWNlZTdjZTVhODgyMDUxOWRk YTEzNzAwHhcNMjYxMDE5MTcwMTM5WhcNMjYxMDIwMTcwMTM5WjAzMTEwLwYDVQQD Eyg1ZmFhYzA3YjE3NmMxMDQyODE4MmRjZmRiYzVkMTBkMDc1ZjVkZDViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspdOPiE+KjTvrwUh0CS7aCmV6Gu9 BAEY+qI8ZQmHJWPuaGJLlybtTli1JJHxR6bJWvUip76WfoX8dQvxFnGySypWH18r YtIzTWY13JteuAkHqmMDpu8Lcy6X4crOm6ZwUSRex+Rrtvs6UG5q0mAnyuLRlNFE SbRQC7KPveIwd30V+czOOuxAhePJVcYmDKcS/+yFlbGvFbfQeLMuC2mdAx/saOBA TwSTs/nvIAFrctmn23wFNYJywVmuNHUH56qG6+NxGfQNwNS6KYjGY7Rq8cqHX0xU tCYpP+oIYZRUMTs/cNOcfzJ9rxT+cbQqUCbpmsvClw4B/b7BoaMeZUAnHwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF+qwHsXbBBCgYLc/bxdENB19d1bMB8GA1UdIwQY MBaAFE+K6i8CX0lb6s7nzlqIIFGd2hNwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUt NjA4MDk1MmYwZTA0LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNS9lYjcwYTMtMTdlMS00ZDg2LThiOWUtNjA4MDk1MmYwZTA0 LzEvVDRycUx3SmZTVnZxenVmT1dvZ2dVWjNhRTNBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUx/G20J Kffnfv1Qp2oP1evrwV3dC1t+h4R2jaLlKY20RMcOduwlkqh3d1I/nf9P7/3XdwoH yR/Q2CnSRs6gNu1EDSq8XZpJztxmghoPhEN2OplCud+NdRRnP1ItkUILJ+ejdo9f tlXU0pcuo3qlYPAfKd/3AiIG3yUA6pNEE6QhOgPTZikZb38m05hWmUeEa7TGjV3W S3wj1z4tCuSF/LmfLkRvuMYuGLItoncKiF2d0LFCwk0R5ZEjpHotrX02zWIMzGOm jKe4ovc9Hq8QczV1bmXMsew9rJ5sSl3YXoUqsFSpwW+MxDvVuvZKCfZbQR5tvXYp a3jwVFdEYugcfA== -----END CERTIFICATE-----Generated at Tue Oct 20 04:27:13 2026 by rpki-client