$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft File: 6EA7XkXNWL5fbF0z-lZatJIj49s.mft (raw, json) Hash identifier: oHHe1657VeXUj317DezuUu1Wdr3iZub64ltyo7cyuyE= Subject key identifier: 47:52:D5:81:AF:5C:62:2C:4F:C5:58:6A:DB:59:3F:AF:85:0A:FB:49 Authority key identifier: E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB Certificate issuer: /CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Certificate serial: 01A1574288FDA35522DD4FC0B5F84AD50AC1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft Manifest number: 1AC7 Signing time: Tue 20 Oct 2026 03:02:20 +0000 Manifest this update: Tue 20 Oct 2026 03:02:20 +0000 Manifest next update: Wed 21 Oct 2026 03:02:20 +0000 Files and hashes: 1: 1-0S5yqLaN3s-rfDorrxE4xmJkSY.roa (hash: xe08thfVWk/Q0PmRvIsVkTS/li36DVR1VhnOJhKWMg4=) 2: 1-LUBueVBqdwiFLK1gsB1AnGbiPQ.asa (hash: L6rsU1pcQ3cdDgJa7jGbs1XAAZhtjuh8eTrAlkKyq8Y=) 3: 3fCUHErbv2WtYx--n4nf1Q6-Ubw.roa (hash: VmDuAyLIouZrOeMJRlVFLUwqzbhKM9CHSnO4kIRdwDo=) 4: 6EA7XkXNWL5fbF0z-lZatJIj49s.crl (hash: 3nFy+UA1lT0DGjbrjMiLDL+OVikHjKowxCrA17D6zys=) 5: BbRIR3kI21VUGCXjSDWllMbS-8k.roa (hash: EEgGaz+LiLIszuH7ULNxtMHJjtmHM3CUdnjiO3tprKI=) 6: O73kgAQ-kXlFxK4kvQOyEoxMTXA.roa (hash: ETBQDnDgpIBgdAIaW/tfoxKMAV0hJkP0bltM4DA6Q48=) 7: Ps8zJSRRSbDwX3XJR7eOmD7m2uE.roa (hash: 4gOrAZeHV5DljjLNX3EiWeFFJsFqa+d+OW/WO4pBac4=) 8: c7YCMDtvilpnAcHhUKUpazLH8YQ.roa (hash: p8eFTJPY5mhYNqyxOeRrt26FdTu0eyXi+YCF788HwNI=) 9: i22LYTAh0PcLuwu7sEyCzT-6xXM.asa (hash: DPM18lmzzP7eVh2MT51XAxQN2uj0C+J8vlqNWZv6bek=) 10: ox_RAZ62BnMtTtsni2E71dlvqdw.roa (hash: +gTLaHfV2T8wDVaZZ2TtzS3DP1Xu6/AIsWNOHGHf3mo=) 11: zbAORhJVXtMoGKcD9VvlKtXQvCM.roa (hash: Dme/MffDzRscTtpOm/eYuLZJmQW4bf9yIlFMyWJha0k=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 21 Oct 2026 03:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:57:42:88:fd:a3:55:22:dd:4f:c0:b5:f8:4a:d5:0a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e8403b5e45cd58be5f6c5d33fa565ab49223e3db Validity Not Before: Oct 20 03:02:20 2026 GMT Not After : Oct 21 03:02:20 2026 GMT Subject: CN=4752d581af5c622c4fc5586adb593faf850afb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b4:5e:09:a5:0e:dc:e0:fc:24:0a:bc:d6:03: 57:39:06:a4:f7:d4:5f:33:95:6e:2d:04:eb:4f:9e: 78:2f:14:84:dd:bf:d4:66:51:4f:aa:96:91:6a:f5: 9a:7a:eb:94:7c:f4:06:17:d6:c5:a0:66:6d:e4:be: 15:1a:90:c0:52:99:8a:c9:78:77:11:05:14:a7:26: 27:bf:14:3e:5e:2f:fc:43:04:5c:b2:b4:06:31:39: 58:c4:c7:87:bf:7e:8d:5c:c6:98:93:38:ec:6c:73: 99:e2:af:f3:a5:03:8d:27:4b:45:7b:60:8b:b2:52: 94:a4:db:7f:90:a9:5b:60:23:83:69:ed:f9:6b:6e: 6f:7a:5e:82:44:41:4a:f5:96:61:c8:a8:1c:81:8f: d1:a5:37:5e:d7:0f:01:1e:db:5b:83:b0:a7:e3:2d: 5d:50:8e:8e:9d:a9:b7:b6:48:d7:ca:20:71:de:47: 32:8c:44:f9:ad:b6:5a:8c:cb:88:92:65:f6:0b:93: a4:e3:03:02:fe:0e:f4:6b:87:7a:e7:be:75:53:c8: 18:c3:fc:12:55:df:b4:a0:d5:fe:d6:24:57:63:53: 32:7c:07:dc:63:5e:ab:dc:40:85:73:ed:88:c8:f0: d4:c4:cc:41:a7:f8:c1:cd:47:4e:29:79:1f:be:57: 45:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:52:D5:81:AF:5C:62:2C:4F:C5:58:6A:DB:59:3F:AF:85:0A:FB:49 X509v3 Authority Key Identifier: keyid:E8:40:3B:5E:45:CD:58:BE:5F:6C:5D:33:FA:56:5A:B4:92:23:E3:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6EA7XkXNWL5fbF0z-lZatJIj49s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8976ed-da0a-49a5-a751-a871ecc212a6/1/6EA7XkXNWL5fbF0z-lZatJIj49s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:c5:79:c1:dd:64:29:f5:59:11:ae:c4:c7:97:23:ca:d1:44: b7:78:9e:47:1c:da:cb:05:c7:63:4d:66:a2:30:c6:e2:07:53: dc:b1:22:1f:c6:ec:75:3f:82:8e:43:dc:78:d9:8c:15:c8:15: 8c:5a:12:a3:92:6e:4e:c5:f7:49:2c:86:4b:3b:7e:b3:d0:4a: 92:15:a4:6d:e1:22:10:2d:0b:fb:fd:bb:ef:bd:23:d5:84:15: 4d:35:12:46:28:e2:26:b5:4a:5d:6f:c7:a6:73:b2:5e:ac:f4: 4f:cd:c5:fe:88:27:d0:13:b9:bd:17:e2:78:c3:5e:91:b2:72: 74:1b:11:a4:82:84:f2:db:bd:1a:12:a3:bb:a4:d4:6f:df:ee: ae:94:62:a9:88:0c:1a:b5:ef:23:a6:1d:83:90:43:c6:2f:de: 67:1f:cb:a9:94:ac:1e:ec:66:ed:42:0d:f4:b8:20:f1:ab:0f: 06:49:75:24:7e:76:2d:6c:5f:49:cb:4f:03:a0:2c:10:a5:2e: b7:60:28:86:e8:4a:af:8c:a5:2c:34:d0:af:52:c7:6b:72:e4: e7:05:0a:9a:03:db:19:15:5d:e3:52:a0:5f:04:3b:b8:a4:b2: 6b:8f:06:40:82:1b:ad:ee:f6:13:67:ca:ac:43:9c:73:4d:d2: 6c:6f:4c:71 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFXQoj9o1Ui3U/AtfhK1QrBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU4NDAzYjVlNDVjZDU4YmU1ZjZjNWQzM2ZhNTY1YWI0OTIy M2UzZGIwHhcNMjYxMDIwMDMwMjIwWhcNMjYxMDIxMDMwMjIwWjAzMTEwLwYDVQQD Eyg0NzUyZDU4MWFmNWM2MjJjNGZjNTU4NmFkYjU5M2ZhZjg1MGFmYjQ5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbReCaUO3OD8JAq81gNXOQak99Rf M5VuLQTrT554LxSE3b/UZlFPqpaRavWaeuuUfPQGF9bFoGZt5L4VGpDAUpmKyXh3 EQUUpyYnvxQ+Xi/8QwRcsrQGMTlYxMeHv36NXMaYkzjsbHOZ4q/zpQONJ0tFe2CL slKUpNt/kKlbYCODae35a25vel6CREFK9ZZhyKgcgY/RpTde1w8BHttbg7Cn4y1d UI6Onam3tkjXyiBx3kcyjET5rbZajMuIkmX2C5Ok4wMC/g70a4d65751U8gYw/wS Vd+0oNX+1iRXY1MyfAfcY16r3ECFc+2IyPDUxMxBp/jBzUdOKXkfvldFkQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdS1YGvXGIsT8VYattZP6+FCvtJMB8GA1UdIwQY MBaAFOhAO15FzVi+X2xdM/pWWrSSI+PbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEt YTg3MWVjYzIxMmE2LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy84OTc2ZWQtZGEwYS00OWE1LWE3NTEtYTg3MWVjYzIxMmE2 LzEvNkVBN1hrWE5XTDVmYkYwei1sWmF0SklqNDlzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAssV5wd1k KfVZEa7Ex5cjytFEt3ieRxzaywXHY01mojDG4gdT3LEiH8bsdT+CjkPceNmMFcgV jFoSo5JuTsX3SSyGSzt+s9BKkhWkbeEiEC0L+/27770j1YQVTTUSRijiJrVKXW/H pnOyXqz0T83F/ogn0BO5vRfieMNekbJydBsRpIKE8tu9GhKju6TUb9/urpRiqYgM GrXvI6Ydg5BDxi/eZx/LqZSsHuxm7UIN9Lgg8asPBkl1JH52LWxfSctPA6AsEKUu t2AohuhKr4ylLDTQr1LHa3Lk5wUKmgPbGRVd41KgXwQ7uKSya48GQIIbre72E2fK rEOcc03SbG9McQ== -----END CERTIFICATE-----Generated at Tue Oct 20 12:33:24 2026 by rpki-client