$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft File: V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft (raw, json) Hash identifier: kaaFfY4HgJdOPYRKLLelBQ43MAKqPEA0tgZk0cjRwK0= Subject key identifier: 3B:F4:40:23:D8:F7:75:B6:2B:C7:BC:2B:37:70:00:F4:CE:60:02:DB Authority key identifier: 57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 Certificate issuer: /CN=5753c06290a371994d7577318685f5bc4a538d47 Certificate serial: 01A17D053800CD0888AEC7A88EE9129F28E1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft Manifest number: 16BB Signing time: Tue 27 Oct 2026 11:00:56 +0000 Manifest this update: Tue 27 Oct 2026 11:00:56 +0000 Manifest next update: Wed 28 Oct 2026 11:00:56 +0000 Files and hashes: 1: 1_FG2YBqdRhKKIdbfUoaXRIcZtY.roa (hash: DZwW0dAX0l87sLjk9z+qjZR2gAmIuChfWqvnjdJSHpE=) 2: ExLhkVGO_IcP9FKIq81f0oI-oCg.roa (hash: 5HCccmMIa3ZS3Rm7UZ7dWL9/99iZ3k4KgXviDu7U84Y=) 3: H6mXElUtGqkaAjyOWeq60UIxFTg.roa (hash: w/TMQtz3h82vi+GWHVA7q+rO8Depf0bjlxba/vl6eeg=) 4: OwOin32AoXhBJ_iuSSZtdUpdHEA.roa (hash: r6AonYcdKDjFrDRqsif54MlJGphnOtEytVNCx0qvCio=) 5: SCLX0yMUDK_0tO4v6NxcoovzWj8.roa (hash: 9dBLmpKDLrwgh9sSkk5HAo/xRWDF0x1027A7nhDZK08=) 6: U2zR2wxNZR-C_elTQ_PCnfByBwY.roa (hash: OLi955MoAoQc7KvGiHIZSl5vpca4xWCeVTWNOe8m2YI=) 7: V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl (hash: BoLNuIeLTUda2u+PKwjcKdDm2FS44xE6yftGx3zOnIU=) 8: c-5WHUGe7Cokv7tp6uqgS70r8Ic.roa (hash: DoQj2C6sdy5dVILWLV9HA8ZssSHksnBbLRNoxs++EvU=) 9: eHu3rtcXjdq31CwIQ4nx7nvhB2A.roa (hash: eqAtKP8l84cvF2pEaSF30rGhGOuNYfoTW/MjLLS2XHU=) 10: jI-hqwxak8Tg6ancnuy3V90l4fQ.roa (hash: SFQVGGwwzufvH2Q6e3Xanl+xEEo+gFMHtCdjrjGcZV4=) 11: k5tcy3X-bfkTgY-KuojhW38Hb84.roa (hash: /njehwBJ3hy+S6rVtCdBk1btpc3S6jZQpXCGPHURc0Y=) 12: nqJ6Q3D61md2LC4-yJPH7bUWU4A.roa (hash: sLTLPurFLTwE8YAq+DTkGVZv2q4SAYzP5ZK8/ib+u2M=) 13: omuRSlN3uxDC5Q-fxRiwTPk66HM.roa (hash: GxwNrXChKZTEhS9UT+A6aKihcuWe4QoSUJOCbKFbnmw=) 14: ova4DZPGmvsGGPiVCauJt7d6bFk.roa (hash: FJLqImsR5CthuAk7jPWHhT6Jl73gBfGj24WDFfNiWgI=) 15: woLmD7M3XCh8hzd96HJkdchNmr0.roa (hash: IO6F5iDxJpzGWBZGaFRUP1UT9NVbjAY85NrP45yAAgA=) 16: zEU1dCR-4rlXlEW4u-atk395zhk.roa (hash: Kfvh6mjf8zMx7Jx8eSoWtHWYqopwifCIKWlHo0qGGIA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 05:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7d:05:38:00:cd:08:88:ae:c7:a8:8e:e9:12:9f:28:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5753c06290a371994d7577318685f5bc4a538d47 Validity Not Before: Oct 27 11:00:56 2026 GMT Not After : Oct 28 11:00:56 2026 GMT Subject: CN=3bf44023d8f775b62bc7bc2b377000f4ce6002db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ce:0e:5b:4e:55:8e:66:e9:62:38:50:00:02: 20:b4:54:fb:48:cb:99:8d:6c:84:0b:b6:1d:31:b5: 07:04:45:89:cb:33:de:07:75:4a:1a:cc:2b:ba:90: af:a8:0c:36:47:cb:23:0f:f6:06:63:35:30:53:31: 9d:3e:4f:b6:ff:d7:5f:8c:7a:9e:5f:6f:4b:f2:d7: 7b:ea:80:84:29:15:a8:b5:b2:b6:6c:c6:af:7a:91: 05:84:e5:3c:5c:88:5d:03:db:55:66:a2:02:ad:d0: 01:9b:e0:86:bc:35:ea:c1:e2:1f:89:49:bd:01:25: 6d:11:70:c0:96:5d:a5:31:71:14:fa:f7:e5:c3:a3: d7:70:fd:45:3d:fa:b5:41:80:01:91:fd:69:ad:27: 95:a9:29:a4:2e:ea:24:d3:54:47:6a:16:7d:1b:6e: b8:67:30:04:58:11:77:ea:76:27:68:75:4e:73:2d: b8:e5:ff:bd:f9:44:6d:c0:57:20:06:a6:36:2b:9a: 4a:28:64:14:2e:a2:34:30:b9:22:0d:8f:16:0c:0f: 76:47:0a:57:55:47:f1:11:ea:ca:88:21:b5:82:89: 56:8e:f5:a0:43:d2:a0:a4:26:92:3b:75:14:d9:b9: ed:9a:36:dd:34:fa:ab:f3:32:ee:1d:c2:ce:8c:75: b4:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F4:40:23:D8:F7:75:B6:2B:C7:BC:2B:37:70:00:F4:CE:60:02:DB X509v3 Authority Key Identifier: keyid:57:53:C0:62:90:A3:71:99:4D:75:77:31:86:85:F5:BC:4A:53:8D:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1PAYpCjcZlNdXcxhoX1vEpTjUc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/b41ab6-b9f3-4b4a-9b7b-1ed10954bd96/1/V1PAYpCjcZlNdXcxhoX1vEpTjUc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:81:d2:5d:be:71:20:b7:76:b1:7a:b7:ce:bc:2e:44:90:7f: 04:af:df:56:0c:1a:7c:87:20:c4:bf:e0:38:c7:d4:d2:59:b4: a6:b5:df:75:3c:b3:ca:e6:85:71:e2:f5:86:89:c5:7a:09:80: d4:10:1d:41:bb:84:e9:ef:b5:ad:63:8f:32:34:58:1a:d4:08: 7f:8d:d6:2d:c9:4c:5a:61:55:ce:c3:00:5f:a8:74:a8:3f:b4: c3:8d:dd:0e:24:6d:3f:59:13:ae:45:82:69:e6:e8:ff:7f:e9: 1c:6f:0a:51:31:ab:7e:96:ea:8f:e8:26:bc:a2:8b:15:55:59: ab:2f:5a:2c:0e:fe:1c:1e:a3:2b:4d:d7:30:7f:ce:7c:c7:0d: 73:34:a2:b1:46:08:cd:98:2c:09:e0:b3:cf:a6:6a:d6:c6:90: 82:e3:85:ae:c5:46:55:ad:d0:e8:db:d2:ee:bf:eb:18:e7:20: 4e:5c:af:df:f7:65:c1:a4:63:84:1e:9f:c3:ff:b6:27:67:80: f2:01:ce:69:42:13:15:72:48:e5:75:95:25:37:44:94:56:a3: 56:0e:7b:f3:16:27:e4:47:ec:f3:1a:49:bc:b8:44:34:fb:bb: ba:a3:db:14:67:f1:2e:29:d9:09:c9:13:d2:9a:37:5f:b8:4b: 36:ef:7c:ca -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF9BTgAzQiIrseojukSnyjhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3NTNjMDYyOTBhMzcxOTk0ZDc1NzczMTg2ODVmNWJjNGE1 MzhkNDcwHhcNMjYxMDI3MTEwMDU2WhcNMjYxMDI4MTEwMDU2WjAzMTEwLwYDVQQD EygzYmY0NDAyM2Q4Zjc3NWI2MmJjN2JjMmIzNzcwMDBmNGNlNjAwMmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAic4OW05VjmbpYjhQAAIgtFT7SMuZ jWyEC7YdMbUHBEWJyzPeB3VKGswrupCvqAw2R8sjD/YGYzUwUzGdPk+2/9dfjHqe X29L8td76oCEKRWotbK2bMavepEFhOU8XIhdA9tVZqICrdABm+CGvDXqweIfiUm9 ASVtEXDAll2lMXEU+vflw6PXcP1FPfq1QYABkf1prSeVqSmkLuok01RHahZ9G264 ZzAEWBF36nYnaHVOcy245f+9+URtwFcgBqY2K5pKKGQULqI0MLkiDY8WDA92RwpX VUfxEerKiCG1golWjvWgQ9KgpCaSO3UU2bntmjbdNPqr8zLuHcLOjHW0BQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDv0QCPY93W2K8e8KzdwAPTOYALbMB8GA1UdIwQY MBaAFFdTwGKQo3GZTXV3MYaF9bxKU41HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2It MWVkMTA5NTRiZDk2LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9iNDFhYjYtYjlmMy00YjRhLTliN2ItMWVkMTA5NTRiZDk2 LzEvVjFQQVlwQ2pjWmxOZFhjeGhvWDF2RXBUalVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuYHSXb5x ILd2sXq3zrwuRJB/BK/fVgwafIcgxL/gOMfU0lm0prXfdTyzyuaFceL1honFegmA 1BAdQbuE6e+1rWOPMjRYGtQIf43WLclMWmFVzsMAX6h0qD+0w43dDiRtP1kTrkWC aebo/3/pHG8KUTGrfpbqj+gmvKKLFVVZqy9aLA7+HB6jK03XMH/OfMcNczSisUYI zZgsCeCzz6Zq1saQguOFrsVGVa3Q6NvS7r/rGOcgTlyv3/dlwaRjhB6fw/+2J2eA 8gHOaUITFXJI5XWVJTdElFajVg578xYn5Efs8xpJvLhENPu7uqPbFGfxLinZCckT 0po3X7hLNu98yg== -----END CERTIFICATE-----Generated at Tue Oct 27 15:14:55 2026 by rpki-client