$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft File: 088IhJGKUCOe9wUY7p_ATxquGSk.mft (raw, json) Hash identifier: B3+wSHioDdv8fgBnvCZazQzQ2h8vRUqzrQHeWFFz3qU= Subject key identifier: 4F:79:C2:BC:AD:D9:8F:9B:46:9D:48:FC:0F:A9:38:FE:1A:08:DC:C4 Authority key identifier: D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 Certificate issuer: /CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Certificate serial: 01A15C68045B4B41CB0036290912DC9E4617 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft Manifest number: 17F8 Signing time: Wed 21 Oct 2026 03:01:23 +0000 Manifest this update: Wed 21 Oct 2026 03:01:23 +0000 Manifest next update: Thu 22 Oct 2026 03:01:23 +0000 Files and hashes: 1: 088IhJGKUCOe9wUY7p_ATxquGSk.crl (hash: skGMdK78wyT/oPPDL+V4WE3yr1sQhndfRaPAaiMTy/s=) 2: 3yqY5SvToLfZgepFACwyBjL-zFo.roa (hash: wPLqiTKB4xGPpL698mzeVXK6/QJjhoff1a4PO54Mt18=) 3: 60GOELdjS90NT3HQ_TIoDBw9jEk.roa (hash: IW0Ztpf+iEizLk7FQFYzJWbHIwryvkyhellMGX52v2I=) 4: 9EtuXpMLZ6sQQPEORkpOUuNq7kA.roa (hash: jJcZdafCJvTzptVALUPjvYgNWN2W1aePSl9m2ANl5Pk=) 5: 9gkVLjQzq4u9eTX55rvk0NRZzEY.roa (hash: hZcBmw4SfsEaoWkS6rx82VJEEjBl8KNeB0BbircjJCI=) 6: 9iqwdaCRzSRIxnzSgyEccwLudSU.roa (hash: vtDO+B+GX5SlLOFMYIE8Ci1O1zFTg8MXYIybeCYQQE4=) 7: EPOhWTjQpLzPcBO7BYqjeZiYFJw.roa (hash: bc4Sd0aCrqJSOCs197z9kn5B8gNucSjgK118PHdGWsM=) 8: J0ltzwfPKcM9WDlNs19kdgjf3Zs.roa (hash: FKxKvjF1JzeJzc8Sp0aqMCubfckNp685W71oTKnizHk=) 9: JPRtkRaGLX8Sd_ysZrubpWz0xYM.roa (hash: /tEAJ46NXYsM46R5h8KTQIDrS2PgaLQ7LUufmgioS5U=) 10: NS5ldcKq1LzOVk57QBl78tAnglo.roa (hash: NLCMAf6L81UDBfmrt98wVbe31nVEYXW+pY5vNtXwIxQ=) 11: NzAk-80nwPdjRSk-yqn0f6awD3I.roa (hash: B2xJIZWaHgJcCEl3z4yTLYWzhZNQ3HmrXXt9vIP7yqE=) 12: OUXOVX4ZwYpcYII06RIHHPvCyC8.roa (hash: H+nyalyzD20UhvUg0p3R08LevNAe9HuM/dHZvBKthbE=) 13: OzhFXyA00__fB9uqQwmcQCQoW60.roa (hash: YreChcYbjgaAA/VikyB8vGg4JvPSy0BjCfmeSLJ9984=) 14: U3F62El3OIEqW3KXZWmF_5bSigk.roa (hash: vh0hdNyMtsy8yAJ2NzDkEticxSoHEnjSNclAx2pivbQ=) 15: VkulKwUg_3D5a5C_XMguFPuuovs.roa (hash: ukZGSfogs8eOKOJ2IJp59rkqPs02ZF4OPCzRv9uqSZ8=) 16: VvmLOgAZJYjV5s_ujwpwCXw3SO4.roa (hash: 6a+0n7mpiIWJEPucvAzN+o4GClMdMMmNiUmB8fyQrBA=) 17: WEKhOGg2l_fvJ6UkB2ieaLwqKIU.roa (hash: yw4nxSJREFGrZikTrUVlUy5RTgIv56y0p0rAhpqXE4c=) 18: WdP8_c4rm8Sl0WN2FwtdTFdjUHw.roa (hash: ZDOH3SbLFKGU8X90UiFNgo5Q8Khx3+l4WVcSKcUyYEE=) 19: Xix1gQ4ef2uHYJ4159fOPL3UDI0.roa (hash: zJlLvJZCYRH3Ky1xrz93dPbSl17QsTeAJvFBEc1Z8LA=) 20: aoxpvJQp55z0b_A4747Hb-Vn3dc.roa (hash: KFOKBPs3AJlg/zbLl0vaUoAtOtEGw1Vqk5M7i3lMUY8=) 21: dMfG88vtCmq5_ZqUfkMnAS8pR-M.roa (hash: PugPXuIpHhuRLO5S2LsWJizw062WbL+JSrm19YubtaQ=) 22: dhGTZrzAMxCoHl02uEnVYrcP8uY.roa (hash: frqEXDNzuadrbN8XUuh3gnDUTuujf4zMJynToQhVp5o=) 23: ef0q43f7LAeuo-FDNR4YuVz3rVk.roa (hash: ynkAymfoAKqGAiHb/45NVf5BEsff36expTSHfTcbGpM=) 24: fDBBivGd09DklPLRXv-2xMOMQEU.roa (hash: UvvC0PLHqkR9m8HGTqV3Lx3SdupKGUhgBV//jb/1IQA=) 25: hX2Lx3ZRXJhz5te91S_u82NAyqI.roa (hash: Z9Aqux701iyj0hKmcrZefV63BZnWhUv9h+YQa7uyK+o=) 26: l9bRnqNItHZs5FPzHX-UwDZIY-Y.roa (hash: GX1IqoI7oBfponz1zyedaP74wEIQFjMmP5j2wGHYX9k=) 27: lAmmWkGs5LyT9RfeItAfnxG8bbk.roa (hash: RNfEw57sbZCxkqzkR0v73gb4yT9D3HTLUkHXy1rWdGw=) 28: mYkzSPs4bdIDnwVUaRu-Jo2aLYw.roa (hash: TV4eKjR0OJx54wRJw1+R5H+m0UtVD7F7g/PWJoeSbVs=) 29: n-Y7var7zwzFMfuvLacvdqsoTk4.roa (hash: jYJTpN60GnROWfT9uULFABE6OlzcikzLuwW0K2UstEw=) 30: pGdakkFya_8KFAcwcCfw9mQMsfM.roa (hash: 7HU/UMagkX6Kk/cYXVxJtnGPyAPxvkR9i/Ymcq1RhFU=) 31: p_i5f8sUouD8T2guoP56z8DfSZQ.roa (hash: xamhxEmVDEB79em0Q1NxLo3vFtG79lojzbnDtwExQao=) 32: pxR405YISr-FctI8NX7Q4bD6gEU.roa (hash: XtQdAGk7qomly3oH9IhnMKYdpq/Ak4fYbIVYvmRiWfg=) 33: qVYl2gaC1o0QPGWKC8uPavjq7q4.roa (hash: N5USX4HmmcxvOGVDo+fCpGoOKoXPYdIuEyuWXJTwzwQ=) 34: rEJ3nr5rpLR9k-3rueCVtCAovZM.roa (hash: MPpvJzK37AFcgAzt3XzDw1Rx/WuVzYs9n0C6B0TdB+4=) 35: ruCnNaAuWiSvrOcSffsrrc-mU-Y.roa (hash: F0kCXnimtG8KC6nSV0eR4+hm5V66V2fgM8EiOJj/7S0=) 36: vZjxFUtUFk_VcZ6DkCLGhoqIVgs.roa (hash: qFpiFefYJJaQqMk+axueFNG7oyxnU+z9sgqEjIpr44k=) 37: vngFOmM8F-I34UP1XtfkKo4AgEQ.roa (hash: 1Ru4gPZOefQrxrqA1R4SUrRycdaiRzteoC+xNeY+cK4=) 38: wAY5XuB45x4wJW7P8rfB4j4exyw.roa (hash: EyRdGq3OnE9JKFrNRIEE2sn/Nvgcr+BeZbnGqbJfWwQ=) 39: xbj5hdRf6FBr1n9agV8FWFcSS-M.roa (hash: FTolabkCiVcY/3NMmDQy622GW30z82c9UqmDuGHFc2U=) 40: y5PS9UL6L1KVzUjSFjyW_KzXIxM.roa (hash: +bgaJGwbwdu0EcyrfjZn/ea+UaB9pY4KH5HlNs3s2VE=) 41: ypPsYdz2SbWvNH77QQl1wDRnDA8.roa (hash: ZzKlsMMsjohWKmB/AWbRxRQA46JAwN5yMSWLeFcXstE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 22 Oct 2026 00:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:5c:68:04:5b:4b:41:cb:00:36:29:09:12:dc:9e:46:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3cf0884918a50239ef70518ee9fc04f1aae1929 Validity Not Before: Oct 21 03:01:23 2026 GMT Not After : Oct 22 03:01:23 2026 GMT Subject: CN=4f79c2bcadd98f9b469d48fc0fa938fe1a08dcc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8e:7c:50:c6:98:7a:3a:48:d9:6c:c8:98:ab: b3:f3:ff:4a:9f:06:81:7f:d2:80:1f:66:de:57:70: a6:80:a4:f1:0b:9e:2c:70:ee:a1:e0:6d:8b:80:c7: ea:69:76:ea:a8:9d:fb:66:06:a8:fc:85:b9:55:59: 3e:90:71:c8:a0:3e:e5:b5:7a:94:88:fb:54:f2:82: ad:b9:64:6f:e6:aa:de:5c:0a:41:af:87:0f:46:d2: 59:78:e4:6a:b6:b2:2c:b3:83:36:e8:34:2a:2f:3a: da:99:72:b8:7a:68:4e:70:8d:db:74:89:a0:3d:33: 35:d4:21:5d:f0:87:7a:85:33:7f:85:6b:9a:76:fd: 69:47:9a:5e:50:0c:be:fe:d5:bd:84:b3:1a:57:bd: 06:37:e0:8b:94:03:9e:6f:35:85:0c:63:ed:de:72: 33:c9:c0:ea:54:54:b8:93:ce:05:ac:34:d3:d2:a3: 0c:b3:5c:9d:17:96:1e:79:32:46:9b:d6:c8:50:b4: 39:91:ae:75:c2:b9:09:5a:b6:6b:1a:7e:1b:2f:06: 47:90:e1:83:97:72:32:f3:d6:97:7a:cb:b8:c1:4b: 8a:08:5a:22:bd:88:b2:68:b2:19:d9:e7:28:22:19: 12:11:b8:08:47:9a:42:f5:8c:3b:47:33:53:51:fe: 01:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:79:C2:BC:AD:D9:8F:9B:46:9D:48:FC:0F:A9:38:FE:1A:08:DC:C4 X509v3 Authority Key Identifier: keyid:D3:CF:08:84:91:8A:50:23:9E:F7:05:18:EE:9F:C0:4F:1A:AE:19:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/088IhJGKUCOe9wUY7p_ATxquGSk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/cdff16-458a-47c3-8dfa-231549409720/1/088IhJGKUCOe9wUY7p_ATxquGSk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:52:bd:96:c5:2c:b6:af:05:0a:bd:c4:80:24:73:ea:61:be: fe:60:0e:f9:04:59:36:9e:2d:5c:ce:df:0f:d7:df:bd:65:aa: 0a:67:7b:c1:f4:30:c7:2e:34:60:5c:94:04:b1:92:6d:a0:86: 6f:95:36:3f:9a:52:5d:1b:f1:e2:c6:27:8d:a5:a4:a3:63:79: d9:0c:23:4f:1d:7a:08:4c:94:8b:84:4a:3d:a2:c3:6e:a0:45: 90:a6:6a:50:a8:e0:9b:7e:1c:ed:d6:9e:46:24:4e:ed:d3:c2: 4a:9e:3a:8e:a9:79:39:a3:44:82:f1:a0:9f:f8:fb:04:29:45: 35:fe:d8:52:0d:1a:2e:02:f3:5b:a5:2d:4d:e5:d8:92:51:9b: 05:d4:23:fa:c9:15:5f:a2:00:3e:71:b1:13:8e:00:d5:c0:9b: 5b:69:78:a9:d2:33:59:78:0f:22:6a:7f:8a:1b:6b:fc:5b:27: be:0b:08:60:2a:ea:93:20:ff:04:5a:eb:3c:38:3d:6f:c5:1d: 7a:a8:8a:a4:a6:00:63:24:d8:6a:d6:06:84:39:d4:51:39:73: 9c:26:00:3d:55:67:e6:70:00:62:fc:cf:48:f4:02:99:02:1d: 37:28:91:55:c6:d7:ba:aa:b0:a8:ab:be:e1:da:8d:66:6f:55: 95:f3:2a:a9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFcaARbS0HLADYpCRLcnkYXMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzY2YwODg0OTE4YTUwMjM5ZWY3MDUxOGVlOWZjMDRmMWFh ZTE5MjkwHhcNMjYxMDIxMDMwMTIzWhcNMjYxMDIyMDMwMTIzWjAzMTEwLwYDVQQD Eyg0Zjc5YzJiY2FkZDk4ZjliNDY5ZDQ4ZmMwZmE5MzhmZTFhMDhkY2M0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI58UMaYejpI2WzImKuz8/9KnwaB f9KAH2beV3CmgKTxC54scO6h4G2LgMfqaXbqqJ37Zgao/IW5VVk+kHHIoD7ltXqU iPtU8oKtuWRv5qreXApBr4cPRtJZeORqtrIss4M26DQqLzramXK4emhOcI3bdImg PTM11CFd8Id6hTN/hWuadv1pR5peUAy+/tW9hLMaV70GN+CLlAOebzWFDGPt3nIz ycDqVFS4k84FrDTT0qMMs1ydF5YeeTJGm9bIULQ5ka51wrkJWrZrGn4bLwZHkOGD l3Iy89aXesu4wUuKCFoivYiyaLIZ2ecoIhkSEbgIR5pC9Yw7RzNTUf4BrQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE95wryt2Y+bRp1I/A+pOP4aCNzEMB8GA1UdIwQY MBaAFNPPCISRilAjnvcFGO6fwE8arhkpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEt MjMxNTQ5NDA5NzIwLzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy9jZGZmMTYtNDU4YS00N2MzLThkZmEtMjMxNTQ5NDA5NzIw LzEvMDg4SWhKR0tVQ09lOXdVWTdwX0FUeHF1R1NrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL1K9lsUs tq8FCr3EgCRz6mG+/mAO+QRZNp4tXM7fD9ffvWWqCmd7wfQwxy40YFyUBLGSbaCG b5U2P5pSXRvx4sYnjaWko2N52QwjTx16CEyUi4RKPaLDbqBFkKZqUKjgm34c7dae RiRO7dPCSp46jql5OaNEgvGgn/j7BClFNf7YUg0aLgLzW6UtTeXYklGbBdQj+skV X6IAPnGxE44A1cCbW2l4qdIzWXgPImp/ihtr/FsnvgsIYCrqkyD/BFrrPDg9b8Ud eqiKpKYAYyTYatYGhDnUUTlznCYAPVVn5nAAYvzPSPQCmQIdNyiRVcbXuqqwqKu+ 4dqNZm9VlfMqqQ== -----END CERTIFICATE-----Generated at Wed Oct 21 07:21:28 2026 by rpki-client