$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft File: fcSs7cuGzd_tf23oyt_KAEabvI4.mft (raw, json) Hash identifier: 4biwCizu5U7xrDCgZ9K+C+LGmoqwjXPfu5Npi6IuO4Y= Subject key identifier: 8B:E3:81:9B:1D:50:B8:84:A0:05:B8:CF:9E:46:FA:46:A2:AD:12:A5 Authority key identifier: 7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E Certificate issuer: /CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e Certificate serial: 01A17FCF66C84C6BEC029EC3F18A865E575B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft Manifest number: 1AE2 Signing time: Wed 28 Oct 2026 00:01:00 +0000 Manifest this update: Wed 28 Oct 2026 00:01:00 +0000 Manifest next update: Thu 29 Oct 2026 00:01:00 +0000 Files and hashes: 1: 4f6D0SNzuRXBbH2RbycyEIN6aXM.asa (hash: 1uuayDkYWB05PWzl5Hlu7wA5idmb3vxmFZgTB95rRu0=) 2: 8r-SXvmyY8xSeamcpDwi2q3FtQU.asa (hash: vb6RtAuj6AJepb8Z5VeJ1W39+t+GyunhQkNqyLWbWNg=) 3: BjhAjUhVgw0Dos1VVwuky5gCkDo.asa (hash: +vYt6dSkdkJAkU8WEingMStESMqO1C4Sl1HfVbVXuyw=) 4: FRs40rH1nsbuTD3XEyCW5bV_Pds.asa (hash: cZJXay+u0fbI+PrPs4z5BwTR1CMRlGSWGEvUhPzA/As=) 5: G0KXXMrHyj_SfN6yM879XTrSmKw.asa (hash: QjCDa7CkqNWLlmNAHi/GInMdrUqsYZ7eya45/kmGxtk=) 6: JWmuS5l58_oI3gHX2Kc1MJOZwmM.asa (hash: g0CHKSUHFNoaFRlL4R5UeNrwnEpdUxGYYAXLjA8nNd8=) 7: Pge3FHys36yCTMnr7OFTphwCI-g.asa (hash: XE66QDXYoXBZ/BEvECA6R7jkyUnI5l3VLBsSGsToEn0=) 8: R7AO6IcvjTtY4l0ByEe_0R_j0AU.roa (hash: MxomD2zeC9vv3+OGbCN11f0B1+3GrxfrkJYc0+4VX6I=) 9: Y_--MQK54naD7fpUVFPfwfY6o28.asa (hash: kg46g53Aa38snduq2UGa72Yp4mJfDgCyso9Db03AZTs=) 10: ZSFvFvOHpvhz9jdVYyPf-qedyuc.roa (hash: y2p8lWtao0cmGhQ7xMI9uO+GzRfpUJD6YxLs8A6673A=) 11: fcSs7cuGzd_tf23oyt_KAEabvI4.crl (hash: Njcz+fn5Y/R99/74PscQqCHOyKmbK1JHFzFi3Xb4AMk=) 12: irP9bYf5zGAn2e7rjGd5kQfuJyc.roa (hash: 3LCQkrcd7o461urrnLpFw5Ns2dpHAvYJPmlWyFkgjCQ=) 13: kNbGOrnfq0gzHfqRL4k4kQHJqi0.asa (hash: cC2GU/9BHYBvQG2eT+9DYoAdn2wHGg8+/Gm7GNob5z0=) 14: lHWMLrOWJPIs4BBwC991DrKwGo4.roa (hash: y28g4c7JhwolCgwgEN4bgF07Be1DrEjj6ZIL1k4Kjr4=) 15: q9Zp1XA085cjbF1qil6d0lcwNDI.roa (hash: lfgfGCfGIMPsC0n3HD7PZhQDX8Vx/d+HoTT/m1BMaF4=) 16: uLwRD0x9KPEEnzN2MgZWi2x40-E.asa (hash: 1PaplIqaqZ7NhDyll0CiuYqKUbg4HgZz8hzTJAx8oF0=) 17: y5gnKCstj08QbZOxZlqBAhmGTdc.asa (hash: ozTLg4xL3aC+x+H/y3W2njsNr13IpvS8JUU4zkKOwL0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 00:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7f:cf:66:c8:4c:6b:ec:02:9e:c3:f1:8a:86:5e:57:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7dc4acedcb86cddfed7f6de8cadfca00469bbc8e Validity Not Before: Oct 28 00:01:00 2026 GMT Not After : Oct 29 00:01:00 2026 GMT Subject: CN=8be3819b1d50b884a005b8cf9e46fa46a2ad12a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ca:5e:c8:1c:98:e9:38:61:70:8c:5f:9e:b4: 49:8f:47:3f:20:56:98:28:1c:3a:3b:af:66:49:0c: 7c:17:4a:d5:11:23:b4:f3:38:e9:ff:60:1b:b7:ab: ed:4f:e2:2e:5d:65:ff:34:22:75:6a:a2:b9:5e:e4: 3d:ea:91:0d:da:7e:72:3e:2b:ac:d0:c7:5e:c9:1f: c1:76:ba:d3:c6:d4:1c:ec:3d:c9:97:0a:2d:e4:59: 43:b4:54:af:fb:b3:33:bb:4d:40:e2:c6:ad:a8:93: f0:02:4c:35:7c:86:57:c0:df:c4:79:d3:a9:7c:b9: 9d:a0:60:ac:15:25:33:dc:65:90:fa:c4:06:d1:e1: 8e:2c:ca:6b:34:5d:3e:43:04:c9:35:e9:1e:df:10: 12:f6:a2:7a:6d:ee:11:5c:b2:ce:33:02:6f:ec:a6: d2:4d:9a:b0:9a:78:b3:a2:c8:64:4b:ae:7e:b1:e6: 09:60:4e:b9:15:8d:15:d1:19:09:bb:2a:48:9a:35: 52:ab:8c:9e:d9:2d:e8:8e:11:7a:a0:ca:77:18:2e: ea:c2:45:95:b5:85:9d:9d:73:01:44:c0:c3:8c:03: 93:ab:29:69:0d:3f:70:91:46:0f:00:75:8a:92:2f: b1:2b:1e:15:82:56:25:89:9e:1a:4a:02:53:71:fd: c2:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:E3:81:9B:1D:50:B8:84:A0:05:B8:CF:9E:46:FA:46:A2:AD:12:A5 X509v3 Authority Key Identifier: keyid:7D:C4:AC:ED:CB:86:CD:DF:ED:7F:6D:E8:CA:DF:CA:00:46:9B:BC:8E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcSs7cuGzd_tf23oyt_KAEabvI4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3d2a14-6b79-4689-9579-39480285a948/1/fcSs7cuGzd_tf23oyt_KAEabvI4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:77:cf:ff:5a:54:c8:95:81:d8:b1:08:da:31:4a:d6:a0:72: 14:cc:20:2e:49:f9:f5:66:26:6c:07:30:5c:d7:80:00:51:6f: 76:1b:c5:d2:92:ce:e9:9e:5d:71:a5:61:e8:5f:fc:b2:c4:f5: 42:15:d5:ba:37:80:9c:f3:6f:02:ad:ff:17:a9:9c:02:14:b3: ce:94:3f:16:e8:40:2a:e8:9a:67:ff:a6:cb:ea:08:50:ec:7c: b5:26:30:22:f7:e6:e8:cc:65:98:36:73:77:45:c5:51:08:04: bb:19:5e:db:8a:38:8a:a3:b0:c5:94:f0:6d:b8:af:6c:ef:7d: ce:db:9f:f1:c4:9f:0b:9c:01:24:75:5a:15:75:d1:70:4e:d6: 5c:7d:23:5d:c6:24:62:2d:fa:d7:99:a9:50:b4:f0:dc:f2:4e: 67:5b:fd:03:a2:9c:3e:bd:4c:ff:f4:2a:74:03:4e:f3:f2:b8: 70:e7:2c:f8:38:fd:c5:e4:4a:57:92:7b:83:17:82:40:e0:87: 4e:a6:37:d2:8e:f6:5f:98:5d:a4:98:0e:1e:78:b4:f4:82:00: a5:d2:eb:3e:15:4b:ba:05:f1:fc:f8:a0:18:41:12:22:dd:aa: 27:e8:52:0e:fc:dc:68:c0:b0:2f:dd:9c:ea:a2:ec:b2:cb:af: c8:05:4b:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF/z2bITGvsAp7D8YqGXldbMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYzRhY2VkY2I4NmNkZGZlZDdmNmRlOGNhZGZjYTAwNDY5 YmJjOGUwHhcNMjYxMDI4MDAwMTAwWhcNMjYxMDI5MDAwMTAwWjAzMTEwLwYDVQQD Eyg4YmUzODE5YjFkNTBiODg0YTAwNWI4Y2Y5ZTQ2ZmE0NmEyYWQxMmE1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlspeyByY6ThhcIxfnrRJj0c/IFaY KBw6O69mSQx8F0rVESO08zjp/2Abt6vtT+IuXWX/NCJ1aqK5XuQ96pEN2n5yPius 0MdeyR/BdrrTxtQc7D3Jlwot5FlDtFSv+7Mzu01A4satqJPwAkw1fIZXwN/EedOp fLmdoGCsFSUz3GWQ+sQG0eGOLMprNF0+QwTJNeke3xAS9qJ6be4RXLLOMwJv7KbS TZqwmnizoshkS65+seYJYE65FY0V0RkJuypImjVSq4ye2S3ojhF6oMp3GC7qwkWV tYWdnXMBRMDDjAOTqylpDT9wkUYPAHWKki+xKx4VglYliZ4aSgJTcf3CYwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIvjgZsdULiEoAW4z55G+kairRKlMB8GA1UdIwQY MBaAFH3ErO3Lhs3f7X9t6MrfygBGm7yOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zZDJhMTQtNmI3OS00Njg5LTk1Nzkt Mzk0ODAyODVhOTQ4LzEvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lOS8zZDJhMTQtNmI3OS00Njg5LTk1NzktMzk0ODAyODVhOTQ4 LzEvZmNTczdjdUd6ZF90ZjIzb3l0X0tBRWFidkk0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgXfP/1pU yJWB2LEI2jFK1qByFMwgLkn59WYmbAcwXNeAAFFvdhvF0pLO6Z5dcaVh6F/8ssT1 QhXVujeAnPNvAq3/F6mcAhSzzpQ/FuhAKuiaZ/+my+oIUOx8tSYwIvfm6MxlmDZz d0XFUQgEuxle24o4iqOwxZTwbbivbO99ztuf8cSfC5wBJHVaFXXRcE7WXH0jXcYk Yi3615mpULTw3PJOZ1v9A6KcPr1M//QqdANO8/K4cOcs+Dj9xeRKV5J7gxeCQOCH TqY30o72X5hdpJgOHni09IIApdLrPhVLugXx/PigGEESIt2qJ+hSDvzcaMCwL92c 6qLsssuvyAVLAA== -----END CERTIFICATE-----Generated at Wed Oct 28 10:29:18 2026 by rpki-client