$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: 5zyxG23kzKCNWuQpOa/0QGwLTX8OlgZYhCrBk/RRWcM= Subject key identifier: AD:A9:D2:63:19:A5:CA:B5:A4:02:1A:10:B4:22:F4:F1:BF:79:28:CB Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 01A176CC61D445E08488D391B96D15C37D42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 131A Signing time: Mon 26 Oct 2026 06:01:08 +0000 Manifest this update: Mon 26 Oct 2026 06:01:08 +0000 Manifest next update: Tue 27 Oct 2026 06:01:08 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 3h4WTidFEK5MwQqcWECC_fEqbxw.roa (hash: D0DN2xnVk35yiTKr+sYl2ENqJNd+pv7xGkTfjbVwkWw=) 4: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 5: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 6: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=) 7: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 8: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: E/7tT4mHBQd/k9gsK+RXkGw2usaIKUwFBkfe++CYkrM=) 9: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 10: jFJe3jl_QcpRM-Nhwh499UXzHl8.roa (hash: 4ZP7K3NzaQIb5Oo5+GVsX5DHhCL0Z9KsvPv5i497LDk=) 11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 27 Oct 2026 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:76:cc:61:d4:45:e0:84:88:d3:91:b9:6d:15:c3:7d:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Oct 26 06:01:08 2026 GMT Not After : Oct 27 06:01:08 2026 GMT Subject: CN=ada9d26319a5cab5a4021a10b422f4f1bf7928cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:43:43:44:8a:b6:37:e0:bd:06:02:67:8e:9b: fe:88:b6:28:53:8c:85:6e:30:b7:47:b2:79:1c:9a: 8a:d1:cd:15:2f:a7:e4:61:7f:ca:d4:31:cc:dc:47: 41:cf:eb:99:91:c3:ee:80:8c:f4:22:f8:cd:30:48: f4:17:79:0e:de:f5:ce:55:21:54:47:ed:7e:4e:e1: 33:b8:92:17:00:7d:55:45:44:22:2b:ae:28:a5:79: dd:d2:63:c9:b3:44:96:ae:1d:ed:92:13:74:07:94: 38:5b:13:12:03:9f:38:ea:6e:6a:b5:04:a0:bc:18: 1e:35:0a:ba:68:e1:5f:40:de:ea:f7:cd:b0:65:c1: d4:c7:e1:a1:82:2e:fe:2d:49:79:28:e3:ff:e5:53: 7a:db:97:89:9a:96:7f:d0:65:d5:8e:02:56:75:c5: b5:41:30:63:1c:23:44:82:a9:c2:f8:50:ed:12:14: 4a:7a:61:b2:89:7a:b5:44:0f:c5:72:a3:a4:b7:52: d8:28:3d:3c:96:e8:16:24:72:9c:56:76:23:a6:2f: 0e:7c:14:d6:e7:5b:e6:b1:48:1e:7a:f0:e9:8f:81: 42:bf:60:8a:4c:08:64:22:90:5e:54:26:d3:a7:2d: 07:28:f5:a9:74:8a:53:45:36:40:89:d8:6b:c1:f2: 98:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:A9:D2:63:19:A5:CA:B5:A4:02:1A:10:B4:22:F4:F1:BF:79:28:CB X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:f0:6f:46:cf:27:b1:4f:41:62:0e:dd:ac:fa:88:6a:5b:5d: b6:23:57:30:f6:9e:8f:2a:9d:3a:b6:89:25:3d:a7:37:0f:88: 82:bb:61:bc:2c:b5:d0:09:87:99:eb:1f:54:4b:67:4d:83:83: a8:e3:c7:5b:75:21:e9:97:38:2a:85:dc:c1:bc:39:e4:06:f8: 7a:9b:fe:33:96:a7:1a:c7:47:90:c3:0f:c5:9f:79:02:57:7f: 5b:45:b7:58:4a:82:75:69:e9:45:85:b1:29:bf:e2:41:6f:71: 23:5d:7b:55:67:12:9e:e1:35:c1:3e:5f:fe:ee:0b:61:aa:8c: 99:48:03:5a:c1:38:fb:4f:91:ff:08:d8:d3:4a:8b:16:fc:d4: 27:2c:30:cc:d0:c2:21:3a:10:bc:d1:f7:f1:af:c0:67:0b:d2: 56:e9:d8:76:51:52:48:30:7c:60:f2:19:a9:89:cb:80:f6:7b: ed:1c:62:95:e6:0e:98:51:72:5d:3b:73:68:53:38:5d:76:bf: 7a:80:8d:68:18:97:a3:6a:44:dc:97:bc:4e:5f:9b:0e:a1:f0: 3f:08:3a:98:45:15:b2:ed:9f:b3:04:74:e1:55:98:6b:6e:5d: 5f:72:b1:c1:b8:a5:e6:2a:b8:c6:62:d8:bb:ad:50:a6:39:97: f3:c5:e4:cf -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF2zGHUReCEiNORuW0Vw31CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYxMDI2MDYwMTA4WhcNMjYxMDI3MDYwMTA4WjAzMTEwLwYDVQQD EyhhZGE5ZDI2MzE5YTVjYWI1YTQwMjFhMTBiNDIyZjRmMWJmNzkyOGNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUNDRIq2N+C9BgJnjpv+iLYoU4yF bjC3R7J5HJqK0c0VL6fkYX/K1DHM3EdBz+uZkcPugIz0IvjNMEj0F3kO3vXOVSFU R+1+TuEzuJIXAH1VRUQiK64opXnd0mPJs0SWrh3tkhN0B5Q4WxMSA5846m5qtQSg vBgeNQq6aOFfQN7q982wZcHUx+Ghgi7+LUl5KOP/5VN625eJmpZ/0GXVjgJWdcW1 QTBjHCNEgqnC+FDtEhRKemGyiXq1RA/FcqOkt1LYKD08lugWJHKcVnYjpi8OfBTW 51vmsUgeevDpj4FCv2CKTAhkIpBeVCbTpy0HKPWpdIpTRTZAidhrwfKY7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFK2p0mMZpcq1pAIaELQi9PG/eSjLMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfBvRs8n sU9BYg7drPqIaltdtiNXMPaejyqdOraJJT2nNw+IgrthvCy10AmHmesfVEtnTYOD qOPHW3Uh6Zc4KoXcwbw55Ab4epv+M5anGsdHkMMPxZ95Ald/W0W3WEqCdWnpRYWx Kb/iQW9xI117VWcSnuE1wT5f/u4LYaqMmUgDWsE4+0+R/wjY00qLFvzUJywwzNDC IToQvNH38a/AZwvSVunYdlFSSDB8YPIZqYnLgPZ77RxileYOmFFyXTtzaFM4XXa/ eoCNaBiXo2pE3Je8Tl+bDqHwPwg6mEUVsu2fswR04VWYa25dX3Kxwbil5iq4xmLY u61QpjmX88Xkzw== -----END CERTIFICATE-----Generated at Mon Oct 26 12:39:25 2026 by rpki-client