$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: k4r51gZsHs1CzPWZ6D/sP+QXfqAmudDkRxoGf0OuLcc= Subject key identifier: FE:9A:3E:8E:97:4B:66:04:00:20:C9:A6:65:4C:5E:30:39:0A:B9:EB Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 01A1B987C80082053D7F09A35D7BBD815782 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 133D Signing time: Sun 08 Nov 2026 05:00:45 +0000 Manifest this update: Sun 08 Nov 2026 05:00:45 +0000 Manifest next update: Mon 09 Nov 2026 05:00:45 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 4: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 5: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=) 6: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 7: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: f2CPdBbP5RhOpNJWwaCLhndbjYLV/lr5rXwZFFfH3V0=) 8: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 9: jFJe3jl_QcpRM-Nhwh499UXzHl8.roa (hash: 4ZP7K3NzaQIb5Oo5+GVsX5DHhCL0Z9KsvPv5i497LDk=) 10: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 11: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 09 Nov 2026 05:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:b9:87:c8:00:82:05:3d:7f:09:a3:5d:7b:bd:81:57:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Nov 8 05:00:45 2026 GMT Not After : Nov 9 05:00:45 2026 GMT Subject: CN=fe9a3e8e974b66040020c9a6654c5e30390ab9eb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d5:9a:fa:d5:23:68:e9:6f:d2:ba:63:1d:41: cc:41:bb:9d:fb:ea:50:4e:74:7e:16:c3:13:5e:9c: e5:56:dd:19:0c:98:ba:9b:f9:b1:2a:2e:3f:94:d7: 99:03:7c:32:88:e6:0e:75:8c:43:29:06:fa:09:61: 26:92:63:44:b9:b4:b1:d5:a8:b4:2c:39:58:04:11: 74:06:c2:a8:3e:6c:40:b4:0e:ec:b0:36:bf:92:aa: bd:9d:25:37:f4:c4:3e:ab:ed:48:c2:ca:0f:05:79: 3d:b2:2a:87:0f:75:2d:2e:46:ce:6d:d2:8f:81:3e: 43:14:a0:81:dc:f9:42:ee:47:80:48:13:ab:57:9c: 9f:49:49:89:5f:91:76:43:e3:21:56:22:46:16:93: 46:51:24:67:2d:e6:d8:9b:0d:a7:b0:d5:03:79:07: 0e:c9:5d:3c:46:cf:cd:97:93:a7:d8:7c:94:f1:a6: cc:6d:01:f7:8a:2d:fe:12:0f:95:f5:1f:4c:7a:35: b9:80:80:ed:d0:f2:e9:81:ce:a1:fa:32:26:17:9b: 17:de:56:75:22:b2:b9:79:ea:5a:dc:59:4b:27:3b: a0:43:72:10:ad:4c:56:c0:40:e5:21:7b:85:d5:08: d5:3b:0d:cd:75:af:2a:bf:18:d9:c4:0d:db:4a:a8: ec:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:9A:3E:8E:97:4B:66:04:00:20:C9:A6:65:4C:5E:30:39:0A:B9:EB X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:93:32:b3:db:a0:bf:19:7b:0b:9c:fc:e0:26:a3:1c:4d:ab: 36:a1:b5:c2:6d:ea:05:44:39:a4:5f:42:ca:f4:0f:a5:33:0e: c0:f2:ac:9c:f9:1b:72:50:30:00:a0:ee:07:98:11:d0:a0:39: c1:aa:d2:59:82:b8:f4:62:2b:5f:2e:68:1f:bc:ff:52:c2:ca: 36:ad:1c:85:18:9c:55:30:58:d6:b4:f8:76:68:f2:55:1b:05: ed:e7:de:57:ce:13:7a:24:d7:5e:ee:39:36:05:09:91:63:e6: dc:62:43:5c:37:68:bc:7f:a6:57:cb:ae:6b:4d:b8:d9:8d:e1: d0:5e:8a:f1:ef:97:bf:2b:53:33:31:28:05:51:24:a5:4c:55: 53:21:ea:c2:d4:40:99:83:94:56:41:d6:1c:0d:41:b2:95:28: e0:68:6a:6a:00:6a:21:50:1a:e2:83:eb:fa:3a:9d:20:6d:28: 1d:58:2d:57:c8:3c:15:a3:fc:4d:81:8d:69:da:85:18:3b:d1: ca:09:72:41:ba:e5:26:79:70:97:53:c2:24:35:5a:f1:5b:68: 56:65:47:c6:7b:be:af:26:6d:1e:08:53:f3:a2:b6:45:f0:bd: 1c:b8:49:4b:9c:33:77:a5:af:41:fe:61:a4:f1:6b:3b:16:67: 55:89:85:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaG5h8gAggU9fwmjXXu9gVeCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYxMTA4MDUwMDQ1WhcNMjYxMTA5MDUwMDQ1WjAzMTEwLwYDVQQD EyhmZTlhM2U4ZTk3NGI2NjA0MDAyMGM5YTY2NTRjNWUzMDM5MGFiOWViMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9Wa+tUjaOlv0rpjHUHMQbud++pQ TnR+FsMTXpzlVt0ZDJi6m/mxKi4/lNeZA3wyiOYOdYxDKQb6CWEmkmNEubSx1ai0 LDlYBBF0BsKoPmxAtA7ssDa/kqq9nSU39MQ+q+1IwsoPBXk9siqHD3UtLkbObdKP gT5DFKCB3PlC7keASBOrV5yfSUmJX5F2Q+MhViJGFpNGUSRnLebYmw2nsNUDeQcO yV08Rs/Nl5On2HyU8abMbQH3ii3+Eg+V9R9MejW5gIDt0PLpgc6h+jImF5sX3lZ1 IrK5eepa3FlLJzugQ3IQrUxWwEDlIXuF1QjVOw3Nda8qvxjZxA3bSqjs9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP6aPo6XS2YEACDJpmVMXjA5CrnrMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACZMys9ug vxl7C5z84CajHE2rNqG1wm3qBUQ5pF9CyvQPpTMOwPKsnPkbclAwAKDuB5gR0KA5 warSWYK49GIrXy5oH7z/UsLKNq0chRicVTBY1rT4dmjyVRsF7efeV84TeiTXXu45 NgUJkWPm3GJDXDdovH+mV8uua0242Y3h0F6K8e+XvytTMzEoBVEkpUxVUyHqwtRA mYOUVkHWHA1BspUo4GhqagBqIVAa4oPr+jqdIG0oHVgtV8g8FaP8TYGNadqFGDvR yglyQbrlJnlwl1PCJDVa8VtoVmVHxnu+ryZtHghT86K2RfC9HLhJS5wzd6WvQf5h pPFrOxZnVYmFsQ== -----END CERTIFICATE-----Generated at Sun Nov 8 15:23:53 2026 by rpki-client