$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: sjsKvNtai1BmYmIGUXSUE2LrNYsJt4gSu9siSQ2ObbM= Subject key identifier: CD:82:EF:42:3E:7D:6B:06:E9:A6:08:6E:BE:DF:46:3F:FD:71:43:BE Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 01A1998EB47CA1AB28CF1FC08B226BC440F9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 132C Signing time: Mon 02 Nov 2026 00:00:28 +0000 Manifest this update: Mon 02 Nov 2026 00:00:28 +0000 Manifest next update: Tue 03 Nov 2026 00:00:28 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 3h4WTidFEK5MwQqcWECC_fEqbxw.roa (hash: D0DN2xnVk35yiTKr+sYl2ENqJNd+pv7xGkTfjbVwkWw=) 4: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 5: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 6: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=) 7: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 8: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: cROM9QVs1p1OU8RS+d1BIvrBHpJ6LlBtcDXdNgCGpRI=) 9: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 10: jFJe3jl_QcpRM-Nhwh499UXzHl8.roa (hash: 4ZP7K3NzaQIb5Oo5+GVsX5DHhCL0Z9KsvPv5i497LDk=) 11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Nov 2026 21:02:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:99:8e:b4:7c:a1:ab:28:cf:1f:c0:8b:22:6b:c4:40:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Nov 2 00:00:28 2026 GMT Not After : Nov 3 00:00:28 2026 GMT Subject: CN=cd82ef423e7d6b06e9a6086ebedf463ffd7143be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:9b:59:2b:63:07:44:78:0f:bf:85:bf:aa:35: 6f:a1:6e:7e:05:a9:45:de:71:17:7f:a3:27:28:25: b5:07:78:24:34:36:b5:e3:78:9f:55:08:18:cd:ed: 41:d2:ff:30:a7:2f:84:ed:71:8e:82:a1:c6:67:2f: d8:38:76:42:26:cc:c8:44:de:a1:a4:2e:f6:b5:3a: 4b:d5:bf:06:41:81:6e:2b:90:c7:37:d2:0d:11:2b: 89:06:61:88:97:96:6e:8b:39:56:a0:e9:cb:dc:3d: 02:a4:af:b5:ca:f6:d1:bd:df:d2:8f:2a:d0:80:cc: e5:3d:e5:1e:15:2f:83:5b:fa:6d:e2:02:12:b4:65: 3d:ab:16:b8:44:2b:fc:b5:5c:7d:ac:a2:33:db:db: d0:3b:ec:f4:c4:46:59:63:73:67:bd:5f:dd:14:70: a4:24:7b:ec:b3:a6:86:f0:bc:88:31:f9:89:95:0a: 70:4b:95:5f:7f:ee:ca:89:29:8f:2a:67:1e:a2:62: d0:fd:c3:6d:f7:8a:b2:d7:c7:ec:37:71:28:6c:20: 5f:bd:b7:86:fa:e8:16:78:68:99:fe:da:d6:86:31: d2:74:28:cd:71:32:af:26:63:32:54:bd:79:71:30: 96:d4:a7:2e:fd:27:ac:08:fe:4a:5c:00:88:c4:9f: 39:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:82:EF:42:3E:7D:6B:06:E9:A6:08:6E:BE:DF:46:3F:FD:71:43:BE X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:2e:db:13:49:c0:57:b6:90:df:31:a8:0b:56:71:6e:45:c2: 44:93:ab:0f:0b:c1:a7:24:13:e4:a8:a6:c4:36:7b:46:43:6a: 56:ac:f0:58:f4:d1:69:db:72:a0:2b:0e:9e:4a:e1:4e:34:d2: 5e:6a:05:ec:29:f9:4a:45:4a:8c:18:21:fe:b8:fe:34:dc:7f: 2d:87:ec:a8:27:97:3f:29:22:e4:8d:94:69:a3:60:e2:b8:51: 98:87:d2:92:aa:99:55:b0:d7:73:65:67:55:43:9d:9f:4a:64: 20:b5:ad:3b:e2:aa:1e:9c:ef:49:55:e5:d3:16:ec:3d:2d:18: f1:a9:21:25:62:f5:dd:e5:0e:31:99:76:49:59:9d:c3:00:72: a8:f5:eb:6d:e8:2d:96:42:23:ba:d2:f0:75:f0:80:0d:4a:93: 8b:1d:b9:68:3b:0a:db:6c:21:b7:b7:d8:53:34:4c:b7:8b:88: 62:53:55:20:8d:d4:9f:4f:13:cf:1c:2e:d6:6d:a1:ed:59:b6: c7:69:0a:cc:67:a5:51:fa:2c:a5:ac:1b:f1:44:68:48:9e:1d: 6c:35:97:e6:09:c9:6b:58:07:26:10:0c:67:99:11:ab:18:93: e9:b4:2c:be:ae:3d:25:9c:45:e7:a7:00:49:93:95:3e:29:f2: cb:3e:dc:9c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGZjrR8oasozx/AiyJrxED5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYxMTAyMDAwMDI4WhcNMjYxMTAzMDAwMDI4WjAzMTEwLwYDVQQD EyhjZDgyZWY0MjNlN2Q2YjA2ZTlhNjA4NmViZWRmNDYzZmZkNzE0M2JlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJtZK2MHRHgPv4W/qjVvoW5+BalF 3nEXf6MnKCW1B3gkNDa143ifVQgYze1B0v8wpy+E7XGOgqHGZy/YOHZCJszIRN6h pC72tTpL1b8GQYFuK5DHN9INESuJBmGIl5ZuizlWoOnL3D0CpK+1yvbRvd/SjyrQ gMzlPeUeFS+DW/pt4gIStGU9qxa4RCv8tVx9rKIz29vQO+z0xEZZY3NnvV/dFHCk JHvss6aG8LyIMfmJlQpwS5Vff+7KiSmPKmceomLQ/cNt94qy18fsN3EobCBfvbeG +ugWeGiZ/trWhjHSdCjNcTKvJmMyVL15cTCW1Kcu/SesCP5KXACIxJ85JwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM2C70I+fWsG6aYIbr7fRj/9cUO+MB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAli7bE0nA V7aQ3zGoC1ZxbkXCRJOrDwvBpyQT5KimxDZ7RkNqVqzwWPTRadtyoCsOnkrhTjTS XmoF7Cn5SkVKjBgh/rj+NNx/LYfsqCeXPyki5I2UaaNg4rhRmIfSkqqZVbDXc2Vn VUOdn0pkILWtO+KqHpzvSVXl0xbsPS0Y8akhJWL13eUOMZl2SVmdwwByqPXrbegt lkIjutLwdfCADUqTix25aDsK22wht7fYUzRMt4uIYlNVII3Un08Tzxwu1m2h7Vm2 x2kKzGelUfospawb8URoSJ4dbDWX5gnJa1gHJhAMZ5kRqxiT6bQsvq49JZxF56cA SZOVPinyyz7cnA== -----END CERTIFICATE-----Generated at Mon Nov 2 07:25:49 2026 by rpki-client