$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: W6TytyijEEioZtyAO2LRv3pZGldmY4vmMl4s3wERtdc= Subject key identifier: 89:D7:09:BE:8D:32:31:7B:8C:0E:CD:6B:C6:40:E0:9F:03:89:60:7F Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 01A12F57ECD5A35778E67FB6E472782A1A8A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 12F5 Signing time: Mon 12 Oct 2026 09:00:53 +0000 Manifest this update: Mon 12 Oct 2026 09:00:53 +0000 Manifest next update: Tue 13 Oct 2026 09:00:53 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 3h4WTidFEK5MwQqcWECC_fEqbxw.roa (hash: D0DN2xnVk35yiTKr+sYl2ENqJNd+pv7xGkTfjbVwkWw=) 4: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 5: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 6: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=) 7: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 8: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: KwwSkdi+9IbdMbmjBEMFY8U/kdOvgj/3w4xT4wugVKI=) 9: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 10: jFJe3jl_QcpRM-Nhwh499UXzHl8.roa (hash: 4ZP7K3NzaQIb5Oo5+GVsX5DHhCL0Z9KsvPv5i497LDk=) 11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 08:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:2f:57:ec:d5:a3:57:78:e6:7f:b6:e4:72:78:2a:1a:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Oct 12 09:00:53 2026 GMT Not After : Oct 13 09:00:53 2026 GMT Subject: CN=89d709be8d32317b8c0ecd6bc640e09f0389607f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:46:75:e0:e2:5e:2e:a8:12:79:33:d9:20:17: 69:dd:55:cd:7a:43:81:e4:e1:9e:e3:e6:d9:e8:c1: 9c:2a:b2:75:ec:5f:5b:c2:12:d3:a2:e4:27:bb:0a: b9:0d:b1:8b:59:5f:af:3c:3e:0f:e3:ee:a9:b8:c6: 1b:08:84:1b:9d:b3:3e:10:48:2d:62:5e:a7:7e:e6: 44:72:92:94:b7:54:27:4b:11:2d:7a:33:5e:72:00: 0f:3b:f6:19:9f:fb:40:39:1c:8e:fe:4b:54:5e:19: 9b:0c:ca:de:bc:87:42:07:13:ea:44:7a:f9:0c:c5: 36:69:44:f1:5e:a4:93:38:d6:d0:18:ce:ac:03:20: cf:59:97:ef:d6:52:18:7d:6a:91:dc:a7:34:52:d2: ee:dd:5d:02:e2:10:79:99:d1:93:03:65:ef:5e:ef: 41:c0:f3:d5:5f:d0:34:c1:ec:53:7b:48:24:35:11: a5:1a:3f:78:3d:ae:3a:ae:04:6e:75:d8:04:38:46: 41:a9:ab:53:a0:b6:28:0e:4c:db:9d:bd:c8:18:4d: d1:61:df:35:57:6e:f3:80:80:5e:53:3f:5e:a5:fd: 63:fa:d6:ea:59:d1:6a:24:05:f1:aa:6f:2c:b3:83: a0:d7:30:12:58:97:09:9b:7a:11:ba:71:bb:4f:f8: 56:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:D7:09:BE:8D:32:31:7B:8C:0E:CD:6B:C6:40:E0:9F:03:89:60:7F X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:76:d5:67:60:24:03:7b:93:05:36:69:8f:50:0c:e8:4a:eb: 95:ad:73:fa:c1:e3:7d:66:00:d5:dc:6b:62:df:4f:6f:de:ff: c1:32:de:30:8f:ec:7e:75:49:db:e4:bc:4a:16:e8:9d:f4:bf: 4b:fe:70:31:56:48:ec:e2:31:76:b7:99:2f:fb:8f:e6:8c:93: 70:6f:f3:3f:66:c9:ed:ce:0b:8b:55:30:a2:ba:67:9e:42:31: c8:32:61:7c:cf:02:82:9e:44:a6:df:34:25:b9:27:4d:56:e9: 49:30:7b:8d:ed:02:50:0f:b8:f0:dd:06:2f:a9:c8:1f:cb:3d: b0:28:d8:e6:c1:8a:06:51:08:0a:98:cd:89:dd:50:cb:87:b8: 19:e9:bc:10:ca:58:a0:58:c4:27:e6:68:37:1e:08:a7:d3:ed: 56:1c:59:01:8a:d4:1e:2d:ee:11:42:53:1e:b2:50:7a:b8:45: 00:f6:c2:5f:f0:55:80:87:22:f5:f4:42:ab:53:0a:9f:f8:80: 87:a1:c3:ff:07:90:e3:4b:e9:3c:0e:9b:ff:d6:71:ad:e8:a9: cb:25:cc:85:f4:60:1f:93:56:0a:d7:75:2a:97:c4:26:80:f1: 38:b4:b6:88:37:0a:0b:d2:12:45:37:4e:eb:7f:14:5e:0f:c9: 8c:ba:fe:4f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEvV+zVo1d45n+25HJ4KhqKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYxMDEyMDkwMDUzWhcNMjYxMDEzMDkwMDUzWjAzMTEwLwYDVQQD Eyg4OWQ3MDliZThkMzIzMTdiOGMwZWNkNmJjNjQwZTA5ZjAzODk2MDdmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkZ14OJeLqgSeTPZIBdp3VXNekOB 5OGe4+bZ6MGcKrJ17F9bwhLTouQnuwq5DbGLWV+vPD4P4+6puMYbCIQbnbM+EEgt Yl6nfuZEcpKUt1QnSxEtejNecgAPO/YZn/tAORyO/ktUXhmbDMrevIdCBxPqRHr5 DMU2aUTxXqSTONbQGM6sAyDPWZfv1lIYfWqR3Kc0UtLu3V0C4hB5mdGTA2XvXu9B wPPVX9A0wexTe0gkNRGlGj94Pa46rgRuddgEOEZBqatToLYoDkzbnb3IGE3RYd81 V27zgIBeUz9epf1j+tbqWdFqJAXxqm8ss4Og1zASWJcJm3oRunG7T/hWWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFInXCb6NMjF7jA7Na8ZA4J8DiWB/MB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa3bVZ2Ak A3uTBTZpj1AM6Errla1z+sHjfWYA1dxrYt9Pb97/wTLeMI/sfnVJ2+S8ShbonfS/ S/5wMVZI7OIxdreZL/uP5oyTcG/zP2bJ7c4Li1UworpnnkIxyDJhfM8Cgp5Ept80 JbknTVbpSTB7je0CUA+48N0GL6nIH8s9sCjY5sGKBlEICpjNid1Qy4e4Gem8EMpY oFjEJ+ZoNx4Ip9PtVhxZAYrUHi3uEUJTHrJQerhFAPbCX/BVgIci9fRCq1MKn/iA h6HD/weQ40vpPA6b/9ZxreipyyXMhfRgH5NWCtd1KpfEJoDxOLS2iDcKC9ISRTdO 638UXg/JjLr+Tw== -----END CERTIFICATE-----Generated at Mon Oct 12 12:43:41 2026 by rpki-client