$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: nL6eHTp2CxEz20l7m1Mb2jENHkrYD2VCygQjdlgBns4= Subject key identifier: 58:9E:0D:15:2A:4C:37:B3:78:DD:03:B6:38:83:C1:E8:7C:55:4C:A5 Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 01A1298CD5D6A509BE54EA84085D1474BAB1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 12F2 Signing time: Sun 11 Oct 2026 06:00:57 +0000 Manifest this update: Sun 11 Oct 2026 06:00:57 +0000 Manifest next update: Mon 12 Oct 2026 06:00:57 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 3h4WTidFEK5MwQqcWECC_fEqbxw.roa (hash: D0DN2xnVk35yiTKr+sYl2ENqJNd+pv7xGkTfjbVwkWw=) 4: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 5: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 6: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=) 7: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 8: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: HwyX9EOZw1fquUhyjudeg4XZ30N/h100kNZqO8EXcUI=) 9: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 10: jFJe3jl_QcpRM-Nhwh499UXzHl8.roa (hash: 4ZP7K3NzaQIb5Oo5+GVsX5DHhCL0Z9KsvPv5i497LDk=) 11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 05:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:29:8c:d5:d6:a5:09:be:54:ea:84:08:5d:14:74:ba:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Oct 11 06:00:57 2026 GMT Not After : Oct 12 06:00:57 2026 GMT Subject: CN=589e0d152a4c37b378dd03b63883c1e87c554ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:eb:d6:06:4b:10:a0:19:fd:a2:5d:58:3f:f5: 88:68:82:4c:8b:cb:15:6b:b6:d2:9d:8a:0a:b6:8b: 92:26:8f:91:d4:aa:a1:89:e2:e9:b2:dc:0d:ca:6e: b0:a3:37:66:15:15:9e:24:a5:8c:1a:cc:cc:5b:74: b2:c5:14:fe:2f:4d:14:48:f6:16:b1:f1:aa:13:39: 07:b0:da:c9:df:df:4a:3a:7c:28:3f:f0:b2:16:f7: 98:cd:ac:91:e0:eb:e1:51:7f:68:8f:0b:4c:86:64: 92:dd:17:54:cf:5b:d9:8e:70:ed:96:83:c8:ec:c8: 49:74:23:3c:3b:ea:c3:77:ae:e9:3f:7b:39:ef:80: 9a:4a:bb:f4:d7:b3:f7:91:0a:27:a9:d6:db:ad:50: a9:54:ec:b7:c9:f5:ed:62:57:09:8e:77:3e:1c:6d: 18:f8:0b:8a:2c:8f:36:34:d5:ca:ca:73:c2:4d:5c: b7:cf:90:29:8d:cf:e0:01:5e:db:e1:20:c3:84:b1: e3:b9:65:7f:a0:3e:92:99:f1:58:22:97:59:b0:69: 59:db:99:82:ef:b9:66:8b:c9:ca:80:8f:bc:d8:39: 73:aa:68:c7:c6:a6:98:e9:af:96:16:6e:5c:34:24: 0a:2d:46:40:94:f1:bf:6d:21:24:21:76:cf:99:0d: 5e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:9E:0D:15:2A:4C:37:B3:78:DD:03:B6:38:83:C1:E8:7C:55:4C:A5 X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c7:99:ab:0d:41:96:92:97:04:a8:4b:c6:91:b0:21:d1:a1: 4f:de:3e:20:96:a0:13:d6:15:5b:a7:39:d9:f6:1a:27:75:d1: ef:8d:84:3a:e0:5b:12:ec:ff:85:d4:44:71:44:ad:e3:90:ee: 5d:35:15:7c:65:33:ce:5f:d7:62:1a:57:37:5d:be:48:61:0e: 80:f7:6a:af:0b:c8:a0:6d:93:68:ce:ce:58:1c:02:f2:8c:84: 13:55:ce:d4:c0:57:f1:a3:19:d2:75:83:52:7e:5e:fa:4c:d2: be:cb:83:a5:81:9d:74:e9:61:ff:1a:a0:53:80:7c:d8:dc:4d: 68:28:40:87:23:39:ed:d9:d3:e2:53:2a:3d:35:90:e3:38:35: b4:84:ab:27:e2:da:e2:d9:66:37:fc:df:82:64:68:7b:5a:3e: 2f:60:ae:1c:f4:b2:eb:f9:c3:e4:6f:37:64:71:b2:a7:16:ab: 6b:98:e0:0e:a9:72:bd:91:a0:16:40:6a:ba:00:a7:3d:71:81: 5a:5a:f0:8d:d1:c5:df:66:7c:16:54:d0:83:21:00:7b:ab:ed: d1:fb:09:0a:b9:ab:54:e8:bc:44:23:a0:72:ba:fe:aa:3f:1e: 1a:4e:c8:31:57:14:bc:c7:09:bc:6e:a4:1c:19:7d:de:6c:a9: 2b:b9:3b:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEpjNXWpQm+VOqECF0UdLqxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYxMDExMDYwMDU3WhcNMjYxMDEyMDYwMDU3WjAzMTEwLwYDVQQD Eyg1ODllMGQxNTJhNGMzN2IzNzhkZDAzYjYzODgzYzFlODdjNTU0Y2E1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+vWBksQoBn9ol1YP/WIaIJMi8sV a7bSnYoKtouSJo+R1KqhieLpstwNym6wozdmFRWeJKWMGszMW3SyxRT+L00USPYW sfGqEzkHsNrJ399KOnwoP/CyFveYzayR4OvhUX9ojwtMhmSS3RdUz1vZjnDtloPI 7MhJdCM8O+rDd67pP3s574CaSrv017P3kQonqdbbrVCpVOy3yfXtYlcJjnc+HG0Y +AuKLI82NNXKynPCTVy3z5Apjc/gAV7b4SDDhLHjuWV/oD6SmfFYIpdZsGlZ25mC 77lmi8nKgI+82DlzqmjHxqaY6a+WFm5cNCQKLUZAlPG/bSEkIXbPmQ1eoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFieDRUqTDezeN0DtjiDweh8VUylMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhseZqw1B lpKXBKhLxpGwIdGhT94+IJagE9YVW6c52fYaJ3XR742EOuBbEuz/hdREcUSt45Du XTUVfGUzzl/XYhpXN12+SGEOgPdqrwvIoG2TaM7OWBwC8oyEE1XO1MBX8aMZ0nWD Un5e+kzSvsuDpYGddOlh/xqgU4B82NxNaChAhyM57dnT4lMqPTWQ4zg1tISrJ+La 4tlmN/zfgmRoe1o+L2CuHPSy6/nD5G83ZHGypxara5jgDqlyvZGgFkBqugCnPXGB WlrwjdHF32Z8FlTQgyEAe6vt0fsJCrmrVOi8RCOgcrr+qj8eGk7IMVcUvMcJvG6k HBl93mypK7k7Kw== -----END CERTIFICATE-----Generated at Sun Oct 11 13:37:09 2026 by rpki-client