$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft File: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft (raw, json) Hash identifier: XDzyvImtveztg6GNOCFscZJzc8QwAV8Y/pOOVt9FtW8= Subject key identifier: 07:99:80:CD:04:9D:A3:EC:67:54:76:0D:54:93:E1:36:B9:D1:EC:0B Authority key identifier: 1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF Certificate issuer: /CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Certificate serial: 01A106CA8C553790C8C0DD00901449322105 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft Manifest number: 12E0 Signing time: Sun 04 Oct 2026 12:01:39 +0000 Manifest this update: Sun 04 Oct 2026 12:01:39 +0000 Manifest next update: Mon 05 Oct 2026 12:01:39 +0000 Files and hashes: 1: 0fq1gRYIVP9dTgOiD1oeMJEo_KQ.roa (hash: FJ5OMI2l4qRYLCvuHNSAsXUeDfS57Wh9X15C8/hlneg=) 2: 1nqC6xnrGeiiCsIQzeNoBlULrNs.roa (hash: M8+11gt77TdIMEMeidkDUFD2MIHTpwuA0Z3lO3wayfw=) 3: 3h4WTidFEK5MwQqcWECC_fEqbxw.roa (hash: D0DN2xnVk35yiTKr+sYl2ENqJNd+pv7xGkTfjbVwkWw=) 4: 5G7T_ta5GRY-vaF3PWEHkN7X3lY.roa (hash: E1pa9lzYctomz2Si/AVGz+D9ZaUziuZd2hK3Cs63LZA=) 5: 8PXruX0NUFmuFkbr5FDpoooVvXM.roa (hash: XPZ+iCpyreRyaJ/LqZJwBerjbtvxZcmxEnaEbiUms6Q=) 6: B0aX47W6kux6EP5PxGcHbpo8GWc.roa (hash: zBSMeOkMWOykqlpzJJhOtskJsuEZJB5nwz0BJ2knqw0=) 7: CgUHKiRsRmzYx7ZOCnuOhc6JuzM.roa (hash: EQlw+q9jnebrItocrNjEuHmz2ku3rbdvtehDLXwsagY=) 8: Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl (hash: rveo+o+wVLeIq+/Uti5wZ8v3lx96YvMeM5IFnlFjQ3Y=) 9: Qh6w5R4OY3LRFJlmxw3GEUIorWE.roa (hash: 2TZvTfqZGN/7yXjhJzZ95o9BQTNHk2HmhR+25FxXV1c=) 10: jFJe3jl_QcpRM-Nhwh499UXzHl8.roa (hash: 4ZP7K3NzaQIb5Oo5+GVsX5DHhCL0Z9KsvPv5i497LDk=) 11: lGkHGhpYOdTznT_yaE3ovjGf5mQ.roa (hash: 4SHYfC7Bcu60W7bkjANyd/nQPdjStJcUQUz5MyP0/xM=) 12: xUyp5z9ki9x2dJcpNDLQqnXtfXs.roa (hash: OB5oPZJI1/ir+viyC2KaHJjQwYX8WdLDSXZSic2R5Fs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 05 Oct 2026 12:01:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:06:ca:8c:55:37:90:c8:c0:dd:00:90:14:49:32:21:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a7f036e2592391fb45a3dd33caf0b07956973cf Validity Not Before: Oct 4 12:01:39 2026 GMT Not After : Oct 5 12:01:39 2026 GMT Subject: CN=079980cd049da3ec6754760d5493e136b9d1ec0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a9:8b:22:e4:1f:33:53:64:25:8f:c0:1c:42: 50:75:b2:1c:c6:f0:32:db:53:d1:0d:93:d8:89:44: a2:d8:17:f0:1e:9a:9a:1e:88:fd:bc:8e:b2:c9:ec: f8:01:b7:0d:e2:a4:46:ad:a6:8f:93:1c:a9:83:04: 80:2a:ff:7f:f5:1c:8f:2c:b7:37:95:65:fd:ee:30: fb:2a:06:ad:6f:c1:11:30:7e:07:1d:37:7e:fe:63: 0f:9d:d7:06:37:2b:15:79:e8:d1:bc:56:d4:eb:5e: 9d:24:4a:e6:16:92:21:14:47:3d:df:ca:b3:c6:b4: e3:f9:75:40:65:6c:b7:5a:0a:1a:b5:f3:5e:cf:fb: ba:07:55:c2:a3:f7:5a:cf:bf:98:47:44:0f:46:91: fa:12:fb:29:0b:b8:ff:a0:17:56:4f:9a:14:dc:35: 41:be:3f:4b:0b:aa:21:09:a7:28:2b:8a:95:79:a8: c5:06:b5:aa:d6:cc:f3:a1:94:60:ce:e5:a6:62:bf: b4:32:09:5d:fd:b3:55:c6:bd:83:5a:70:e2:52:5d: df:a7:89:92:a6:9b:f3:d0:63:e5:b9:1a:de:cb:72: d3:8d:05:f4:56:a8:e9:8e:57:c8:dc:1d:f5:b2:63: 87:04:8b:50:6e:ef:bf:f8:b3:14:2a:ce:9a:64:ad: 4b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:99:80:CD:04:9D:A3:EC:67:54:76:0D:54:93:E1:36:B9:D1:EC:0B X509v3 Authority Key Identifier: keyid:1A:7F:03:6E:25:92:39:1F:B4:5A:3D:D3:3C:AF:0B:07:95:69:73:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/24be1a-16da-481c-8bcb-340d625c6dba/1/Gn8DbiWSOR-0Wj3TPK8LB5Vpc88.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b6:45:8c:b0:49:6f:0f:85:ef:fe:11:84:0d:2a:5c:39:f9: 4f:9e:c5:b2:44:24:b5:00:38:a5:f3:25:ca:c3:d6:49:af:b6: af:f7:66:87:40:b8:d6:9c:bc:81:c8:1e:57:21:75:5a:f1:42: 83:99:cf:6a:c2:4c:61:e1:ef:2b:96:a6:ef:90:0b:56:c3:3d: 7a:6a:ab:00:c7:6e:40:bb:02:9c:28:9c:95:9e:35:53:40:6b: c2:f4:88:98:1b:8e:2b:fd:dc:3a:a0:3d:dc:5f:06:ab:ee:c1: 50:85:ad:4a:b6:12:af:66:d5:3d:d6:8f:b7:a1:fc:06:a0:b1: f0:53:31:68:26:4f:bb:d4:24:fb:42:f4:3e:fe:3d:eb:ae:54: 08:6f:5d:7c:f3:22:a8:02:fb:5b:03:fc:d0:25:fe:ba:1a:cf: 30:21:63:bf:ab:22:ad:2b:66:1e:0c:ec:b9:61:bf:39:ea:3a: 37:35:ea:9c:23:57:75:de:cc:a9:3f:63:8f:99:39:6a:26:40: bf:4d:82:5c:92:45:7e:8f:47:37:f0:a4:e3:d0:1e:88:a7:d2: fd:fc:27:10:d8:b4:46:9e:4e:9b:94:b0:c6:9c:9a:00:d8:95: dc:c3:5d:88:4f:db:6b:c4:38:33:43:97:17:09:2e:bb:bb:64: e7:b1:ec:65 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEGyoxVN5DIwN0AkBRJMiEFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhN2YwMzZlMjU5MjM5MWZiNDVhM2RkMzNjYWYwYjA3OTU2 OTczY2YwHhcNMjYxMDA0MTIwMTM5WhcNMjYxMDA1MTIwMTM5WjAzMTEwLwYDVQQD EygwNzk5ODBjZDA0OWRhM2VjNjc1NDc2MGQ1NDkzZTEzNmI5ZDFlYzBiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qmLIuQfM1NkJY/AHEJQdbIcxvAy 21PRDZPYiUSi2BfwHpqaHoj9vI6yyez4AbcN4qRGraaPkxypgwSAKv9/9RyPLLc3 lWX97jD7Kgatb8ERMH4HHTd+/mMPndcGNysVeejRvFbU616dJErmFpIhFEc938qz xrTj+XVAZWy3WgoatfNez/u6B1XCo/daz7+YR0QPRpH6EvspC7j/oBdWT5oU3DVB vj9LC6ohCacoK4qVeajFBrWq1szzoZRgzuWmYr+0Mgld/bNVxr2DWnDiUl3fp4mS ppvz0GPluRrey3LTjQX0VqjpjlfI3B31smOHBItQbu+/+LMUKs6aZK1LQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAeZgM0EnaPsZ1R2DVST4Ta50ewLMB8GA1UdIwQY MBaAFBp/A24lkjkftFo90zyvCweVaXPPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2It MzQwZDYyNWM2ZGJhLzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZC8yNGJlMWEtMTZkYS00ODFjLThiY2ItMzQwZDYyNWM2ZGJh LzEvR244RGJpV1NPUi0wV2ozVFBLOExCNVZwYzg4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC7ZFjLBJ bw+F7/4RhA0qXDn5T57FskQktQA4pfMlysPWSa+2r/dmh0C41py8gcgeVyF1WvFC g5nPasJMYeHvK5am75ALVsM9emqrAMduQLsCnCiclZ41U0BrwvSImBuOK/3cOqA9 3F8Gq+7BUIWtSrYSr2bVPdaPt6H8BqCx8FMxaCZPu9Qk+0L0Pv49665UCG9dfPMi qAL7WwP80CX+uhrPMCFjv6sirStmHgzsuWG/Oeo6NzXqnCNXdd7MqT9jj5k5aiZA v02CXJJFfo9HN/Ck49AeiKfS/fwnENi0Rp5Om5SwxpyaANiV3MNdiE/ba8Q4M0OX Fwkuu7tk57HsZQ== -----END CERTIFICATE-----Generated at Sun Oct 4 18:29:35 2026 by rpki-client