$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft File: M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json) Hash identifier: yLxAq3gBt4tuN2dGpzchkqK7NmdE3vy3QfpckL1HInE= Subject key identifier: 33:4C:2D:DB:68:44:3C:3E:3D:74:1A:26:13:08:BC:A8:C4:7F:DD:7D Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 01A18006430EE1893E89E12A57811462A7BD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft Manifest number: 1AC7 Signing time: Wed 28 Oct 2026 01:00:56 +0000 Manifest this update: Wed 28 Oct 2026 01:00:56 +0000 Manifest next update: Thu 29 Oct 2026 01:00:56 +0000 Files and hashes: 1: 0_H--D3ld_V5A2GDwFkKX4GOiA0.roa (hash: 4e5kO9YfPo607NKs0GfVmGK8Ay03F7orhMQubGrK5s8=) 2: 2Y22JjtWrl0_nviPCh47UcoiEMc.roa (hash: MjixCwl1roku3r8M7cAmmfjxaUIrhcvJpiUdNlV6IQQ=) 3: 7aJymM8-A-Vzxrith_gpYUCnxLA.roa (hash: yavsVrmsFDM2twygwL9ROfhNDdkXtjYh0veEc5aPL6U=) 4: BREu-oLiWRVnvmr0OZpze-1yZho.roa (hash: JOSLUiFQMXinZ2s3xJFw5vOALrZZO+Y0VQuZomqNcNc=) 5: KQsPApaYWV1_80rHUTYo4kduGEc.roa (hash: DMlh9LVsGQgoH2sC6mgiD6McwaNhSBUcv3JC9I342EY=) 6: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: GPGZzIOv0WUgJlAw0uD5DF9Rwbk7LVxR2VbJywSxiDw=) 7: QWYP1a7mE-901Npm0STCw-0_494.roa (hash: GGXXSRYOhg9nYn3L4Ohy/bvCK7SIobkN33noxERxNSE=) 8: TTEzQtE5d70mBmiMli4rrHXXguQ.roa (hash: xIxbskYOAuc9Yjyt/8RKTk7K32KNqi0KQcR/yqDrqdI=) 9: XiniKmHk48PTd4AWdTNpS7pWYPM.roa (hash: LdHpQkrTcb3/m2EigJdifn4oDDnwzMObaFnPm4GQZsE=) 10: ajM6u9AhobNFWsjqV0zszbZBQgg.roa (hash: 9dpjav4k95AK45D3gY5gAwzQc5Jmp0J5EfW5NA6MQrY=) 11: dal6AFPAMOKunkfF7hTY8Cuz5HU.roa (hash: IVF4Tz8JdO1RxYBDwDE4cvUkOAHOkcCD98baar1MrRo=) 12: hRwQ4mV8u9tsYeBBJi9cjl-qxEg.roa (hash: Z+XgNcTxGhoujnKCI9mZu3tfZCPpFoVHO4a9tPmkGVA=) 13: m7yZ_UyERPPI7rtLGNSBX9Jm9bw.roa (hash: ykcmm9r12Ob1/PzXbUDHvDBzZdTDZhIzOR7w4XuLSwc=) 14: qxewd6X7cZwHTA-zQMlA_OAvlN8.roa (hash: Ry7YnXFLSUjxQaaprtnh0Xvr7Lu/H9g4ex/4yimbRx4=) 15: shE5nirJjfzwtVvRNs6B8132Y90.roa (hash: bZPp9AYR6VCS07rIaJOgsQumohQ23Ohhw0oW9Q96CQ4=) 16: uRrZsstrzGEOJvLMKb6O233tS-U.roa (hash: hfakJlnSmscUlq1SwhM8hNCbJeeub/2zpsFlue2e450=) 17: wuPeAwGhCGGyy1vUlZnoXQ_te9w.roa (hash: Ya4gfqovf3JM8yFavds8OzJvokLnz9/3YHuh2owqYdI=) 18: y-LHl9JCf1vCgH9ww0oXT09BT3E.roa (hash: U2dDyow3uUPlXZ81c884FwuRrB1qQId+nf/6dQa9SLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 22:00:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:80:06:43:0e:e1:89:3e:89:e1:2a:57:81:14:62:a7:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Oct 28 01:00:56 2026 GMT Not After : Oct 29 01:00:56 2026 GMT Subject: CN=334c2ddb68443c3e3d741a261308bca8c47fdd7d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:57:0c:e7:65:09:c4:c8:ee:45:2f:1c:f8:6a: b4:88:4a:f2:a7:fe:81:b8:00:5b:bc:24:89:63:62: a0:d4:fc:69:4e:3b:ad:d3:17:2e:9e:66:34:26:80: 09:8a:d2:17:79:50:2b:a4:01:52:23:c5:ce:6b:4c: a6:25:42:38:ae:b8:dd:c5:c4:3d:e4:27:67:58:91: 76:45:a1:e7:bf:16:74:5b:9e:a0:11:75:2b:8c:2f: be:08:38:43:7b:74:9a:32:1d:a0:2c:09:68:5c:02: aa:97:4f:b6:36:09:05:49:fd:73:f4:c2:df:05:52: 95:cd:b1:c7:91:0c:31:27:7e:f3:96:0f:0b:8d:41: 31:c4:60:5c:8d:99:40:4d:57:0b:7e:e3:fe:c9:e4: d4:84:b0:3b:c8:a5:8a:74:81:2a:ec:a6:0f:b5:52: a9:ae:53:b6:68:63:19:d2:6c:72:a3:06:d8:e3:6a: 3b:be:9e:fa:27:93:16:f6:70:cf:16:0b:2f:65:b6: 5b:82:a9:77:15:dd:95:5f:cc:1a:20:50:71:f5:70: 93:ab:b6:8e:95:46:5e:38:99:d7:d7:2b:57:c5:84: 21:18:eb:27:1c:a5:2b:48:80:5c:3d:ac:4d:00:e2: 99:89:9c:3f:33:14:c3:97:86:e1:ee:30:3f:0a:a3: d1:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:4C:2D:DB:68:44:3C:3E:3D:74:1A:26:13:08:BC:A8:C4:7F:DD:7D X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:55:82:25:f9:b6:5b:5d:f3:82:c9:45:80:e6:57:55:98:98: 3c:91:82:e4:94:e2:cf:ac:ab:d3:c8:38:43:af:9f:8c:d1:7d: e5:54:df:ed:39:da:5b:93:df:71:98:d9:07:59:c9:5f:c3:24: 28:e6:8b:7b:cd:99:88:6c:d7:53:eb:22:20:5b:c0:40:17:55: 2a:ba:e2:8b:66:f4:b0:09:84:ce:e0:9f:71:7e:bb:ff:51:4e: 07:aa:a0:ad:31:d9:9f:73:3e:84:ca:b8:e8:cb:df:d9:ce:06: 6c:50:69:12:bb:a5:1c:34:3c:65:f8:31:94:1e:69:b3:72:e1: a3:b0:3d:73:99:cc:9e:ae:54:56:1c:c4:3f:5a:e5:6a:ae:b1: 36:f4:25:67:0c:33:7c:8d:12:0e:26:bf:5c:dc:8d:c9:67:c9: d2:60:e5:ce:30:ab:1a:69:7b:bb:85:9f:a8:f4:54:58:ed:73: 06:13:84:9e:d4:2d:0d:21:7c:d7:f5:0d:ea:c4:b0:e2:c4:69: 80:d1:1f:e7:0e:66:47:6c:96:16:a3:95:f1:8e:8f:39:65:94: 28:5e:7a:d1:e2:9b:dd:b9:e0:92:10:7a:4d:38:db:87:dd:fc: e0:f6:d7:43:4a:ea:ef:1f:19:7d:b0:1c:f5:c1:74:7c:b2:7d: 0d:b0:bd:77 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGABkMO4Yk+ieEqV4EUYqe9MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYxMDI4MDEwMDU2WhcNMjYxMDI5MDEwMDU2WjAzMTEwLwYDVQQD EygzMzRjMmRkYjY4NDQzYzNlM2Q3NDFhMjYxMzA4YmNhOGM0N2ZkZDdkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx1cM52UJxMjuRS8c+Gq0iEryp/6B uABbvCSJY2Kg1PxpTjut0xcunmY0JoAJitIXeVArpAFSI8XOa0ymJUI4rrjdxcQ9 5CdnWJF2RaHnvxZ0W56gEXUrjC++CDhDe3SaMh2gLAloXAKql0+2NgkFSf1z9MLf BVKVzbHHkQwxJ37zlg8LjUExxGBcjZlATVcLfuP+yeTUhLA7yKWKdIEq7KYPtVKp rlO2aGMZ0mxyowbY42o7vp76J5MW9nDPFgsvZbZbgql3Fd2VX8waIFBx9XCTq7aO lUZeOJnX1ytXxYQhGOsnHKUrSIBcPaxNAOKZiZw/MxTDl4bh7jA/CqPR+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDNMLdtoRDw+PXQaJhMIvKjEf919MB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdFWCJfm2 W13zgslFgOZXVZiYPJGC5JTiz6yr08g4Q6+fjNF95VTf7TnaW5PfcZjZB1nJX8Mk KOaLe82ZiGzXU+siIFvAQBdVKrrii2b0sAmEzuCfcX67/1FOB6qgrTHZn3M+hMq4 6Mvf2c4GbFBpErulHDQ8ZfgxlB5ps3Lho7A9c5nMnq5UVhzEP1rlaq6xNvQlZwwz fI0SDia/XNyNyWfJ0mDlzjCrGml7u4WfqPRUWO1zBhOEntQtDSF81/UN6sSw4sRp gNEf5w5mR2yWFqOV8Y6POWWUKF560eKb3bngkhB6TTjbh9384PbXQ0rq7x8ZfbAc 9cF0fLJ9DbC9dw== -----END CERTIFICATE-----Generated at Wed Oct 28 07:24:06 2026 by rpki-client