$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json) Hash identifier: 4eIjcaaCF42FIZk1AeVZP+LonN0i9JSIHTh62r4pUO4= Subject key identifier: 81:48:96:5C:74:D8:9C:D0:BE:32:61:47:5F:CE:76:F5:08:66:39:3F Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 01A18186F9D551264E05EC283E100FFC85E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft Manifest number: 198D Signing time: Wed 28 Oct 2026 08:01:08 +0000 Manifest this update: Wed 28 Oct 2026 08:01:08 +0000 Manifest next update: Thu 29 Oct 2026 08:01:08 +0000 Files and hashes: 1: 8ZTbVFN88ElJOvnxpynWkBywvcU.roa (hash: Zi7aMmYsFeMT6y4m/OMRvzAw9FlwVPNAsEeEWMyssQs=) 2: 9gyIdfYx-vxaH69AuzYIu8sS7ec.roa (hash: vsh4e/kwYxBt1mO0Ld2w2nU9VsbUvL0v+cSn3CZdKv4=) 3: D4HmthbydYoqExoa56VFIbe7J5A.roa (hash: 1gmVpoixHN/Zn+8HJ6YdrukA3JeRxcEeBWZ/2aGh+ps=) 4: DBNPe8eVrw7_1KUjzRRA33hX58Y.roa (hash: hYdptN3L/vz/3ch52LzC/IoTDQvky7D/anqUyA/QPOc=) 5: DKZJyriLpkX0P03xQILHD2FwZEo.roa (hash: x6vx2AQsWgf7sMGXLXxiRwrb7PArAVgKRPBlJd4ah10=) 6: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: IFRbjvQnCT4LVJkL86kLemUhO3rA9B/42ZrFRR5k8JA=) 7: HRwCntz8pHEtM7UJXh-KwEbXi3w.roa (hash: CKUDXMyXov9Gbf/ygH+HewYMwNtReJO+UQotN2JyBXQ=) 8: Haim4aY9ShmCS1epcJRa3-rRRmM.roa (hash: AQeMZQUR+w1eyhT+kYpVEnNYoo0tXgoBt1LUUZT+/W4=) 9: Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa (hash: HTLBGDTB6awokEWRy6DjReQvfOLjCmwPODXPDvHGn+A=) 10: LdJkopqk4m9ubmHzk4T29FnhG7o.roa (hash: Qx8FwqyP4Rxw7vIMwqfqa4V2zeYK7+dz+yeOugc8QVI=) 11: S3K9bo4j9NjF6L9mhwIsz-LYyHg.roa (hash: FX7C0FNczXeRPZms4zyJ1OukTZNK4zd0GhG7vBTsBvg=) 12: UWgtqXah3liJx-awsYUK3XIS54c.roa (hash: nisX/PCjG49hPGc2ySAUn3J0MxV+pv8+T78d4GdNMSs=) 13: _d7ohj2Ako_tiSFSE9-jnGs0uoI.roa (hash: mf32LDbJ2Su5F5H62P0/F/PId5oq7GFGgkD8WKRwmPw=) 14: f5svUnEK1n30wRVLtixbJDS7pZM.roa (hash: sILbepz7GhK0jGMQ48sIN5LBYx9eYZB9voFGWkXvx60=) 15: iK87eJg7y-_rcG1D3z4FzaXgRNE.roa (hash: uVYEVS9koySJoZQhAK0q3w5qAE9/nwHY2ro0Er3WEZY=) 16: nXrADfBP6wNtRforv4w6KFdo1Ns.roa (hash: PAoowx6zHYeOj9TxBp8LwY6JFAj6/p0gXZ/G0XMc/dg=) 17: tDoaGy6SLh3swARR-izxiYVQMmU.roa (hash: lZCnqmwKcNoIj9hNP0txhfT3ExuUcH8dWLkUpGjDKzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 29 Oct 2026 08:01:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:81:86:f9:d5:51:26:4e:05:ec:28:3e:10:0f:fc:85:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Oct 28 08:01:08 2026 GMT Not After : Oct 29 08:01:08 2026 GMT Subject: CN=8148965c74d89cd0be3261475fce76f50866393f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:cb:26:5b:68:f7:8c:77:dc:73:33:db:ea:27: e8:8c:29:b7:a0:a6:60:e3:ab:a2:0a:83:85:9e:e1: 56:89:b2:be:ae:e3:4d:6d:76:fb:f9:b9:c6:09:81: c9:36:40:8e:e9:55:b6:91:3b:1d:12:a1:ff:c3:55: 5d:fd:57:64:82:8c:c1:28:d7:b0:79:4e:ee:48:32: f0:3a:6c:23:46:09:69:69:7b:fb:09:d1:cd:13:46: 89:a1:10:2e:17:bc:28:59:b5:20:3e:75:21:ce:3d: 25:48:d2:da:e6:fb:86:3f:7e:6a:76:e6:87:8e:69: 39:c1:82:f0:87:8d:8b:a4:5a:1d:66:d9:04:79:76: 03:13:ee:52:12:6c:0a:73:8e:cc:28:db:45:c8:f7: b2:27:33:e0:b4:f2:1a:af:d1:50:5a:03:89:0a:3e: f3:ff:54:41:c3:db:15:bd:36:1b:1c:8c:30:ec:94: 40:65:5a:7b:69:3a:cd:c1:9b:73:6d:8a:88:2a:b7: 2e:be:58:c2:92:c7:b4:ea:65:ac:a0:2e:75:2f:df: 4c:5d:30:6d:02:fc:0c:89:1f:78:09:a5:48:b2:14: 2e:1b:24:b0:21:72:3b:ba:fe:b1:6c:f4:d0:ad:cd: 2e:71:78:79:19:f2:17:aa:97:5d:f0:04:1d:c6:d3: 65:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:48:96:5C:74:D8:9C:D0:BE:32:61:47:5F:CE:76:F5:08:66:39:3F X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:25:ce:6a:1f:16:43:10:d8:b4:95:3e:31:6f:cd:b9:f7:8a: 18:82:66:85:f0:23:22:b9:c7:fe:27:54:f7:9b:e6:76:1c:3a: 44:c0:ef:9a:3f:4d:0d:9a:70:90:9b:44:d4:ec:82:f4:8c:c3: 0a:f9:20:78:86:ae:74:4c:05:7c:b2:ce:d6:3c:ab:0b:b9:c7: 7e:df:77:31:a8:cd:32:0c:82:6e:2e:62:2c:07:2d:d9:a8:50: 7c:a1:5a:13:d4:36:c7:e3:cb:87:86:3d:5d:cf:fb:8a:95:23: 09:10:e2:5c:00:c6:be:e6:41:69:6f:91:d4:db:32:90:30:71: 92:ff:4b:65:db:c0:fc:44:b3:3c:29:a3:bd:a7:76:a9:c6:1a: 09:b4:43:a9:6c:ca:cc:4d:be:40:0e:ec:a8:b1:fe:69:22:7c: 0b:84:6d:66:b9:e2:49:39:7f:c3:6e:d0:91:40:8a:3e:1a:4c: c1:b1:64:1f:ce:1f:74:fb:df:11:b7:95:e8:5a:40:1c:38:41: 81:79:3a:c8:f8:93:e1:66:6c:ae:41:8a:5d:ba:63:34:26:8c: 20:0b:c4:9e:2d:fc:37:45:34:4e:62:7c:04:12:fd:b0:bc:88: 4f:9a:60:a7:c1:0d:c2:20:04:41:3b:f6:5f:1f:ce:0d:09:8a: 72:8c:91:9a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGBhvnVUSZOBewoPhAP/IXiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYxMDI4MDgwMTA4WhcNMjYxMDI5MDgwMTA4WjAzMTEwLwYDVQQD Eyg4MTQ4OTY1Yzc0ZDg5Y2QwYmUzMjYxNDc1ZmNlNzZmNTA4NjYzOTNmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvssmW2j3jHfcczPb6ifojCm3oKZg 46uiCoOFnuFWibK+ruNNbXb7+bnGCYHJNkCO6VW2kTsdEqH/w1Vd/VdkgozBKNew eU7uSDLwOmwjRglpaXv7CdHNE0aJoRAuF7woWbUgPnUhzj0lSNLa5vuGP35qduaH jmk5wYLwh42LpFodZtkEeXYDE+5SEmwKc47MKNtFyPeyJzPgtPIar9FQWgOJCj7z /1RBw9sVvTYbHIww7JRAZVp7aTrNwZtzbYqIKrcuvljCkse06mWsoC51L99MXTBt AvwMiR94CaVIshQuGySwIXI7uv6xbPTQrc0ucXh5GfIXqpdd8AQdxtNlvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIFIllx02JzQvjJhR1/OdvUIZjk/MB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAryXOah8W QxDYtJU+MW/NufeKGIJmhfAjIrnH/idU95vmdhw6RMDvmj9NDZpwkJtE1OyC9IzD CvkgeIaudEwFfLLO1jyrC7nHft93MajNMgyCbi5iLAct2ahQfKFaE9Q2x+PLh4Y9 Xc/7ipUjCRDiXADGvuZBaW+R1NsykDBxkv9LZdvA/ESzPCmjvad2qcYaCbRDqWzK zE2+QA7sqLH+aSJ8C4RtZrniSTl/w27QkUCKPhpMwbFkH84fdPvfEbeV6FpAHDhB gXk6yPiT4WZsrkGKXbpjNCaMIAvEni38N0U0TmJ8BBL9sLyIT5pgp8ENwiAEQTv2 Xx/ODQmKcoyRmg== -----END CERTIFICATE-----Generated at Wed Oct 28 16:32:50 2026 by rpki-client