$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft File: ER1oFDdScdGjy9EhVdsR0r1BqNM.mft (raw, json) Hash identifier: USltwj0TGEuWZnJObXP4TdAD674sRWmDQJMIQYfbtyM= Subject key identifier: 79:92:EF:67:8C:6D:8E:DB:6E:66:F3:DD:EB:65:D4:EE:8A:14:7F:F3 Authority key identifier: 11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 Certificate issuer: /CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Certificate serial: 01A196C4B33BA72754F2813A90CF1A6DF9B7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft Manifest number: 1998 Signing time: Sun 01 Nov 2026 11:00:35 +0000 Manifest this update: Sun 01 Nov 2026 11:00:35 +0000 Manifest next update: Mon 02 Nov 2026 11:00:35 +0000 Files and hashes: 1: 8ZTbVFN88ElJOvnxpynWkBywvcU.roa (hash: Zi7aMmYsFeMT6y4m/OMRvzAw9FlwVPNAsEeEWMyssQs=) 2: 9gyIdfYx-vxaH69AuzYIu8sS7ec.roa (hash: vsh4e/kwYxBt1mO0Ld2w2nU9VsbUvL0v+cSn3CZdKv4=) 3: D4HmthbydYoqExoa56VFIbe7J5A.roa (hash: 1gmVpoixHN/Zn+8HJ6YdrukA3JeRxcEeBWZ/2aGh+ps=) 4: DBNPe8eVrw7_1KUjzRRA33hX58Y.roa (hash: hYdptN3L/vz/3ch52LzC/IoTDQvky7D/anqUyA/QPOc=) 5: DKZJyriLpkX0P03xQILHD2FwZEo.roa (hash: x6vx2AQsWgf7sMGXLXxiRwrb7PArAVgKRPBlJd4ah10=) 6: ER1oFDdScdGjy9EhVdsR0r1BqNM.crl (hash: 78DpCAlMwbBgl9wmEiW1wtkL7qnxdqviBtcCHAa41QA=) 7: HRwCntz8pHEtM7UJXh-KwEbXi3w.roa (hash: CKUDXMyXov9Gbf/ygH+HewYMwNtReJO+UQotN2JyBXQ=) 8: Haim4aY9ShmCS1epcJRa3-rRRmM.roa (hash: AQeMZQUR+w1eyhT+kYpVEnNYoo0tXgoBt1LUUZT+/W4=) 9: Ka2f0_rG4AuXnvi8TQgXMBJzKOE.roa (hash: HTLBGDTB6awokEWRy6DjReQvfOLjCmwPODXPDvHGn+A=) 10: LdJkopqk4m9ubmHzk4T29FnhG7o.roa (hash: Qx8FwqyP4Rxw7vIMwqfqa4V2zeYK7+dz+yeOugc8QVI=) 11: S3K9bo4j9NjF6L9mhwIsz-LYyHg.roa (hash: FX7C0FNczXeRPZms4zyJ1OukTZNK4zd0GhG7vBTsBvg=) 12: UWgtqXah3liJx-awsYUK3XIS54c.roa (hash: nisX/PCjG49hPGc2ySAUn3J0MxV+pv8+T78d4GdNMSs=) 13: _d7ohj2Ako_tiSFSE9-jnGs0uoI.roa (hash: mf32LDbJ2Su5F5H62P0/F/PId5oq7GFGgkD8WKRwmPw=) 14: f5svUnEK1n30wRVLtixbJDS7pZM.roa (hash: sILbepz7GhK0jGMQ48sIN5LBYx9eYZB9voFGWkXvx60=) 15: iK87eJg7y-_rcG1D3z4FzaXgRNE.roa (hash: uVYEVS9koySJoZQhAK0q3w5qAE9/nwHY2ro0Er3WEZY=) 16: nXrADfBP6wNtRforv4w6KFdo1Ns.roa (hash: PAoowx6zHYeOj9TxBp8LwY6JFAj6/p0gXZ/G0XMc/dg=) 17: tDoaGy6SLh3swARR-izxiYVQMmU.roa (hash: lZCnqmwKcNoIj9hNP0txhfT3ExuUcH8dWLkUpGjDKzc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Nov 2026 11:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:96:c4:b3:3b:a7:27:54:f2:81:3a:90:cf:1a:6d:f9:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=111d6814375271d1a3cbd12155db11d2bd41a8d3 Validity Not Before: Nov 1 11:00:35 2026 GMT Not After : Nov 2 11:00:35 2026 GMT Subject: CN=7992ef678c6d8edb6e66f3ddeb65d4ee8a147ff3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:b4:ae:96:5e:ce:70:cc:e8:b9:78:73:5c:a3: ea:57:80:15:86:95:b8:63:4f:dc:0b:a0:57:a6:d3: 43:77:41:68:ef:6d:75:ac:c0:4c:f6:63:5f:a8:0f: 36:0e:a7:1a:af:98:ef:e0:fb:2a:c4:bb:18:77:1c: 0d:d6:f9:c4:dd:fb:dc:de:66:9f:d0:f1:10:19:51: 72:6a:d9:9d:3c:e4:6d:36:d8:fd:f1:75:4e:fc:b1: 2b:82:95:7c:aa:cf:6b:b8:f0:84:23:c6:c2:45:8e: f9:ca:79:9c:b0:96:c3:56:2c:95:f5:a1:78:5b:41: a7:68:85:a1:58:b5:04:38:db:e1:f0:bc:6b:f8:61: f1:c8:47:47:4e:16:da:e1:f4:36:ed:09:45:c1:41: 23:ff:5a:b0:2e:60:97:37:53:46:91:5c:2b:70:a9: db:e6:ef:c1:ee:8a:4e:47:97:fa:f5:eb:53:2a:db: 7f:0b:fb:f3:e4:6a:a3:d8:cc:09:c2:8e:34:6e:13: 12:81:af:9b:a5:c1:1a:24:40:cf:b4:9c:b5:3e:e3: e8:23:bd:1e:9f:b5:92:41:b7:ff:f8:a3:32:de:9c: ea:44:3f:82:80:17:b1:10:70:74:90:fc:c8:d7:dc: 73:58:fc:25:b6:25:7a:ee:46:28:ad:68:e3:03:e4: 47:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:92:EF:67:8C:6D:8E:DB:6E:66:F3:DD:EB:65:D4:EE:8A:14:7F:F3 X509v3 Authority Key Identifier: keyid:11:1D:68:14:37:52:71:D1:A3:CB:D1:21:55:DB:11:D2:BD:41:A8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ER1oFDdScdGjy9EhVdsR0r1BqNM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/a8b14b-fb25-47f8-8b0d-271d25e20574/1/ER1oFDdScdGjy9EhVdsR0r1BqNM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:7f:74:2f:a5:bc:ac:c6:6c:69:64:b3:43:90:4c:64:ca:8b: 4e:ef:fb:40:f4:32:fa:7e:30:6a:6c:b4:cd:f0:fa:b9:96:37: 64:6d:8b:da:b4:66:b6:1c:02:e1:a2:1f:fb:aa:80:f4:a5:b4: ed:fb:30:81:8d:27:fe:ce:a3:47:66:97:63:c2:92:74:f9:14: 0e:79:c7:5a:8f:c2:ab:5f:db:3f:b0:5c:71:dc:0c:46:6b:31: e8:ff:58:2f:66:8a:b0:1d:b2:a0:32:8e:f1:50:d7:8a:84:c7: 09:c5:eb:ab:1f:1a:61:65:af:5c:04:45:e1:df:34:52:58:4d: c3:55:34:94:60:60:5a:b6:07:8f:f8:06:f7:63:cd:2c:c6:8b: 27:72:a9:5a:8c:6c:a3:f6:ab:55:09:6e:56:2b:c5:09:fb:75: 35:71:a4:69:c1:f2:5b:f6:a0:55:84:3f:93:7f:84:a6:c6:cb: 8e:97:52:64:23:9f:21:74:3c:56:80:82:2e:a9:70:b5:f4:80: e8:df:d1:c8:dd:63:43:3c:ea:4e:dc:14:24:35:28:da:5d:95: ca:78:ce:fa:72:59:6b:8d:73:29:79:75:01:94:23:1a:0f:cd: df:6f:0d:68:d7:a4:42:1d:46:73:17:e0:ab:79:ed:fa:9d:25: 88:33:68:7f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGWxLM7pydU8oE6kM8abfm3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDExMWQ2ODE0Mzc1MjcxZDFhM2NiZDEyMTU1ZGIxMWQyYmQ0 MWE4ZDMwHhcNMjYxMTAxMTEwMDM1WhcNMjYxMTAyMTEwMDM1WjAzMTEwLwYDVQQD Eyg3OTkyZWY2NzhjNmQ4ZWRiNmU2NmYzZGRlYjY1ZDRlZThhMTQ3ZmYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrSull7OcMzouXhzXKPqV4AVhpW4 Y0/cC6BXptNDd0Fo7211rMBM9mNfqA82Dqcar5jv4PsqxLsYdxwN1vnE3fvc3maf 0PEQGVFyatmdPORtNtj98XVO/LErgpV8qs9ruPCEI8bCRY75ynmcsJbDViyV9aF4 W0GnaIWhWLUEONvh8Lxr+GHxyEdHThba4fQ27QlFwUEj/1qwLmCXN1NGkVwrcKnb 5u/B7opOR5f69etTKtt/C/vz5Gqj2MwJwo40bhMSga+bpcEaJEDPtJy1PuPoI70e n7WSQbf/+KMy3pzqRD+CgBexEHB0kPzI19xzWPwltiV67kYorWjjA+RHVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHmS72eMbY7bbmbz3etl1O6KFH/zMB8GA1UdIwQY MBaAFBEdaBQ3UnHRo8vRIVXbEdK9QajTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQt MjcxZDI1ZTIwNTc0LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mMS9hOGIxNGItZmIyNS00N2Y4LThiMGQtMjcxZDI1ZTIwNTc0 LzEvRVIxb0ZEZFNjZEdqeTlFaFZkc1IwcjFCcU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAX90L6W8 rMZsaWSzQ5BMZMqLTu/7QPQy+n4wamy0zfD6uZY3ZG2L2rRmthwC4aIf+6qA9KW0 7fswgY0n/s6jR2aXY8KSdPkUDnnHWo/Cq1/bP7BccdwMRmsx6P9YL2aKsB2yoDKO 8VDXioTHCcXrqx8aYWWvXARF4d80UlhNw1U0lGBgWrYHj/gG92PNLMaLJ3KpWoxs o/arVQluVivFCft1NXGkacHyW/agVYQ/k3+EpsbLjpdSZCOfIXQ8VoCCLqlwtfSA 6N/RyN1jQzzqTtwUJDUo2l2VynjO+nJZa41zKXl1AZQjGg/N328NaNekQh1Gcxfg q3nt+p0liDNofw== -----END CERTIFICATE-----Generated at Sun Nov 1 19:41:54 2026 by rpki-client