$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft File: eXmGPOqCrrjp3zhLOapRdvS8-mE.mft (raw, json) Hash identifier: ADQpVJZD1WBm7wCP8QgYzicKYlHP4PutnYZB6gmg9v0= Subject key identifier: 1E:BE:DF:67:5A:48:58:78:51:0C:12:49:DC:92:6F:CD:26:29:E5:80 Authority key identifier: 79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 Certificate issuer: /CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Certificate serial: 01A1724B6C0DC2B134C18E47495645DDCC9E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft Manifest number: 1AE5 Signing time: Sun 25 Oct 2026 09:01:47 +0000 Manifest this update: Sun 25 Oct 2026 09:01:47 +0000 Manifest next update: Mon 26 Oct 2026 09:01:47 +0000 Files and hashes: 1: 3Uhad0KFSfjXI_TbydoftNMdE3g.roa (hash: j9tyqYt4el5e/EHBRQPaMKBm+kYVSqQDGKdC5+GV1fw=) 2: EEBu5rQ8hO5xN_RHJx_hFoO3qS0.roa (hash: BrnZ+O7PpPP2CgQz6l0MWy62IQSvfZEBI+G8ayJnLRE=) 3: GCKLMhjEZ4tgpahsAAW0b7v-pbY.roa (hash: vfauSOW8KSxhKm84diH34kDOUYgfp1RoadLmCV5cdWc=) 4: W0j6YSMe1GX3A4tZiQV8vzc_kpw.roa (hash: fb2PFmFnYQYmWpVf2HANiiXyOyVRMMcnLRhOHSluDkI=) 5: eXmGPOqCrrjp3zhLOapRdvS8-mE.crl (hash: zrdWQc7O/iAnCRIOaY4wVwpZfjjwMEGaJiCWZO/vzMU=) 6: fuQjo-R8V7RgupEifO88mUFsfq4.roa (hash: XgKKf+T/JHflu47fZ8lbK7Ea+coPaRrFsg001BzHny4=) 7: m7kIh8Z3m5sUP7M-wKSvhAuoCII.roa (hash: RVNHVX31tSGpQABOxa6EqSIdwiAZEEfgy9G0c8Rv6CQ=) 8: njVUBNP2pawlmJYfjO-aqV7rHxg.roa (hash: KsrtTqSnlW3K+gpEPkMgT8sO+EsW0Fbd90twROTiMXk=) 9: qSxlathEcN6ZfWcqIYKI4rq_zNk.roa (hash: LYI2xAakIbFGxMC1GmxnDwbT1/w57IsHNS5Uguz6j68=) 10: tA_6j6gquShwOWQHuXqZmv-DGJ8.roa (hash: MBd1V9peNX1ONVT7gAUeTBj/y3gvMH+RO35qWdORDv4=) 11: xrlQxD2aCilEx5MBkW5ICdMkjmI.roa (hash: XyJhHEW8YK45zRLRx/h09ilca39SOfBBhQAfbZq7s3E=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Oct 2026 08:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:72:4b:6c:0d:c2:b1:34:c1:8e:47:49:56:45:dd:cc:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7979863cea82aeb8e9df384b39aa5176f4bcfa61 Validity Not Before: Oct 25 09:01:47 2026 GMT Not After : Oct 26 09:01:47 2026 GMT Subject: CN=1ebedf675a485878510c1249dc926fcd2629e580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:37:bb:9e:92:5e:d0:2e:4b:b1:a8:63:e4:73: 18:b2:7b:31:0e:25:f1:a0:64:f0:78:59:0b:4b:fb: 3f:33:55:49:36:6a:e2:13:11:8e:78:80:78:8f:fc: 54:a4:a3:e3:9f:41:e1:82:ab:2a:b2:ef:7b:02:45: b2:12:47:46:a4:96:4e:5f:86:5e:83:3e:3d:b2:fc: f6:47:1e:8a:2f:77:e8:51:29:2c:fb:60:41:7e:7f: f6:a5:c5:bc:3f:f5:75:f9:b9:c7:52:a9:60:e2:c5: 02:a3:9b:d5:4d:48:03:97:08:60:a6:f8:44:da:57: f1:02:ad:10:a9:47:a0:77:25:ce:f1:7c:f7:e2:e7: bc:f3:be:b9:b4:5d:7f:27:01:be:dd:0f:58:ee:f5: 01:a7:c7:b5:1d:30:87:fe:bf:90:dc:c2:c2:3f:8d: af:e8:9c:d1:19:32:b9:59:17:69:b8:68:9b:02:ef: 3d:33:1a:22:a7:af:55:55:21:df:7d:32:fa:9c:a4: d0:bb:fe:56:c8:39:dc:09:2e:fd:01:80:da:a5:59: 6b:7c:14:10:98:b9:26:d8:ea:ed:71:ce:fd:db:fe: 44:a6:99:8f:32:1a:6c:40:36:bf:de:a3:b3:f7:57: 80:76:04:8a:68:2c:04:9e:93:59:87:1f:13:1f:85: 46:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BE:DF:67:5A:48:58:78:51:0C:12:49:DC:92:6F:CD:26:29:E5:80 X509v3 Authority Key Identifier: keyid:79:79:86:3C:EA:82:AE:B8:E9:DF:38:4B:39:AA:51:76:F4:BC:FA:61 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eXmGPOqCrrjp3zhLOapRdvS8-mE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/1ccf25-20de-4b2e-a0e1-de4acf447fae/1/eXmGPOqCrrjp3zhLOapRdvS8-mE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:7f:dd:d2:7f:83:96:ac:55:67:41:52:5b:76:a6:ee:dd:0d: 0a:2b:0a:40:42:ac:12:d5:d4:2e:84:25:59:40:d1:95:8a:e9: ae:7d:23:b3:7f:43:11:9f:eb:2e:ea:5d:a6:51:e6:09:ba:64: a1:85:21:10:0e:1e:f4:2e:1d:f7:a6:bb:21:ef:fc:7f:fd:bd: 8c:ad:b9:1b:78:e0:ab:ac:2a:8e:ce:02:2a:73:de:8b:5d:aa: 61:0a:e5:ad:81:4e:f9:5f:e9:60:59:40:c7:0e:db:dd:05:cf: 51:be:c4:a9:9c:b9:22:61:7b:73:fb:13:2f:a3:cd:50:25:0e: 16:66:a9:a7:f6:66:36:30:e0:f9:6e:e4:bd:c8:b8:27:f9:8b: 67:cd:49:b7:2c:c9:2c:a0:57:99:9e:c0:0f:cd:cd:a4:65:27: 7d:49:a7:84:9d:96:52:90:ed:bd:55:ae:8f:db:d9:9e:f3:c7: 07:40:d7:ee:6c:a0:f4:27:a8:49:e5:c9:d8:3d:51:dd:8a:61: 62:85:63:04:bd:f8:47:de:9c:5f:e5:a7:f1:d8:48:fa:86:40: 6b:68:7b:49:55:e0:86:07:60:73:41:a6:84:52:a0:a0:0c:b8: 42:ad:ce:d5:d4:d8:81:64:2a:5e:9c:d4:0b:ed:f0:31:67:9c: b5:dd:d2:e6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFyS2wNwrE0wY5HSVZF3cyeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc5Nzk4NjNjZWE4MmFlYjhlOWRmMzg0YjM5YWE1MTc2ZjRi Y2ZhNjEwHhcNMjYxMDI1MDkwMTQ3WhcNMjYxMDI2MDkwMTQ3WjAzMTEwLwYDVQQD EygxZWJlZGY2NzVhNDg1ODc4NTEwYzEyNDlkYzkyNmZjZDI2MjllNTgwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDe7npJe0C5Lsahj5HMYsnsxDiXx oGTweFkLS/s/M1VJNmriExGOeIB4j/xUpKPjn0Hhgqsqsu97AkWyEkdGpJZOX4Ze gz49svz2Rx6KL3foUSks+2BBfn/2pcW8P/V1+bnHUqlg4sUCo5vVTUgDlwhgpvhE 2lfxAq0QqUegdyXO8Xz34ue88765tF1/JwG+3Q9Y7vUBp8e1HTCH/r+Q3MLCP42v 6JzRGTK5WRdpuGibAu89Mxoip69VVSHffTL6nKTQu/5WyDncCS79AYDapVlrfBQQ mLkm2Ortcc792/5EppmPMhpsQDa/3qOz91eAdgSKaCwEnpNZhx8TH4VG8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6+32daSFh4UQwSSdySb80mKeWAMB8GA1UdIwQY MBaAFHl5hjzqgq646d84SzmqUXb0vPphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEt ZGU0YWNmNDQ3ZmFlLzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC8xY2NmMjUtMjBkZS00YjJlLWEwZTEtZGU0YWNmNDQ3ZmFl LzEvZVhtR1BPcUNycmpwM3poTE9hcFJkdlM4LW1FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtn/d0n+D lqxVZ0FSW3am7t0NCisKQEKsEtXULoQlWUDRlYrprn0js39DEZ/rLupdplHmCbpk oYUhEA4e9C4d96a7Ie/8f/29jK25G3jgq6wqjs4CKnPei12qYQrlrYFO+V/pYFlA xw7b3QXPUb7EqZy5ImF7c/sTL6PNUCUOFmapp/ZmNjDg+W7kvci4J/mLZ81JtyzJ LKBXmZ7AD83NpGUnfUmnhJ2WUpDtvVWuj9vZnvPHB0DX7myg9CeoSeXJ2D1R3Yph YoVjBL34R96cX+Wn8dhI+oZAa2h7SVXghgdgc0GmhFKgoAy4Qq3O1dTYgWQqXpzU C+3wMWectd3S5g== -----END CERTIFICATE-----Generated at Sun Oct 25 14:24:46 2026 by rpki-client