$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft File: T7K7e61Q8ZIYEKAo547dZfgfan0.mft (raw, json) Hash identifier: 2nkPC4ZXlnFi4WdytaiBH0uKRGPajIZX1eTYP//JbaQ= Subject key identifier: 99:77:21:E2:38:25:6D:26:AD:2E:43:C3:B6:52:60:85:FA:18:58:3E Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Certificate serial: 01A1710101FE4633182EC20AD72F94A89C4D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft Manifest number: 1AD7 Signing time: Sun 25 Oct 2026 03:00:53 +0000 Manifest this update: Sun 25 Oct 2026 03:00:53 +0000 Manifest next update: Mon 26 Oct 2026 03:00:53 +0000 Files and hashes: 1: 1-ZsRWNvdt3D8wn8sI2L1WODnkqM.roa (hash: 6Eum4e6s1YywQEdj8irMXAzstfAffIT89qs3aZzQIj0=) 2: 5lFyIZmBLBFDx76RfuZHevsHQQY.roa (hash: PI10EPnFAgNZeRBfLyN6vfxKBB4r+mmccm1SKvgO9H0=) 3: 7238-yc1zsJP5-yGaMOBc9f0LR4.roa (hash: URHGrmmmyevt5Yc3E+g4gLi9Y6wbhMdw/A5AP3gBz1Q=) 4: 8JXNaaQmDQHdM4yP_RNeiswPEDI.roa (hash: UUO1y8o89Fboq48v1C/MZYuzKEwlodMmFc6P3ytbtj4=) 5: F1XFKolR75CvzOCyFlTtMYXp3UA.roa (hash: 1NsFIv/Vqxyf17zBRZ7ykgjIIYfbwgtJjmnNI1bztF0=) 6: GIKziXI0ze0FwPya3PhgfF3f_tA.roa (hash: Q4/p9Bv6o+xxhdGbCok8TG1MXiBudXjraYt9L2zzurs=) 7: Ho8BmWtRsGIfoh9TadeITydo350.roa (hash: jhic1+8GxEt2CK46n93QnO3HxEVdv0LVkgGPn/QSDf0=) 8: NDEJ4OPh2jQQg5h1HdKinOuNm1g.roa (hash: 6YV/mvu0IZaB1NRM8e6QdrWu4qWaOce8H7G5lo4LpOc=) 9: T7K7e61Q8ZIYEKAo547dZfgfan0.crl (hash: EyQoKwMnDCE53GxZP7VR40PwftmwA8sTSuQqFrn+dWA=) 10: THkP_WMs844JJ4UTW2iusEvO7og.roa (hash: q+i+yw1ZT8GT9Tqd+7XX30HpCs4PHYhN3cI+hYf+RFc=) 11: Tj4Mcwc_96ZTjJYw-9rKbpG4AXA.roa (hash: 6X5APSqbz1P2mkb03h8c2CZF8YBdY33egLhUsQ1Fh0E=) 12: VlCsH-gKeuLV89RCvfubppUzoBM.roa (hash: E6tZ0jd2kOODThTzIfCZg56DVUHPrBwKWicp2pqqUq8=) 13: WLquCazhAB0ScMP5a1mkOMpQjSk.roa (hash: X6EOl+E5HOgYEVAmBJUO3eMgT+pMlGAkOYSNqnB4rac=) 14: _Sp9nWnMGENvs_5RlKIg522yEo0.roa (hash: 5BiB2YKH8y+FxStt90RRFoc5lwCZkm5vmcOChmEykmI=) 15: lrLT0MTm0sVXoP_chnt_YcYvk94.roa (hash: bRz5jjXaw5R9jnyeOoeN7YsZBbwWfb9gDd+EwEhENhU=) 16: mYkOBOIW6O0A_6f02CFpHtKOt7g.roa (hash: 0X1xM3PVCNQFuvE7pmgCYP4TDDJw4nRptQ2zO5w8sJA=) 17: uGLn1rNehfP8gUHfuPWItHTs-Q4.roa (hash: rbb+/QdbyMdZWalyD4M+Cib5fxLsrq9/EvfwTaumIsE=) 18: zLW84Gsa8lyQLXbWcT3Qg3ZGSrQ.roa (hash: UXTZQOitHqTP9IRhCn98pWCBLuimV0o0vCpqkwYBveU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 25 Oct 2026 23:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:71:01:01:fe:46:33:18:2e:c2:0a:d7:2f:94:a8:9c:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d Validity Not Before: Oct 25 03:00:53 2026 GMT Not After : Oct 26 03:00:53 2026 GMT Subject: CN=997721e238256d26ad2e43c3b6526085fa18583e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:14:c7:bc:89:b5:88:b6:3e:57:fd:cd:5b: a1:f8:06:f1:b1:5b:93:25:04:1b:95:17:2d:9b:56: 92:f9:13:3a:da:6f:4d:f3:b3:47:55:89:d3:72:2e: d2:18:77:03:96:94:f9:89:a2:4a:71:b1:91:96:65: 86:35:e0:71:81:11:7e:33:11:ba:34:68:18:d0:f6: 67:59:f3:8f:5d:be:45:ef:1d:af:9d:45:ee:3b:f2: 6d:69:4f:77:0c:0d:f4:bf:4b:bd:9c:43:c7:98:c4: 33:e7:ce:e7:af:41:f7:90:28:b3:4f:fd:54:d2:f1: d1:57:81:f2:a6:77:4b:8b:49:7b:99:57:05:a5:72: 1a:67:cc:51:b9:a1:b5:5f:64:d3:6d:da:3f:10:7a: 20:65:88:14:48:d8:40:fb:bf:c0:84:93:d2:ac:be: 14:7e:b5:53:d3:ef:ba:93:00:ee:60:5b:84:3b:da: 39:ee:f2:95:79:ca:e7:82:be:d0:36:30:6c:79:20: b6:d8:b3:2e:e5:4c:e3:7d:94:0e:76:f4:29:1f:f8: 47:cd:83:a8:38:2a:b9:92:ca:33:01:69:b4:c8:c2: 3b:53:97:af:7c:9d:87:7a:ec:48:4c:ec:1b:85:45: 40:6e:1e:49:98:f0:e4:c4:97:a9:fd:2c:9f:2d:72: e3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:77:21:E2:38:25:6D:26:AD:2E:43:C3:B6:52:60:85:FA:18:58:3E X509v3 Authority Key Identifier: keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:f1:53:5c:b9:19:c3:6b:54:65:12:0c:11:28:a8:22:ae:63: 61:41:e0:55:be:89:e7:82:e1:a8:bb:1e:60:be:7a:31:3d:b1: d0:3f:aa:22:02:a1:05:28:e9:14:cd:6b:ce:ad:84:89:40:87: bf:69:27:4c:d2:25:06:dc:56:78:bc:24:a2:bc:be:2f:67:d1: 16:1f:47:f9:4e:ee:c5:b2:ae:d9:fe:76:0c:41:7f:5e:81:e8: 05:d0:bf:d0:2f:5c:cc:e5:10:56:9b:01:bf:c9:60:40:87:42: e8:82:93:14:7f:c4:5e:4a:ae:b3:6a:4d:7e:e6:9f:06:59:04: 07:8b:ec:fd:06:a6:77:6d:a5:29:ef:5b:79:08:49:b2:d1:b7: 81:4d:b7:b7:b8:fa:8b:ab:4a:f6:72:15:54:ea:3e:a2:d1:80: e7:ff:7a:3c:9e:f2:6e:77:33:3d:ce:87:7d:06:03:f5:a9:d2: 5a:4d:57:6d:bf:a2:4b:91:14:3f:dd:38:1f:ce:ea:d0:43:72: fc:68:2b:fa:d2:20:4d:56:60:09:d3:d5:8b:d3:ac:f0:3a:68: 81:67:93:95:d0:39:c9:90:7b:ce:6d:b4:22:4e:cf:32:d0:97: ff:89:51:a3:9e:26:7b:47:5b:73:c0:35:11:78:7c:30:e8:75: 54:2a:86:f7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFxAQH+RjMYLsIK1y+UqJxNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRmYjJiYjdiYWQ1MGYxOTIxODEwYTAyOGU3OGVkZDY1Zjgx ZjZhN2QwHhcNMjYxMDI1MDMwMDUzWhcNMjYxMDI2MDMwMDUzWjAzMTEwLwYDVQQD Eyg5OTc3MjFlMjM4MjU2ZDI2YWQyZTQzYzNiNjUyNjA4NWZhMTg1ODNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzl8Ux7yJtYi2Plf9zVuh+AbxsVuT JQQblRctm1aS+RM62m9N87NHVYnTci7SGHcDlpT5iaJKcbGRlmWGNeBxgRF+MxG6 NGgY0PZnWfOPXb5F7x2vnUXuO/JtaU93DA30v0u9nEPHmMQz587nr0H3kCizT/1U 0vHRV4HypndLi0l7mVcFpXIaZ8xRuaG1X2TTbdo/EHogZYgUSNhA+7/AhJPSrL4U frVT0++6kwDuYFuEO9o57vKVecrngr7QNjBseSC22LMu5UzjfZQOdvQpH/hHzYOo OCq5ksozAWm0yMI7U5evfJ2HeuxITOwbhUVAbh5JmPDkxJep/SyfLXLjHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJl3IeI4JW0mrS5Dw7ZSYIX6GFg+MB8GA1UdIwQY MBaAFE+yu3utUPGSGBCgKOeO3WX4H2p9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYt MjdmYmM5OWVhM2M2LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC9mZGEzODItNDI1Ny00MWMzLThlYzYtMjdmYmM5OWVhM2M2 LzEvVDdLN2U2MVE4WklZRUtBbzU0N2RaZmdmYW4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFvFTXLkZ w2tUZRIMESioIq5jYUHgVb6J54LhqLseYL56MT2x0D+qIgKhBSjpFM1rzq2EiUCH v2knTNIlBtxWeLwkory+L2fRFh9H+U7uxbKu2f52DEF/XoHoBdC/0C9czOUQVpsB v8lgQIdC6IKTFH/EXkqus2pNfuafBlkEB4vs/Qamd22lKe9beQhJstG3gU23t7j6 i6tK9nIVVOo+otGA5/96PJ7ybnczPc6HfQYD9anSWk1Xbb+iS5EUP904H87q0ENy /Ggr+tIgTVZgCdPVi9Os8DpogWeTldA5yZB7zm20Ik7PMtCX/4lRo54me0dbc8A1 EXh8MOh1VCqG9w== -----END CERTIFICATE-----Generated at Sun Oct 25 10:44:38 2026 by rpki-client