$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json) Hash identifier: urNiC1ZFZJbJFvojOpvTu7RpAyTHK26J0P0wnIJ9M38= Subject key identifier: 5F:7E:53:9A:AA:83:75:C1:16:38:2E:8D:9C:37:8F:FC:F6:E0:2A:4D Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 01A17B169FE628EB525F9A80021B4430A198 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft Manifest number: 1ACC Signing time: Tue 27 Oct 2026 02:00:42 +0000 Manifest this update: Tue 27 Oct 2026 02:00:42 +0000 Manifest next update: Wed 28 Oct 2026 02:00:42 +0000 Files and hashes: 1: 2uP2P6fTf1qo4PWRRqgeE7TTacE.roa (hash: 9eSLYCb2FWzNsHTSZC1SEnCMNPegGVcyv6j21qK1mw8=) 2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=) 3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=) 4: AogunF2vY6jwFQqloSaO1hbzpk8.roa (hash: it2LBzN2gPXG+ZsVF9U3YkMRcRGbDQsz+oO4JZZUzeg=) 5: JNtEUjv1u2nrR2kJY3xTk9eLdQU.roa (hash: y7e9qF3W4oZOepFOJNd5APdu3FIuFqB+iMZzLRxwKEo=) 6: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=) 7: Qi3PbQnrdw7q8NtmLcDOyzuEuok.roa (hash: Ene2M6hdbbKNY0YIKXvUxR9PygRHkyqGW28j+nRBH9E=) 8: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: OOYSadzy2dVdl4zuvD9QkwOPuftEUQ+fovWihU4kQtI=) 9: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=) 10: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=) 11: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 28 Oct 2026 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:7b:16:9f:e6:28:eb:52:5f:9a:80:02:1b:44:30:a1:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Oct 27 02:00:42 2026 GMT Not After : Oct 28 02:00:42 2026 GMT Subject: CN=5f7e539aaa8375c116382e8d9c378ffcf6e02a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:dc:80:3d:58:3a:a9:50:ae:ad:00:77:7c:ba: 44:fb:4f:07:4d:29:13:67:82:dd:31:db:28:f7:78: fe:e9:0f:fc:7c:e4:db:43:a9:ea:3c:90:5e:34:a9: e5:6c:17:48:c4:1a:d0:7e:82:a8:aa:c4:51:cd:92: f1:d2:c1:7b:e6:bc:cd:4b:61:72:1e:96:a7:89:48: eb:52:60:8f:60:ba:ae:07:0f:7f:9e:de:ec:d4:1e: d0:2a:64:0e:85:7a:f7:7f:5e:47:57:29:d5:50:a4: 11:6f:bc:b1:eb:72:50:01:e6:0a:37:69:f5:81:b1: fa:e7:b1:5b:c5:9a:66:af:06:4c:13:f0:9b:3e:db: c0:da:3d:fd:eb:4d:b7:d9:65:60:a1:ac:1a:24:43: 46:1c:c6:f7:62:03:33:87:3e:98:8c:9d:56:9e:4c: 34:63:e2:66:f9:1e:8f:c5:12:5c:7d:ac:07:e3:04: 6f:e9:a4:6f:88:6b:f3:4e:24:c9:48:69:8a:6d:e7: 0e:78:e0:dd:2c:7c:d8:88:71:ad:6a:66:8b:ed:91: 7d:77:9a:69:c0:1d:91:4f:2a:51:26:0c:78:48:1d: a1:1d:ce:81:98:45:28:10:7e:cb:5f:26:79:19:3b: 02:ba:1d:c2:41:84:ca:c5:b9:9e:45:fa:24:cf:54: 2e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:7E:53:9A:AA:83:75:C1:16:38:2E:8D:9C:37:8F:FC:F6:E0:2A:4D X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:06:11:0f:d6:1b:3b:f5:97:f5:4b:5c:78:d4:64:bb:c0:f2: 0f:70:b6:ec:58:5a:19:f6:87:7b:e5:c2:9a:12:8d:5b:7b:13: 53:ac:a1:e7:d5:08:26:e0:b5:65:e6:c5:cb:14:67:e0:25:1f: dc:6f:3c:25:21:aa:e1:0d:3c:4f:5f:98:5d:12:7f:6f:18:4c: 2f:6c:7d:86:ac:da:ca:e8:86:b2:b0:21:f2:79:7c:51:19:5d: 65:5b:aa:18:89:87:d7:c9:a9:08:2d:26:e8:fd:48:10:e2:ae: 9c:e5:50:8e:25:ad:66:a5:38:d1:8f:40:f0:70:74:c4:d6:2f: 24:a7:7d:c4:e8:84:00:ef:6d:61:d3:5f:8f:44:0b:b8:09:ff: e7:39:b2:92:79:98:f0:1a:63:0b:41:6e:60:7e:28:30:ca:29: e0:0d:b7:89:c7:e5:40:3c:16:94:4d:09:b4:e8:74:cd:73:f7: 28:e5:bf:22:f9:53:dd:56:24:04:19:bc:51:f3:e1:ba:60:2b: 82:f7:f2:43:73:ba:33:d4:db:b5:cb:f6:ea:c4:40:49:7a:40: c7:1c:6c:ff:af:01:c7:bf:1b:fa:82:fe:39:d0:8c:f6:d6:b3: 47:b0:b3:5e:fe:8b:20:19:69:0e:55:30:60:41:d6:39:03:63: 73:6a:37:93 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaF7Fp/mKOtSX5qAAhtEMKGYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjYxMDI3MDIwMDQyWhcNMjYxMDI4MDIwMDQyWjAzMTEwLwYDVQQD Eyg1ZjdlNTM5YWFhODM3NWMxMTYzODJlOGQ5YzM3OGZmY2Y2ZTAyYTRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNyAPVg6qVCurQB3fLpE+08HTSkT Z4LdMdso93j+6Q/8fOTbQ6nqPJBeNKnlbBdIxBrQfoKoqsRRzZLx0sF75rzNS2Fy HpaniUjrUmCPYLquBw9/nt7s1B7QKmQOhXr3f15HVynVUKQRb7yx63JQAeYKN2n1 gbH657FbxZpmrwZME/CbPtvA2j3960232WVgoawaJENGHMb3YgMzhz6YjJ1Wnkw0 Y+Jm+R6PxRJcfawH4wRv6aRviGvzTiTJSGmKbecOeODdLHzYiHGtamaL7ZF9d5pp wB2RTypRJgx4SB2hHc6BmEUoEH7LXyZ5GTsCuh3CQYTKxbmeRfokz1Qu/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFF9+U5qqg3XBFjgujZw3j/z24CpNMB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAYRD9Yb O/WX9UtceNRku8DyD3C27FhaGfaHe+XCmhKNW3sTU6yh59UIJuC1ZebFyxRn4CUf 3G88JSGq4Q08T1+YXRJ/bxhML2x9hqzayuiGsrAh8nl8URldZVuqGImH18mpCC0m 6P1IEOKunOVQjiWtZqU40Y9A8HB0xNYvJKd9xOiEAO9tYdNfj0QLuAn/5zmyknmY 8BpjC0FuYH4oMMop4A23icflQDwWlE0JtOh0zXP3KOW/IvlT3VYkBBm8UfPhumAr gvfyQ3O6M9Tbtcv26sRASXpAxxxs/68Bx78b+oL+OdCM9tazR7CzXv6LIBlpDlUw YEHWOQNjc2o3kw== -----END CERTIFICATE-----Generated at Tue Oct 27 08:51:21 2026 by rpki-client