$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft File: rSQ9z_DLOCEff-fbP5ExabRM9FY.mft (raw, json) Hash identifier: Bx2/BWpXM39GIg8fOJAj3krXwJEnfs3prI+BZupmsw4= Subject key identifier: 42:F8:A6:72:4D:27:C8:3E:AB:5C:D2:8A:9D:71:7B:56:6D:00:F9:56 Authority key identifier: AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 Certificate issuer: /CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Certificate serial: 01A1A7140FEDBA283249C5DD0DED0016BA40 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft Manifest number: 101E Signing time: Wed 04 Nov 2026 15:01:12 +0000 Manifest this update: Wed 04 Nov 2026 15:01:12 +0000 Manifest next update: Thu 05 Nov 2026 15:01:12 +0000 Files and hashes: 1: 1raBdrG8cJ9Bp5UTf1-3ySXpvNU.roa (hash: nidyHf42+8qviczWax8TG8WbQgA/HNtQCPEG+F+WBIY=) 2: 2kDI2fX-vOvB11NNeAS3cg-93eM.asa (hash: NA7gOR6dP2dN+8of3Z/jNBI4ucvB9u9QIPByWzroYZo=) 3: 4p-Cm-GajEDg95U2oK6uzfsp0JU.asa (hash: 5kxjukz9UrNDQRzs1WDtvD2HHIl/VN2fV1l1vptM11w=) 4: D20r0Dc3ziO-pvHNC0RCH6WWn4M.asa (hash: iaKS5DFhrhjGhN9Po/Gl1SfI1i51StPCSZ9Lx4T3V/o=) 5: JLWdtgjMTs_4Sq7DTqKgddlwfrY.asa (hash: 9mBXiLiJ86zw/4udWl2MUcosM1kylDDeUDtsF/0LHfI=) 6: KeXwRGdfZ0moU2iD3Q2mbtR6C3k.asa (hash: kKAEUwnnTtlt/PROwq+dzQgzZQgqzq3CPnTsKxDqyks=) 7: L2QCsrjPe2KM3zZLG_j-necXdRQ.asa (hash: WdEBpYb6JsNA+UMdvTX09oNiIH0VyRdO15C/0tlTHTA=) 8: OGZW3EGUH5W_Sl4Rah9ArDm_EJo.asa (hash: q8G/683GpwIgrnSyD7lVID7X1jS34HiXZGHtfK+B8v4=) 9: _L8djGrh0ltiLv6oZ1X7HHqdI7c.roa (hash: DwVvmmhzGeOduCfg7065EWl2MWaIL6OeqmDXyYbnFWc=) 10: bqKa0YRsYxH7tFUT4rHgcN42asw.roa (hash: 8oWhUO/dKOps3lszSUNTka8Z4cLC6TKDR/CwR798z8A=) 11: k2hSi2ktn1RbhMfBtzCDueEGIkY.roa (hash: x5d5j8eNv5Fwu5BVRBGFqtr5FQuqOiyNVXsyTIPzWhw=) 12: p5zNzQPaIB94IBWFj0Evjw09b6Y.asa (hash: eOPidDTFtzDIvGAErv5iz3BORzDmQalbdnPuHerit6s=) 13: rSQ9z_DLOCEff-fbP5ExabRM9FY.crl (hash: V6IumrSNFw725cB8l9uYSY7svKKgz6nVUJbEel66C4s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 05 Nov 2026 15:01:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:a7:14:0f:ed:ba:28:32:49:c5:dd:0d:ed:00:16:ba:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad243dcff0cb38211f7fe7db3f913169b44cf456 Validity Not Before: Nov 4 15:01:12 2026 GMT Not After : Nov 5 15:01:12 2026 GMT Subject: CN=42f8a6724d27c83eab5cd28a9d717b566d00f956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:6b:9e:bc:22:e7:8d:b1:96:b3:f4:e6:1a:0b: 9d:f7:ac:be:85:4a:b5:a0:2d:ed:69:af:ff:20:18: 59:36:5d:85:ed:6d:b0:bc:e0:b9:3d:0b:5e:fc:d6: 15:29:d7:73:13:02:de:de:e0:a5:53:2c:22:77:69: 2e:fc:65:c0:ba:5c:a9:a9:b2:b7:8a:4c:4b:f2:85: 09:2b:52:39:7e:51:80:56:8e:12:7f:3b:dc:d5:a0: 3a:64:28:59:40:f1:75:d1:23:56:65:6e:23:48:6a: c5:1e:84:5b:43:b9:41:d4:fe:91:b9:c5:4f:62:11: 25:1b:ea:23:63:01:63:6f:d6:cd:48:7f:a9:70:53: 99:68:b1:d2:fb:f9:10:62:fd:b4:70:e1:5b:4f:78: 3e:ff:66:b5:d4:e0:c3:f4:64:1f:bc:43:6f:95:3b: 45:0c:20:5e:95:dd:04:bc:eb:ef:20:73:75:b9:de: c2:84:e9:48:d0:e0:23:0e:2a:6b:d6:bb:e6:4f:06: c5:86:32:5b:99:73:b8:46:ee:fd:54:8c:25:35:20: 6d:65:cf:ba:dc:cc:4a:1e:a9:ef:8b:29:d6:0d:0a: 81:57:a1:c8:b2:31:86:b7:9e:68:48:d9:10:8f:ea: 33:cf:a1:04:e5:ca:67:e1:94:21:a2:e7:c5:39:59: 63:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F8:A6:72:4D:27:C8:3E:AB:5C:D2:8A:9D:71:7B:56:6D:00:F9:56 X509v3 Authority Key Identifier: keyid:AD:24:3D:CF:F0:CB:38:21:1F:7F:E7:DB:3F:91:31:69:B4:4C:F4:56 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSQ9z_DLOCEff-fbP5ExabRM9FY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/a5d27b-26c0-4eb3-89bc-b9f298a798e4/1/rSQ9z_DLOCEff-fbP5ExabRM9FY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:ff:1b:15:36:3b:ff:56:0f:19:7e:12:00:35:da:85:34:92: c4:cf:8d:ef:7f:3d:07:06:da:68:9d:7d:e4:e3:23:26:ae:94: 13:95:9c:04:13:37:71:64:0f:44:f9:9b:dd:8e:2a:77:05:9f: 04:0b:da:80:fe:53:03:d8:32:1e:57:62:45:bb:f8:24:ba:25: c3:b9:5e:95:81:86:e7:1d:87:42:36:43:df:02:18:e4:1d:6e: e1:8f:73:a3:7e:08:3d:65:ca:fc:5b:0e:63:5e:50:1d:de:8e: da:98:e3:50:15:c4:ed:49:c1:94:4e:9d:0c:06:fb:91:01:b9: 82:fa:1a:9a:88:23:11:09:fc:98:8f:f6:d4:73:3b:e2:95:40: 0c:3b:54:91:10:2d:32:33:14:de:47:f4:d4:cf:f2:80:7c:4d: 21:e6:11:37:50:e6:b8:89:70:1a:e6:ce:48:05:c9:3c:0d:81: 33:14:10:c9:93:18:26:5e:09:36:b2:b2:32:27:2f:b2:35:6c: a5:eb:ff:fb:04:20:07:63:d0:d1:3e:94:c7:2c:23:8b:21:3e: 03:9b:b5:70:7c:92:d1:15:56:d0:1e:ea:8d:11:83:fe:d0:e4: ad:8b:87:8c:12:5e:19:e7:bc:19:d6:3a:31:ab:83:6d:53:93: fa:d1:79:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGnFA/tuigyScXdDe0AFrpAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMjQzZGNmZjBjYjM4MjExZjdmZTdkYjNmOTEzMTY5YjQ0 Y2Y0NTYwHhcNMjYxMTA0MTUwMTEyWhcNMjYxMTA1MTUwMTEyWjAzMTEwLwYDVQQD Eyg0MmY4YTY3MjRkMjdjODNlYWI1Y2QyOGE5ZDcxN2I1NjZkMDBmOTU2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGuevCLnjbGWs/TmGgud96y+hUq1 oC3taa//IBhZNl2F7W2wvOC5PQte/NYVKddzEwLe3uClUywid2ku/GXAulypqbK3 ikxL8oUJK1I5flGAVo4Sfzvc1aA6ZChZQPF10SNWZW4jSGrFHoRbQ7lB1P6RucVP YhElG+ojYwFjb9bNSH+pcFOZaLHS+/kQYv20cOFbT3g+/2a11ODD9GQfvENvlTtF DCBeld0EvOvvIHN1ud7ChOlI0OAjDipr1rvmTwbFhjJbmXO4Ru79VIwlNSBtZc+6 3MxKHqnviynWDQqBV6HIsjGGt55oSNkQj+ozz6EE5cpn4ZQhoufFOVljnQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEL4pnJNJ8g+q1zSip1xe1ZtAPlWMB8GA1UdIwQY MBaAFK0kPc/wyzghH3/n2z+RMWm0TPRWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMt YjlmMjk4YTc5OGU0LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9hNWQyN2ItMjZjMC00ZWIzLTg5YmMtYjlmMjk4YTc5OGU0 LzEvclNROXpfRExPQ0VmZi1mYlA1RXhhYlJNOUZZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgv8bFTY7 /1YPGX4SADXahTSSxM+N7389BwbaaJ195OMjJq6UE5WcBBM3cWQPRPmb3Y4qdwWf BAvagP5TA9gyHldiRbv4JLolw7lelYGG5x2HQjZD3wIY5B1u4Y9zo34IPWXK/FsO Y15QHd6O2pjjUBXE7UnBlE6dDAb7kQG5gvoamogjEQn8mI/21HM74pVADDtUkRAt MjMU3kf01M/ygHxNIeYRN1DmuIlwGubOSAXJPA2BMxQQyZMYJl4JNrKyMicvsjVs pev/+wQgB2PQ0T6UxywjiyE+A5u1cHyS0RVW0B7qjRGD/tDkrYuHjBJeGee8GdY6 MauDbVOT+tF5iA== -----END CERTIFICATE-----Generated at Thu Nov 5 02:53:08 2026 by rpki-client