$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft File: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft (raw, json) Hash identifier: B0tlv7ZwuzwtJl8UQLJEqbJPylYbvQhP4xpsFQ2320U= Subject key identifier: 91:59:2A:F8:70:AF:B0:12:6D:15:5C:AE:84:B1:25:0B:E3:AA:0A:C5 Authority key identifier: 7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68 Certificate issuer: /CN=7db10757cfa3917dbfa5b9be68e978653d414368 Certificate serial: 01A1322285C6BBF9482EB05D2C9EB9240410 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft Manifest number: 02DD Signing time: Mon 12 Oct 2026 22:01:25 +0000 Manifest this update: Mon 12 Oct 2026 22:01:25 +0000 Manifest next update: Tue 13 Oct 2026 22:01:25 +0000 Files and hashes: 1: 11GxtSy7oVessoMzmqoa6-GVaFM.roa (hash: dEcJU2H7eMFkWZ5hiqB+aM7WjgMaOQg3rLiI2kSrzMA=) 2: 4mAC2e2naxP6ju3b8JY5KHGq5NQ.roa (hash: EtytVm/6AHxWfObsQVWGolI13NzE3vnrzO+hEwitye4=) 3: 67JDNfAtP9yEkJbfUjQ3vr0JanQ.roa (hash: TMkj0G/KqGW0hoDAPTbK60VfZv79MVnxbAmNA4wAIxY=) 4: B_7QNLEyOLRHkGziKQcoP3jS9N8.roa (hash: wt94oNA2beZskoVPKNrRXzQfjQMHidYZl0oibApgTyU=) 5: Ed26D8U4hy9Q3LQu5_4P5xQ88Fs.roa (hash: kLzLVcajWbXNwZhhTO7Kf1y0Py6ohIR9eaLpz+kos+s=) 6: Ha4FUbT-C5cfgzREP_qKmJdZdNU.roa (hash: OWm/SoXebYfD0ymYVnkD6nJ1M+OinzGR+vHe5dJGhIk=) 7: JoonRKwDkzGDADAYbWqY6h6w-K8.roa (hash: cPQ1mkuIkwhP6i3plXOgbNc6BnD5TBFu2q0RZqT67s8=) 8: ObEFLA71GS6PBSPXvLN1tQxOPjg.roa (hash: CQurRH2QtNh+H5vZ26uy12WpU20lxprNhR0FVldn9Ok=) 9: R0lbPN66JhHTAlizwtgpkO4cz3Y.roa (hash: X9vNqzFtl+nRCTrfZFlpEmLshxNhNE7U0YtwgkXsL6o=) 10: _n6jeEvw1fkyJDmhWTUIcmdEloQ.roa (hash: aygh9B/H+i/ULx64UfP113xepSH3dG8pMCGeRmM4JJ4=) 11: bAiv0w09X4HnDoPXtry_uVbCG9A.roa (hash: 0EeSizCgG9dwzt3jvwALQHRTpOevtke5hHF/nPETtCw=) 12: fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl (hash: MOPvn7/VOG8mbnFJLE90s2W2ngohVyNp8OPkvTsLQew=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 21:54:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:32:22:85:c6:bb:f9:48:2e:b0:5d:2c:9e:b9:24:04:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7db10757cfa3917dbfa5b9be68e978653d414368 Validity Not Before: Oct 12 22:01:25 2026 GMT Not After : Oct 13 22:01:25 2026 GMT Subject: CN=91592af870afb0126d155cae84b1250be3aa0ac5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:cb:87:2a:66:55:87:e6:53:7e:4f:1a:bd:41: 8e:f4:64:46:9c:76:6e:45:72:ac:3f:b2:93:a0:e6: 4e:1a:19:7a:cd:27:3d:d5:8a:71:cf:dc:34:8d:0e: 30:7e:f7:0b:8d:f0:d9:93:fd:d0:d2:99:a4:99:64: fb:c1:45:47:dd:f5:05:39:4b:68:2e:6c:8a:7c:a2: d1:99:b4:c8:73:b4:7c:aa:06:3e:55:68:27:4f:8c: 1c:10:47:dc:03:25:8d:77:c0:d0:59:53:99:ba:26: 47:72:3f:df:75:dd:26:4a:8e:55:ea:91:d6:7f:07: ec:61:07:40:91:40:3a:fb:bf:f4:37:f0:a9:07:10: f1:be:f0:d8:ac:08:2f:fe:5f:6e:2c:85:9e:36:3e: 85:b8:d2:cc:58:be:88:ac:b7:f8:c9:4d:dd:3c:5e: a7:39:51:70:82:ed:6b:63:eb:a5:b8:3f:39:7d:1f: a5:d8:c3:29:1b:5c:dc:1a:30:16:93:a3:05:aa:21: 06:e4:16:0d:2e:e1:0f:8e:98:04:ca:c9:cd:70:57: ee:7c:07:f1:aa:e4:84:0a:74:96:30:02:bb:d0:cd: 48:06:8c:12:48:63:b7:38:fe:84:8f:15:4d:2d:65: 47:53:81:36:42:14:d7:26:74:dd:3d:d5:85:f5:b6: ec:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:59:2A:F8:70:AF:B0:12:6D:15:5C:AE:84:B1:25:0B:E3:AA:0A:C5 X509v3 Authority Key Identifier: keyid:7D:B1:07:57:CF:A3:91:7D:BF:A5:B9:BE:68:E9:78:65:3D:41:43:68 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2b78a9-411d-4c88-8ccd-fc41d1c414ab/1/fbEHV8-jkX2_pbm-aOl4ZT1BQ2g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6a:2c:f6:8a:e7:fc:17:0b:e9:20:be:f4:c4:09:f7:93:83: 08:4e:60:1a:63:f5:ab:5b:62:30:a3:89:55:32:97:e9:eb:ec: c5:bb:c5:db:55:1b:5a:ec:2d:9e:71:a8:34:2f:55:68:da:df: 5d:56:18:9a:67:58:15:ee:49:33:46:70:ab:6b:51:31:41:c6: 97:a8:a0:47:46:0e:66:b3:fc:c0:6f:07:6e:ca:9d:29:f9:86: 68:30:2b:55:fc:8a:04:c2:99:f6:67:f4:24:4e:0c:e8:65:7d: 2b:0d:ed:e1:bc:4e:ac:cd:cb:40:ce:75:eb:16:04:bb:3a:6e: 88:a9:14:f4:87:d9:7e:94:f4:8c:38:3d:9d:14:c0:23:63:ea: ed:20:b0:69:b8:ac:1a:e0:98:9f:da:cd:aa:21:25:ad:36:68: f6:2a:ff:01:68:a2:0d:16:ef:63:49:e1:62:e2:9d:83:68:84: 34:f8:1c:94:8c:25:3a:81:d0:36:aa:95:92:26:49:d0:e5:54: 18:01:3c:5d:d2:72:2d:0f:0f:e3:46:d1:ce:b7:6a:54:b8:96: 35:ac:8d:30:ff:81:70:93:c3:75:84:24:db:14:34:f6:1b:5f: fd:ee:bd:8f:3b:9c:cd:45:41:58:9e:32:9f:b8:3b:20:e1:85: df:fa:35:de -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEyIoXGu/lILrBdLJ65JAQQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkYjEwNzU3Y2ZhMzkxN2RiZmE1YjliZTY4ZTk3ODY1M2Q0 MTQzNjgwHhcNMjYxMDEyMjIwMTI1WhcNMjYxMDEzMjIwMTI1WjAzMTEwLwYDVQQD Eyg5MTU5MmFmODcwYWZiMDEyNmQxNTVjYWU4NGIxMjUwYmUzYWEwYWM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcuHKmZVh+ZTfk8avUGO9GRGnHZu RXKsP7KToOZOGhl6zSc91Ypxz9w0jQ4wfvcLjfDZk/3Q0pmkmWT7wUVH3fUFOUto LmyKfKLRmbTIc7R8qgY+VWgnT4wcEEfcAyWNd8DQWVOZuiZHcj/fdd0mSo5V6pHW fwfsYQdAkUA6+7/0N/CpBxDxvvDYrAgv/l9uLIWeNj6FuNLMWL6IrLf4yU3dPF6n OVFwgu1rY+uluD85fR+l2MMpG1zcGjAWk6MFqiEG5BYNLuEPjpgEysnNcFfufAfx quSECnSWMAK70M1IBowSSGO3OP6EjxVNLWVHU4E2QhTXJnTdPdWF9bbsQwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJFZKvhwr7ASbRVcroSxJQvjqgrFMB8GA1UdIwQY MBaAFH2xB1fPo5F9v6W5vmjpeGU9QUNoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny8yYjc4YTktNDExZC00Yzg4LThjY2Qt ZmM0MWQxYzQxNGFiLzEvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny8yYjc4YTktNDExZC00Yzg4LThjY2QtZmM0MWQxYzQxNGFi LzEvZmJFSFY4LWprWDJfcGJtLWFPbDRaVDFCUTJnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQGos9orn /BcL6SC+9MQJ95ODCE5gGmP1q1tiMKOJVTKX6evsxbvF21UbWuwtnnGoNC9VaNrf XVYYmmdYFe5JM0Zwq2tRMUHGl6igR0YOZrP8wG8HbsqdKfmGaDArVfyKBMKZ9mf0 JE4M6GV9Kw3t4bxOrM3LQM516xYEuzpuiKkU9IfZfpT0jDg9nRTAI2Pq7SCwabis GuCYn9rNqiElrTZo9ir/AWiiDRbvY0nhYuKdg2iENPgclIwlOoHQNqqVkiZJ0OVU GAE8XdJyLQ8P40bRzrdqVLiWNayNMP+BcJPDdYQk2xQ09htf/e69jzuczUVBWJ4y n7g7IOGF3/o13g== -----END CERTIFICATE-----Generated at Tue Oct 13 04:34:28 2026 by rpki-client