$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft File: Kfp91j8uLYe194UAk8dDu_vhTkQ.mft (raw, json) Hash identifier: ea7z438aANDieHlG/P1CZUPWt9PV6EODXhH9HnP8fzo= Subject key identifier: 78:CE:51:AA:FF:71:A5:8A:BA:68:B7:82:D1:5A:24:67:44:65:4F:60 Authority key identifier: 29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 Certificate issuer: /CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Certificate serial: 01A1AAF0206000304CF223ADE7DDAFC4504A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft Manifest number: 098E Signing time: Thu 05 Nov 2026 09:00:25 +0000 Manifest this update: Thu 05 Nov 2026 09:00:25 +0000 Manifest next update: Fri 06 Nov 2026 09:00:25 +0000 Files and hashes: 1: 1FTeokhUADkYbgvOTwGp40m_BPE.roa (hash: PPoy3S4bKc1j/djL6NTv+eGLXSL7GZ17YwI5tAXRtDM=) 2: 59s8eNqYwVH5ydf7xyV2eJR3_TU.roa (hash: xFhHztukLroKSICySsgp6ifCMDIbrBfwaaKjTAvv1Gw=) 3: 9c4kttevmySnfkQUW_qfNzaHphg.roa (hash: /cAqDalO1CeZ8c8IzYLpRoSc0JDQhBthLLFNZ86hRlw=) 4: FZeGgU2IawBK8YA4BwTM_e6x5Mo.roa (hash: 4nQMnYqmNvBAGhwCS2lyqUc1bPr2XdXqGh923cUp0bQ=) 5: FhQiMY_Y2B9WuZvyCd_uaF0M5dI.roa (hash: fZfKiY8vxqzWF+WGF85vLsOO0yrQwq1azfxlL3m6ht4=) 6: GrgWTPWfiMj8FwdKYhn8zJ6Z7e8.roa (hash: IO94toPK6/Wits1irHXbrZl6wNHfS6p+U483COk6R2Y=) 7: KNWwGCklL3zKbMsgIOCdcNGo2tI.roa (hash: 5rF454gnBcOMqEez62ErUsCgENLRW0isAHz0go80+Fs=) 8: Kfp91j8uLYe194UAk8dDu_vhTkQ.crl (hash: fa1epOSCWjZeu2mnya7SndQ+jAXfsNbnaTsTJW2dTHM=) 9: Pjq2usg2Ddr0jCim-rnljjUP2xg.roa (hash: 5RL0lX+XVqmkdynoA/ZI5Ffknvw/dGR/1FpAcrG1JiE=) 10: WrWpDNw0abEoNedClZIQXtxLaNM.roa (hash: gCZS2khmjJiGzLXjdqtdk6eKzbLBYpiu89Bi9tphMq4=) 11: aSoz0nTSHVKxl1w-_tXDaUBfI_U.roa (hash: 3H/725peI0ylJlXSnX6sTF3RBFyOHCBWf0zA//LWaS4=) 12: aqUiuM7FSwO0jQrVAdkkACyulNU.roa (hash: QJoSdYm5s8mfEJjbCj5VhQz2H0KAbaPDRRmLmgZWht0=) 13: hTJEftSpqDKpAn62ncVILyiUIA4.roa (hash: CgeSiN+wMYpnSUEh7oWmMa8OtknjA6ZGJ6sq3RGzTFw=) 14: nBxToIyQbLD03aHgRpkeeNieOPw.roa (hash: +npXv56cRJNf6jJA2m2/8FRk/EXL/cvT8hUJka5s2Lk=) 15: yBrC20joWzPYJC2p3ASrdCZ0wzk.roa (hash: xZei5bNpfbVHrnCyo7DX6ea+rnn9Va9LPl3q+efKuDg=) 16: yINiCi-fcEAzzbT8ry3F24_HnBw.roa (hash: DTnC3s+dTYZX9VNSoLxZjlybV3sMyllGW6D2HGEmUQ8=) 17: y_Cp0Ost5PqmlG4Hk_lC2iR2YZ8.roa (hash: x+U/bdDPmhe7n+Wg1yqeuhWGZvsQ5Fcm1ldpfk9dBgs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 06 Nov 2026 08:45:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:aa:f0:20:60:00:30:4c:f2:23:ad:e7:dd:af:c4:50:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29fa7dd63f2e2d87b5f7850093c743bbfbe14e44 Validity Not Before: Nov 5 09:00:25 2026 GMT Not After : Nov 6 09:00:25 2026 GMT Subject: CN=78ce51aaff71a58aba68b782d15a246744654f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4c:32:fb:1a:48:90:40:15:34:8b:11:3c:09: 16:35:73:f8:f8:7b:d3:c4:77:53:13:6a:e5:76:c0: 3d:45:72:b6:ca:9b:eb:9e:b0:5c:0b:45:c8:4d:b0: 36:75:3d:25:d6:6e:65:4d:75:bb:c3:a9:9a:4e:98: b5:4c:69:1e:e8:04:b5:0b:e8:20:ab:fc:c9:36:a8: 39:e0:a9:dc:3d:fe:2b:1c:f5:70:b3:26:3d:15:3b: 71:63:9c:13:91:26:08:46:0a:f4:72:39:34:11:8d: 6e:79:f9:95:74:a6:b4:d0:50:12:90:59:82:db:f2: 65:74:76:66:ef:5e:9f:b2:4a:27:02:f5:a8:fd:c0: 1a:82:b3:0e:29:4b:a3:ae:72:b7:e8:61:a4:9e:7a: 35:35:b3:70:15:9f:76:ad:1b:79:27:38:c5:1f:3b: a3:22:12:0e:2c:46:c0:b0:aa:2b:76:eb:04:e3:3b: d1:9f:3b:2d:36:f7:77:5b:35:83:01:e8:c2:8b:8f: f4:57:f2:01:1b:62:bb:34:d9:15:3a:02:18:7a:56: a6:af:e5:80:82:12:ef:90:37:6f:4a:16:9c:59:dc: 14:e7:d7:32:de:cb:b5:8b:c3:b9:9a:6a:e7:f5:8d: f3:60:ce:c3:8f:fb:8e:2c:8b:10:e2:98:e0:5f:b9: 1f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:CE:51:AA:FF:71:A5:8A:BA:68:B7:82:D1:5A:24:67:44:65:4F:60 X509v3 Authority Key Identifier: keyid:29:FA:7D:D6:3F:2E:2D:87:B5:F7:85:00:93:C7:43:BB:FB:E1:4E:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kfp91j8uLYe194UAk8dDu_vhTkQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/2c0cbf-11f7-4b6d-b88e-79f7b6ea7c14/1/Kfp91j8uLYe194UAk8dDu_vhTkQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:86:06:c3:58:56:2f:33:99:6e:c8:e5:ca:59:a1:6b:6a:33: f1:8f:87:02:68:60:c6:df:ca:19:8c:65:26:7a:9d:94:15:16: 1d:1a:74:c5:17:a1:d9:c7:b5:fd:54:30:8c:d0:2a:55:54:f0: f2:a7:57:2c:74:8c:c0:86:2d:d0:ee:e6:45:85:eb:85:a3:42: cd:34:3d:34:4e:1c:41:33:c2:bc:62:55:02:5b:a8:d9:97:48: 10:ab:b0:bc:8e:c9:75:45:9f:47:79:cd:71:fd:13:3d:1f:10: 3e:d5:42:da:d4:4e:eb:01:d9:a9:06:c0:ff:84:b0:ab:f4:13: 97:f0:4b:15:5c:fe:30:63:c3:fc:ac:d1:17:0c:29:34:e4:fc: 05:30:cb:05:37:35:52:19:58:0e:aa:c2:e7:80:ad:cf:45:a3: 64:3d:be:b2:a8:1a:03:e9:8f:0f:eb:03:40:cf:ce:fb:8a:fb: 22:b0:56:31:dd:12:1d:39:23:84:c2:17:eb:d3:13:0f:5c:64: 4e:e7:4a:2e:19:5d:d5:99:b3:a8:91:1d:bc:99:d3:df:3a:dd: 30:d9:a1:7f:73:bc:7e:7a:ea:8a:02:0d:af:70:b3:ff:ac:76: 8f:fc:27:00:af:84:01:0f:12:c4:0c:43:c2:8d:f4:c5:d4:f2: db:95:8c:fc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaGq8CBgADBM8iOt592vxFBKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZmE3ZGQ2M2YyZTJkODdiNWY3ODUwMDkzYzc0M2JiZmJl MTRlNDQwHhcNMjYxMTA1MDkwMDI1WhcNMjYxMTA2MDkwMDI1WjAzMTEwLwYDVQQD Eyg3OGNlNTFhYWZmNzFhNThhYmE2OGI3ODJkMTVhMjQ2NzQ0NjU0ZjYwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkwy+xpIkEAVNIsRPAkWNXP4+HvT xHdTE2rldsA9RXK2ypvrnrBcC0XITbA2dT0l1m5lTXW7w6maTpi1TGke6AS1C+gg q/zJNqg54KncPf4rHPVwsyY9FTtxY5wTkSYIRgr0cjk0EY1uefmVdKa00FASkFmC 2/JldHZm716fskonAvWo/cAagrMOKUujrnK36GGknno1NbNwFZ92rRt5JzjFHzuj IhIOLEbAsKordusE4zvRnzstNvd3WzWDAejCi4/0V/IBG2K7NNkVOgIYelamr+WA ghLvkDdvShacWdwU59cy3su1i8O5mmrn9Y3zYM7Dj/uOLIsQ4pjgX7kfPQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHjOUar/caWKumi3gtFaJGdEZU9gMB8GA1UdIwQY MBaAFCn6fdY/Li2HtfeFAJPHQ7v74U5EMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUt NzlmN2I2ZWE3YzE0LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMy8yYzBjYmYtMTFmNy00YjZkLWI4OGUtNzlmN2I2ZWE3YzE0 LzEvS2ZwOTFqOHVMWWUxOTRVQWs4ZER1X3ZoVGtRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAooYGw1hW LzOZbsjlylmha2oz8Y+HAmhgxt/KGYxlJnqdlBUWHRp0xReh2ce1/VQwjNAqVVTw 8qdXLHSMwIYt0O7mRYXrhaNCzTQ9NE4cQTPCvGJVAluo2ZdIEKuwvI7JdUWfR3nN cf0TPR8QPtVC2tRO6wHZqQbA/4Swq/QTl/BLFVz+MGPD/KzRFwwpNOT8BTDLBTc1 UhlYDqrC54Ctz0WjZD2+sqgaA+mPD+sDQM/O+4r7IrBWMd0SHTkjhMIX69MTD1xk TudKLhld1ZmzqJEdvJnT3zrdMNmhf3O8fnrqigINr3Cz/6x2j/wnAK+EAQ8SxAxD wo30xdTy25WM/A== -----END CERTIFICATE-----Generated at Thu Nov 5 16:47:14 2026 by rpki-client