$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: iPxbKerv/numPG24pN4JSV6XZnIaRI/ifZzEoVBGuIQ= Subject key identifier: 68:2F:CC:58:36:DA:88:FF:C3:FE:CC:75:93:AB:2D:7A:BC:39:E8:96 Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 01A13334C6B7D1E74AA6BD34A6787EB90118 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 16C0 Signing time: Tue 13 Oct 2026 03:00:58 +0000 Manifest this update: Tue 13 Oct 2026 03:00:58 +0000 Manifest next update: Wed 14 Oct 2026 03:00:58 +0000 Files and hashes: 1: 35wDpRsfaq8aq0FjZJRW12A2SwI.roa (hash: S32iSai/D3+xMYiGNdr33Lz5mjsLhdP2ds6sS7Zu5bY=) 2: 4xaEdixeinTNAew5f36B5ogFapc.roa (hash: U+lj7Po2vIYbjteMOk724C6A7iSVfdA9w8Qr+wSn2EY=) 3: 6bp5_uY1eTTE0FRpgy0dJ0tGIWA.roa (hash: JQ6e3y/UZad8zx3alMXWmLY2Cs0ywtM7PcyjG1jGvp0=) 4: 9561YDYiFuwA3cK9_Ao81cqPzyw.roa (hash: sI0N1MtQFC1Bs34l2HPoGh51MHvRDzLlzChm4jYV9bI=) 5: IrFs_aYDL98DrBmqXNeImOXYqVs.roa (hash: /du+UzfxF5Oy69bwitaws2QcGuPpQ2q/PzP+2+rlKmc=) 6: Mpb5tIfxbf_t0TleDipa0dPzQfg.roa (hash: dlPOC3LjslO4GRq7Su9TrpsYGXUfWyZVAl7s4ntuJgI=) 7: SnpB0ExR-bCAJLKknHnesUTaAWU.roa (hash: wlr5EY83KcqFkovq8AptI/Jy70VxHPVKk3n5WEh7t3w=) 8: W-auLweCazJVGZa2RWm9KCu-wKE.roa (hash: KDvTseiWMAdzP9ZuSgmWkkWqgGW79SkpbkY25PFZ98s=) 9: YSP2K25IRGuG9q-MByo9uJoo_cg.roa (hash: Pd46j8HnroPwAsfvmv91RgjQs2qRGo37bfk5Rd39ViM=) 10: ZNVLkE0Hncpo1bsQ8SqkvCmjNMs.roa (hash: ckctwOhfUle+O6fK0mnv5ZMxRNGqbUG5lJdOX3nwnlo=) 11: djAPpFOBLqUtxJOa9UwBPjNac1E.roa (hash: 7Rj31INl1FIcMdN33laOh9K9+J+bHShe/BZUzyt8PUg=) 12: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: pcWVgN1ErRMYzn/HHBx1sX21+cT4IbHGENauth5tUc4=) 13: nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa (hash: lYeXLJKim2pWsORoTqRVNykk1XTHGi948eQwJ6tFxj4=) 14: pnn2LDubyB-s2_PbTNDUNt7JA_8.roa (hash: vW3hxl2FPzWH44KmHJKXNpZV557F5Hczl/NZRDVCKlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 13 Oct 2026 23:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:33:34:c6:b7:d1:e7:4a:a6:bd:34:a6:78:7e:b9:01:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Oct 13 03:00:58 2026 GMT Not After : Oct 14 03:00:58 2026 GMT Subject: CN=682fcc5836da88ffc3fecc7593ab2d7abc39e896 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:93:f0:fd:3b:62:e9:c4:e9:c1:65:2d:a5:80: 1a:79:b5:43:69:92:f4:b7:3c:e4:8f:1f:fc:ed:f2: b1:86:1b:4d:6e:01:88:b6:31:92:e2:6a:62:5a:7d: 55:c7:95:29:6f:1c:d7:5e:ad:ee:03:ec:02:55:71: e8:80:69:6d:b6:46:8e:22:1a:f3:ac:8b:72:3b:53: ea:00:4b:b3:11:81:b9:8b:a6:02:b3:6e:aa:01:96: 72:56:fc:9a:1e:ba:3c:3e:6f:40:cf:e5:2c:41:4c: 9b:c6:db:93:7e:e2:2b:e4:90:16:27:39:56:5b:11: fb:f0:f1:0d:3d:fe:61:2a:4c:a2:ec:42:70:3f:39: 78:7c:bf:85:fd:4e:7e:b9:51:d6:d4:9a:19:29:2d: 90:33:a4:f2:c3:8c:fd:fc:af:1f:4c:da:7d:22:ae: 0f:d5:21:5b:36:33:06:45:cc:d6:c9:98:6f:17:f6: c4:f7:67:fd:90:24:c7:cf:92:4b:b9:ec:f4:cf:75: 2e:2c:c5:55:bb:a8:4d:40:f5:bc:74:61:86:9c:a2: c8:72:ac:b9:48:9c:9d:d7:24:26:31:c7:5f:81:6e: 21:6a:20:7f:d8:cb:b0:ee:fa:8f:f0:4c:21:9e:84: 52:88:0f:93:ad:1c:a9:9f:ef:2e:ea:7d:dc:3c:25: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:2F:CC:58:36:DA:88:FF:C3:FE:CC:75:93:AB:2D:7A:BC:39:E8:96 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:01:cc:fe:70:9c:16:e1:5b:0a:a0:63:b3:9a:62:82:69:4d: 53:87:0a:5e:e4:98:b4:3b:06:b1:02:c0:09:fb:d1:47:cf:68: 1e:0c:66:cf:09:c8:b5:a9:35:52:7e:15:cb:80:84:8e:d9:08: 3d:19:a4:3c:ba:12:23:7f:49:f8:25:af:2a:7f:02:81:7b:0c: 93:11:a9:43:8a:fb:28:1d:db:4a:a9:d1:8b:73:4a:65:86:21: b9:f2:37:61:d7:b7:1b:3e:e9:65:c4:5a:c1:fa:9d:e8:a7:50: ac:e0:b8:b6:e5:fd:79:68:5f:5a:8c:bc:66:b8:f1:5e:48:81: 6b:cf:10:40:44:b9:fa:46:01:22:56:67:5f:e6:4e:40:02:e5: 53:9b:d5:78:0a:cd:88:c6:3b:a7:16:34:72:ba:55:5e:3a:8c: d6:8a:d5:c0:9b:a8:ba:c0:50:2c:16:96:9d:d5:12:84:2d:71: 63:81:81:42:5d:63:31:23:54:50:a9:41:06:0c:9f:fd:b6:7c: fb:1c:a7:ce:20:5b:a0:8c:29:e9:ae:14:de:b5:b4:6f:3f:53: e6:59:bb:66:5e:a7:b3:c2:64:d0:96:01:26:20:80:91:fa:8c: b8:7c:24:1e:7b:9a:c9:39:77:5a:28:f7:23:0a:00:b8:9a:ba: d0:23:2e:ed -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEzNMa30edKpr00pnh+uQEYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYxMDEzMDMwMDU4WhcNMjYxMDE0MDMwMDU4WjAzMTEwLwYDVQQD Eyg2ODJmY2M1ODM2ZGE4OGZmYzNmZWNjNzU5M2FiMmQ3YWJjMzllODk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspPw/Tti6cTpwWUtpYAaebVDaZL0 tzzkjx/87fKxhhtNbgGItjGS4mpiWn1Vx5UpbxzXXq3uA+wCVXHogGlttkaOIhrz rItyO1PqAEuzEYG5i6YCs26qAZZyVvyaHro8Pm9Az+UsQUybxtuTfuIr5JAWJzlW WxH78PENPf5hKkyi7EJwPzl4fL+F/U5+uVHW1JoZKS2QM6Tyw4z9/K8fTNp9Iq4P 1SFbNjMGRczWyZhvF/bE92f9kCTHz5JLuez0z3UuLMVVu6hNQPW8dGGGnKLIcqy5 SJyd1yQmMcdfgW4haiB/2Muw7vqP8EwhnoRSiA+TrRypn+8u6n3cPCXSTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGgvzFg22oj/w/7MdZOrLXq8OeiWMB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgHM/nCc FuFbCqBjs5pigmlNU4cKXuSYtDsGsQLACfvRR89oHgxmzwnItak1Un4Vy4CEjtkI PRmkPLoSI39J+CWvKn8CgXsMkxGpQ4r7KB3bSqnRi3NKZYYhufI3Yde3Gz7pZcRa wfqd6KdQrOC4tuX9eWhfWoy8ZrjxXkiBa88QQES5+kYBIlZnX+ZOQALlU5vVeArN iMY7pxY0crpVXjqM1orVwJuousBQLBaWndUShC1xY4GBQl1jMSNUUKlBBgyf/bZ8 +xynziBboIwp6a4U3rW0bz9T5lm7Zl6ns8Jk0JYBJiCAkfqMuHwkHnuayTl3Wij3 IwoAuJq60CMu7Q== -----END CERTIFICATE-----Generated at Tue Oct 13 06:56:50 2026 by rpki-client