$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft File: CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft (raw, json) Hash identifier: 0dx/A3Hc6VpyglnIn3XzOEOuaMfzkoWAvlkvFPTo0gE= Subject key identifier: DD:DD:7C:F4:69:3A:1E:FF:6A:A8:7D:02:27:69:8E:C5:FA:22:3E:55 Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Certificate serial: 01A1201C689EDC0996575BD29F8546BAE939 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft Manifest number: 1AD9 Signing time: Fri 09 Oct 2026 10:01:34 +0000 Manifest this update: Fri 09 Oct 2026 10:01:34 +0000 Manifest next update: Sat 10 Oct 2026 10:01:34 +0000 Files and hashes: 1: 1nFCKi1R1uWAqKJnbMUD9y_3pno.roa (hash: 5C4IbhqcH3E0EkSlqxD//f0/kRfbI7bdALbkI7++DS0=) 2: 45jcpGMeN1MEq1EOG0Y9qcXt_7E.roa (hash: T4PlRQPL8k2IXPh/6bf0yHYACLBVnc7hXe7KA88boSU=) 3: 54lQx9jq3eHeFIcJKMTm3kHCZTA.roa (hash: 27oRvIuzZnhWTtAi86vMeQgbiUWJ+XcD4ONYqT3e54I=) 4: BtE_Prg_QTilEMkESiUbs4oIDmA.roa (hash: SFNeqY+UDzZLqbIx3LsR2g+sDJ1BvW0wdb9XdlLKZ0k=) 5: C-Qps28bGJ9viEITk81kKk0b0dA.roa (hash: YvQZ6I3rsCF/RjF8TlblPG71ruEskxswS8/cnuK9jtA=) 6: CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl (hash: 0ZELDPwVAMk9KV9uliq2MC4xd8LuhowcEbsX3+40XyE=) 7: GpPbNoyLVyrmQ4b8e1AhKTzfuOg.roa (hash: ghZh7XoU09TtPH2tIcN1D5InXaZeImBLFNLb0RMUPhs=) 8: McMAEXhLQiJ8zGNeGMw3UTPr0gA.roa (hash: Axa3TJcrAyunbvQsH7ha/cb/OA+FPV5fxnNPJ+XHc9Y=) 9: SH8o9XaYeY75kSYDFek1xvvvpes.roa (hash: snF/ko8o9cC13jo1dYD32crG+aO3GlqBSVVV17i0l7Q=) 10: c-QDkOwRsaqWaCLR67UW_lU7-L0.roa (hash: AE6Uaz5NJLGOrk5M1q3pxLLZKI8/2jUOSqya5+asWc0=) 11: fNaq8m6O9BbhsyXfpIVgO1FBWfQ.roa (hash: YWEpMcVfS6S4vwVF7Bdrpn4pCsO6G0a695Az/e9ZD/E=) 12: gOXA4eSdbH4c5IeG-4m3cjBuSN4.roa (hash: /bHGxxVaR5KsscDI8PWYa4sB3JKBtwAVf/gqeJepnlg=) 13: ke2TciPSbDOn6zXxGdQLJTfLAsw.roa (hash: 9ny0lYpK79F/d0zmuY5DS1VwZbJpVvPVS9XC0rY+Evc=) 14: qbYP0UksLbSQsOn0c0j6zXw0rP8.roa (hash: esZKDBKEw5qRbj9kqcJN1+giUZn6tIL+9+p2SrfRvrA=) 15: wCYaXW9yQXdX5eY6SwGBDpsbJ2M.roa (hash: +1+KMrFBvRETqP/PeuYGipr75ZikVYJF14sV08bslAk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 Oct 2026 08:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:20:1c:68:9e:dc:09:96:57:5b:d2:9f:85:46:ba:e9:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065 Validity Not Before: Oct 9 10:01:34 2026 GMT Not After : Oct 10 10:01:34 2026 GMT Subject: CN=dddd7cf4693a1eff6aa87d0227698ec5fa223e55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:61:92:dd:c9:76:6e:e0:d2:d9:2e:90:0b:b6: a9:cc:86:74:22:cb:a0:b8:b3:af:4b:b0:60:32:93: d4:3f:4a:0c:f4:e3:d4:80:ff:3e:6e:e9:0f:14:f0: ae:c2:2b:ac:e2:8e:17:14:9e:0b:32:b9:fd:65:da: 77:cb:f4:c2:c6:49:bb:22:db:89:ad:fb:03:30:3f: d9:03:e2:3b:4e:2d:c4:5b:f6:b1:71:c0:f7:7a:cb: f3:72:56:09:39:59:9d:25:87:0d:dc:6b:55:5f:b0: 1a:67:32:94:e1:a7:72:e2:67:d1:d6:f8:cb:39:32: db:c3:56:83:a5:14:92:74:20:99:f3:22:57:47:a0: e9:0c:e4:99:5c:84:ed:02:0b:e0:d8:4b:2e:96:24: 72:f9:0f:54:f5:f2:e2:9d:5b:62:b9:aa:1a:92:e7: 4a:94:9b:e0:df:b1:b5:5c:fc:3b:be:a2:66:2a:a8: 95:77:e4:5b:fb:2a:36:f1:4f:c8:d0:22:96:cf:63: 72:d6:b8:98:35:9c:ac:cf:8d:14:9f:72:2b:d6:6a: cb:90:d3:ca:2d:f0:26:e1:a5:3f:0b:43:cb:f7:d9: 01:56:94:f7:a5:e7:84:a8:97:14:39:3a:9a:4c:e0: 2e:bb:82:53:be:01:70:37:ff:81:8f:7a:48:fd:95: 82:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:DD:7C:F4:69:3A:1E:FF:6A:A8:7D:02:27:69:8E:C5:FA:22:3E:55 X509v3 Authority Key Identifier: keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:90:ea:7a:fa:03:1f:c4:ee:47:bf:f9:15:0e:51:c7:ca:43: 38:59:a8:48:99:82:24:5b:7d:e3:27:1e:a3:5c:f9:3c:43:88: 15:5a:3f:e9:f5:53:06:be:5b:cc:07:42:d5:07:1d:07:55:1f: 13:d1:fe:f6:4e:b5:93:b6:b3:e1:73:1d:31:f1:d8:1a:01:de: b5:67:53:e7:2c:be:e2:e5:ff:0a:d0:84:f0:88:c0:59:fd:ea: 3b:51:43:95:d8:bc:85:33:ff:0f:c2:ff:b3:ea:1b:7b:de:e4: 0c:c7:de:27:0d:78:67:ae:a0:17:f6:0f:bc:a6:ff:76:e0:d1: 8e:de:79:a4:f9:35:d8:00:43:77:5d:c5:3c:df:b1:c7:0e:8a: 65:f6:9b:00:31:d9:d6:52:72:95:4d:93:b1:7f:e1:1e:0d:12: 12:b3:12:57:95:ad:69:86:49:38:db:71:00:3c:2c:4d:ff:a8: 18:38:63:9d:ad:d5:1c:f9:d8:67:15:df:af:25:84:ad:f3:c4: dd:35:7c:3c:79:8b:2d:f5:f4:1a:ca:41:bd:fe:2a:0a:2e:42: 38:a2:75:7a:d0:45:69:ce:61:8d:7a:b8:19:1a:3e:9f:96:5f: a2:05:12:7b:33:8d:a9:f0:ef:e6:0c:e7:ed:83:c0:43:11:be: c0:b4:45:6b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEgHGie3AmWV1vSn4VGuuk5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA4MWI3YTIyZTUxY2ZiOWNmODQyMDVlNDQ0OTk5OGFkNTVk OGYwNjUwHhcNMjYxMDA5MTAwMTM0WhcNMjYxMDEwMTAwMTM0WjAzMTEwLwYDVQQD EyhkZGRkN2NmNDY5M2ExZWZmNmFhODdkMDIyNzY5OGVjNWZhMjIzZTU1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGGS3cl2buDS2S6QC7apzIZ0Isug uLOvS7BgMpPUP0oM9OPUgP8+bukPFPCuwius4o4XFJ4LMrn9Zdp3y/TCxkm7ItuJ rfsDMD/ZA+I7Ti3EW/axccD3esvzclYJOVmdJYcN3GtVX7AaZzKU4ady4mfR1vjL OTLbw1aDpRSSdCCZ8yJXR6DpDOSZXITtAgvg2EsuliRy+Q9U9fLinVtiuaoakudK lJvg37G1XPw7vqJmKqiVd+Rb+yo28U/I0CKWz2Ny1riYNZysz40Un3Ir1mrLkNPK LfAm4aU/C0PL99kBVpT3peeEqJcUOTqaTOAuu4JTvgFwN/+Bj3pI/ZWCvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3dfPRpOh7/aqh9AidpjsX6Ij5VMB8GA1UdIwQY MBaAFAgbeiLlHPuc+EIF5ESZmK1V2PBlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYt MDM2NzI2OGZmODcxLzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy9jNTE1YzktZGYwOC00MjZjLTgwZTYtMDM2NzI2OGZmODcx LzEvQ0J0Nkl1VWMtNXo0UWdYa1JKbVlyVlhZOEdVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO5DqevoD H8TuR7/5FQ5Rx8pDOFmoSJmCJFt94yceo1z5PEOIFVo/6fVTBr5bzAdC1QcdB1Uf E9H+9k61k7az4XMdMfHYGgHetWdT5yy+4uX/CtCE8IjAWf3qO1FDldi8hTP/D8L/ s+obe97kDMfeJw14Z66gF/YPvKb/duDRjt55pPk12ABDd13FPN+xxw6KZfabADHZ 1lJylU2TsX/hHg0SErMSV5WtaYZJONtxADwsTf+oGDhjna3VHPnYZxXfryWErfPE 3TV8PHmLLfX0GspBvf4qCi5COKJ1etBFac5hjXq4GRo+n5ZfogUSezONqfDv5gzn 7YPAQxG+wLRFaw== -----END CERTIFICATE-----Generated at Fri Oct 9 13:10:33 2026 by rpki-client