$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft File: ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft (raw, json) Hash identifier: bjyJ2aAWCTp9V8f6ILVgH/yfqgkHgRAQ1ZEPXFnNbB0= Subject key identifier: ED:C0:A6:42:E0:EB:5B:36:96:9E:D2:DF:0B:E6:DF:83:50:A7:8C:3D Authority key identifier: 49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 Certificate issuer: /CN=49c403d43b5f38fca2119cd1409a92763edefe71 Certificate serial: 01A0F7C505826292CA47159412F87B1FD879 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft Manifest number: 1A88 Signing time: Thu 01 Oct 2026 14:01:19 +0000 Manifest this update: Thu 01 Oct 2026 14:01:19 +0000 Manifest next update: Fri 02 Oct 2026 14:01:19 +0000 Files and hashes: 1: 2uP2P6fTf1qo4PWRRqgeE7TTacE.roa (hash: 9eSLYCb2FWzNsHTSZC1SEnCMNPegGVcyv6j21qK1mw8=) 2: 5rakYdNxKMjh5JNPex8iKzp_gtA.roa (hash: 6LspddKmtQtuac9ZuOl1VnhHP0Iq5oFWoFzvEG8ERXE=) 3: 814WTzXBXOIciV517t_FSJpheFU.roa (hash: 3rVBxA84Q0GQ5WcUB0js4QFJ7jGwBh1Rh823C6IzdeE=) 4: AogunF2vY6jwFQqloSaO1hbzpk8.roa (hash: it2LBzN2gPXG+ZsVF9U3YkMRcRGbDQsz+oO4JZZUzeg=) 5: JNtEUjv1u2nrR2kJY3xTk9eLdQU.roa (hash: y7e9qF3W4oZOepFOJNd5APdu3FIuFqB+iMZzLRxwKEo=) 6: PQhkPKvFMO7XAZJCK0yg6JOYn-Q.roa (hash: GclksRKdEgrXLLR1LhQTLSvorV7LCPoO0w2Ir6KfZ4M=) 7: Qi3PbQnrdw7q8NtmLcDOyzuEuok.roa (hash: Ene2M6hdbbKNY0YIKXvUxR9PygRHkyqGW28j+nRBH9E=) 8: ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl (hash: 6WTH7Np74FWhXEVeExzPlshMbBv/lldWif/h95eBS0g=) 9: UKQMI_1tAdL7QkXpECyLkKgiFXw.roa (hash: xCvizHfY/xMnYQ9a7uuh91R0ms1D7ktEV/mIEaRjfJ8=) 10: iB6K871-MTgrHCKR-pl3wKEY8VE.roa (hash: evrLdA7V1aTPB0+S9RwUtMXPCQscLGRKXxGpKmpY5Z4=) 11: of6LgZjZn377OWe4qW9VxsrXlzU.roa (hash: mzM/Cns9/j03lTiA+9ZfDQNcGWtBmHN0WQWYMBfi0eo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 02 Oct 2026 14:01:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a0:f7:c5:05:82:62:92:ca:47:15:94:12:f8:7b:1f:d8:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49c403d43b5f38fca2119cd1409a92763edefe71 Validity Not Before: Oct 1 14:01:19 2026 GMT Not After : Oct 2 14:01:19 2026 GMT Subject: CN=edc0a642e0eb5b36969ed2df0be6df8350a78c3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:78:fa:27:11:a4:26:7a:c3:a6:0a:7b:34:db: 79:87:e1:d4:a5:2e:1a:08:56:f8:6e:f5:d1:c9:ac: 95:21:c8:eb:4d:47:f8:25:d9:65:88:98:ee:20:3a: bf:1e:43:ef:5f:1f:1c:dd:95:f7:ce:2e:eb:f9:69: 7c:56:1c:d0:69:95:d6:fa:bf:3e:8a:cf:69:ef:dc: a0:74:be:89:e6:82:a0:c9:46:49:70:99:42:d6:a0: 53:aa:4a:df:ac:62:d3:17:80:97:4a:c5:2b:4a:fa: f9:16:f7:5f:20:b1:2e:a2:f3:3f:69:8e:cd:98:95: 59:b7:42:a0:78:c9:67:02:4e:b0:4b:3e:21:ed:1d: 40:0a:27:9e:cc:05:24:28:a6:b9:41:b3:bc:e6:56: 6e:9c:cd:a1:2d:d6:70:91:5b:03:0f:62:12:75:e6: fa:bb:51:fe:53:4c:97:1e:78:48:1a:3a:38:05:9f: b4:b8:1a:60:34:c5:1c:4e:09:4f:9e:c0:e5:4c:e2: 6c:f5:e1:ed:d5:71:c0:60:d9:76:3b:57:71:d9:26: bf:39:be:cf:62:df:70:66:5e:ae:41:1d:26:c1:c0: e7:40:ed:a8:57:37:6e:7e:9b:f5:47:f5:da:bc:68: ed:2a:c9:4d:9a:9e:0f:8c:c8:e3:8e:b9:34:d8:d6: 0e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C0:A6:42:E0:EB:5B:36:96:9E:D2:DF:0B:E6:DF:83:50:A7:8C:3D X509v3 Authority Key Identifier: keyid:49:C4:03:D4:3B:5F:38:FC:A2:11:9C:D1:40:9A:92:76:3E:DE:FE:71 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ScQD1DtfOPyiEZzRQJqSdj7e_nE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/a2f87b-4811-4fe1-b15d-f889ca161c01/1/ScQD1DtfOPyiEZzRQJqSdj7e_nE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:dc:ef:a4:2c:82:57:7c:02:35:c9:20:5d:38:23:87:fb:bc: 2b:71:09:40:e3:a9:da:ed:3a:b0:2c:60:9f:66:c2:fe:fa:d9: 1c:52:f3:11:62:ff:ee:29:1d:3f:01:34:25:87:a5:42:9d:dd: 8e:37:5a:24:c6:31:87:ce:5a:92:ef:2e:35:11:92:7f:ab:48: 5d:6d:c5:42:9d:99:95:28:a3:f0:d2:29:d4:5c:9c:43:09:bd: 70:c3:d0:97:5d:fe:57:d8:23:70:e8:64:da:55:92:67:7b:44: 74:ca:3b:ed:59:34:d8:a2:fe:79:fe:aa:aa:f7:31:2d:69:f8: 6a:85:2d:3e:0e:89:e6:ca:f5:6a:8d:f3:2d:07:f3:fb:b1:00: 45:73:0e:2c:32:95:94:98:db:e9:9e:24:81:29:26:36:23:03: aa:c7:73:4f:e9:86:3f:cf:f9:3b:be:d4:43:dd:79:c2:16:74: 58:df:39:7c:55:79:77:e2:3c:2e:b8:7d:fb:00:6a:09:72:7d: 5a:b2:dc:ad:71:e9:b6:f7:65:42:06:0d:a9:73:17:16:02:9e: 9a:09:b5:db:a1:18:12:7e:f6:a5:22:d6:93:0c:9f:1b:78:e6: c5:4c:be:6f:a2:69:56:65:af:09:3b:8d:b4:41:b0:99:3a:ea: a2:88:8e:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaD3xQWCYpLKRxWUEvh7H9h5MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5YzQwM2Q0M2I1ZjM4ZmNhMjExOWNkMTQwOWE5Mjc2M2Vk ZWZlNzEwHhcNMjYxMDAxMTQwMTE5WhcNMjYxMDAyMTQwMTE5WjAzMTEwLwYDVQQD EyhlZGMwYTY0MmUwZWI1YjM2OTY5ZWQyZGYwYmU2ZGY4MzUwYTc4YzNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnj6JxGkJnrDpgp7NNt5h+HUpS4a CFb4bvXRyayVIcjrTUf4JdlliJjuIDq/HkPvXx8c3ZX3zi7r+Wl8VhzQaZXW+r8+ is9p79ygdL6J5oKgyUZJcJlC1qBTqkrfrGLTF4CXSsUrSvr5FvdfILEuovM/aY7N mJVZt0KgeMlnAk6wSz4h7R1ACieezAUkKKa5QbO85lZunM2hLdZwkVsDD2ISdeb6 u1H+U0yXHnhIGjo4BZ+0uBpgNMUcTglPnsDlTOJs9eHt1XHAYNl2O1dx2Sa/Ob7P Yt9wZl6uQR0mwcDnQO2oVzdufpv1R/XavGjtKslNmp4PjMjjjrk02NYOoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFO3ApkLg61s2lp7S3wvm34NQp4w9MB8GA1UdIwQY MBaAFEnEA9Q7Xzj8ohGc0UCaknY+3v5xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQt Zjg4OWNhMTYxYzAxLzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZi9hMmY4N2ItNDgxMS00ZmUxLWIxNWQtZjg4OWNhMTYxYzAx LzEvU2NRRDFEdGZPUHlpRVp6UlFKcVNkajdlX25FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHdzvpCyC V3wCNckgXTgjh/u8K3EJQOOp2u06sCxgn2bC/vrZHFLzEWL/7ikdPwE0JYelQp3d jjdaJMYxh85aku8uNRGSf6tIXW3FQp2ZlSij8NIp1FycQwm9cMPQl13+V9gjcOhk 2lWSZ3tEdMo77Vk02KL+ef6qqvcxLWn4aoUtPg6J5sr1ao3zLQfz+7EARXMOLDKV lJjb6Z4kgSkmNiMDqsdzT+mGP8/5O77UQ915whZ0WN85fFV5d+I8Lrh9+wBqCXJ9 WrLcrXHptvdlQgYNqXMXFgKemgm126EYEn72pSLWkwyfG3jmxUy+b6JpVmWvCTuN tEGwmTrqooiOXQ== -----END CERTIFICATE-----Generated at Thu Oct 1 21:50:57 2026 by rpki-client