$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft File: TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft (raw, json) Hash identifier: ZzCWFS1jE5YSnHGJtBTMQ53PRUMsbMdu/XEANwOIPk8= Subject key identifier: 4E:34:60:7F:C8:69:CB:62:1D:13:C6:6A:AB:8A:EA:B8:F9:CF:23:CC Authority key identifier: 4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 Certificate issuer: /CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Certificate serial: 01A104375062C0D5ADB839A3CCDA8108B2CC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft Manifest number: 1A94 Signing time: Sun 04 Oct 2026 00:01:36 +0000 Manifest this update: Sun 04 Oct 2026 00:01:36 +0000 Manifest next update: Mon 05 Oct 2026 00:01:36 +0000 Files and hashes: 1: 044xYX9HsasQkNnZ6gNIrDun9Kk.asa (hash: QqGXRDWhRxy4fIleJhf8VPuBnT0lLwsILfpI5ZVk2bI=) 2: 21UC4Dg27lTwnVnoP-1hWx8Jrac.asa (hash: P5jYP5ImmwlHStzib0wGM6vyZuqyna1VWXgPkWJ521s=) 3: 3j6ITLuEAtzvq7lDDH-_99jLsyw.asa (hash: emyDEkQmvd9qMUG9y8IBKAbGI4wIM9zsTIQoNhtKSiU=) 4: 4blS8i-IvJFmYcw1UMVYU50adH4.roa (hash: PH25rQxOqMdKEUIOyGDzXkRgbKvHvrgDiCAwjxsY21M=) 5: Bv2hzFMshraYJZMhKiNAPQW5yzo.roa (hash: mozy1oa9z+5oxHPkAdcnEjtIYIUHTFuELC5cUHnd2ds=) 6: FXZzLUTLI2bnJX3HE0iocMnGK24.asa (hash: 0jHNXzmBRRsiRYGYoiH0GyC90Hc/n11rPyQ1ORy1E6M=) 7: GN5fvWr40gdv3JGN6vxjkZjGr-M.roa (hash: opZrG09Q9xFPvDT9n75han8TkL1qCnmykUVsSTdQ9Hw=) 8: ONEBxRFqRY2aPMMFa_3ak7_LP04.roa (hash: 6sHhfn9wB3VfYGqWY+wewX0hRZU1FUHpsvmiMpmOan0=) 9: SpVJq_aWC8IH5JWeljASL-sUdR4.roa (hash: WWb4Srs1EjuxCuzB13EtjRKgil05qhr6qF6kWwF7M7g=) 10: TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl (hash: WX4Ih2F48PfLt95kWnxMJykdYX2ki2rF1u+U62kI6L4=) 11: l5bd30j_MQRGXqfWahBHTqJdoFc.roa (hash: t0VGEeZo8Fahoj1ko4o+rBeCd1Be3+5NalKn7WyM9tU=) 12: lwxC-jH6X2q9Mt74lepdPD3W9EM.asa (hash: 4RgSfjSU8Flpmo/qpEf1hYBnqzjBw2dPRj3BdEOkib8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 04 Oct 2026 20:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:04:37:50:62:c0:d5:ad:b8:39:a3:cc:da:81:08:b2:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4c87389ef41f18c1fcc82754349ea7096980b1e3 Validity Not Before: Oct 4 00:01:36 2026 GMT Not After : Oct 5 00:01:36 2026 GMT Subject: CN=4e34607fc869cb621d13c66aab8aeab8f9cf23cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f3:ab:78:3c:dd:ef:db:63:b5:58:a6:20:e0: 33:df:29:6c:8a:f0:10:12:57:17:38:a7:0b:3c:df: 59:bb:10:b7:1d:65:1f:d1:e1:36:61:0b:57:fd:ea: a5:b5:1c:43:57:50:e3:ce:65:60:3a:fe:c7:53:df: 9a:04:71:3f:21:db:2a:d7:10:53:67:0a:aa:8d:85: 4a:c5:cd:2f:1d:c7:ad:d3:8b:00:fd:80:11:20:9c: e6:f7:f3:da:bf:be:69:06:a7:9c:0b:df:fd:89:72: 31:db:27:cc:74:b0:07:fb:35:b6:da:1b:41:7f:ff: 7b:2d:af:65:57:5a:91:7a:74:40:f2:3d:d7:e4:99: a1:bd:42:44:48:6c:17:bf:47:6f:99:64:f1:13:91: 40:ce:4b:62:83:70:a4:88:b9:22:e1:fc:ac:71:84: 43:71:63:8f:f6:80:ab:df:35:be:b9:ea:40:53:ea: d6:bf:e4:6c:14:b0:76:7f:fc:76:65:a3:d6:09:de: c0:e7:4c:b9:5c:94:a2:56:71:7d:01:7a:e7:a4:62: 1d:46:df:a0:73:65:27:23:e8:6d:98:93:3c:5a:55: 2c:c1:bc:ce:d4:90:5c:3b:76:b0:11:6e:b3:78:ec: 73:e5:0e:42:05:e5:3c:5b:27:48:cd:70:36:ec:3a: 73:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:34:60:7F:C8:69:CB:62:1D:13:C6:6A:AB:8A:EA:B8:F9:CF:23:CC X509v3 Authority Key Identifier: keyid:4C:87:38:9E:F4:1F:18:C1:FC:C8:27:54:34:9E:A7:09:69:80:B1:E3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TIc4nvQfGMH8yCdUNJ6nCWmAseM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/2215f7-887a-4bd5-bf97-ffb709f7668c/1/TIc4nvQfGMH8yCdUNJ6nCWmAseM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:eb:37:60:5e:5c:1b:fc:34:c9:f3:a2:5b:47:ec:aa:14:93: 96:8c:a7:0d:d2:fa:31:93:0d:a1:42:c0:bc:98:f6:cf:06:0b: 9f:79:0a:3a:14:df:21:5a:81:fc:41:be:c6:36:8d:84:46:69: 93:78:d6:ef:bd:dd:7a:40:ee:7a:f4:9f:cc:3f:c9:f1:a7:80: 3a:73:b2:2f:c1:f7:12:c3:a8:59:e2:ae:af:f8:e1:78:d5:7f: e8:29:16:62:d5:99:28:fe:9e:93:8b:3a:98:00:25:e1:4b:f1: 3d:46:60:54:0c:cb:92:71:67:52:ae:70:9e:96:b4:73:b2:6a: 9e:67:7a:00:e0:30:e1:d6:03:39:31:b2:1e:4c:9d:3b:7d:15: 98:30:68:e1:db:c9:88:13:7d:7d:ff:63:4d:3f:99:4b:03:6c: 83:a5:a6:ae:45:cb:f5:3c:f7:3f:e6:b5:36:6b:a1:59:1e:1c: d9:07:79:e6:2c:eb:4d:c3:65:43:0d:4f:5f:28:9e:e6:b3:a8: 99:98:c6:6c:24:f7:aa:ba:e2:29:50:d1:74:5f:7b:8d:53:cd: bc:c3:d1:5e:d2:38:c2:ae:2d:61:7f:68:22:81:77:82:86:95: 81:b6:ad:4e:d0:e3:9c:30:49:53:80:d0:74:05:ad:54:7a:6f: c9:db:73:c3 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEEN1BiwNWtuDmjzNqBCLLMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDRjODczODllZjQxZjE4YzFmY2M4Mjc1NDM0OWVhNzA5Njk4 MGIxZTMwHhcNMjYxMDA0MDAwMTM2WhcNMjYxMDA1MDAwMTM2WjAzMTEwLwYDVQQD Eyg0ZTM0NjA3ZmM4NjljYjYyMWQxM2M2NmFhYjhhZWFiOGY5Y2YyM2NjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvPOreDzd79tjtVimIOAz3ylsivAQ ElcXOKcLPN9ZuxC3HWUf0eE2YQtX/eqltRxDV1DjzmVgOv7HU9+aBHE/Idsq1xBT ZwqqjYVKxc0vHcet04sA/YARIJzm9/Pav75pBqecC9/9iXIx2yfMdLAH+zW22htB f/97La9lV1qRenRA8j3X5JmhvUJESGwXv0dvmWTxE5FAzktig3CkiLki4fyscYRD cWOP9oCr3zW+uepAU+rWv+RsFLB2f/x2ZaPWCd7A50y5XJSiVnF9AXrnpGIdRt+g c2UnI+htmJM8WlUswbzO1JBcO3awEW6zeOxz5Q5CBeU8WydIzXA27DpzGQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE40YH/IactiHRPGaquK6rj5zyPMMB8GA1UdIwQY MBaAFEyHOJ70HxjB/MgnVDSepwlpgLHjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTct ZmZiNzA5Zjc2NjhjLzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8yMjE1ZjctODg3YS00YmQ1LWJmOTctZmZiNzA5Zjc2Njhj LzEvVEljNG52UWZHTUg4eUNkVU5KNm5DV21Bc2VNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXes3YF5c G/w0yfOiW0fsqhSTloynDdL6MZMNoULAvJj2zwYLn3kKOhTfIVqB/EG+xjaNhEZp k3jW773dekDuevSfzD/J8aeAOnOyL8H3EsOoWeKur/jheNV/6CkWYtWZKP6ek4s6 mAAl4UvxPUZgVAzLknFnUq5wnpa0c7Jqnmd6AOAw4dYDOTGyHkydO30VmDBo4dvJ iBN9ff9jTT+ZSwNsg6WmrkXL9Tz3P+a1NmuhWR4c2Qd55izrTcNlQw1PXyie5rOo mZjGbCT3qrriKVDRdF97jVPNvMPRXtI4wq4tYX9oIoF3goaVgbatTtDjnDBJU4DQ dAWtVHpvydtzww== -----END CERTIFICATE-----Generated at Sun Oct 4 05:37:57 2026 by rpki-client