$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: vLMWHORxSH7HkrLOOVT7w1sLX2Y8MsVmcIk701ewmHs= Subject key identifier: 2F:7C:64:43:42:5C:54:B7:02:B0:3F:EE:D1:60:3E:0E:EA:1D:29:B9 Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 01A14496866C2984060414C73D72916DE48C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 16C9 Signing time: Fri 16 Oct 2026 12:01:17 +0000 Manifest this update: Fri 16 Oct 2026 12:01:17 +0000 Manifest next update: Sat 17 Oct 2026 12:01:17 +0000 Files and hashes: 1: 35wDpRsfaq8aq0FjZJRW12A2SwI.roa (hash: S32iSai/D3+xMYiGNdr33Lz5mjsLhdP2ds6sS7Zu5bY=) 2: 4xaEdixeinTNAew5f36B5ogFapc.roa (hash: U+lj7Po2vIYbjteMOk724C6A7iSVfdA9w8Qr+wSn2EY=) 3: 6bp5_uY1eTTE0FRpgy0dJ0tGIWA.roa (hash: JQ6e3y/UZad8zx3alMXWmLY2Cs0ywtM7PcyjG1jGvp0=) 4: 9561YDYiFuwA3cK9_Ao81cqPzyw.roa (hash: sI0N1MtQFC1Bs34l2HPoGh51MHvRDzLlzChm4jYV9bI=) 5: IrFs_aYDL98DrBmqXNeImOXYqVs.roa (hash: /du+UzfxF5Oy69bwitaws2QcGuPpQ2q/PzP+2+rlKmc=) 6: Mpb5tIfxbf_t0TleDipa0dPzQfg.roa (hash: dlPOC3LjslO4GRq7Su9TrpsYGXUfWyZVAl7s4ntuJgI=) 7: SnpB0ExR-bCAJLKknHnesUTaAWU.roa (hash: wlr5EY83KcqFkovq8AptI/Jy70VxHPVKk3n5WEh7t3w=) 8: W-auLweCazJVGZa2RWm9KCu-wKE.roa (hash: KDvTseiWMAdzP9ZuSgmWkkWqgGW79SkpbkY25PFZ98s=) 9: YSP2K25IRGuG9q-MByo9uJoo_cg.roa (hash: Pd46j8HnroPwAsfvmv91RgjQs2qRGo37bfk5Rd39ViM=) 10: ZNVLkE0Hncpo1bsQ8SqkvCmjNMs.roa (hash: ckctwOhfUle+O6fK0mnv5ZMxRNGqbUG5lJdOX3nwnlo=) 11: djAPpFOBLqUtxJOa9UwBPjNac1E.roa (hash: 7Rj31INl1FIcMdN33laOh9K9+J+bHShe/BZUzyt8PUg=) 12: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: aGc8/6PcEM6xCm+rjdYfgK6Hc7xe2/TvybNXM95EccU=) 13: nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa (hash: lYeXLJKim2pWsORoTqRVNykk1XTHGi948eQwJ6tFxj4=) 14: pnn2LDubyB-s2_PbTNDUNt7JA_8.roa (hash: vW3hxl2FPzWH44KmHJKXNpZV557F5Hczl/NZRDVCKlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 17 Oct 2026 11:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:44:96:86:6c:29:84:06:04:14:c7:3d:72:91:6d:e4:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Oct 16 12:01:17 2026 GMT Not After : Oct 17 12:01:17 2026 GMT Subject: CN=2f7c6443425c54b702b03feed1603e0eea1d29b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:51:8a:80:27:24:45:ef:bc:d7:1f:31:6f:24: 1a:12:c6:74:77:2e:f9:f4:96:c3:a4:63:02:d5:45: 55:dd:42:ab:c0:e1:b9:33:b1:27:17:ea:f0:8d:1b: aa:1d:22:8b:e8:0d:93:c1:4e:53:f1:69:fd:71:4f: 83:68:29:fb:df:6a:1d:c4:77:0f:c4:1f:78:47:c2: b4:ed:ab:e9:5c:51:63:2c:5d:24:5e:e9:6b:da:04: de:ec:fe:ce:56:cc:75:7a:c5:77:6c:52:7e:db:45: 3a:c6:00:8e:a9:1a:77:83:9a:d3:e1:0d:fd:c5:0e: b9:1f:c0:2d:64:4b:d1:cc:bd:98:07:e4:0f:9f:24: bc:aa:e6:e9:8c:ad:4d:44:ab:f3:cc:a2:13:e8:e1: 44:10:da:ca:9d:8c:ed:f2:35:d2:72:99:be:d6:22: 18:83:1b:69:b1:47:52:ea:eb:b0:0a:da:ca:4b:df: 25:b4:1e:1c:41:e0:a9:90:ab:88:27:de:8f:39:da: 48:db:29:68:cb:88:f0:41:a0:3d:c7:d4:62:6d:32: f5:e3:a0:b7:21:84:25:02:40:ef:f2:ee:00:75:e4: ad:8d:bc:38:59:52:1a:a9:18:11:07:3d:a3:7a:31: d7:84:84:2d:cb:cc:4b:fa:e7:60:34:5d:bb:c9:2f: 7b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:7C:64:43:42:5C:54:B7:02:B0:3F:EE:D1:60:3E:0E:EA:1D:29:B9 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:58:6a:f0:52:4e:12:af:ea:07:c8:b3:54:a9:95:d2:5f:ab: 2a:6d:93:19:2b:16:b7:e7:2c:3f:59:80:e6:0b:fc:a0:f3:da: c7:3c:c2:a9:2f:95:f7:1f:18:fd:6e:7d:1d:c6:77:07:ed:1f: b1:df:8c:ed:84:db:c7:bc:ff:e8:2a:5e:2a:99:1a:45:33:ae: 94:f3:f4:0c:b8:b4:b4:05:73:eb:83:69:e1:d6:9c:ce:17:e4: e8:47:f0:91:82:77:ed:a9:b2:d6:54:a8:b9:6a:37:20:c6:6b: a1:ae:eb:d3:91:88:a9:b0:e4:df:4d:fd:47:21:d2:cd:d8:d6: 3b:d4:8b:1c:c9:39:e6:96:4b:53:51:bd:01:04:a3:0c:eb:75: c7:14:e0:8d:5d:b2:9f:20:37:38:41:5e:a7:61:f8:31:00:55: 82:b1:e7:f1:ef:98:f0:c7:cd:11:58:1b:ed:89:4c:57:a0:a3: 0a:e0:8e:7c:50:68:f5:a6:f3:d4:18:6c:49:cb:25:9c:b1:b4: ed:e5:2d:dc:c9:af:5b:b0:09:f3:f6:17:33:97:3f:ab:a3:8a: d5:ba:e5:73:88:1c:42:56:20:04:db:76:27:bb:bd:e3:9b:f5: 3d:c6:85:88:99:ba:cb:c1:74:6d:fb:44:e9:c7:32:64:7b:c6: d8:86:25:e0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaFEloZsKYQGBBTHPXKRbeSMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYxMDE2MTIwMTE3WhcNMjYxMDE3MTIwMTE3WjAzMTEwLwYDVQQD EygyZjdjNjQ0MzQyNWM1NGI3MDJiMDNmZWVkMTYwM2UwZWVhMWQyOWI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7lGKgCckRe+81x8xbyQaEsZ0dy75 9JbDpGMC1UVV3UKrwOG5M7EnF+rwjRuqHSKL6A2TwU5T8Wn9cU+DaCn732odxHcP xB94R8K07avpXFFjLF0kXulr2gTe7P7OVsx1esV3bFJ+20U6xgCOqRp3g5rT4Q39 xQ65H8AtZEvRzL2YB+QPnyS8qubpjK1NRKvzzKIT6OFEENrKnYzt8jXScpm+1iIY gxtpsUdS6uuwCtrKS98ltB4cQeCpkKuIJ96POdpI2yloy4jwQaA9x9RibTL146C3 IYQlAkDv8u4AdeStjbw4WVIaqRgRBz2jejHXhIQty8xL+udgNF27yS97BwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC98ZENCXFS3ArA/7tFgPg7qHSm5MB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABlhq8FJO Eq/qB8izVKmV0l+rKm2TGSsWt+csP1mA5gv8oPPaxzzCqS+V9x8Y/W59HcZ3B+0f sd+M7YTbx7z/6CpeKpkaRTOulPP0DLi0tAVz64Np4daczhfk6EfwkYJ37amy1lSo uWo3IMZroa7r05GIqbDk3039RyHSzdjWO9SLHMk55pZLU1G9AQSjDOt1xxTgjV2y nyA3OEFep2H4MQBVgrHn8e+Y8MfNEVgb7YlMV6CjCuCOfFBo9abz1BhsScslnLG0 7eUt3MmvW7AJ8/YXM5c/q6OK1brlc4gcQlYgBNt2J7u945v1PcaFiJm6y8F0bftE 6ccyZHvG2IYl4A== -----END CERTIFICATE-----Generated at Fri Oct 16 17:57:25 2026 by rpki-client