$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft File: hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft (raw, json) Hash identifier: OYAic18cB8S9xMy13xDpq5ryw3wEnAWiiIs7CzMbeks= Subject key identifier: 39:75:C8:DC:31:A9:27:BB:3E:30:9A:1A:52:F9:C0:1B:C0:49:5A:74 Authority key identifier: 85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD Certificate issuer: /CN=85d0e763f935c171694f172056eb44209db2e2cd Certificate serial: 01A12B7B8287F3E6CB7E79D8594A2B4023E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft Manifest number: 16BC Signing time: Sun 11 Oct 2026 15:01:16 +0000 Manifest this update: Sun 11 Oct 2026 15:01:16 +0000 Manifest next update: Mon 12 Oct 2026 15:01:16 +0000 Files and hashes: 1: 35wDpRsfaq8aq0FjZJRW12A2SwI.roa (hash: S32iSai/D3+xMYiGNdr33Lz5mjsLhdP2ds6sS7Zu5bY=) 2: 4xaEdixeinTNAew5f36B5ogFapc.roa (hash: U+lj7Po2vIYbjteMOk724C6A7iSVfdA9w8Qr+wSn2EY=) 3: 6bp5_uY1eTTE0FRpgy0dJ0tGIWA.roa (hash: JQ6e3y/UZad8zx3alMXWmLY2Cs0ywtM7PcyjG1jGvp0=) 4: 9561YDYiFuwA3cK9_Ao81cqPzyw.roa (hash: sI0N1MtQFC1Bs34l2HPoGh51MHvRDzLlzChm4jYV9bI=) 5: IrFs_aYDL98DrBmqXNeImOXYqVs.roa (hash: /du+UzfxF5Oy69bwitaws2QcGuPpQ2q/PzP+2+rlKmc=) 6: Mpb5tIfxbf_t0TleDipa0dPzQfg.roa (hash: dlPOC3LjslO4GRq7Su9TrpsYGXUfWyZVAl7s4ntuJgI=) 7: SnpB0ExR-bCAJLKknHnesUTaAWU.roa (hash: wlr5EY83KcqFkovq8AptI/Jy70VxHPVKk3n5WEh7t3w=) 8: W-auLweCazJVGZa2RWm9KCu-wKE.roa (hash: KDvTseiWMAdzP9ZuSgmWkkWqgGW79SkpbkY25PFZ98s=) 9: YSP2K25IRGuG9q-MByo9uJoo_cg.roa (hash: Pd46j8HnroPwAsfvmv91RgjQs2qRGo37bfk5Rd39ViM=) 10: ZNVLkE0Hncpo1bsQ8SqkvCmjNMs.roa (hash: ckctwOhfUle+O6fK0mnv5ZMxRNGqbUG5lJdOX3nwnlo=) 11: djAPpFOBLqUtxJOa9UwBPjNac1E.roa (hash: 7Rj31INl1FIcMdN33laOh9K9+J+bHShe/BZUzyt8PUg=) 12: hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl (hash: wNeT/7cmE7daLdDVRp2/xkyVq5CZnoqzp3FFndw1RJU=) 13: nkFmcbj5SRyrAXjUVz7jAMSoyJk.roa (hash: lYeXLJKim2pWsORoTqRVNykk1XTHGi948eQwJ6tFxj4=) 14: pnn2LDubyB-s2_PbTNDUNt7JA_8.roa (hash: vW3hxl2FPzWH44KmHJKXNpZV557F5Hczl/NZRDVCKlg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:2b:7b:82:87:f3:e6:cb:7e:79:d8:59:4a:2b:40:23:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=85d0e763f935c171694f172056eb44209db2e2cd Validity Not Before: Oct 11 15:01:16 2026 GMT Not After : Oct 12 15:01:16 2026 GMT Subject: CN=3975c8dc31a927bb3e309a1a52f9c01bc0495a74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:a5:23:fd:d5:8b:53:7d:4d:12:93:9c:6b:4b: 82:cf:46:9e:8f:ab:4a:d6:41:22:48:ce:0e:16:e4: 57:80:d3:05:a2:a6:ee:1d:71:39:20:96:34:ba:a0: 18:69:1c:55:fb:e6:38:a4:0b:8e:d2:e7:9b:6e:a2: cd:ec:19:4f:0c:53:c3:f5:f1:cd:46:38:2e:7a:10: d7:e4:cd:65:1e:c4:02:ec:d8:ea:e3:1b:85:01:23: 2e:4d:a8:9a:48:9d:f6:39:75:d3:75:90:d6:ba:f2: 3a:6a:e0:ac:1e:57:3c:f8:54:c0:09:19:cd:2d:4b: a9:36:01:5b:8c:f8:8d:03:39:0d:79:f9:98:4e:fc: be:cc:75:e6:7f:c5:5a:62:b0:3f:2f:fe:20:2c:48: c6:eb:44:c4:49:df:15:6b:51:24:32:c3:dd:7c:15: 2c:6b:56:cf:83:3c:6c:fb:4a:4e:ec:64:29:76:5d: 76:19:e5:56:4f:b6:b9:00:43:cc:9a:76:e0:3a:90: 67:7a:68:c5:28:70:34:e1:3e:ab:34:ce:c6:4f:d1: 17:cc:e9:2e:4f:d1:fb:67:86:41:bb:97:84:b9:15: c3:55:1c:50:84:10:ca:36:71:38:86:50:a7:a3:96: 2e:e0:ce:90:3b:81:12:20:9a:56:a6:2f:a6:70:ed: 2f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:75:C8:DC:31:A9:27:BB:3E:30:9A:1A:52:F9:C0:1B:C0:49:5A:74 X509v3 Authority Key Identifier: keyid:85:D0:E7:63:F9:35:C1:71:69:4F:17:20:56:EB:44:20:9D:B2:E2:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hdDnY_k1wXFpTxcgVutEIJ2y4s0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/746410-026b-45c9-81cd-f12835f0247b/1/hdDnY_k1wXFpTxcgVutEIJ2y4s0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:61:e4:a4:86:88:4e:70:e3:5a:05:1d:53:bf:1e:53:c8:f9: a4:ee:5b:b7:a5:3a:b8:ca:78:64:4e:1f:8f:55:75:29:a0:e3: 7b:93:57:a5:7f:0a:21:95:09:6e:a3:94:1e:fe:fd:dc:4f:05: 4e:1b:51:ec:34:02:e8:b3:2e:bc:fa:e6:32:c4:5e:0d:bf:eb: 87:cd:d1:a0:23:97:a0:a9:4b:21:03:48:4a:5d:f3:60:35:56: de:be:b3:fc:e9:a3:18:30:bd:6f:e8:33:4d:f3:0e:72:fe:5f: 38:db:c1:08:04:58:0c:b9:04:58:4b:62:9e:0f:16:96:65:19: cf:0a:62:b0:24:72:e4:74:67:06:7a:e8:d9:f5:bd:1a:3a:4e: a8:ff:ac:87:50:4a:0f:6e:1b:f0:0d:7c:30:9e:e9:fd:1f:9e: 8f:0e:0b:8c:bb:0d:01:f7:84:57:4a:81:2c:4d:41:04:a4:48: 26:8e:37:30:b2:1c:66:2f:a2:23:fa:c1:73:b0:c3:a5:80:05: e0:8e:56:0c:2b:45:bd:91:59:f3:bd:f4:ad:58:ee:71:bd:89: 38:84:90:a9:51:c1:00:6e:0a:2f:dd:9b:9c:ed:5b:26:0f:49: 4a:9d:7b:f3:71:36:a8:4d:b4:48:af:80:bc:2a:40:f5:60:5c: d6:fb:03:c6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEre4KH8+bLfnnYWUorQCPgMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg1ZDBlNzYzZjkzNWMxNzE2OTRmMTcyMDU2ZWI0NDIwOWRi MmUyY2QwHhcNMjYxMDExMTUwMTE2WhcNMjYxMDEyMTUwMTE2WjAzMTEwLwYDVQQD EygzOTc1YzhkYzMxYTkyN2JiM2UzMDlhMWE1MmY5YzAxYmMwNDk1YTc0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyaUj/dWLU31NEpOca0uCz0aej6tK 1kEiSM4OFuRXgNMFoqbuHXE5IJY0uqAYaRxV++Y4pAuO0uebbqLN7BlPDFPD9fHN RjguehDX5M1lHsQC7Njq4xuFASMuTaiaSJ32OXXTdZDWuvI6auCsHlc8+FTACRnN LUupNgFbjPiNAzkNefmYTvy+zHXmf8VaYrA/L/4gLEjG60TESd8Va1EkMsPdfBUs a1bPgzxs+0pO7GQpdl12GeVWT7a5AEPMmnbgOpBnemjFKHA04T6rNM7GT9EXzOku T9H7Z4ZBu5eEuRXDVRxQhBDKNnE4hlCno5Yu4M6QO4ESIJpWpi+mcO0vAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDl1yNwxqSe7PjCaGlL5wBvASVp0MB8GA1UdIwQY MBaAFIXQ52P5NcFxaU8XIFbrRCCdsuLNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2Qt ZjEyODM1ZjAyNDdiLzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZi83NDY0MTAtMDI2Yi00NWM5LTgxY2QtZjEyODM1ZjAyNDdi LzEvaGREbllfazF3WEZwVHhjZ1Z1dEVJSjJ5NHMwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASmHkpIaI TnDjWgUdU78eU8j5pO5bt6U6uMp4ZE4fj1V1KaDje5NXpX8KIZUJbqOUHv793E8F ThtR7DQC6LMuvPrmMsReDb/rh83RoCOXoKlLIQNISl3zYDVW3r6z/OmjGDC9b+gz TfMOcv5fONvBCARYDLkEWEting8WlmUZzwpisCRy5HRnBnro2fW9GjpOqP+sh1BK D24b8A18MJ7p/R+ejw4LjLsNAfeEV0qBLE1BBKRIJo43MLIcZi+iI/rBc7DDpYAF 4I5WDCtFvZFZ8730rVjucb2JOISQqVHBAG4KL92bnO1bJg9JSp1783E2qE20SK+A vCpA9WBc1vsDxg== -----END CERTIFICATE-----Generated at Sun Oct 11 20:16:04 2026 by rpki-client