$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft File: M8NCwGqsw1nTlDn_WN76jqGHV0g.mft (raw, json) Hash identifier: e6udDDM6qfynd0heNcBU0KNSeWj/cRPSxevwPLMO76o= Subject key identifier: 90:93:5C:C2:1F:3B:5B:CD:E5:2A:D3:10:6A:CC:03:01:71:A9:C8:DD Authority key identifier: 33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 Certificate issuer: /CN=33c342c06aacc359d39439ff58defa8ea1875748 Certificate serial: 01A10E151AEE431DF97B39D5A096659444B2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft Manifest number: 1A8C Signing time: Mon 05 Oct 2026 22:00:26 +0000 Manifest this update: Mon 05 Oct 2026 22:00:26 +0000 Manifest next update: Tue 06 Oct 2026 22:00:26 +0000 Files and hashes: 1: 0_H--D3ld_V5A2GDwFkKX4GOiA0.roa (hash: 4e5kO9YfPo607NKs0GfVmGK8Ay03F7orhMQubGrK5s8=) 2: 2Y22JjtWrl0_nviPCh47UcoiEMc.roa (hash: MjixCwl1roku3r8M7cAmmfjxaUIrhcvJpiUdNlV6IQQ=) 3: 7aJymM8-A-Vzxrith_gpYUCnxLA.roa (hash: yavsVrmsFDM2twygwL9ROfhNDdkXtjYh0veEc5aPL6U=) 4: BREu-oLiWRVnvmr0OZpze-1yZho.roa (hash: JOSLUiFQMXinZ2s3xJFw5vOALrZZO+Y0VQuZomqNcNc=) 5: KQsPApaYWV1_80rHUTYo4kduGEc.roa (hash: DMlh9LVsGQgoH2sC6mgiD6McwaNhSBUcv3JC9I342EY=) 6: M8NCwGqsw1nTlDn_WN76jqGHV0g.crl (hash: D0lEti+wdDGNcNC1/R/0iW99H4J8xUduvCA1J+WgwyE=) 7: QWYP1a7mE-901Npm0STCw-0_494.roa (hash: GGXXSRYOhg9nYn3L4Ohy/bvCK7SIobkN33noxERxNSE=) 8: TTEzQtE5d70mBmiMli4rrHXXguQ.roa (hash: xIxbskYOAuc9Yjyt/8RKTk7K32KNqi0KQcR/yqDrqdI=) 9: XiniKmHk48PTd4AWdTNpS7pWYPM.roa (hash: LdHpQkrTcb3/m2EigJdifn4oDDnwzMObaFnPm4GQZsE=) 10: ajM6u9AhobNFWsjqV0zszbZBQgg.roa (hash: 9dpjav4k95AK45D3gY5gAwzQc5Jmp0J5EfW5NA6MQrY=) 11: dal6AFPAMOKunkfF7hTY8Cuz5HU.roa (hash: IVF4Tz8JdO1RxYBDwDE4cvUkOAHOkcCD98baar1MrRo=) 12: hRwQ4mV8u9tsYeBBJi9cjl-qxEg.roa (hash: Z+XgNcTxGhoujnKCI9mZu3tfZCPpFoVHO4a9tPmkGVA=) 13: m7yZ_UyERPPI7rtLGNSBX9Jm9bw.roa (hash: ykcmm9r12Ob1/PzXbUDHvDBzZdTDZhIzOR7w4XuLSwc=) 14: qxewd6X7cZwHTA-zQMlA_OAvlN8.roa (hash: Ry7YnXFLSUjxQaaprtnh0Xvr7Lu/H9g4ex/4yimbRx4=) 15: shE5nirJjfzwtVvRNs6B8132Y90.roa (hash: bZPp9AYR6VCS07rIaJOgsQumohQ23Ohhw0oW9Q96CQ4=) 16: uRrZsstrzGEOJvLMKb6O233tS-U.roa (hash: hfakJlnSmscUlq1SwhM8hNCbJeeub/2zpsFlue2e450=) 17: wuPeAwGhCGGyy1vUlZnoXQ_te9w.roa (hash: Ya4gfqovf3JM8yFavds8OzJvokLnz9/3YHuh2owqYdI=) 18: y-LHl9JCf1vCgH9ww0oXT09BT3E.roa (hash: U2dDyow3uUPlXZ81c884FwuRrB1qQId+nf/6dQa9SLs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 Oct 2026 22:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:0e:15:1a:ee:43:1d:f9:7b:39:d5:a0:96:65:94:44:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=33c342c06aacc359d39439ff58defa8ea1875748 Validity Not Before: Oct 5 22:00:26 2026 GMT Not After : Oct 6 22:00:26 2026 GMT Subject: CN=90935cc21f3b5bcde52ad3106acc030171a9c8dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3a:a4:7b:8c:d3:5a:22:31:cb:b1:bc:1b:83: a7:7e:23:be:9f:47:b1:59:20:a2:5c:0b:1f:50:23: 7e:7a:b3:9b:bd:05:6d:54:85:22:8a:9c:94:0a:1f: fa:cd:e5:3a:e1:c8:45:68:8d:fb:90:30:41:25:d8: 3d:34:8f:5b:01:c7:38:0f:29:e5:5e:fc:d6:85:9d: 69:6b:36:f8:20:87:2a:42:3d:b3:6b:fd:04:25:cc: cb:22:a7:6f:95:3e:25:56:a8:3f:19:66:f5:ef:f7: 9b:04:18:89:b6:ff:0b:ac:10:d1:55:fa:85:58:55: 6d:b2:85:8e:49:6f:23:a8:d6:12:6f:4f:d2:5e:e8: 18:f5:ca:2a:b1:90:ac:c3:77:ff:a8:91:8b:cd:2a: 66:05:ff:66:ed:d2:5f:9c:92:86:68:55:0b:c5:1b: b2:30:06:ed:58:55:bf:ff:39:db:18:ce:ba:7a:2b: d7:b2:a0:bb:fd:2d:c7:73:e9:b7:85:d9:a0:10:67: 39:f8:f6:8b:7e:90:2e:35:33:0f:a3:02:e6:0f:59: 95:57:6c:7b:56:20:94:e4:7d:80:6a:b2:b3:91:10: cd:b6:0b:5f:f8:f7:8c:2a:9f:b2:e7:c6:39:a2:7b: bf:b8:7a:70:a0:fd:d5:c9:c5:c9:f3:11:2a:c8:bc: 9f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:93:5C:C2:1F:3B:5B:CD:E5:2A:D3:10:6A:CC:03:01:71:A9:C8:DD X509v3 Authority Key Identifier: keyid:33:C3:42:C0:6A:AC:C3:59:D3:94:39:FF:58:DE:FA:8E:A1:87:57:48 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M8NCwGqsw1nTlDn_WN76jqGHV0g.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/c55fdf-a68a-4aa0-b8c5-7f2333604997/1/M8NCwGqsw1nTlDn_WN76jqGHV0g.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:8e:ef:3d:5e:5e:49:90:91:2b:0a:d0:5b:a6:d1:a7:59:f4: 4c:3d:7a:57:dc:4a:7c:32:ef:fc:14:03:0f:9e:65:4f:98:5d: 85:3b:46:b0:06:e7:b8:01:8d:15:f6:62:4e:04:db:8c:ab:71: 7c:8c:5b:34:14:ae:47:1b:e9:ce:7e:99:2e:35:a9:1e:b8:16: 28:4e:24:7a:f9:ba:7a:07:1d:13:a9:b7:4e:6a:ce:c5:96:71: e8:0d:9c:9c:df:90:e0:68:bd:0d:71:a0:14:44:e1:16:8b:8a: 13:85:cf:d7:86:e5:19:81:b4:d7:86:51:21:b6:3d:db:61:92: 69:7f:8b:eb:85:6a:6a:68:7a:93:ec:63:c7:c9:26:a3:12:a9: 5f:6d:9e:00:74:2d:b1:73:fc:bd:f5:eb:ce:27:7d:42:4e:3e: e0:33:76:36:76:f6:e5:c2:33:b4:0a:68:b5:12:64:b2:29:37: 7d:2e:4a:38:ba:24:06:c1:25:3e:0d:ce:52:f6:40:be:aa:b8: a0:e3:3e:db:3d:66:2d:80:9e:c9:ce:2d:46:51:f4:5a:a4:3b: 5b:7a:74:eb:52:33:a2:90:21:e4:14:5d:8e:e7:cd:b1:d0:62: 52:3c:56:55:a5:6b:51:7f:da:7a:94:84:6d:bf:b8:69:be:1f: 1b:a5:cf:4c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaEOFRruQx35eznVoJZllESyMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMzYzM0MmMwNmFhY2MzNTlkMzk0MzlmZjU4ZGVmYThlYTE4 NzU3NDgwHhcNMjYxMDA1MjIwMDI2WhcNMjYxMDA2MjIwMDI2WjAzMTEwLwYDVQQD Eyg5MDkzNWNjMjFmM2I1YmNkZTUyYWQzMTA2YWNjMDMwMTcxYTljOGRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTqke4zTWiIxy7G8G4OnfiO+n0ex WSCiXAsfUCN+erObvQVtVIUiipyUCh/6zeU64chFaI37kDBBJdg9NI9bAcc4Dynl XvzWhZ1pazb4IIcqQj2za/0EJczLIqdvlT4lVqg/GWb17/ebBBiJtv8LrBDRVfqF WFVtsoWOSW8jqNYSb0/SXugY9coqsZCsw3f/qJGLzSpmBf9m7dJfnJKGaFULxRuy MAbtWFW//znbGM66eivXsqC7/S3Hc+m3hdmgEGc5+PaLfpAuNTMPowLmD1mVV2x7 ViCU5H2AarKzkRDNtgtf+PeMKp+y58Y5onu/uHpwoP3VycXJ8xEqyLyfyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCTXMIfO1vN5SrTEGrMAwFxqcjdMB8GA1UdIwQY MBaAFDPDQsBqrMNZ05Q5/1je+o6hh1dIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUt N2YyMzMzNjA0OTk3LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZS9jNTVmZGYtYTY4YS00YWEwLWI4YzUtN2YyMzMzNjA0OTk3 LzEvTThOQ3dHcXN3MW5UbERuX1dONzZqcUdIVjBnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARY7vPV5e SZCRKwrQW6bRp1n0TD16V9xKfDLv/BQDD55lT5hdhTtGsAbnuAGNFfZiTgTbjKtx fIxbNBSuRxvpzn6ZLjWpHrgWKE4kevm6egcdE6m3TmrOxZZx6A2cnN+Q4Gi9DXGg FEThFouKE4XP14blGYG014ZRIbY922GSaX+L64Vqamh6k+xjx8kmoxKpX22eAHQt sXP8vfXrzid9Qk4+4DN2Nnb25cIztApotRJksik3fS5KOLokBsElPg3OUvZAvqq4 oOM+2z1mLYCeyc4tRlH0WqQ7W3p061IzopAh5BRdjufNsdBiUjxWVaVrUX/aepSE bb+4ab4fG6XPTA== -----END CERTIFICATE-----Generated at Tue Oct 6 07:48:57 2026 by rpki-client