$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft File: bSDd05jayPYswSUmMl8YIftyT3U.mft (raw, json) Hash identifier: OVz9VcXjv8SsspoplConJeA/lXD365Oxs/8ShLQusY0= Subject key identifier: 47:57:3B:52:17:25:6D:6E:98:B0:7F:21:93:29:4C:B9:9E:4D:43:83 Authority key identifier: 6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 Certificate issuer: /CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Certificate serial: 01A1DA5CEEE2E8488647CE2F90EB625CEFDD Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft Manifest number: 1A14 Signing time: Sat 14 Nov 2026 14:01:25 +0000 Manifest this update: Sat 14 Nov 2026 14:01:25 +0000 Manifest next update: Sun 15 Nov 2026 14:01:25 +0000 Files and hashes: 1: 32SKa40WKweNz--8fYvohpIQNdM.roa (hash: CvIxVpDQSBHDmG9fei/qmX2fiAr7YysgDexobJcNjQc=) 2: 55lTuhAI20BHIf-zeSdkeAFaMAg.roa (hash: 6WOjfM5Zbb9/cs9Lu29lst5KqtNeJQ6bLtoEOKJiPTQ=) 3: 7NA2LegCljPM-6ilz2F5cnaoBJw.roa (hash: qjOTsmyHG6MOUTIadkX/zmkZDlAkqPzHJKetzF1R3ds=) 4: 9xgiRaoDHZpfEWCuWGLVozZH1gk.roa (hash: v8wEhG7uE5X+Pic34dsR8NNSQFk/2P4s8T0Y6bprmWQ=) 5: B3ZlbL4gU6mGNdfE7GNgbCqsduM.roa (hash: 0PhXlz7OHulz176DWbBx9T4BxrFfJgZd9rJZ8KuMZgo=) 6: BGTIebFN8Np0NsQtF_avGDoUny4.roa (hash: NPCQmuapy/fWkxHdwPSPdnEK1QY4KGIX45+Q8l7yby0=) 7: BVAbby4n4nfVJfXWrR5Zl8eKCNw.roa (hash: 9h5dLOvIi1c2+opBBUG4urPF6XN2qAHfeKjpbM4tCxM=) 8: Dbdu-sAYIxR5QPvvVrRAhYH105w.roa (hash: fWwOPydmpUe+IsyFRDNgiL4cigw5qNtOrAk6xHxF7LI=) 9: HeSSKy0hpbFZwXpL4wRARD7sBKI.roa (hash: QjJUiqYDK9L1FM50J7fBEzbh41rsVg1rLGSgPBSUCpc=) 10: MJgiLKofa3--UVTFUoDMYpkd14E.roa (hash: H6wYuGz0ahIxYTCSRji68dw9L5rj0iVmY7ULRmePIqo=) 11: OGG1AN9r1K7fCCBDdkuKp2YurRc.roa (hash: uKPYBtL6H7NRJR1/TrQfck1LuVNFXIVWB3lTB8Q9nkM=) 12: OOZCU9RDZbWm90IHhggbkADAyok.roa (hash: yzkJaDkuzS/Q97fyxLhVwM/SdV10qs3BxmQUOzU77kU=) 13: SXe4L80C6NNAi8_Z_r_OzYlFJMc.roa (hash: rvAKW+Jnjq6JcXJuZTuezh3N37RsgK/dxB2hqkABN5g=) 14: X3TOXxPWXzlBaEZ6x5xVJV0GN2g.roa (hash: lAKtM50aILYHfyj/dnL/G2PsJlkpfMmR8vppwS3z8KU=) 15: Yi_0sb2Cd1tYZiiWIymmt_L8-nc.roa (hash: ZfN0GVzt124vq1vIJ26ojNWgsCUqMSJ0wE5cCnsN3gQ=) 16: bSDd05jayPYswSUmMl8YIftyT3U.crl (hash: P9WUUzncTCBx6LaK4enBf7juiY/HjnYvjWtm+ttQWms=) 17: bYiLveRsDlX78OsxGY3h5GANwkU.roa (hash: 7RIU6dRlDTBOGvkvNbaGxFh//l+X7XqnppaYQdzpO8E=) 18: jVvCjidFfK-8IL92OyEeuSlStW0.roa (hash: 95JD6YEa33c2IW5jEGSMsvaX4Vq46tjO1+Oed4maTyw=) 19: tXOl2ubuLkmi5Hms7cr2oOrONy4.roa (hash: /mpuqbpXTMSqEVxHEhqKLpXW3WVDEqBZMvkdGp9RQuk=) 20: twRPR7YMxdedDnIoOoDSSMLLV5I.roa (hash: iG5iFiWGGZ1ctfdvgUYVkBJLEXDfn4PbykZkkKVwlz8=) 21: x4pQf17vDFkXV3GUtqmWbktS3Fo.roa (hash: TF4r3ErV+VPSElRBLhwHiJMcDMk0C1SKhfdxBMi4KUM=) 22: zw3H3DTpeUhcqqHWXtBf0WnIJoM.roa (hash: 6GByi9aIOsCybNHah1sj3rggT+SfOktCNujJlbLQbPg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 14:01:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:5c:ee:e2:e8:48:86:47:ce:2f:90:eb:62:5c:ef:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6d20ddd398dac8f62cc12526325f1821fb724f75 Validity Not Before: Nov 14 14:01:25 2026 GMT Not After : Nov 15 14:01:25 2026 GMT Subject: CN=47573b5217256d6e98b07f2193294cb99e4d4383 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ca:51:fb:4e:8f:e8:98:c9:99:ea:4e:08:1e: df:ca:1b:66:97:20:95:de:78:43:be:dd:f2:db:25: 7e:5b:61:44:b3:67:ef:97:34:d9:3e:6a:b7:98:48: 0f:09:cf:31:de:aa:34:43:a2:a2:fd:ee:dd:c4:c8: 21:b8:cd:f9:69:8f:cc:5b:fd:4c:15:bf:2a:8f:09: 68:5e:56:4d:3f:ff:d0:14:ae:83:c4:82:b2:c7:3e: 7b:24:3a:9a:f9:95:1a:be:8d:e0:5f:16:1d:03:c0: 3f:c2:5e:7e:7a:34:bc:d9:60:1b:9c:7e:39:f7:1c: 64:81:c3:2e:1b:8b:68:a7:29:32:01:46:97:36:e9: a7:96:cd:ab:ea:8e:85:9b:3b:e3:37:42:f9:26:2e: 4a:4a:ae:7e:47:07:9a:b9:82:05:aa:79:58:7a:71: 3d:a5:79:84:d5:65:85:37:1e:7c:1f:99:e1:6b:22: df:f9:1e:1c:be:ad:2e:19:4e:d0:f4:b0:e7:c5:3e: 69:cd:e8:44:17:20:0e:24:aa:65:2c:b4:ef:d5:47: 6f:d2:82:37:d8:fb:da:2b:fe:2c:d4:24:c6:dc:ec: 0a:f5:f2:f4:d5:84:d4:54:db:34:9b:60:8b:db:52: 2a:cd:8b:7a:fc:01:f5:f2:53:ad:03:d1:9d:17:d4: c7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:57:3B:52:17:25:6D:6E:98:B0:7F:21:93:29:4C:B9:9E:4D:43:83 X509v3 Authority Key Identifier: keyid:6D:20:DD:D3:98:DA:C8:F6:2C:C1:25:26:32:5F:18:21:FB:72:4F:75 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bSDd05jayPYswSUmMl8YIftyT3U.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/01/a1a88f-1dff-4eff-826b-36de657232be/1/bSDd05jayPYswSUmMl8YIftyT3U.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:a9:41:d8:da:03:93:6c:73:d4:17:47:df:b0:0f:bf:50:99: b5:21:87:1e:0c:6f:65:d7:32:71:94:02:ce:64:02:5e:e1:fa: 07:d1:ea:f2:02:97:01:2c:01:1a:f4:d1:34:03:74:f4:fb:fe: 99:54:67:be:16:46:ab:ef:c4:24:8b:89:37:dc:67:d1:51:da: 86:b1:4e:ca:dc:57:8f:b5:7e:4d:ce:1a:04:dc:ba:fc:5e:8a: 35:0b:19:ea:75:74:4b:d6:6b:8e:76:59:fa:fb:15:6e:0e:bd: 36:f9:29:0f:05:ef:da:1c:62:d0:38:48:01:a0:c9:d5:bd:7d: 37:29:e8:ff:e8:9f:73:e7:62:26:63:cd:54:d4:f0:cc:fc:d3: db:b8:1b:91:64:dc:f9:6b:1d:5d:f9:b6:eb:27:bc:61:13:2f: 0f:25:fa:9a:45:e4:0f:f9:bc:f0:5f:bf:2a:e9:0b:0e:0d:29: 06:5f:d5:55:74:50:a1:19:91:dd:45:17:d5:6f:c8:00:1f:92: b7:3f:45:04:e8:44:c9:e3:59:5a:d1:e3:23:5d:4c:ee:8d:12: 58:70:1a:a8:ea:f6:1b:80:6a:97:6e:8a:f4:e8:0a:70:4c:b1: 37:65:44:4e:63:96:2d:1a:4a:c6:eb:e9:c0:96:3b:40:38:b7: a3:1e:84:5f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHaXO7i6EiGR84vkOtiXO/dMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZkMjBkZGQzOThkYWM4ZjYyY2MxMjUyNjMyNWYxODIxZmI3 MjRmNzUwHhcNMjYxMTE0MTQwMTI1WhcNMjYxMTE1MTQwMTI1WjAzMTEwLwYDVQQD Eyg0NzU3M2I1MjE3MjU2ZDZlOThiMDdmMjE5MzI5NGNiOTllNGQ0MzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsspR+06P6JjJmepOCB7fyhtmlyCV 3nhDvt3y2yV+W2FEs2fvlzTZPmq3mEgPCc8x3qo0Q6Ki/e7dxMghuM35aY/MW/1M Fb8qjwloXlZNP//QFK6DxIKyxz57JDqa+ZUavo3gXxYdA8A/wl5+ejS82WAbnH45 9xxkgcMuG4topykyAUaXNumnls2r6o6FmzvjN0L5Ji5KSq5+RweauYIFqnlYenE9 pXmE1WWFNx58H5nhayLf+R4cvq0uGU7Q9LDnxT5pzehEFyAOJKplLLTv1Udv0oI3 2PvaK/4s1CTG3OwK9fL01YTUVNs0m2CL21IqzYt6/AH18lOtA9GdF9THpQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEdXO1IXJW1umLB/IZMpTLmeTUODMB8GA1UdIwQY MBaAFG0g3dOY2sj2LMElJjJfGCH7ck91MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmIt MzZkZTY1NzIzMmJlLzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wMS9hMWE4OGYtMWRmZi00ZWZmLTgyNmItMzZkZTY1NzIzMmJl LzEvYlNEZDA1amF5UFlzd1NVbU1sOFlJZnR5VDNVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOalB2NoD k2xz1BdH37APv1CZtSGHHgxvZdcycZQCzmQCXuH6B9Hq8gKXASwBGvTRNAN09Pv+ mVRnvhZGq+/EJIuJN9xn0VHahrFOytxXj7V+Tc4aBNy6/F6KNQsZ6nV0S9ZrjnZZ +vsVbg69NvkpDwXv2hxi0DhIAaDJ1b19Nyno/+ifc+diJmPNVNTwzPzT27gbkWTc +WsdXfm26ye8YRMvDyX6mkXkD/m88F+/KukLDg0pBl/VVXRQoRmR3UUX1W/IAB+S tz9FBOhEyeNZWtHjI11M7o0SWHAaqOr2G4Bql26K9OgKcEyxN2VETmOWLRpKxuvp wJY7QDi3ox6EXw== -----END CERTIFICATE-----Generated at Sat Nov 14 23:26:12 2026 by rpki-client