$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft File: dn871L-9MHHDjNTXCSvTSQkgw9k.mft (raw, json) Hash identifier: 6U4PvxPeOj2TB6AbIcpY8YcStTVOqW35OsJF2f8FCZk= Subject key identifier: 34:9F:26:87:D5:AC:1F:F2:AA:9A:94:A9:06:E5:94:0D:D8:AA:06:24 Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Certificate serial: 01A1DACB100A9FD31EDCE98E3C7F8FB4952F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft Manifest number: 14FA Signing time: Sat 14 Nov 2026 16:01:43 +0000 Manifest this update: Sat 14 Nov 2026 16:01:43 +0000 Manifest next update: Sun 15 Nov 2026 16:01:43 +0000 Files and hashes: 1: 3kcbw-dgnF65c9CDIHb6oRz5mbE.roa (hash: QQtdRKDztrBVpT4Kn//rOIxZPrmQ8oKjnI8387RYNPY=) 2: 96rJsHAOGztIiBmuIQwVgfCnCEg.roa (hash: HXlUgu5VkFQPapP9Km2yXuNEvNC7tZuuwjHTBZv9OfU=) 3: GApNKBWC5Ue-NAU5Sg1EwP8MY6k.roa (hash: 2tMBvhTBaG9FOblLPHKcO+h2HyVM2AobojKlvW5vzV0=) 4: JBKG2fPxha4I8eVa__ciDh4peDo.roa (hash: 0ESzwcVpkMcL4vVEqYna3uF1a7dneXlkBnlxJhgD8vY=) 5: OYv_dkuy_Y2dlLzuuRzwRfbuYvE.roa (hash: CC0Q+2nNKezsmgtyWfzEhTdriEmSy+Gje/Gosq8c8Uw=) 6: ROEHK_G3SXoguSIySITojCyt7gk.roa (hash: fmVPdgS70cBiSz2OhfXWCfYCFMDOn+khWDbE3US4h/Q=) 7: S_cMNHwGmO53SbTaPSTvEUZSyO4.roa (hash: VJ2mNoR51FwtQFNmuZTNPyshVFI+sQ6fyBXwc1Q4lR4=) 8: Uclczo4m3YFGZzaBjS7wUFsNjj4.roa (hash: RzME+AM4xoxLjN4Iilm7nRafVtW/4U1QaD/Olg4yRQM=) 9: dn871L-9MHHDjNTXCSvTSQkgw9k.crl (hash: iNBDMDcyQ9Y+iX/JcDLVMe5hQJsNWwIcYTYr4Dj2AU4=) 10: dwc98g5fGUgPAWxFG8AQgkdTGUE.roa (hash: r33CVUyGl3+7P6ErqgK1Pc1v2YLarpkrErbsExQx0So=) 11: gDSCRA6SYAo_ND0FekjkrAIEJOg.roa (hash: jFjh9a+6n6/CgL9A0TiXBnWMnMdLq13PoBLDCUcmf+Q=) 12: ghqGXV9jPiUhtjyXqrqV0bWR1FA.roa (hash: JhqWV5YE42ZkEuBGzNHEweX5ScPkIholme9X8e62de0=) 13: h8XDp3DDphz-qzuGmGW4Nyqxx5w.roa (hash: befsJFXVxRWhhVswwqWlhSMWy+Fjjq0lJLvYTlqPXpg=) 14: hVE0-LBCE_tncgEsqz7BMTazayw.roa (hash: wVNCRt/H0Wqed1L+d4bjTNofNjKPKn3Yt16DdTXaykc=) 15: jeJjQTbi3buFTK0Rd0N3acScMvk.roa (hash: konzzCvZCQAeqI0lUlmLQesMfmRzbICQy/UJADyxvc0=) 16: jtUzZB59QbTOM17jd9By2IaF-ZY.roa (hash: T2ghb7+ADXX8s8FHjWRFHJGKKRC9TODHrHf0sh2ohnE=) 17: mBhjPfGVJG9ZGT8iRdHP0MIOueY.roa (hash: xIs0dwRIC5rfrVJwL9ieANY/4F7I159Hw9/dNHaXeVw=) 18: ocHcLPqIiXs39TMNmLocr_HH0to.roa (hash: 2m7W1dsOxKOHHVh+M6gzZPsYBZCOmqgU0+hBomALNJM=) 19: pvdxW0h9aFPze864ivZVpgPRpb0.roa (hash: 85/eS4oRTkOHemGg/ZPqiubdMegp/0IRFyauSlAmyRE=) 20: r8wF2OXMB_9Dwl4OqLwAGoqB14E.roa (hash: hrHAOe2h0QoqTlJJp+6hxC5CoPl4npWeklLV6pbne5o=) 21: v7sb-ddXVntsBTLD_1XCaXcDAcQ.roa (hash: biM1aFHbCZlBUo4OzDJSYEHppH1aAPsD2cIhIW+wz1U=) 22: yrbB1vsBIjdbUaylEPRfMMB-k3g.roa (hash: uUmid3sXY3uL8GFqpHsIlPFVeU82iqmCl12sBdQU42s=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 16:01:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:da:cb:10:0a:9f:d3:1e:dc:e9:8e:3c:7f:8f:b4:95:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9 Validity Not Before: Nov 14 16:01:43 2026 GMT Not After : Nov 15 16:01:43 2026 GMT Subject: CN=349f2687d5ac1ff2aa9a94a906e5940dd8aa0624 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:4f:2d:f2:6b:34:4f:d6:0e:48:6f:48:58: 9f:47:99:60:da:6d:7f:52:a6:1a:41:a0:a5:14:e0: 44:c6:c0:9a:99:20:0d:3d:82:ea:4b:03:0f:d7:83: 8d:a8:7d:17:c2:5e:5f:33:01:de:cd:31:a1:d1:4f: 46:09:60:44:ec:c2:73:2f:d7:82:b1:61:f3:96:77: d6:98:d8:63:63:2f:27:86:4d:0d:31:9e:6f:cc:8c: 27:d3:3a:2c:33:33:e6:55:66:69:e1:33:68:c0:03: 09:ce:00:85:7f:ae:22:ac:b8:c9:0b:92:fc:33:f8: b6:a1:9b:e7:f5:2d:39:38:4d:42:a5:6a:0e:8b:d8: 37:1f:32:ed:31:90:71:96:42:41:c1:13:04:da:d1: 0b:a2:2d:1f:2e:6a:4a:d2:bf:66:c4:76:40:6e:97: 81:f8:1c:bb:28:6a:d0:e7:4a:21:78:f0:2c:0a:1c: 94:9d:c0:8d:d1:1e:86:96:41:b1:51:4b:35:93:28: bd:a7:54:1d:56:e7:e6:d3:8e:62:22:6b:ce:45:a4: 1e:5a:cf:b7:cd:01:65:b5:31:d8:4f:96:6c:11:bb: cc:72:89:19:87:46:b3:f3:92:b8:e2:76:4d:70:bd: 6c:07:d5:06:cc:11:f2:95:3d:d6:4b:c9:be:2a:c1: c5:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:9F:26:87:D5:AC:1F:F2:AA:9A:94:A9:06:E5:94:0D:D8:AA:06:24 X509v3 Authority Key Identifier: keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:15:64:51:d4:81:d7:87:c3:78:79:3d:d1:f5:37:59:7a:3e: b8:8c:a9:56:72:81:9d:3e:69:9d:ea:c9:31:34:5b:93:95:67: ce:4d:a6:95:5b:33:c4:a7:d8:60:c6:5d:fd:88:19:62:ad:f4: 0b:3a:28:5a:81:f1:2b:0f:35:4e:95:b8:46:d4:95:f9:02:c3: cd:e2:b8:08:a5:02:22:14:15:9c:41:09:18:b0:31:3a:5e:5c: 0b:c1:18:b6:10:8a:f6:ae:cb:5b:22:f7:40:1d:a9:12:d6:86: d9:84:81:e9:27:03:0f:59:1e:c9:f9:26:92:89:0b:d4:38:53: 9e:48:52:81:fc:0b:7e:5f:a2:d6:8f:5f:80:fe:92:07:53:d4: ea:a4:27:dc:5c:58:ba:ef:3e:84:a9:f2:6b:78:8c:78:35:b4: e6:c7:a0:a7:dd:ae:7b:4d:26:99:bc:58:55:92:e6:8f:f8:4e: cb:7a:e8:22:d9:45:52:77:cd:1b:72:66:c1:f2:2c:0d:be:8e: 5e:79:e7:b1:0d:89:21:4b:fe:70:a9:1e:9c:f8:8b:f1:da:f0: 71:c7:21:0c:20:75:b6:9d:56:53:b1:ca:7b:52:b0:0f:5e:09: 85:c8:74:00:06:2d:a8:3a:a3:ff:15:22:d2:f1:bc:c1:bc:a7: fd:c6:02:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHayxAKn9Me3OmOPH+PtJUvMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc2N2YzYmQ0YmZiZDMwNzFjMzhjZDRkNzA5MmJkMzQ5MDky MGMzZDkwHhcNMjYxMTE0MTYwMTQzWhcNMjYxMTE1MTYwMTQzWjAzMTEwLwYDVQQD EygzNDlmMjY4N2Q1YWMxZmYyYWE5YTk0YTkwNmU1OTQwZGQ4YWEwNjI0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSlPLfJrNE/WDkhvSFifR5lg2m1/ UqYaQaClFOBExsCamSANPYLqSwMP14ONqH0Xwl5fMwHezTGh0U9GCWBE7MJzL9eC sWHzlnfWmNhjYy8nhk0NMZ5vzIwn0zosMzPmVWZp4TNowAMJzgCFf64irLjJC5L8 M/i2oZvn9S05OE1CpWoOi9g3HzLtMZBxlkJBwRME2tELoi0fLmpK0r9mxHZAbpeB +By7KGrQ50ohePAsChyUncCN0R6GlkGxUUs1kyi9p1QdVufm045iImvORaQeWs+3 zQFltTHYT5ZsEbvMcokZh0az85K44nZNcL1sB9UGzBHylT3WS8m+KsHFLwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDSfJofVrB/yqpqUqQbllA3YqgYkMB8GA1UdIwQY MBaAFHZ/O9S/vTBxw4zU1wkr00kJIMPZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgt NGZiNTU5YjNiOWIzLzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNi9mZjVjYzYtOGY2MS00NDdiLWI2NTgtNGZiNTU5YjNiOWIz LzEvZG44NzFMLTlNSEhEak5UWENTdlRTUWtndzlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKBVkUdSB 14fDeHk90fU3WXo+uIypVnKBnT5pnerJMTRbk5Vnzk2mlVszxKfYYMZd/YgZYq30 CzooWoHxKw81TpW4RtSV+QLDzeK4CKUCIhQVnEEJGLAxOl5cC8EYthCK9q7LWyL3 QB2pEtaG2YSB6ScDD1keyfkmkokL1DhTnkhSgfwLfl+i1o9fgP6SB1PU6qQn3FxY uu8+hKnya3iMeDW05segp92ue00mmbxYVZLmj/hOy3roItlFUnfNG3JmwfIsDb6O XnnnsQ2JIUv+cKkenPiL8drwccchDCB1tp1WU7HKe1KwD14Jhch0AAYtqDqj/xUi 0vG8wbyn/cYC9A== -----END CERTIFICATE-----Generated at Sun Nov 15 00:33:30 2026 by rpki-client