$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft File: rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft (raw, json) Hash identifier: RR4R441x9o4U4lEmMcAc9U5xRgCE7mKVo74RCX4tM7g= Subject key identifier: FC:6E:E1:38:84:28:6E:78:5C:9E:AD:6C:A6:DE:88:76:83:45:C6:6E Authority key identifier: AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 Certificate issuer: /CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Certificate serial: 01A1DC4AF6A738AABC0CC45365211E52335A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft Manifest number: 1B61 Signing time: Sat 14 Nov 2026 23:01:02 +0000 Manifest this update: Sat 14 Nov 2026 23:01:02 +0000 Manifest next update: Sun 15 Nov 2026 23:01:02 +0000 Files and hashes: 1: 1-Dw7363-gcZT5BcZS3h3DULOLy8.roa (hash: ycAjWS2LKG3rf+AnuA7L1QjlHbaxU1ClqDSIOlIjNCE=) 2: 7zfCWc4upk4I1bVehHqZGnWy1os.roa (hash: l+ilzCvhNRDq+ZNJl9rnuS+EDBpnu5QWN9g3kv0E4XM=) 3: Nc3Qv6HWCUL0coHdhzehCvqorjQ.roa (hash: 1cr7/XMm8bJJ1VGTZJBo+emXZtefD8zXujejZu9BwnE=) 4: UBIi44YElhqYA3_XPQMiMHY33Ug.roa (hash: oMX079Hs0rsRW/ukFok6HicF7IaxGAO9FzHNhpkuS/A=) 5: cS8JURcSpiakwr0xcGtL_qXq-rc.roa (hash: Gt0KYYvlfY2GV+l13nd8uQEX3Fo5eYBOtjkSRZBkdM8=) 6: cd86fuGEpcvGitdJ6j4qmONtrs4.roa (hash: OyWo2jddiuk9oXVabZhwBWcG9HobQGDOXj6VfpvDkjo=) 7: deTEkBZi5H7AIejV16ysjHwAbxY.roa (hash: l0JbGg+HLxrf5Ag/2z2pTojVken0ajBmDjhItX+Hm3I=) 8: jjtZBKK7fPop1QG6Uw6F-VFE298.roa (hash: 2wfzrrsU/SDWQLwJxQnkMRrgQx8J4sT/TylAdOgKEik=) 9: oKVovXTv2aNAyZu9y-AHgX6RbJ8.roa (hash: UsgdfjEOvyD+5ioDpDRHljoPckkLzWdsqZQnU51Gug0=) 10: pGPZirCKZzbNWc11cAMZui5y53g.roa (hash: x16id1SP+uWE4b9i/PFLiuYNReYseV++lthZDwFfk5U=) 11: pKSlP4qI-iIWoFFAgY7hZYUI5lE.roa (hash: fJiLeKrrQ0jkNTOG3gU1SfB8kCZt5PRpsv9OHklxoM8=) 12: rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl (hash: uFgHvcjCPsyT2FQF4PdHDsoksHRUD/PikFRxLckUCak=) 13: sQ8qQg5RChJp9JsfMBZ7VZwT8WE.roa (hash: obNWII8S7VxaHifOdhDpl8/q/V3M1i4VuliV8Z+MBow=) 14: wHT_eMLVVj9Ye7YYwSHkP2sDEWc.roa (hash: +a5ZYiZbbKqVWCAGDiC/23NHgzdzMdyOxUtaLfQbP28=) 15: woe_PWntHmfIzmayVL0eeLoXkz4.roa (hash: uvrlOvH9LtQ+CGVJWkwu+KqnSl7EYGeyum3/AySDMpg=) 16: zbZAEsxG5G8m9gJwIszyTEDYuI4.roa (hash: uLFQpNgUpBl8al0B9uyo07oc8QTTnVIF85IseoxOZeA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 15 Nov 2026 21:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:dc:4a:f6:a7:38:aa:bc:0c:c4:53:65:21:1e:52:33:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad0da43b4a5d3db78ba3f774e5b31b77037202d5 Validity Not Before: Nov 14 23:01:02 2026 GMT Not After : Nov 15 23:01:02 2026 GMT Subject: CN=fc6ee13884286e785c9ead6ca6de88768345c66e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:0d:a7:9c:2e:33:69:05:12:bd:a6:2d:e9:c5: 83:6a:9d:9e:96:d8:bf:d1:c9:72:23:44:83:2b:bf: 8a:98:6b:0e:b5:d4:44:c1:56:26:74:6a:b1:d1:60: fd:f0:00:3c:20:f6:dd:21:62:20:43:c1:ea:39:da: ca:4f:00:c0:d8:55:33:56:52:67:fb:6a:02:56:14: 70:7e:5f:8b:56:f6:0d:9e:5c:c1:26:07:e8:37:e6: 7e:6a:d3:0e:ad:9a:2d:93:1b:fc:ff:09:01:63:1c: ae:3b:5b:c4:42:bf:4c:ae:ee:46:dd:16:1d:c4:ea: 4d:5a:b1:f2:f6:46:fa:72:7f:ff:91:1e:bb:89:4c: d7:cb:39:9c:80:97:b3:69:0a:19:96:ba:22:b8:bc: 85:07:5d:42:b5:8d:a1:b4:e7:ca:ac:fe:9a:14:5d: fb:ce:18:53:d1:89:d4:22:ae:d8:8a:ed:11:11:3f: 9d:d7:ad:f2:1e:fd:57:0a:19:f4:c0:31:51:34:5c: 26:7e:bb:7f:56:9a:47:34:64:ef:30:48:57:a7:64: 04:8d:35:43:63:e5:b0:11:8b:15:cf:ff:61:06:aa: ef:59:82:04:32:a9:32:1b:ae:32:11:8a:c9:84:7f: 96:f5:f4:e5:99:7d:ce:41:c3:37:f0:eb:c6:61:02: de:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:6E:E1:38:84:28:6E:78:5C:9E:AD:6C:A6:DE:88:76:83:45:C6:6E X509v3 Authority Key Identifier: keyid:AD:0D:A4:3B:4A:5D:3D:B7:8B:A3:F7:74:E5:B3:1B:77:03:72:02:D5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rQ2kO0pdPbeLo_d05bMbdwNyAtU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/dd8096-14cc-488d-9257-c515f354cc5a/1/rQ2kO0pdPbeLo_d05bMbdwNyAtU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:24:3e:fa:68:c7:86:97:be:31:d2:67:1e:3a:86:7f:fb:90: fd:b2:4d:08:da:fc:d4:fa:f1:b6:c1:6f:bd:b8:db:eb:c1:42: da:47:c0:2b:0f:e3:8c:cb:58:08:bc:ad:d6:07:79:d1:24:64: 52:c8:f9:ca:d5:45:f2:65:09:3f:eb:30:07:ce:c8:65:fa:fe: d9:34:d5:09:bf:9b:13:cf:60:cb:14:e0:3c:b3:e2:ec:58:6d: 43:ca:8c:df:2b:46:0f:80:aa:0b:4c:fd:bc:18:5c:b1:87:2a: 84:d8:4e:79:92:b8:e7:02:70:63:18:d1:5d:b8:cb:be:d4:66: 67:0c:c1:49:51:1f:b9:05:2e:dd:8d:f8:29:6e:0d:a6:64:a2: c3:1e:47:04:74:6f:63:27:80:3b:18:0c:4b:29:aa:13:80:b5: ea:0e:14:58:61:7e:ac:94:9b:ae:b5:a7:d9:e2:5e:a8:f0:ca: 68:62:fe:c5:b4:5c:db:03:64:cb:df:8a:26:99:65:70:88:7f: a4:ce:b4:66:8e:09:94:2a:01:f6:36:f4:36:5a:41:81:30:88: 18:6f:04:01:11:09:06:b1:93:1c:20:41:65:95:5b:3b:21:0a: d1:27:1b:ae:39:5d:98:b7:53:05:7a:5c:cb:19:9f:51:03:d6: 15:bc:b9:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHcSvanOKq8DMRTZSEeUjNaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkMGRhNDNiNGE1ZDNkYjc4YmEzZjc3NGU1YjMxYjc3MDM3 MjAyZDUwHhcNMjYxMTE0MjMwMTAyWhcNMjYxMTE1MjMwMTAyWjAzMTEwLwYDVQQD EyhmYzZlZTEzODg0Mjg2ZTc4NWM5ZWFkNmNhNmRlODg3NjgzNDVjNjZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7A2nnC4zaQUSvaYt6cWDap2elti/ 0clyI0SDK7+KmGsOtdREwVYmdGqx0WD98AA8IPbdIWIgQ8HqOdrKTwDA2FUzVlJn +2oCVhRwfl+LVvYNnlzBJgfoN+Z+atMOrZotkxv8/wkBYxyuO1vEQr9Mru5G3RYd xOpNWrHy9kb6cn//kR67iUzXyzmcgJezaQoZlroiuLyFB11CtY2htOfKrP6aFF37 zhhT0YnUIq7Yiu0RET+d163yHv1XChn0wDFRNFwmfrt/VppHNGTvMEhXp2QEjTVD Y+WwEYsVz/9hBqrvWYIEMqkyG64yEYrJhH+W9fTlmX3OQcM38OvGYQLeTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPxu4TiEKG54XJ6tbKbeiHaDRcZuMB8GA1UdIwQY MBaAFK0NpDtKXT23i6P3dOWzG3cDcgLVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTct YzUxNWYzNTRjYzVhLzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZC9kZDgwOTYtMTRjYy00ODhkLTkyNTctYzUxNWYzNTRjYzVh LzEvclEya08wcGRQYmVMb19kMDViTWJkd055QXRVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmiQ++mjH hpe+MdJnHjqGf/uQ/bJNCNr81PrxtsFvvbjb68FC2kfAKw/jjMtYCLyt1gd50SRk Usj5ytVF8mUJP+swB87IZfr+2TTVCb+bE89gyxTgPLPi7FhtQ8qM3ytGD4CqC0z9 vBhcsYcqhNhOeZK45wJwYxjRXbjLvtRmZwzBSVEfuQUu3Y34KW4NpmSiwx5HBHRv YyeAOxgMSymqE4C16g4UWGF+rJSbrrWn2eJeqPDKaGL+xbRc2wNky9+KJpllcIh/ pM60Zo4JlCoB9jb0NlpBgTCIGG8EAREJBrGTHCBBZZVbOyEK0ScbrjldmLdTBXpc yxmfUQPWFby5Iw== -----END CERTIFICATE-----Generated at Sun Nov 15 06:03:18 2026 by rpki-client