$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft File: E9rSS2ZH6yz6hzmJxtZtF060tYY.mft (raw, json) Hash identifier: XJy4yTExYe6eL/g2kXRuRx4nNfUBE7cEwsEoRaQxgFs= Subject key identifier: 16:A1:3F:D5:72:1D:60:EB:15:5F:7C:9F:E8:4A:44:93:1B:A5:EE:23 Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86 Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586 Certificate serial: 01A1DE70AC1F250FCA80E215D964624CC95A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft Manifest number: 027C Signing time: Sun 15 Nov 2026 09:01:28 +0000 Manifest this update: Sun 15 Nov 2026 09:01:28 +0000 Manifest next update: Mon 16 Nov 2026 09:01:28 +0000 Files and hashes: 1: 59jv34BPXRPGkew-NalNAuA6BIc.roa (hash: HzVwYBuqdmaobH+vGYbfz2UlrpgSLKhctrrkr2xnZgw=) 2: 5FYGYJ3CTJgz_RO6RtjrvdukztM.roa (hash: WXX9l7hN5GLWTcdL5pzYOVjuzZXZGjSqNLVxArCt+5I=) 3: E9rSS2ZH6yz6hzmJxtZtF060tYY.crl (hash: QLddF4ZwVNQiZHn644iFOldrl556AOAYg27RFlhSnbA=) 4: EU6S0HJNgtU92lCj2E5oAPOEdLs.roa (hash: 1lpHBr2sLsew7tFbnn94rLgLk3IsikjEq2tOn5QLKjw=) 5: MDPAodA0zvA2NWT7ER8dOVR7L88.roa (hash: mJmiRwrgZ5I3NJ+cWSYWfQPR/ysaLHDjUSeXrv0sX/Y=) 6: Qr5qE2EeMQkBy4I0MKCxcpMYmeM.roa (hash: RxWJb3HtMuuduyuTqV0pj6pfd7z399ArrKooXX89gEk=) 7: TOpSp8N8inyCCRSUbFq7bgDiwZI.roa (hash: FJio1I2qAIA9DwKgU1NmquliJzX0e/Kc95cX9EOp7Z4=) 8: hOGDR0EybYX5uiEIH4dx1wBVH0I.roa (hash: YqwjG2i8QtY5ZfAttTtEJOybBG61FVR5wpzHYZpRL/g=) 9: iSf997NNJbBFrB2Dk5mtSCF3id0.roa (hash: dPnzagf+OCQ9AR2sHjTmpyUsCaO3AH672nyGNXGUzjQ=) 10: lBW5YHPb8dUMIQp7Ni-iMJP_E4Y.roa (hash: cbZo3D7fpp0X2deua8SfRD7Y1+8SplMIfDE6x9KtmDE=) 11: nN1d5gRxaC1NUa0ANS_c2GlfNjo.roa (hash: zr2jt+oFWWXFMtHZP/JLLBKI9OUsDRICVpqyfAKlfc8=) 12: pdMhOaLeRonp7wCiwxqXQZvCAZI.roa (hash: RRrhsf4B191wjXJbfTsj+p0cJwZkT97ZpqaBwHuPBfg=) 13: q9AZ9P7QUfekPrQysKLIfDnMJbU.roa (hash: LLX9K9xCwxCQlj+HJY24QlDZarm7oVsZ3lkpY8WxkSM=) 14: uNi1GWE-vm98aOz8PbUTScKWUd0.roa (hash: 2DDJ/sYmsUqQUvarD2q6Qibfp+tAmVVdlr8pKbLjGSg=) 15: yRZVehU6pPF-e8bf4h76KS5NUpg.roa (hash: kz7zsud3YYXglVH2w964aIAQdIKUpEdRIscf5oZrTlQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 16 Nov 2026 09:01:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a1:de:70:ac:1f:25:0f:ca:80:e2:15:d9:64:62:4c:c9:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586 Validity Not Before: Nov 15 09:01:28 2026 GMT Not After : Nov 16 09:01:28 2026 GMT Subject: CN=16a13fd5721d60eb155f7c9fe84a44931ba5ee23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a8:a1:fd:49:bc:88:2f:8f:cc:bd:e9:dd:7a: 3b:72:8c:c2:32:b9:80:da:c7:01:86:e2:b0:50:c4: 63:2a:2d:ff:1f:e8:3b:94:71:f4:24:b7:bb:38:68: 61:5f:8d:ef:45:b2:2a:6b:2b:e2:fc:05:45:3e:bd: 91:bc:85:e1:10:c5:1c:4a:49:9e:20:e8:56:b1:2e: 83:7f:34:0e:f8:15:bb:10:03:53:ad:c6:7f:26:4b: a2:14:cd:54:b2:fb:5d:e9:82:d3:9b:3d:f2:07:9d: 3b:a1:b3:62:e1:66:0b:aa:50:0c:10:1b:33:33:f5: 74:5d:ff:ba:35:b1:c1:39:3d:11:56:fe:31:73:c2: 83:a4:cc:47:d9:3f:a6:fa:f7:e1:ce:ed:8d:06:00: 0e:22:17:67:39:42:f2:ac:28:94:a9:e4:60:c6:0b: 00:c0:c9:89:f6:19:a5:89:fd:96:fc:13:d0:fa:df: 28:6b:5f:48:f6:e3:79:47:a9:06:b6:5c:c7:6f:28: d2:f5:29:79:e3:39:df:e1:73:71:37:8f:2f:2f:10: 20:23:cd:09:61:ce:94:a5:f6:24:1d:fc:37:fb:14: 4a:4e:eb:dc:4d:4c:65:77:c5:91:e3:36:0c:54:f7: 10:35:22:47:7b:96:84:f6:4b:72:6b:c4:a0:e9:82: 60:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A1:3F:D5:72:1D:60:EB:15:5F:7C:9F:E8:4A:44:93:1B:A5:EE:23 X509v3 Authority Key Identifier: keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:27:74:c1:e8:d6:58:77:24:55:cd:95:da:5a:64:bc:81:0d: 74:9b:d8:53:58:c6:ef:d9:98:ba:c6:b6:dc:3d:dc:02:38:4d: c9:68:e3:c5:bb:f0:f3:46:ac:fb:a4:fb:7a:75:61:25:41:30: fa:cb:ef:dd:de:53:d3:10:d4:05:ef:d2:c4:d5:0c:14:48:f5: 85:65:43:f6:dc:8c:73:ec:21:17:f2:05:9a:b6:6d:ef:83:38: 03:6d:fe:9c:bd:5b:0a:11:e2:d4:e4:f3:9e:72:8b:64:6b:77: 5a:6e:43:ca:5e:c3:24:73:64:5c:fe:99:fd:e4:cd:24:c6:62: e4:13:08:e6:1f:72:12:61:22:08:2c:19:d0:de:d0:03:ed:87: db:3f:94:1a:17:9f:01:ac:04:8d:26:57:69:c8:6a:df:2e:05: b6:91:46:93:23:99:80:fe:58:4f:76:5b:85:76:fe:a4:08:5f: 34:b4:60:a0:bd:72:d2:48:6f:49:5a:9d:32:7b:c4:2d:28:e0: 8b:43:95:c1:c7:22:f1:cf:88:af:66:ec:e8:56:f9:8b:74:c5: 66:ec:56:89:c1:6e:57:47:ce:9e:6f:a8:bb:41:cf:1b:65:38: 7e:ba:fe:c7:ea:cb:ec:e7:f3:fe:0e:d9:3e:47:d9:dd:e6:b3: 35:73:30:58 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAaHecKwfJQ/KgOIV2WRiTMlaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzZGFkMjRiNjY0N2ViMmNmYTg3Mzk4OWM2ZDY2ZDE3NGVi NGI1ODYwHhcNMjYxMTE1MDkwMTI4WhcNMjYxMTE2MDkwMTI4WjAzMTEwLwYDVQQD EygxNmExM2ZkNTcyMWQ2MGViMTU1ZjdjOWZlODRhNDQ5MzFiYTVlZTIzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqih/Um8iC+PzL3p3Xo7cozCMrmA 2scBhuKwUMRjKi3/H+g7lHH0JLe7OGhhX43vRbIqayvi/AVFPr2RvIXhEMUcSkme IOhWsS6DfzQO+BW7EANTrcZ/JkuiFM1Usvtd6YLTmz3yB507obNi4WYLqlAMEBsz M/V0Xf+6NbHBOT0RVv4xc8KDpMxH2T+m+vfhzu2NBgAOIhdnOULyrCiUqeRgxgsA wMmJ9hmlif2W/BPQ+t8oa19I9uN5R6kGtlzHbyjS9Sl54znf4XNxN48vLxAgI80J Yc6UpfYkHfw3+xRKTuvcTUxld8WR4zYMVPcQNSJHe5aE9ktya8Sg6YJgNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBahP9VyHWDrFV98n+hKRJMbpe4jMB8GA1UdIwQY MBaAFBPa0ktmR+ss+oc5icbWbRdOtLWGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMt MWFhNmZlNDA2YTU4LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi9mYjUyZDEtMmU3MS00YWMwLWEzYTMtMWFhNmZlNDA2YTU4 LzEvRTlyU1MyWkg2eXo2aHptSnh0WnRGMDYwdFlZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIyd0wejW WHckVc2V2lpkvIENdJvYU1jG79mYusa23D3cAjhNyWjjxbvw80as+6T7enVhJUEw +svv3d5T0xDUBe/SxNUMFEj1hWVD9tyMc+whF/IFmrZt74M4A23+nL1bChHi1OTz nnKLZGt3Wm5Dyl7DJHNkXP6Z/eTNJMZi5BMI5h9yEmEiCCwZ0N7QA+2H2z+UGhef AawEjSZXachq3y4FtpFGkyOZgP5YT3ZbhXb+pAhfNLRgoL1y0khvSVqdMnvELSjg i0OVwcci8c+Ir2bs6Fb5i3TFZuxWicFuV0fOnm+ou0HPG2U4frr+x+rL7Ofz/g7Z PkfZ3eazNXMwWA== -----END CERTIFICATE-----Generated at Sun Nov 15 19:25:04 2026 by rpki-client